This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/99b6b6-c2a6-4a7b-8045-9229cf492fb4/1/HUZkVZh0xZNBnzUJAtBj9bulJ9A.roa File: HUZkVZh0xZNBnzUJAtBj9bulJ9A.roa (raw, json) Hash identifier: zHxeO9ZxbzC0MGgkkRo+CTLps9IW5uL9jy27aurOb/Q= Subject key identifier: 1D:46:64:55:98:74:C5:93:41:9F:35:09:02:D0:63:F5:BB:A5:27:D0 Certificate issuer: /CN=b30fd255c96b42e72b5688c670f6e26119ad3935 Certificate serial: 019B775899EBC71820E84DD43B272D58F655 Authority key identifier: B3:0F:D2:55:C9:6B:42:E7:2B:56:88:C6:70:F6:E2:61:19:AD:39:35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sw_SVclrQucrVojGcPbiYRmtOTU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/99b6b6-c2a6-4a7b-8045-9229cf492fb4/1/HUZkVZh0xZNBnzUJAtBj9bulJ9A.roa Signing time: Thu 01 Jan 2026 02:17:33 +0000 ROA not before: Thu 01 Jan 2026 02:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51814 IP address blocks: 5.181.17.0/24 maxlen: 24 5.181.18.0/24 maxlen: 24 185.99.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/99b6b6-c2a6-4a7b-8045-9229cf492fb4/1/sw_SVclrQucrVojGcPbiYRmtOTU.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/99b6b6-c2a6-4a7b-8045-9229cf492fb4/1/sw_SVclrQucrVojGcPbiYRmtOTU.mft rsync://rpki.ripe.net/repository/DEFAULT/sw_SVclrQucrVojGcPbiYRmtOTU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:99:eb:c7:18:20:e8:4d:d4:3b:27:2d:58:f6:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b30fd255c96b42e72b5688c670f6e26119ad3935 Validity Not Before: Jan 1 02:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1d4664559874c593419f350902d063f5bba527d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:31:26:fd:9a:4c:15:04:6a:5f:59:91:fe:ab: 16:cd:c4:20:0f:15:cf:14:7d:ef:33:39:73:9a:c8: a4:04:d1:26:5d:cb:9f:3d:ac:49:48:1c:90:05:1f: c9:9b:1c:11:45:d1:1f:a7:8d:fd:4c:a8:c7:c9:d0: 02:f4:c1:fa:32:b8:3e:88:3e:f4:9f:8d:41:66:35: 76:63:13:96:61:c2:39:da:fa:85:38:b8:8a:4b:76: 99:a6:79:e9:46:7d:44:93:17:04:f7:73:1a:b2:c6: 20:32:e2:d2:5b:ab:bb:b0:53:bd:a1:82:26:30:19: 85:c5:06:07:6d:fa:22:fe:c2:ff:c7:4b:8c:3a:ee: fc:04:4f:b1:84:db:46:18:cb:4c:b1:69:f5:32:a5: 29:01:12:60:d9:57:d3:99:36:08:2d:fb:3a:b7:75: 4a:ae:68:b9:f6:69:81:ad:08:d1:9f:60:c2:2b:e3: 32:7b:66:02:7e:49:f5:cf:7a:e9:6f:7a:a6:09:6d: 49:c9:6d:83:fa:47:70:a7:f7:1a:c2:02:f6:1c:20: c2:55:b5:11:2a:01:4b:73:47:0e:3a:08:ee:0c:9b: 4e:9d:08:ea:75:2a:75:2a:f2:d2:5c:a2:6d:dd:1b: 95:3e:c3:f2:94:22:f8:ff:3f:45:3b:58:4e:56:b7: 65:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:46:64:55:98:74:C5:93:41:9F:35:09:02:D0:63:F5:BB:A5:27:D0 X509v3 Authority Key Identifier: keyid:B3:0F:D2:55:C9:6B:42:E7:2B:56:88:C6:70:F6:E2:61:19:AD:39:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sw_SVclrQucrVojGcPbiYRmtOTU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/99b6b6-c2a6-4a7b-8045-9229cf492fb4/1/HUZkVZh0xZNBnzUJAtBj9bulJ9A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/99b6b6-c2a6-4a7b-8045-9229cf492fb4/1/sw_SVclrQucrVojGcPbiYRmtOTU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.181.17.0-5.181.18.255 185.99.22.