This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/HUsAlOvemtR2fE4jnbiG5JPoxag.roa File: HUsAlOvemtR2fE4jnbiG5JPoxag.roa (raw, json) Hash identifier: f7lJEppqzDneJ9AJzuUYrOlyEaByUZeV+0bof3SkTsE= Subject key identifier: 1D:4B:00:94:EB:DE:9A:D4:76:7C:4E:23:9D:B8:86:E4:93:E8:C5:A8 Certificate issuer: /CN=4c39055a6990b82408cf1abf29313780e249a4c9 Certificate serial: 019B79ECD0E340B3D0455A25F9D98B813A5D Authority key identifier: 4C:39:05:5A:69:90:B8:24:08:CF:1A:BF:29:31:37:80:E2:49:A4:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDkFWmmQuCQIzxq_KTE3gOJJpMk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/HUsAlOvemtR2fE4jnbiG5JPoxag.roa Signing time: Thu 01 Jan 2026 14:18:41 +0000 ROA not before: Thu 01 Jan 2026 14:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29611 IP address blocks: 45.89.56.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft rsync://rpki.ripe.net/repository/DEFAULT/TDkFWmmQuCQIzxq_KTE3gOJJpMk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:d0:e3:40:b3:d0:45:5a:25:f9:d9:8b:81:3a:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c39055a6990b82408cf1abf29313780e249a4c9 Validity Not Before: Jan 1 14:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1d4b0094ebde9ad4767c4e239db886e493e8c5a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:11:9d:1a:a3:04:01:92:85:94:07:45:3a:e5: 95:14:f1:76:a3:43:cd:ad:9c:b2:8d:61:bc:ce:99: 3d:d7:ca:21:d4:eb:48:c6:cb:a0:15:ab:88:d8:24: 99:dd:d8:b7:2d:c9:b2:56:37:cd:4f:1f:1e:5c:ac: 5c:71:da:1c:7b:3f:c9:eb:5b:46:71:c9:ce:ab:6e: 65:53:c4:1f:1a:30:9e:f6:86:ca:20:e3:a2:1f:76: 70:9a:42:a0:30:23:d3:b6:11:10:aa:56:4f:a2:aa: 6b:61:f8:2e:4c:75:75:23:52:29:61:9f:d0:f8:69: dc:74:63:8c:88:9a:95:10:b6:d8:ab:fe:18:af:d6: 62:a7:f5:c7:85:41:42:a6:4d:3c:9d:59:33:86:d7: de:ae:e6:cc:c2:c3:e8:9d:db:6c:ea:7e:d8:9c:e5: 2d:eb:f8:46:f3:0c:2f:b9:03:5a:cd:4b:ed:03:6a: 99:4a:12:e7:7c:7a:db:f5:26:8e:d0:0f:4e:50:ce: 63:c6:23:ca:c7:f3:20:c7:4a:fb:13:39:5d:d3:2a: 3b:a8:34:3f:19:1c:7a:cf:77:c4:bd:fd:85:0a:24: 8b:cf:e6:49:0e:1b:9f:8e:41:48:8e:2c:5c:a6:55: c0:04:37:69:f0:21:82:6c:fd:85:27:6e:ca:8d:99: 74:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:4B:00:94:EB:DE:9A:D4:76:7C:4E:23:9D:B8:86:E4:93:E8:C5:A8 X509v3 Authority Key Identifier: keyid:4C:39:05:5A:69:90:B8:24:08:CF:1A:BF:29:31:37:80:E2:49:A4:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDkFWmmQuCQIzxq_KTE3gOJJpMk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/HUsAlOvemtR2fE4jnbiG5JPoxag.