This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/hwKJwCCAFCL_7LuTGUs9t1cSL7E.roa File: hwKJwCCAFCL_7LuTGUs9t1cSL7E.roa (raw, json) Hash identifier: 8W8T46xmoGGEFuN0xJIwYy5B+d+w5bYaaExN07s/4nM= Subject key identifier: 87:02:89:C0:20:80:14:22:FF:EC:BB:93:19:4B:3D:B7:57:12:2F:B1 Certificate issuer: /CN=210d1c0db5aa1880d7747e22f1dbf4716d3101a9 Certificate serial: 019B7910418603E5ECE1CD63E662733135F4 Authority key identifier: 21:0D:1C:0D:B5:AA:18:80:D7:74:7E:22:F1:DB:F4:71:6D:31:01:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQ0cDbWqGIDXdH4i8dv0cW0xAak.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/hwKJwCCAFCL_7LuTGUs9t1cSL7E.roa Signing time: Thu 01 Jan 2026 10:17:47 +0000 ROA not before: Thu 01 Jan 2026 10:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207415 IP address blocks: 193.111.209.0/24 maxlen: 24 2a13:6700::/48 maxlen: 48 2a13:6700:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.mft rsync://rpki.ripe.net/repository/DEFAULT/IQ0cDbWqGIDXdH4i8dv0cW0xAak.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:41:86:03:e5:ec:e1:cd:63:e6:62:73:31:35:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=210d1c0db5aa1880d7747e22f1dbf4716d3101a9 Validity Not Before: Jan 1 10:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=870289c020801422ffecbb93194b3db757122fb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:0e:17:32:6c:29:97:db:3a:f5:40:37:31:5a: c7:7d:ae:b7:3c:62:30:b4:de:1a:fd:9a:8d:8a:19: 2d:df:f8:73:9c:3e:6b:74:07:98:f5:71:e3:08:4d: 5c:06:2f:15:4c:26:ad:ea:e2:8c:ae:93:97:f7:98: 31:a2:6e:41:48:a0:cc:29:99:22:c6:fe:a2:22:67: de:65:d4:8e:de:5e:df:b0:d4:6f:c1:91:f1:df:23: 70:44:06:d9:4f:72:b4:2f:e8:fb:f6:ae:b4:62:2e: 14:7f:30:ec:fb:75:ac:ff:0e:d8:8f:0d:ee:2c:09: 48:1e:51:96:5b:5b:3c:26:b8:bd:89:8f:5a:c8:b4: 19:8a:75:24:52:59:09:50:27:36:33:4b:75:17:3e: 2a:c6:23:99:89:e4:77:f4:e1:db:e2:26:37:bd:c0: 6c:bf:90:52:af:8e:48:d5:29:29:d8:95:d0:27:94: e0:a9:16:1c:60:c8:52:f1:18:16:ff:12:d7:45:8a: a9:ab:3e:c8:b9:55:65:cf:ac:2c:22:e2:21:9d:47: 3f:bd:8b:c1:81:4a:9a:fc:e4:f5:30:1b:59:b4:1a: 7b:d4:57:01:34:b4:a0:69:1e:f6:b9:8a:98:b3:da: 5e:80:da:e6:05:57:d5:0d:db:f2:54:11:6d:3a:0e: 6f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:02:89:C0:20:80:14:22:FF:EC:BB:93:19:4B:3D:B7:57:12:2F:B1 X509v3 Authority Key Identifier: keyid:21:0D:1C:0D:B5:AA:18:80:D7:74:7E:22:F1:DB:F4:71:6D:31:01:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQ0cDbWqGIDXdH4i8dv0cW0xAak.