This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/hSwUOwAMED0n18PsqXIxOxQYAlQ.roa File: hSwUOwAMED0n18PsqXIxOxQYAlQ.roa (raw, json) Hash identifier: DbjICHwW8+pnzPKc7pAGSBb3/bjUMmNtreKRXOAvuXI= Subject key identifier: 85:2C:14:3B:00:0C:10:3D:27:D7:C3:EC:A9:72:31:3B:14:18:02:54 Certificate issuer: /CN=473f498592457859f26fb5a610b7b51ef52413f3 Certificate serial: 019B7B353A503CF8C57E9DF1C45D9D5FECF3 Authority key identifier: 47:3F:49:85:92:45:78:59:F2:6F:B5:A6:10:B7:B5:1E:F5:24:13:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rz9JhZJFeFnyb7WmELe1HvUkE_M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/hSwUOwAMED0n18PsqXIxOxQYAlQ.roa Signing time: Thu 01 Jan 2026 20:17:24 +0000 ROA not before: Thu 01 Jan 2026 20:17:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41077 IP address blocks: 193.104.109.0/24 maxlen: 24 194.140.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.crl rsync://rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.mft rsync://rpki.ripe.net/repository/DEFAULT/Rz9JhZJFeFnyb7WmELe1HvUkE_M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 05:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:3a:50:3c:f8:c5:7e:9d:f1:c4:5d:9d:5f:ec:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=473f498592457859f26fb5a610b7b51ef52413f3 Validity Not Before: Jan 1 20:17:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=852c143b000c103d27d7c3eca972313b14180254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:0e:0d:c6:e1:9b:29:30:70:76:e8:d4:62:cd: 71:5a:2d:8b:09:82:85:60:2b:b6:9b:4e:87:40:0a: 8b:fa:2b:cb:67:81:92:d6:51:f2:1b:f6:24:16:3e: f2:b3:02:a8:da:a5:8a:f1:bb:f1:c2:82:63:8e:04: 7b:26:93:47:a7:40:9a:ae:7d:32:03:1b:ea:b9:6a: 45:8c:ef:ae:66:46:eb:5d:70:fb:eb:90:22:43:04: 46:df:b6:9c:73:e2:82:26:ff:56:39:60:94:b8:ef: 97:90:b4:85:84:1d:4f:36:9c:ff:cd:83:26:7f:c7: d2:a2:13:a6:bd:cb:ce:58:01:1e:99:a4:76:52:14: 0d:79:de:ed:22:7c:1e:53:f8:81:8a:7e:67:9d:0e: 5c:6e:5b:19:b9:76:a7:1e:00:1f:6c:4e:e2:ed:65: 0c:5b:e2:7a:40:db:3b:9e:e2:3a:13:d0:5c:72:50: db:9b:b0:3d:1d:37:8c:46:53:14:35:3d:5d:bb:d3: a3:f6:2b:ba:cd:68:6d:43:e8:a3:b7:61:d4:dd:9a: 19:d6:d5:97:da:ef:29:70:96:bb:2a:78:d8:53:3a: b7:43:7d:67:43:e2:da:e5:33:43:9c:4f:4b:91:15: 59:9a:63:56:74:aa:74:47:fd:b0:03:3d:55:15:fb: ae:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:2C:14:3B:00:0C:10:3D:27:D7:C3:EC:A9:72:31:3B:14:18:02:54 X509v3 Authority Key Identifier: keyid:47:3F:49:85:92:45:78:59:F2:6F:B5:A6:10:B7:B5:1E:F5:24:13:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rz9JhZJFeFnyb7WmELe1HvUkE_M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/hSwUOwAMED0n18PsqXIxOxQYAlQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.104.109.0/24 