This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/3fd910-78bc-442a-88ac-8c52de6fa888/1/HJ4SBz_ou8raAnu7vjA9gto44h0.roa File: HJ4SBz_ou8raAnu7vjA9gto44h0.roa (raw, json) Hash identifier: 31d6vC056XaUqpvSPD3bbBHg7NDJNbf/A6mjtFCVyiI= Subject key identifier: 1C:9E:12:07:3F:E8:BB:CA:DA:02:7B:BB:BE:30:3D:82:DA:38:E2:1D Certificate issuer: /CN=519e97470c63fda14c3265eb741a70e3a8b69aff Certificate serial: 019B7A5B235E6913040F8F270EB910B50335 Authority key identifier: 51:9E:97:47:0C:63:FD:A1:4C:32:65:EB:74:1A:70:E3:A8:B6:9A:FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UZ6XRwxj_aFMMmXrdBpw46i2mv8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/3fd910-78bc-442a-88ac-8c52de6fa888/1/HJ4SBz_ou8raAnu7vjA9gto44h0.roa Signing time: Thu 01 Jan 2026 16:19:11 +0000 ROA not before: Thu 01 Jan 2026 16:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33886 IP address blocks: 194.50.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/3fd910-78bc-442a-88ac-8c52de6fa888/1/UZ6XRwxj_aFMMmXrdBpw46i2mv8.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/3fd910-78bc-442a-88ac-8c52de6fa888/1/UZ6XRwxj_aFMMmXrdBpw46i2mv8.mft rsync://rpki.ripe.net/repository/DEFAULT/UZ6XRwxj_aFMMmXrdBpw46i2mv8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:23:5e:69:13:04:0f:8f:27:0e:b9:10:b5:03:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=519e97470c63fda14c3265eb741a70e3a8b69aff Validity Not Before: Jan 1 16:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1c9e12073fe8bbcada027bbbbe303d82da38e21d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:16:d6:db:30:81:5f:98:bb:d5:0f:f1:64:65: d2:8e:3b:26:6c:39:c4:77:ed:2f:cf:4e:c4:75:a3: e1:e6:a9:60:e6:72:8f:03:cc:c3:9a:8e:54:ac:6b: 9c:c0:c9:f0:1c:34:67:c8:d9:ef:79:3d:93:71:1b: e4:d9:a1:87:d7:b9:6c:97:45:c1:be:85:9c:a8:95: b4:16:f2:90:74:5b:11:b5:7b:99:02:08:b0:0e:a4: d3:77:a1:f2:e0:55:89:f9:29:04:59:00:a0:5e:62: ac:fc:f1:ea:2b:65:49:4c:ef:d4:d6:68:35:8a:2d: 0e:e4:ce:f8:92:e7:71:5b:d2:1d:ba:db:14:de:ac: a3:6e:49:96:39:c5:ec:84:c8:db:5a:24:35:38:2d: 9c:9e:e1:cd:38:2b:19:7c:04:e8:53:24:59:f2:2d: cb:11:a2:81:da:f7:83:47:b4:14:b5:aa:94:19:c0: ab:81:71:50:08:c9:88:7d:8d:ad:42:42:2d:11:4f: 8b:b7:36:9b:41:8c:e8:74:21:0b:8f:33:6c:c0:62: e8:a0:da:a4:da:e8:48:8d:62:ee:5d:4f:90:7c:34: 54:d1:5f:25:25:29:7a:00:07:07:af:ee:1e:5c:d7: 3b:9e:6e:42:60:42:ce:e5:b1:5a:95:8e:19:62:de: 10:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:9E:12:07:3F:E8:BB:CA:DA:02:7B:BB:BE:30:3D:82:DA:38:E2:1D X509v3 Authority Key Identifier: keyid:51:9E:97:47:0C:63:FD:A1:4C:32:65:EB:74:1A:70:E3:A8:B6:9A:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZ6XRwxj_aFMMmXrdBpw46i2mv8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3fd910-78bc-442a-88ac-8c52de6fa888/1/HJ4SBz_ou8raAnu7vjA9gto44h0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3fd910-78bc-442a-88ac-8c52de6fa888/1/UZ6XRwxj_aFMMmXrdBpw46i2mv8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.50.181.