This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/HrEvCC8IhGVeGnzBd0VRZALtork.roa File: HrEvCC8IhGVeGnzBd0VRZALtork.roa (raw, json) Hash identifier: O2TX3efNC8L1kVYPj9yl6qN6Xg9peYzVQTc557TbA/U= Subject key identifier: 1E:B1:2F:08:2F:08:84:65:5E:1A:7C:C1:77:45:51:64:02:ED:A2:B9 Certificate issuer: /CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9 Certificate serial: 019B7DCA4482919BE717350AD6D5D367CF1C Authority key identifier: F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/HrEvCC8IhGVeGnzBd0VRZALtork.roa Signing time: Fri 02 Jan 2026 08:19:26 +0000 ROA not before: Fri 02 Jan 2026 08:19:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57635 IP address blocks: 193.203.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:44:82:91:9b:e7:17:35:0a:d6:d5:d3:67:cf:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9 Validity Not Before: Jan 2 08:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1eb12f082f0884655e1a7cc17745516402eda2b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ad:f7:01:be:47:50:2a:01:ee:4e:60:70:03: 62:88:57:09:47:db:00:a2:9b:54:4f:88:e2:b9:29: 41:b6:54:0f:5d:74:b2:2c:72:a3:05:67:5c:3c:bf: d5:32:3c:82:12:b2:00:4e:2c:10:5b:28:db:e5:06: df:46:9b:55:d9:9f:aa:63:bc:f6:70:82:bc:21:94: bd:7b:06:56:02:f9:b9:91:fd:75:e0:43:6c:d5:47: f9:8d:90:5e:fb:ad:4f:29:4a:10:63:3d:93:a3:d5: f9:ff:bb:5e:be:10:d5:e8:42:47:0b:84:4c:6f:1d: e5:c2:41:fd:f7:1e:38:59:e7:87:58:19:ef:5b:60: 5e:cf:ba:39:d4:3f:c1:ec:e9:c4:35:30:96:e8:58: b4:2a:91:7e:a6:76:db:43:1e:6a:48:66:77:98:97: 97:49:f0:93:ff:f9:da:6d:a6:d3:e9:5f:ac:5a:7a: e7:25:98:09:45:05:9c:23:63:46:e9:53:3d:05:e8: 44:b0:52:7d:41:fc:c3:a2:cf:bb:9c:20:62:e0:95: 86:07:7e:94:5a:18:14:fc:7c:ea:69:e8:14:7d:a5: 71:45:39:e7:a1:92:b3:36:1a:2f:4e:bb:61:71:97: 62:eb:eb:d7:ea:b5:18:fb:c3:0d:b5:44:73:48:2f: 97:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:B1:2F:08:2F:08:84:65:5E:1A:7C:C1:77:45:51:64:02:ED:A2:B9 X509v3 Authority Key Identifier: keyid:F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/HrEvCC8IhGVeGnzBd0VRZALtork.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.203.38.0/24 Signature Algorithm: sha256WithRSAEncryption 53:db:5a:59:92:bd:35:49:96:9f:a0:de:2d:a5:ca:70:fb:56: e1:2d:2e:d2:da:b9:fa:9b:b4:8e:ba:64:a1:e9:51:51:8e:f8: aa:76:63:82:e5:f5:d2:46:a0:f8:ab:17:b3:0f:f9:42:b0:6c: 00:17:80:2a:72:ef:a3:05:cc:8e:f0:6a:89:1e:ce:ea:45:23: c6:d5:e0:f4:84:09:9c:f6:8f:f4:0c:fb:34:c8:49:3b:0d:2c: b3:2a:ea:37:66:14:93:4e:40:9a:2f:b0:ec:e1:ae:d2:e7:56: 38:1f:8f:b8:71:15:c7:fc:84:1f:c4:3e:58:c8:b3:48:b2:67: 9c:98:c1:00:3c:f5:6d:86:de:f1:5d:d4:55:56:2a:47:0c:cc: 9f:49:c6:c1:b0:90:4b:32:01:13:c3:6a:de:15:6e:29:be:c0: e7:c2:6f:f8:d5:9a:85:79:4b:05:f1:6b:7c:25:b6:c4:a5:a7: 99:8b:1f:9a:5a:40:42:79:d8:e1:c3:69:2a:86:56:49:af:be: 3c:6d:2a:af:e4:ef:8f:d8:84:5a:a8:69:2c:45:cd:89:50:e1: 74:d7:43:15:38:62:29:fd:75:6b:7d:b1:2d:db:75:ec:c1:0d: 28:b3:2c:1b:1a:bf:c1:f3:17:a0:23:d1:c5:fc:50:50:cb:70: 3d:56:7f:65 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ykSCkZvnFzUK1tXTZ88cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNTIxMTI4Y2Y2MzRhYTZhZmE3ZWY1MmQ1MzFmM2ZjZDU1 NjI4ZjkwHhcNMjYwMTAyMDgxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZWIxMmYwODJmMDg4NDY1NWUxYTdjYzE3NzQ1NTE2NDAyZWRhMmI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArq33Ab5HUCoB7k5gcANiiFcJR9sA optUT4jiuSlBtlQPXXSyLHKjBWdcPL/VMjyCErIATiwQWyjb5QbfRptV2Z+qY7z2 cIK8IZS9ewZWAvm5kf114ENs1Uf5jZBe+61PKUoQYz2To9X5/7tevhDV6EJHC4RM bx3lwkH99x44WeeHWBnvW2Bez7o51D/B7OnENTCW6Fi0KpF+pnbbQx5qSGZ3mJeX SfCT//nababT6V+sWnrnJZgJRQWcI2NG6VM9BehEsFJ9QfzDos+7nCBi4JWGB36U WhgU/HzqaegUfaVxRTnnoZKzNhovTrthcZdi6+vX6rUY+8MNtURzSC+XIwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB6xLwgvCIRlXhp8wXdFUWQC7aK5MB8GA1UdIwQY MBaAFPBSESjPY0qmr6fvUtUx8/zVVij5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9iNGIxNTAtZGJiOC00NjVmLTgxNTUt ZTQ0MTliNjQyMTJlLzEvSHJFdkNDOEloR1ZlR256QmQwVlJaQUx0b3JrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9iNGIxNTAtZGJiOC00NjVmLTgxNTUtZTQ0MTliNjQyMTJl LzEvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwcsmMA0G CSqGSIb3DQEBCwUAA4IBAQBT21pZkr01SZafoN4tpcpw+1bhLS7S2rn6m7SOumSh 6VFRjviqdmOC5fXSRqD4qxezD/lCsGwAF4Aqcu+jBcyO8GqJHs7qRSPG1eD0hAmc 9o/0DPs0yEk7DSyzKuo3ZhSTTkCaL7Ds4a7S51Y4H4+4cRXH/IQfxD5YyLNIsmec mMEAPPVtht7xXdRVVipHDMyfScbBsJBLMgETw2reFW4pvsDnwm/41ZqFeUsF8Wt8 JbbEpaeZix+aWkBCedjhw2kqhlZJr748bSqv5O+P2IRaqGksRc2JUOF010MVOGIp /XVrfbEt23XswQ0osywbGr/B8xegI9HF/FBQy3A9Vn9l -----END CERTIFICATE-----Generated at Mon Jan 26 13:44:41 2026 by rpki-client