This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/Hhk99kTP4LCptCcuzr46HrrOd-M.roa File: Hhk99kTP4LCptCcuzr46HrrOd-M.roa (raw, json) Hash identifier: KKoc5a/NPGDFa/jCr9dayn05xHXif4MHgG7H+qe8WPY= Subject key identifier: 1E:19:3D:F6:44:CF:E0:B0:A9:B4:27:2E:CE:BE:3A:1E:BA:CE:77:E3 Certificate issuer: /CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec Certificate serial: 019B7DC9E6E07168548B4EEC2944AB7C328C Authority key identifier: 25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/Hhk99kTP4LCptCcuzr46HrrOd-M.roa Signing time: Fri 02 Jan 2026 08:19:02 +0000 ROA not before: Fri 02 Jan 2026 08:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 63593 IP address blocks: 192.169.104.0/22 maxlen: 24 192.169.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:e6:e0:71:68:54:8b:4e:ec:29:44:ab:7c:32:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec Validity Not Before: Jan 2 08:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1e193df644cfe0b0a9b4272ecebe3a1ebace77e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:15:df:7b:26:d3:9f:c1:17:dc:9e:04:3f:9f: 85:ae:55:37:45:f6:66:32:c1:2d:e1:39:4d:03:32: 0a:ad:92:b8:bc:40:d6:be:e1:0f:22:1a:e0:76:13: 61:49:d6:54:87:69:dc:d1:fd:81:9b:52:57:04:1f: 84:36:cf:7b:0b:30:39:bd:6e:fe:9a:7f:5c:cd:4e: 3c:6b:10:e3:b9:1d:42:1c:08:21:6e:78:a6:4e:d7: f2:db:6f:ad:f3:a5:30:44:e2:4d:76:8f:3d:44:de: 7c:53:94:b9:79:ed:55:e4:78:2d:f4:ab:1f:eb:53: ec:dc:4a:6f:06:60:33:1d:c7:7d:d4:a1:ed:19:06: 52:18:c2:b6:f9:d8:2a:fc:5a:f8:44:50:c0:83:23: f4:dc:6e:97:6a:ae:10:c6:87:d9:de:70:97:60:b3: 1d:6f:3b:f1:39:e6:34:fd:70:ec:8f:dd:bb:40:da: d1:cd:ec:f4:44:33:e8:6e:6f:33:75:3a:83:6b:c9: d4:53:e3:0a:96:88:04:73:74:2c:74:0f:e5:55:94: 6d:6d:41:f4:d0:11:86:b3:fb:ff:ea:b8:83:ed:e2: 3e:42:0e:0d:9c:62:2b:09:fb:0f:c0:23:5e:25:86: dc:bb:10:89:ae:5e:8b:db:48:2e:55:c3:5c:df:29: 8d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:19:3D:F6:44:CF:E0:B0:A9:B4:27:2E:CE:BE:3A:1E:BA:CE:77:E3 X509v3 Authority Key Identifier: keyid:25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/Hhk99kTP4LCptCcuzr46HrrOd-M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.169.104.0/22 Signature Algorithm: sha256WithRSAEncryption 21:ce:17:0a:d6:c2:bf:32:8e:9d:79:da:b6:15:7d:6c:57:b3: c4:0b:bb:31:39:0a:e0:6c:0c:66:f6:de:bb:95:c0:52:8a:73: 5c:37:ce:30:29:e2:00:8f:94:e1:13:03:8c:bd:27:3f:c1:1d: 83:af:a6:71:4d:d2:6b:2d:a8:26:72:fc:39:fb:24:29:61:d3: cc:0d:43:7e:76:76:71:47:19:3a:18:8a:8e:8f:60:16:0c:9c: 66:bb:fa:f4:e5:a8:b8:72:dc:b1:f5:9d:b6:21:75:51:2f:12: 0f:5f:a0:75:db:2c:9f:35:43:04:3b:38:96:0f:87:be:8e:c8: bd:f9:96:35:a9:69:57:b6:96:14:29:09:69:8f:4c:a6:cb:dc: 43:c9:d4:92:ae:f3:3b:6d:be:90:9e:5e:8e:33:61:ba:57:8c: 08:34:d7:44:f7:96:a0:81:74:84:68:70:26:02:8f:9f:7d:30: ce:1d:4f:76:fb:94:fd:6d:2e:b0:32:16:8d:d8:16:e9:c6:e7: df:3b:cd:f0:cf:35:d9:98:8a:0e:09:42:e2:3b:46:20:a2:34: e5:9d:86:fd:ea:32:06:80:19:8f:70:d7:2f:70:fc:7b:55:fb: 72:3b:7d:0e:d8:39:06:fc:38:df:9e:5c:e8:20:50:ab:39:af: 16:04:db:0e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yebgcWhUi07sKUSrfDKMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1Nzc2Yzc3ZjhlYmU3MDk0Y2EwMDdhY2UxYTljMGJmZGMy YjNhZWMwHhcNMjYwMTAyMDgxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZTE5M2RmNjQ0Y2ZlMGIwYTliNDI3MmVjZWJlM2ExZWJhY2U3N2UzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxXfeybTn8EX3J4EP5+FrlU3RfZm MsEt4TlNAzIKrZK4vEDWvuEPIhrgdhNhSdZUh2nc0f2Bm1JXBB+ENs97CzA5vW7+ mn9czU48axDjuR1CHAghbnimTtfy22+t86UwROJNdo89RN58U5S5ee1V5Hgt9Ksf 61Ps3EpvBmAzHcd91KHtGQZSGMK2+dgq/Fr4RFDAgyP03G6Xaq4QxofZ3nCXYLMd bzvxOeY0/XDsj927QNrRzez0RDPobm8zdTqDa8nUU+MKlogEc3QsdA/lVZRtbUH0 0BGGs/v/6riD7eI+Qg4NnGIrCfsPwCNeJYbcuxCJrl6L20guVcNc3ymNAQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB4ZPfZEz+CwqbQnLs6+Oh66znfjMB8GA1UdIwQY MBaAFCV3bHf46+cJTKAHrOGpwL/cKzrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS81N2UwOGMtY2EzYS00MDk5LWFlNzQt ZTdkYWVjMTk0YTY5LzEvSGhrOTlrVFA0TENwdENjdXpyNDZIcnJPZC1NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS81N2UwOGMtY2EzYS00MDk5LWFlNzQtZTdkYWVjMTk0YTY5 LzEvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwKloMA0G CSqGSIb3DQEBCwUAA4IBAQAhzhcK1sK/Mo6dedq2FX1sV7PEC7sxOQrgbAxm9t67 lcBSinNcN84wKeIAj5ThEwOMvSc/wR2Dr6ZxTdJrLagmcvw5+yQpYdPMDUN+dnZx Rxk6GIqOj2AWDJxmu/r05ai4ctyx9Z22IXVRLxIPX6B12yyfNUMEOziWD4e+jsi9 +ZY1qWlXtpYUKQlpj0ymy9xDydSSrvM7bb6Qnl6OM2G6V4wINNdE95aggXSEaHAm Ao+ffTDOHU92+5T9bS6wMhaN2BbpxuffO83wzzXZmIoOCULiO0YgojTlnYb96jIG gBmPcNcvcPx7VftyO30O2DkG/DjfnlzoIFCrOa8WBNsO -----END CERTIFICATE-----Generated at Sun Jan 25 12:18:17 2026 by rpki-client