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/hwKJwCCAFCL_7LuTGUs9t1cSL7E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.111.209.0/24 IPv6: 2a13:6700::/47 Signature Algorithm: sha256WithRSAEncryption ae:44:43:03:a3:b3:38:33:89:f9:25:a3:da:b7:d8:2a:d9:0f: 37:f4:80:29:94:9c:fd:27:b5:0f:2d:65:20:bd:38:8b:b2:6b: cd:06:d5:e4:69:42:34:67:9e:4e:b2:41:0c:e6:9d:f7:61:9d: ee:6b:59:66:d5:68:04:ae:b2:fc:52:19:0a:ad:57:62:13:59: 21:ed:05:4c:a6:0e:88:f1:be:05:e9:d0:a3:13:7d:ba:67:85: df:c0:a9:47:c0:9c:b0:41:eb:de:1c:93:38:21:36:33:b1:63: 72:01:76:54:4e:4a:fe:fc:e9:ce:fa:94:a3:28:99:c9:37:89: b7:92:7f:e7:74:69:ba:dc:79:7f:bc:2f:ea:f1:94:d0:df:c1: 3b:e4:4c:a7:bb:4c:99:35:49:48:a7:f0:5f:d0:86:cd:0e:17: de:f0:32:7a:33:60:9d:ab:13:69:bd:a7:c5:db:05:17:87:ee: 9c:31:81:d6:0d:01:fa:b3:70:d7:3c:31:4d:25:63:c6:db:46: 9d:44:6d:87:05:68:73:ae:34:a3:df:b2:1b:bf:59:76:04:2a: 14:50:61:b1:ab:6d:d1:67:22:07:fe:48:18:16:62:fb:18:f0: 97:fc:fc:d2:bc:0d:00:97:66:14:a1:ad:a0:39:47:57:8d:c0: 14:ef:93:0b -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt5EEGGA+Xs4c1j5mJzMTX0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMGQxYzBkYjVhYTE4ODBkNzc0N2UyMmYxZGJmNDcxNmQz MTAxYTkwHhcNMjYwMTAxMTAxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NzAyODljMDIwODAxNDIyZmZlY2JiOTMxOTRiM2RiNzU3MTIyZmIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Q4XMmwpl9s69UA3MVrHfa63PGIw tN4a/ZqNihkt3/hznD5rdAeY9XHjCE1cBi8VTCat6uKMrpOX95gxom5BSKDMKZki xv6iImfeZdSO3l7fsNRvwZHx3yNwRAbZT3K0L+j79q60Yi4UfzDs+3Ws/w7Yjw3u LAlIHlGWW1s8Jri9iY9ayLQZinUkUlkJUCc2M0t1Fz4qxiOZieR39OHb4iY3vcBs v5BSr45I1Skp2JXQJ5TgqRYcYMhS8RgW/xLXRYqpqz7IuVVlz6wsIuIhnUc/vYvB gUqa/OT1MBtZtBp71FcBNLSgaR72uYqYs9pegNrmBVfVDdvyVBFtOg5vawIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFIcCicAggBQi/+y7kxlLPbdXEi+xMB8GA1UdIwQY MBaAFCENHA21qhiA13R+IvHb9HFtMQGpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVEwY0RiV3FHSURYZEg0aThkdjBjVzB4QWFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8wOWM5ODAtMzhlYi00MjIyLWIyMjUt ZDcxMTMwYzZjMGY5LzEvaHdLSndDQ0FGQ0xfN0x1VEdVczl0MWNTTDdFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi8wOWM5ODAtMzhlYi00MjIyLWIyMjUtZDcxMTMwYzZjMGY5 LzEvSVEwY0RiV3FHSURYZEg0aThkdjBjVzB4QWFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwW/RMA8E AgACMAkDBwEqE2cAAAAwDQYJKoZIhvcNAQELBQADggEBAK5EQwOjszgzifklo9q3 2CrZDzf0gCmUnP0ntQ8tZSC9OIuya80G1eRpQjRnnk6yQQzmnfdhne5rWWbVaASu svxSGQqtV2ITWSHtBUymDojxvgXp0KMTfbpnhd/AqUfAnLBB694ckzghNjOxY3IB dlROSv786c76lKMomck3ibeSf+d0abrceX+8L+rxlNDfwTvkTKe7TJk1SUin8F/Q hs0OF97wMnozYJ2rE2m9p8XbBReH7pwxgdYNAfqzcNc8MU0lY8bbRp1EbYcFaHOu NKPfshu/WXYEKhRQYbGrbdFnIgf+SBgWYvsY8Jf8/NK8DQCXZhShraA5R1eNwBTv kws= -----END CERTIFICATE-----Generated at Sun Jan 25 23:49:39 2026 by rpki-client