This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/HWFp7lxXjf6AINw0lrlkzW6o0CQ.roa File: HWFp7lxXjf6AINw0lrlkzW6o0CQ.roa (raw, json) Hash identifier: MVzp8ZvGYuZNln5avY/Y22gCx9uhBZy1j2SBpcL+mbQ= Subject key identifier: 1D:61:69:EE:5C:57:8D:FE:80:20:DC:34:96:B9:64:CD:6E:A8:D0:24 Certificate issuer: /CN=37518d180923a7f3c00653ec12bc702b95aab907 Certificate serial: 019B7C1235FE0A8DBFA625FCECCC4A7F3896 Authority key identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/HWFp7lxXjf6AINw0lrlkzW6o0CQ.roa Signing time: Fri 02 Jan 2026 00:18:46 +0000 ROA not before: Fri 02 Jan 2026 00:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48811 IP address blocks: 193.255.70.0/23 maxlen: 23 193.255.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.mft rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:35:fe:0a:8d:bf:a6:25:fc:ec:cc:4a:7f:38:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37518d180923a7f3c00653ec12bc702b95aab907 Validity Not Before: Jan 2 00:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1d6169ee5c578dfe8020dc3496b964cd6ea8d024 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:9a:d9:b8:d7:eb:c5:04:07:bd:d8:74:c8:c0: e9:6e:4d:a8:22:85:4e:69:f5:89:21:90:df:79:6c: fc:6e:b2:b8:d3:08:7d:93:1c:1c:42:d3:12:1d:50: 9c:78:7f:a0:64:38:41:b3:c8:19:1f:b1:e7:c8:e3: 5f:93:c7:62:29:a1:df:34:1d:5f:b2:54:43:d5:24: 85:48:5f:c5:62:6e:d8:7e:cd:b9:db:73:41:28:fa: af:4c:6b:3f:c9:ab:2c:f6:ae:b5:88:d6:28:86:c0: 48:f0:24:d9:a5:ec:62:4b:fb:f8:cc:2f:71:34:5d: d6:19:2c:a1:2f:f2:a2:b2:18:e4:f2:91:8d:41:07: 33:a7:d1:40:67:b3:39:ac:7b:91:6c:c0:e3:11:ff: e3:e1:84:33:be:00:c7:3f:70:5a:17:f7:af:0d:84: 25:95:b6:3e:36:00:d5:6f:2a:e9:77:bf:f0:e9:db: 36:a0:f6:8e:04:fd:59:64:9c:bb:f9:10:d7:a5:d8: 36:68:50:a4:d1:36:cb:99:0e:b6:70:4a:13:e9:b6: 6a:db:d8:b8:ce:46:99:5c:7e:e5:f1:6c:8f:c8:a4: 3b:5b:1c:e2:0f:b3:37:6f:6e:4d:a6:8d:38:e5:ee: f9:39:15:4d:bf:59:6d:e2:c4:98:09:7a:43:62:58: 4b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:61:69:EE:5C:57:8D:FE:80:20:DC:34:96:B9:64:CD:6E:A8:D0:24 X509v3 Authority Key Identifier: keyid:37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/HWFp7lxXjf6AINw0lrlkzW6o0CQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.255.70.0-193.255.72.255 Signature Algorithm: sha256WithRSAEncryption 0c:80:e6:57:ea:c3:cf:ca:83:1f:e8:73:33:56:2d:3f:23:19: b2:66:af:33:3a:98:f9:6b:31:b0:e5:f7:e0:64:d0:38:d3:be: d3:2f:e3:f9:c4:e0:a5:90:31:b9:4d:8e:65:a5:6a:b7:cb:f7: be:36:5a:34:2b:21:dd:cc:6c:cc:1f:83:62:f2:e5:36:16:ea: c5:3a:ff:93:db:a2:ef:88:2b:c9:22:81:ca:10:25:93:4c:08: cb:ff:56:80:e8:b4:a4:9e:fb:74:95:be:68:3f:bb:14:a1:09: ca:ba:56:6c:44:84:16:f2:2f:5e:1f:90:75:82:96:e5:c5:00: 99:92:d1:dc:17:06:f4:18:a1:5f:56:87:50:e3:e5:a0:6f:12: 1b:1b:34:3e:89:06:0b:c9:3b:c6:83:ea:bc:67:a5:76:27:ff: 77:54:1d:0b:0c:b4:9f:fc:e7:31:a1:ef:6f:04:63:28:29:c4: 7e:ec:8e:79:59:8a:20:2a:bb:f6:3b:ee:b9:73:92:4d:9b:d8: 8f:31:d4:50:08:dd:8a:a1:2a:08:e4:34:0a:15:b3:78:84:3c: 3d:62:9a:de:55:c9:88:f5:92:2e:07:0d:e4:31:49:ef:c0:d9: 5f:b7:57:69:06:b1:f2:09:6a:32:1f:13:4b:cd:35:38:e5:ca: 21:d9:ac:a8 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt8EjX+Co2/piX87MxKfziWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NTE4ZDE4MDkyM2E3ZjNjMDA2NTNlYzEyYmM3MDJiOTVh YWI5MDcwHhcNMjYwMTAyMDAxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZDYxNjllZTVjNTc4ZGZlODAyMGRjMzQ5NmI5NjRjZDZlYThkMDI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6JrZuNfrxQQHvdh0yMDpbk2oIoVO afWJIZDfeWz8brK40wh9kxwcQtMSHVCceH+gZDhBs8gZH7HnyONfk8diKaHfNB1f slRD1SSFSF/FYm7Yfs2523NBKPqvTGs/yass9q61iNYohsBI8CTZpexiS/v4zC9x NF3WGSyhL/Kishjk8pGNQQczp9FAZ7M5rHuRbMDjEf/j4YQzvgDHP3BaF/evDYQl lbY+NgDVbyrpd7/w6ds2oPaOBP1ZZJy7+RDXpdg2aFCk0TbLmQ62cEoT6bZq29i4 zkaZXH7l8WyPyKQ7WxziD7M3b25Npo045e75ORVNv1lt4sSYCXpDYlhLSwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFB1hae5cV43+gCDcNJa5ZM1uqNAkMB8GA1UdIwQY MBaAFDdRjRgJI6fzwAZT7BK8cCuVqrkHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjFHTkdBa2pwX1BBQmxQc0VyeHdLNVdxdVFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9mODBlZjMtOWYwYi00YmQxLTgwMTgt NTk2NzE5MjBmYjYwLzEvSFdGcDdseFhqZjZBSU53MGxybGt6VzZvMENRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9mODBlZjMtOWYwYi00YmQxLTgwMTgtNTk2NzE5MjBmYjYw LzEvTjFHTkdBa2pwX1BBQmxQc0VyeHdLNVdxdVFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAHB/0YD BADB/0gwDQYJKoZIhvcNAQELBQADggEBAAyA5lfqw8/Kgx/oczNWLT8jGbJmrzM6 mPlrMbDl9+Bk0DjTvtMv4/nE4KWQMblNjmWlarfL9742WjQrId3MbMwfg2Ly5TYW 6sU6/5Pbou+IK8kigcoQJZNMCMv/VoDotKSe+3SVvmg/uxShCcq6VmxEhBbyL14f kHWCluXFAJmS0dwXBvQYoV9Wh1Dj5aBvEhsbND6JBgvJO8aD6rxnpXYn/3dUHQsM tJ/85zGh728EYygpxH7sjnlZiiAqu/Y77rlzkk2b2I8x1FAI3YqhKgjkNAoVs3iE PD1imt5VyYj1ki4HDeQxSe/A2V+3V2kGsfIJajIfE0vNNTjlyiHZrKg= -----END CERTIFICATE-----Generated at Mon Jan 26 12:22:22 2026 by rpki-client