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:e6:96:5a:89:3f:cf:af:ab:97:15:0d:60:f4:e7:d0:4c:d6: 55:b4:af:98:ac:e2:7a:d4:8b:82:2d:1b:ac:74:64:87:62:b3: 8e:7a:1d:83:2e:e7:18:05:de:55:fe:68:b2:3e:64:74:60:b3: 67:f7:0c:87:ce:35:fe:07:4d:46:c2:49:0f:64:98:4d:e3:04: 52:fb:50:60:cc:34:ea:e4:d9:c2:91:e7:49:55:16:28:51:c8: 97:27:bd:58:0c:b5:96:d8:7f:fc:85:3c:d0:4d:06:a0:df:b3: bf:22:6d:50:13:17:9b:d4:c0:49:e8:6c:63:5b:2c:bc:08:7b: 21:56:e7:77:92:c6:20:6c:9d:56:60:e1:31:0e:9f:d5:1c:4c: 23:60:a6:1d:77:5a:76:6a:8f:70:ec:ac:70:cd:1d:2d:73:b9: f2:a1:21:1c:5c:05:e4:61:bd:b1:6f:ae:8f:51:81:ac:c4:74: c7:05:d7:f4:da:a0:7c:fd:26:8d:c7:00:b8:4d:da:31:d4:27: b5:dd:16:ec:14:4c:53:72:ef:b6:69:db:12:e4:ee:5b:69:24: 32:3b:45:78:23:80:c7:c4:44:b9:a7:64:fc:15:c2:b4:c3:c1: 69:68:bb:c4:f6:c3:1a:ec:a1:34:30:b4:dc:2f:48:1e:22:11: 35:0c:cc:a5 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt3WJnrxxgg6E3UOyctWPZVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzMGZkMjU1Yzk2YjQyZTcyYjU2ODhjNjcwZjZlMjYxMTlh ZDM5MzUwHhcNMjYwMTAxMDIxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZDQ2NjQ1NTk4NzRjNTkzNDE5ZjM1MDkwMmQwNjNmNWJiYTUyN2QwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjEm/ZpMFQRqX1mR/qsWzcQgDxXP FH3vMzlzmsikBNEmXcufPaxJSByQBR/JmxwRRdEfp439TKjHydAC9MH6Mrg+iD70 n41BZjV2YxOWYcI52vqFOLiKS3aZpnnpRn1EkxcE93MassYgMuLSW6u7sFO9oYIm MBmFxQYHbfoi/sL/x0uMOu78BE+xhNtGGMtMsWn1MqUpARJg2VfTmTYILfs6t3VK rmi59mmBrQjRn2DCK+Mye2YCfkn1z3rpb3qmCW1JyW2D+kdwp/cawgL2HCDCVbUR KgFLc0cOOgjuDJtOnQjqdSp1KvLSXKJt3RuVPsPylCL4/z9FO1hOVrdlsQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFB1GZFWYdMWTQZ81CQLQY/W7pSfQMB8GA1UdIwQY MBaAFLMP0lXJa0LnK1aIxnD24mEZrTk1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3dfU1ZjbHJRdWNyVm9qR2NQYmlZUm10T1RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC85OWI2YjYtYzJhNi00YTdiLTgwNDUt OTIyOWNmNDkyZmI0LzEvSFVaa1ZaaDB4Wk5CbnpVSkF0Qmo5YnVsSjlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC85OWI2YjYtYzJhNi00YTdiLTgwNDUtOTIyOWNmNDkyZmI0 LzEvc3dfU1ZjbHJRdWNyVm9qR2NQYmlZUm10T1RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAAFtRED BAAFtRIDBAC5YxYwDQYJKoZIhvcNAQELBQADggEBAJ7mllqJP8+vq5cVDWD059BM 1lW0r5is4nrUi4ItG6x0ZIdis456HYMu5xgF3lX+aLI+ZHRgs2f3DIfONf4HTUbC SQ9kmE3jBFL7UGDMNOrk2cKR50lVFihRyJcnvVgMtZbYf/yFPNBNBqDfs78ibVAT F5vUwEnobGNbLLwIeyFW53eSxiBsnVZg4TEOn9UcTCNgph13WnZqj3DsrHDNHS1z ufKhIRxcBeRhvbFvro9RgazEdMcF1/TaoHz9Jo3HALhN2jHUJ7XdFuwUTFNy77Zp 2xLk7ltpJDI7RXgjgMfERLmnZPwVwrTDwWlou8T2wxrsoTQwtNwvSB4iETUMzKU= -----END CERTIFICATE-----Generated at Sun Jan 25 21:39:50 2026 by rpki-client