This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/RH_HIlkMBo61W-LSnPnGJ5s3Jos.roa
File: RH_HIlkMBo61W-LSnPnGJ5s3Jos.roa (raw, json)
Hash identifier: 7jSM+R7ontglcAC1koxA8s1vIKZN1w9IqBWxZkjEi38=
Subject key identifier: 44:7F:C7:22:59:0C:06:8E:B5:5B:E2:D2:9C:F9:C6:27:9B:37:26:8B
Certificate issuer: /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Certificate serial: 019B7AC7CEA6B5C137DF1BDD90A997382C52
Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/RH_HIlkMBo61W-LSnPnGJ5s3Jos.roa
Signing time: Thu 01 Jan 2026 18:17:53 +0000
ROA not before: Thu 01 Jan 2026 18:17:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209242
IP address blocks: 193.162.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c7:ce:a6:b5:c1:37:df:1b:dd:90:a9:97:38:2c:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Validity
Not Before: Jan 1 18:17:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=447fc722590c068eb55be2d29cf9c6279b37268b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fb:19:52:59:fd:04:01:59:8c:66:6a:fb:17:
f3:b4:71:5a:02:5c:72:f6:e9:cd:c6:6b:73:85:65:
9b:c0:67:c3:1d:31:24:7e:7b:b6:12:6e:ad:74:e6:
aa:a8:1b:7a:f7:75:31:81:c0:58:a4:e0:8b:29:49:
b5:53:f1:d8:ac:4e:c9:b9:a7:f4:fc:e8:ac:5d:b3:
1e:29:96:70:b2:57:a3:41:3a:65:ee:09:55:6d:3d:
be:96:57:9a:57:a7:b2:c6:04:4f:40:0d:cb:6b:05:
87:8f:1e:78:8a:2e:e7:84:61:77:24:11:63:57:54:
f3:e9:7c:a2:39:48:68:f8:17:b3:f0:ae:44:64:e3:
63:5a:3e:85:b0:6c:6b:52:26:57:73:77:6c:5b:d7:
ac:de:3c:1f:0f:8b:f3:4e:6b:7f:9c:68:c5:83:85:
c9:a8:2b:75:09:3d:6d:a0:58:63:ce:11:02:36:85:
9f:22:07:68:de:89:b3:fe:9c:0c:21:ab:c9:cc:cd:
2d:a8:55:02:a6:cf:5d:a8:9c:9d:a8:34:d3:e1:71:
68:87:cf:0c:e9:3f:3d:32:47:19:a0:5a:d4:80:bf:
f0:ad:6c:49:d2:86:fe:1c:0d:5a:b6:45:2c:1f:65:
9f:6f:58:03:0e:41:ee:a6:40:0c:ab:e1:25:ed:ae:
19:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:7F:C7:22:59:0C:06:8E:B5:5B:E2:D2:9C:F9:C6:27:9B:37:26:8B
X509v3 Authority Key Identifier:
keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/RH_HIlkMBo61W-LSnPnGJ5s3Jos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.162.35.0/24
Signature Algorithm: sha256WithRSAEncryption
56:41:ba:dc:48:06:27:9f:63:b4:78:4f:af:5f:8b:58:28:02:
1b:75:09:a2:a9:94:b4:16:5a:a1:ea:99:ae:e1:64:c1:e1:65:
65:a2:38:c5:d7:49:be:67:b8:d4:99:22:0a:dd:80:96:e6:69:
de:a2:18:3c:fc:4b:e9:54:6c:72:61:e6:54:fd:c3:d3:27:45:
67:fa:94:df:99:32:4a:94:05:74:01:58:40:48:6d:4e:02:5f:
03:b2:13:a1:12:6d:72:57:37:f8:c5:ef:a4:e7:be:3d:fa:20:
12:cf:c1:c3:5d:ec:37:c5:65:2d:37:8c:72:20:55:39:c8:d3:
e5:cb:5a:75:06:40:e6:0a:f3:92:13:56:0c:70:76:0e:37:8b:
4d:50:8d:97:06:da:bf:e4:f7:38:fe:51:47:0d:62:72:16:48:
3c:c9:44:0a:a2:3d:c6:45:91:35:24:32:6f:9c:31:80:7f:1e:
19:75:cb:5c:e9:71:27:d3:90:6b:ee:c9:ef:00:c7:da:06:36:
06:7a:9f:78:5e:1b:0e:62:9d:05:a1:30:70:5e:19:6f:16:60:
52:b9:5a:94:33:c8:a8:6e:0d:28:12:c3:a9:0f:cf:2b:80:79:
c1:71:7f:6d:2f:56:9d:b0:da:59:6b:7f:56:de:69:ac:64:b9:
7f:e8:98:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:18:22 2026 by rpki-client