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.89.56.0/22 Signature Algorithm: sha256WithRSAEncryption 5e:b8:8f:ae:85:9d:78:01:bc:d7:50:a1:b7:e6:ee:62:ac:da: 6d:bb:f5:d3:be:a1:c2:23:df:5b:f4:31:b8:6a:e5:e6:b5:7f: a6:87:97:e0:dd:5c:dd:ba:75:4e:9a:38:37:59:0d:5b:5f:ea: c6:cd:32:f6:7f:35:de:3c:a9:62:01:bc:71:f9:cf:19:fd:49: 6d:de:37:31:24:67:fc:29:5f:4b:3c:64:2f:91:af:55:7f:e5: 76:65:70:83:48:ab:8f:f0:15:e9:b0:73:a9:40:ac:8a:dc:6a: 33:bf:d5:8b:b7:12:17:18:73:14:c4:e3:01:2f:cb:eb:3b:7c: 44:c2:bb:aa:e3:a8:c1:c9:f7:8c:e7:57:aa:47:85:88:da:ce: 76:82:c2:32:48:b4:85:c6:07:c5:14:dd:1c:46:0c:c7:30:27: 5c:70:6b:43:93:e4:00:81:9d:f8:0c:75:de:44:04:c3:11:fa: be:ad:4a:14:f4:8f:03:68:31:73:e0:fc:d2:f5:53:6a:1d:a0: c7:27:e3:ff:fc:66:de:d3:2d:f2:75:f5:9f:d8:2e:18:11:02: 12:9d:6c:de:ba:ab:5f:42:cf:d3:6c:b9:2d:0b:fe:1f:bd:9e: 03:32:75:9e:38:98:11:23:ba:99:84:39:a1:a5:95:7c:18:9c: bc:1e:05:89 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57NDjQLPQRVol+dmLgTpdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMzkwNTVhNjk5MGI4MjQwOGNmMWFiZjI5MzEzNzgwZTI0 OWE0YzkwHhcNMjYwMTAxMTQxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZDRiMDA5NGViZGU5YWQ0NzY3YzRlMjM5ZGI4ODZlNDkzZThjNWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthGdGqMEAZKFlAdFOuWVFPF2o0PN rZyyjWG8zpk918oh1OtIxsugFauI2CSZ3di3LcmyVjfNTx8eXKxccdocez/J61tG ccnOq25lU8QfGjCe9obKIOOiH3ZwmkKgMCPTthEQqlZPoqprYfguTHV1I1IpYZ/Q +GncdGOMiJqVELbYq/4Yr9Zip/XHhUFCpk08nVkzhtferubMwsPondts6n7YnOUt 6/hG8wwvuQNazUvtA2qZShLnfHrb9SaO0A9OUM5jxiPKx/Mgx0r7Ezld0yo7qDQ/ GRx6z3fEvf2FCiSLz+ZJDhufjkFIjixcplXABDdp8CGCbP2FJ27KjZl0RwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB1LAJTr3prUdnxOI524huST6MWoMB8GA1UdIwQY MBaAFEw5BVppkLgkCM8avykxN4DiSaTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVERrRldtbVF1Q1FJenhxX0tURTNnT0pKcE1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9kZjZlMjUtOTIzYy00ODM4LTg2NGYt ZDRiMzdlNDRhYjdjLzEvSFVzQWxPdmVtdFIyZkU0am5iaUc1SlBveGFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9kZjZlMjUtOTIzYy00ODM4LTg2NGYtZDRiMzdlNDRhYjdj LzEvVERrRldtbVF1Q1FJenhxX0tURTNnT0pKcE1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVk4MA0G CSqGSIb3DQEBCwUAA4IBAQBeuI+uhZ14AbzXUKG35u5irNptu/XTvqHCI99b9DG4 auXmtX+mh5fg3VzdunVOmjg3WQ1bX+rGzTL2fzXePKliAbxx+c8Z/Ult3jcxJGf8 KV9LPGQvka9Vf+V2ZXCDSKuP8BXpsHOpQKyK3Gozv9WLtxIXGHMUxOMBL8vrO3xE wruq46jByfeM51eqR4WI2s52gsIySLSFxgfFFN0cRgzHMCdccGtDk+QAgZ34DHXe RATDEfq+rUoU9I8DaDFz4PzS9VNqHaDHJ+P//Gbe0y3ydfWf2C4YEQISnWzeuqtf Qs/TbLktC/4fvZ4DMnWeOJgRI7qZhDmhpZV8GJy8HgWJ -----END CERTIFICATE-----Generated at Mon Jan 26 07:57:53 2026 by rpki-client