This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/HkwuJu9io020PbxRWDFjsBLDBY0.roa File: HkwuJu9io020PbxRWDFjsBLDBY0.roa (raw, json) Hash identifier: 54qGpDCHJR33ZIOHfgUlFjHcaUi+BAqkWs7Zaq0wwz8= Subject key identifier: 1E:4C:2E:26:EF:62:A3:4D:B4:3D:BC:51:58:31:63:B0:12:C3:05:8D Certificate issuer: /CN=a2900e4655ab349a4632b140719dc97230431725 Certificate serial: 019B7CEDB39A3A675A8ED2189AC076094CF8 Authority key identifier: A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/HkwuJu9io020PbxRWDFjsBLDBY0.roa Signing time: Fri 02 Jan 2026 04:18:31 +0000 ROA not before: Fri 02 Jan 2026 04:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50045 IP address blocks: 80.77.160.0/24 maxlen: 24 2a02:2518:e000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:b3:9a:3a:67:5a:8e:d2:18:9a:c0:76:09:4c:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2900e4655ab349a4632b140719dc97230431725 Validity Not Before: Jan 2 04:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1e4c2e26ef62a34db43dbc51583163b012c3058d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:43:5c:51:f8:aa:df:1d:26:4b:0b:f9:23:ed: 0e:0d:65:5e:e2:15:96:3d:bb:68:e0:70:2e:31:4b: 80:3d:03:50:e4:4a:42:8e:d0:4f:14:94:cf:e2:dc: e1:2a:f2:15:4a:f7:a8:aa:93:61:50:20:7c:d5:c1: 0b:e1:d5:f1:93:98:b1:44:04:bc:e9:c0:64:90:69: 1c:a2:f7:bf:dc:33:18:05:20:a4:51:77:c5:d4:96: 32:7d:53:a4:9c:f6:90:f0:51:d9:03:d7:fb:2b:3a: 14:3a:90:97:29:be:e0:35:f4:c6:32:e0:00:e9:b1: 6b:49:7d:2c:43:58:2f:c2:ed:ea:a8:7a:88:ad:05: fd:c9:4d:1c:10:88:63:93:e6:98:11:9b:ba:95:9c: a7:4e:d2:f1:f9:38:45:66:6c:d0:29:20:11:02:25: 1a:7e:2d:a4:c5:6f:a2:ac:8e:7f:b0:21:7a:4c:00: e5:5b:42:c8:68:a8:4d:46:3f:cd:54:67:c0:ee:6f: ff:7e:32:05:40:8a:07:64:cd:f8:bb:ff:07:80:40: 32:0e:29:ed:87:c0:58:e7:f0:6b:51:2a:8d:4e:65: 62:34:98:75:e3:d9:24:63:11:1c:41:7e:88:54:07: 19:21:6c:d6:b6:30:d8:74:94:2a:6a:e7:ac:91:5c: 25:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:4C:2E:26:EF:62:A3:4D:B4:3D:BC:51:58:31:63:B0:12:C3:05:8D X509v3 Authority Key Identifier: keyid:A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/HkwuJu9io020PbxRWDFjsBLDBY0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.77.160.0/24 IPv6: 2a02:2518:e000::/36 Signature Algorithm: sha256WithRSAEncryption 63:03:d8:cc:47:ae:bc:27:0c:27:c8:32:54:95:d4:a8:97:4e: 21:03:f9:e0:43:a1:ac:3f:c0:fe:bf:f8:d9:93:dc:40:71:f6: 99:81:a7:3d:19:22:dc:3d:0b:cb:39:de:ad:3e:bf:bc:12:ac: 