194.140.227.0/24 Signature Algorithm: sha256WithRSAEncryption 11:17:7f:ac:66:38:ed:90:69:4a:07:e5:de:c7:9b:45:5b:ae: 52:02:f2:ac:0a:b4:86:d7:f1:89:2a:43:c1:5a:c2:e8:cc:d3: a1:1c:41:b7:0f:99:81:88:d1:a5:43:71:32:9a:58:ec:e6:c7: 2d:c5:5d:53:82:4e:0b:ec:db:a8:52:58:ed:32:9f:eb:67:75: 5e:6d:9f:e9:00:92:ea:8d:26:d9:59:ad:7f:77:54:1f:cd:b6: be:ea:bb:c7:b7:0e:20:60:74:61:51:db:24:be:11:18:d9:34: 04:15:a2:a0:0b:74:12:4d:c2:9e:ee:9f:92:f2:23:72:93:b7: b3:6c:b5:36:e8:44:83:57:86:cc:3b:48:27:2e:b2:4e:6f:9e: 5b:6a:67:33:5c:71:68:f6:43:13:00:10:af:cc:03:be:98:8d: fd:aa:67:8a:c3:ef:89:04:a8:db:9a:e0:39:e5:8f:b2:df:43: 12:08:1c:62:e6:37:09:87:ce:a6:2f:eb:6c:8a:22:db:0e:f5: 5f:66:bf:46:8b:46:43:b2:b1:0a:66:6b:c0:61:d5:14:3e:8e: bd:92:a1:d3:bb:c2:81:63:2e:98:14:66:86:36:61:02:9d:1e: 98:21:93:cb:e0:79:09:58:21:81:c6:d5:eb:3b:a8:3e:11:96: ae:a0:62:5a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NTpQPPjFfp3xxF2dX+zzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3M2Y0OTg1OTI0NTc4NTlmMjZmYjVhNjEwYjdiNTFlZjUy NDEzZjMwHhcNMjYwMTAxMjAxNzI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTJjMTQzYjAwMGMxMDNkMjdkN2MzZWNhOTcyMzEzYjE0MTgwMjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5A4NxuGbKTBwdujUYs1xWi2LCYKF YCu2m06HQAqL+ivLZ4GS1lHyG/YkFj7yswKo2qWK8bvxwoJjjgR7JpNHp0Carn0y AxvquWpFjO+uZkbrXXD765AiQwRG37acc+KCJv9WOWCUuO+XkLSFhB1PNpz/zYMm f8fSohOmvcvOWAEemaR2UhQNed7tInweU/iBin5nnQ5cblsZuXanHgAfbE7i7WUM W+J6QNs7nuI6E9BcclDbm7A9HTeMRlMUNT1du9Oj9iu6zWhtQ+ijt2HU3ZoZ1tWX 2u8pcJa7KnjYUzq3Q31nQ+La5TNDnE9LkRVZmmNWdKp0R/2wAz1VFfuudwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIUsFDsADBA9J9fD7KlyMTsUGAJUMB8GA1UdIwQY MBaAFEc/SYWSRXhZ8m+1phC3tR71JBPzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUno5SmhaSkZlRm55YjdXbUVMZTFIdlVrRV9NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS80MjgyMzctZWZkNy00NzI2LTkwY2Et ZjhmNDkyYWY0ODBlLzEvaFN3VU93QU1FRDBuMThQc3FYSXhPeFFZQWxRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS80MjgyMzctZWZkNy00NzI2LTkwY2EtZjhmNDkyYWY0ODBl LzEvUno5SmhaSkZlRm55YjdXbUVMZTFIdlVrRV9NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwWhtAwQA wozjMA0GCSqGSIb3DQEBCwUAA4IBAQARF3+sZjjtkGlKB+Xex5tFW65SAvKsCrSG 1/GJKkPBWsLozNOhHEG3D5mBiNGlQ3Eymljs5sctxV1Tgk4L7NuoUljtMp/rZ3Ve bZ/pAJLqjSbZWa1/d1Qfzba+6rvHtw4gYHRhUdskvhEY2TQEFaKgC3QSTcKe7p+S 8iNyk7ezbLU26ESDV4bMO0gnLrJOb55bamczXHFo9kMTABCvzAO+mI39qmeKw++J BKjbmuA55Y+y30MSCBxi5jcJh86mL+tsiiLbDvVfZr9Gi0ZDsrEKZmvAYdUUPo69 kqHTu8KBYy6YFGaGNmECnR6YIZPL4HkJWCGBxtXrO6g+EZauoGJa -----END CERTIFICATE-----Generated at Thu Jan 8 11:03:28 2026 by rpki-client