This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/12fc41-89dd-4a21-aa34-76525841dc28/1/HwU_8edYuJ4rCmR5x6ykFn1t0do.roa File: HwU_8edYuJ4rCmR5x6ykFn1t0do.roa (raw, json) Hash identifier: 01KdeA2Gl7MQNNjhhKHuUHDnBDM56k334jcMgundfH4= Subject key identifier: 1F:05:3F:F1:E7:58:B8:9E:2B:0A:64:79:C7:AC:A4:16:7D:6D:D1:DA Certificate issuer: /CN=ced410ea6867ef63f959bad6b21b691cadff87d4 Certificate serial: 019B79EC4F71E25C5661DBEF171C3C359F3A Authority key identifier: CE:D4:10:EA:68:67:EF:63:F9:59:BA:D6:B2:1B:69:1C:AD:FF:87:D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztQQ6mhn72P5WbrWshtpHK3_h9Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/12fc41-89dd-4a21-aa34-76525841dc28/1/HwU_8edYuJ4rCmR5x6ykFn1t0do.roa Signing time: Thu 01 Jan 2026 14:18:08 +0000 ROA not before: Thu 01 Jan 2026 14:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42053 IP address blocks: 45.152.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/12fc41-89dd-4a21-aa34-76525841dc28/1/ztQQ6mhn72P5WbrWshtpHK3_h9Q.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/12fc41-89dd-4a21-aa34-76525841dc28/1/ztQQ6mhn72P5WbrWshtpHK3_h9Q.mft rsync://rpki.ripe.net/repository/DEFAULT/ztQQ6mhn72P5WbrWshtpHK3_h9Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 11:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:4f:71:e2:5c:56:61:db:ef:17:1c:3c:35:9f:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ced410ea6867ef63f959bad6b21b691cadff87d4 Validity Not Before: Jan 1 14:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f053ff1e758b89e2b0a6479c7aca4167d6dd1da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:88:de:af:f9:9a:38:5e:cf:29:2d:d2:18:74: 08:1f:c3:19:99:97:fb:55:c9:5d:80:22:81:96:0a: 5f:61:a0:9f:c9:a2:ad:ae:17:dd:38:f9:f9:b6:95: b1:54:85:00:f3:b4:15:9d:2a:93:d5:23:48:5f:c7: e2:b8:7a:ef:b7:10:97:ad:27:7c:84:e7:cd:a2:60: bd:ba:ed:74:1f:7c:70:11:c0:01:84:b0:bd:7f:05: bf:08:eb:96:32:83:b1:bb:21:a0:dc:95:06:95:bd: 5c:4f:02:e8:f1:3d:25:97:4b:e0:a7:06:05:3d:28: 55:75:59:72:e5:14:cd:92:34:72:0d:fe:e4:7d:88: cf:34:1c:ae:5c:86:9b:5d:7d:ad:a1:6e:de:64:85: 3b:af:72:5c:af:46:89:37:ee:b5:0f:99:f3:c1:42: 22:4e:73:68:53:5a:35:6e:7f:5b:2d:53:c4:33:a2: d2:fb:52:97:36:a2:2c:2a:43:e6:56:91:b9:46:b3: 78:a1:0a:cb:fc:34:5d:4d:95:c2:9d:b1:a5:f2:2f: df:47:68:73:1d:f5:6a:c0:bb:67:25:e2:74:48:b1: 92:d4:da:a3:5a:b6:7a:39:19:07:c8:ae:ca:16:f2: d4:7e:5a:9d:a0:61:48:5b:85:9e:bb:72:ec:84:b1: 1d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:05:3F:F1:E7:58:B8:9E:2B:0A:64:79:C7:AC:A4:16:7D:6D:D1:DA X509v3 Authority Key Identifier: keyid:CE:D4:10:EA:68:67:EF:63:F9:59:BA:D6:B2:1B:69:1C:AD:FF:87:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztQQ6mhn72P5WbrWshtpHK3_h9Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/12fc41-89dd-4a21-aa34-76525841dc28/1/HwU_8edYuJ4rCmR5x6ykFn1t0do.