30:d6:f1:1b:82:eb:90:90:11:59:cc:df:2b:2b:f7:39:97:3e: 64:6b:7c:d1:0a:58:40:83:63:9c:a0:45:1f:90:1f:54:67:43: 61:96:ed:ee:8e:48:8c:b1:fe:a0:bb:8c:01:a0:c4:ff:24:d0: 0a:1e:09:22:9b:f0:84:59:ed:fa:1d:12:0d:7f:84:ae:72:04: c3:cd:e6:19:7c:8c:e9:bc:5d:b1:a7:2b:3a:61:76:34:05:86: 08:b3:9c:f7:8c:25:45:c1:a3:9e:af:7b:72:be:56:c0:0c:7c: ff:d4:d8:14:e7:41:80:42:e8:5f:fb:c9:0c:fd:f8:af:e4:49: c6:61:4d:81:c5:0d:f2:92:e4:10:99:e5:61:9c:e2:4b:c1:fe: 23:1f:48:ac:d7:9e:5b:c6:1d:88:7f:97:0f:5a:b2:91:50:a8: c4:20:3b:8b:d2:f9:06:ec:55:4c:64:8b:38:8b:b2:dc:5e:64: 3a:0f:7e:63:ac:c4:cf:df:b4:88:10:4b:d6:d2:77:a5:07:1c: 88:61:db:13 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt87bOaOmdajtIYmsB2CUz4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyOTAwZTQ2NTVhYjM0OWE0NjMyYjE0MDcxOWRjOTcyMzA0 MzE3MjUwHhcNMjYwMTAyMDQxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZTRjMmUyNmVmNjJhMzRkYjQzZGJjNTE1ODMxNjNiMDEyYzMwNThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA40NcUfiq3x0mSwv5I+0ODWVe4hWW Pbto4HAuMUuAPQNQ5EpCjtBPFJTP4tzhKvIVSveoqpNhUCB81cEL4dXxk5ixRAS8 6cBkkGkcove/3DMYBSCkUXfF1JYyfVOknPaQ8FHZA9f7KzoUOpCXKb7gNfTGMuAA 6bFrSX0sQ1gvwu3qqHqIrQX9yU0cEIhjk+aYEZu6lZynTtLx+ThFZmzQKSARAiUa fi2kxW+irI5/sCF6TADlW0LIaKhNRj/NVGfA7m//fjIFQIoHZM34u/8HgEAyDint h8BY5/BrUSqNTmViNJh149kkYxEcQX6IVAcZIWzWtjDYdJQqaueskVwlJwIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFB5MLibvYqNNtD28UVgxY7ASwwWNMB8GA1UdIwQY MBaAFKKQDkZVqzSaRjKxQHGdyXIwQxclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3BBT1JsV3JOSnBHTXJGQWNaM0pjakJERnlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC80ZjcwMWEtZWQ2Zi00N2M4LWJmNzMt ZjRjNWZjM2NhMmM0LzEvSGt3dUp1OWlvMDIwUGJ4UldERmpzQkxEQlkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC80ZjcwMWEtZWQ2Zi00N2M4LWJmNzMtZjRjNWZjM2NhMmM0 LzEvb3BBT1JsV3JOSnBHTXJGQWNaM0pjakJERnlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAUE2gMA4E AgACMAgDBgQqAiUY4DANBgkqhkiG9w0BAQsFAAOCAQEAYwPYzEeuvCcMJ8gyVJXU qJdOIQP54EOhrD/A/r/42ZPcQHH2mYGnPRki3D0LyznerT6/vBKsMNbxG4LrkJAR WczfKyv3OZc+ZGt80QpYQINjnKBFH5AfVGdDYZbt7o5IjLH+oLuMAaDE/yTQCh4J IpvwhFnt+h0SDX+ErnIEw83mGXyM6bxdsacrOmF2NAWGCLOc94wlRcGjnq97cr5W wAx8/9TYFOdBgELoX/vJDP34r+RJxmFNgcUN8pLkEJnlYZziS8H+Ix9IrNeeW8Yd iH+XD1qykVCoxCA7i9L5BuxVTGSLOIuy3F5kOg9+Y6zEz9+0iBBL1tJ3pQcciGHb Ew== -----END CERTIFICATE-----Generated at Mon Jan 26 03:40:34 2026 by rpki-client