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:0a:4b:c3:d1:e3:df:14:63:ef:29:a1:ea:4b:f6:c7:74:0a: f2:59:00:3b:23:a0:7d:60:2a:46:27:ba:32:65:fb:12:d5:45: d8:dc:3d:73:43:8f:9e:1b:be:66:84:b0:cc:61:c7:0b:bf:69: 73:ee:65:be:5d:a2:a0:3d:98:66:66:77:8f:d4:4b:c6:6b:91: ef:86:06:dd:cd:19:95:9e:f8:fb:16:ec:57:f1:b2:07:94:7d: 26:4f:89:4a:cc:54:a3:6b:d0:78:23:14:0a:98:2e:80:e4:da: 98:81:aa:2a:4f:e9:82:4f:1d:10:53:92:42:9e:42:e5:12:46: a6:69:87:d5:10:1f:6f:f9:da:df:0a:3d:ee:4b:1c:30:0b:fa: 1f:21:8c:d5:92:53:9d:ba:40:41:ef:ae:fe:3a:01:49:26:c6: 9d:cd:55:f7:34:bf:1b:f5:29:55:1b:53:3f:61:16:bb:2c:d1: db:79:b2:19:d6:99:96:eb:19:a6:13:8f:68:e2:e7:f3:df:5c: 90:ba:d6:67:41:b4:dd:62:eb:a1:4d:5c:62:34:59:71:57:29: 84:03:71:fa:a4:bc:b0:15:0d:99:08:03:d2:72:32:7b:9a:23: f2:12:c6:3c:a1:fe:be:d7:d1:f1:3f:0f:27:e9:1c:e4:a6:b8: 74:0f:ef:bc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WyNeaRMED48nDrkQtQM1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxOWU5NzQ3MGM2M2ZkYTE0YzMyNjVlYjc0MWE3MGUzYThi NjlhZmYwHhcNMjYwMTAxMTYxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzllMTIwNzNmZThiYmNhZGEwMjdiYmJiZTMwM2Q4MmRhMzhlMjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBbW2zCBX5i71Q/xZGXSjjsmbDnE d+0vz07EdaPh5qlg5nKPA8zDmo5UrGucwMnwHDRnyNnveT2TcRvk2aGH17lsl0XB voWcqJW0FvKQdFsRtXuZAgiwDqTTd6Hy4FWJ+SkEWQCgXmKs/PHqK2VJTO/U1mg1 ii0O5M74kudxW9IdutsU3qyjbkmWOcXshMjbWiQ1OC2cnuHNOCsZfAToUyRZ8i3L EaKB2veDR7QUtaqUGcCrgXFQCMmIfY2tQkItEU+LtzabQYzodCELjzNswGLooNqk 2uhIjWLuXU+QfDRU0V8lJSl6AAcHr+4eXNc7nm5CYELO5bFalY4ZYt4QBQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFByeEgc/6LvK2gJ7u74wPYLaOOIdMB8GA1UdIwQY MBaAFFGel0cMY/2hTDJl63QacOOotpr/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVo2WFJ3eGpfYUZNTW1YcmRCcHc0NmkybXY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8zZmQ5MTAtNzhiYy00NDJhLTg4YWMt OGM1MmRlNmZhODg4LzEvSEo0U0J6X291OHJhQW51N3ZqQTlndG80NGgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS8zZmQ5MTAtNzhiYy00NDJhLTg4YWMtOGM1MmRlNmZhODg4 LzEvVVo2WFJ3eGpfYUZNTW1YcmRCcHc0NmkybXY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjK1MA0G CSqGSIb3DQEBCwUAA4IBAQA/CkvD0ePfFGPvKaHqS/bHdAryWQA7I6B9YCpGJ7oy ZfsS1UXY3D1zQ4+eG75mhLDMYccLv2lz7mW+XaKgPZhmZneP1EvGa5HvhgbdzRmV nvj7FuxX8bIHlH0mT4lKzFSja9B4IxQKmC6A5NqYgaoqT+mCTx0QU5JCnkLlEkam aYfVEB9v+drfCj3uSxwwC/ofIYzVklOdukBB767+OgFJJsadzVX3NL8b9SlVG1M/ YRa7LNHbebIZ1pmW6xmmE49o4ufz31yQutZnQbTdYuuhTVxiNFlxVymEA3H6pLyw FQ2ZCAPScjJ7miPyEsY8of6+19HxPw8n6Rzkprh0D++8 -----END CERTIFICATE-----Generated at Mon Jan 26 07:10:05 2026 by rpki-client