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/12fc41-89dd-4a21-aa34-76525841dc28/1/ztQQ6mhn72P5WbrWshtpHK3_h9Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.152.92.0/22 Signature Algorithm: sha256WithRSAEncryption 60:9c:43:b5:38:c8:a0:d1:b3:8b:46:df:6b:5d:03:9c:cd:c9: b2:db:70:38:ba:65:50:42:a0:59:c7:16:68:7a:28:70:8d:23: 2c:1a:8e:1a:29:84:0c:f9:d5:a7:2a:2d:20:25:bf:52:94:98: 3c:bb:34:b3:43:2d:56:23:ec:f8:48:97:33:c4:2e:a3:c6:2f: 9d:c2:d3:d8:fe:9a:97:c0:03:ad:74:7e:4a:35:1a:fb:94:06: c0:a1:01:89:7f:6f:46:5d:f0:27:09:f8:aa:f5:fe:7a:8b:8e: 2f:9e:ca:79:84:2b:c2:4e:fc:cb:24:62:5c:e2:77:ff:7d:fd: 1f:2f:ae:42:cf:69:12:0b:db:84:c8:7d:38:02:dc:b4:f8:81: 67:b5:9a:30:d5:86:e8:b2:fd:73:78:6d:6c:35:7b:71:c7:ef: 75:46:7f:87:57:c7:41:d8:d0:ae:6c:36:1b:ae:b3:8d:d8:02: 4f:20:0d:d7:0d:5d:73:e2:c0:de:f1:29:50:54:31:fb:5a:d1: 06:c5:88:ab:56:bf:16:8b:b4:52:d7:7f:a7:ba:ce:79:d2:ff: 13:5a:51:d2:ab:c0:99:9a:e8:d1:d9:e4:eb:64:f0:0f:61:85: fa:36:05:7a:1f:a1:2c:d8:b1:82:82:24:72:d1:4b:11:17:e8: ce:54:7f:4e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57E9x4lxWYdvvFxw8NZ86MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlZDQxMGVhNjg2N2VmNjNmOTU5YmFkNmIyMWI2OTFjYWRm Zjg3ZDQwHhcNMjYwMTAxMTQxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjA1M2ZmMWU3NThiODllMmIwYTY0NzljN2FjYTQxNjdkNmRkMWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvojer/maOF7PKS3SGHQIH8MZmZf7 VcldgCKBlgpfYaCfyaKtrhfdOPn5tpWxVIUA87QVnSqT1SNIX8fiuHrvtxCXrSd8 hOfNomC9uu10H3xwEcABhLC9fwW/COuWMoOxuyGg3JUGlb1cTwLo8T0ll0vgpwYF PShVdVly5RTNkjRyDf7kfYjPNByuXIabXX2toW7eZIU7r3Jcr0aJN+61D5nzwUIi TnNoU1o1bn9bLVPEM6LS+1KXNqIsKkPmVpG5RrN4oQrL/DRdTZXCnbGl8i/fR2hz HfVqwLtnJeJ0SLGS1NqjWrZ6ORkHyK7KFvLUflqdoGFIW4Weu3LshLEdXQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB8FP/HnWLieKwpkecespBZ9bdHaMB8GA1UdIwQY MBaAFM7UEOpoZ+9j+Vm61rIbaRyt/4fUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenRRUTZtaG43MlA1V2JyV3NodHBISzNfaDlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8xMmZjNDEtODlkZC00YTIxLWFhMzQt NzY1MjU4NDFkYzI4LzEvSHdVXzhlZFl1SjRyQ21SNXg2eWtGbjF0MGRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy8xMmZjNDEtODlkZC00YTIxLWFhMzQtNzY1MjU4NDFkYzI4 LzEvenRRUTZtaG43MlA1V2JyV3NodHBISzNfaDlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZhcMA0G CSqGSIb3DQEBCwUAA4IBAQBgnEO1OMig0bOLRt9rXQOczcmy23A4umVQQqBZxxZo eihwjSMsGo4aKYQM+dWnKi0gJb9SlJg8uzSzQy1WI+z4SJczxC6jxi+dwtPY/pqX wAOtdH5KNRr7lAbAoQGJf29GXfAnCfiq9f56i44vnsp5hCvCTvzLJGJc4nf/ff0f L65Cz2kSC9uEyH04Aty0+IFntZow1Ybosv1zeG1sNXtxx+91Rn+HV8dB2NCubDYb rrON2AJPIA3XDV1z4sDe8SlQVDH7WtEGxYirVr8Wi7RS13+nus550v8TWlHSq8CZ mujR2eTrZPAPYYX6NgV6H6Es2LGCgiRy0UsRF+jOVH9O -----END CERTIFICATE-----Generated at Fri Jan 9 16:01:53 2026 by rpki-client