This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/HymtY1xBPTqgspy2R9WlDjTq7C0.roa File: HymtY1xBPTqgspy2R9WlDjTq7C0.roa (raw, json) Hash identifier: otzuSUG5+mHBacjIwL+bRGVnp2sGdruALqEv8ZrCUdQ= Subject key identifier: 1F:29:AD:63:5C:41:3D:3A:A0:B2:9C:B6:47:D5:A5:0E:34:EA:EC:2D Certificate issuer: /CN=669f5c8b9b63ae5e28786eba10a1f6572a60e3fc Certificate serial: 019B77587F155865F1C275D1869ABBDD1C0E Authority key identifier: 66:9F:5C:8B:9B:63:AE:5E:28:78:6E:BA:10:A1:F6:57:2A:60:E3:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zp9ci5tjrl4oeG66EKH2Vypg4_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/HymtY1xBPTqgspy2R9WlDjTq7C0.roa Signing time: Thu 01 Jan 2026 02:17:26 +0000 ROA not before: Thu 01 Jan 2026 02:17:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49875 IP address blocks: 193.104.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.mft rsync://rpki.ripe.net/repository/DEFAULT/Zp9ci5tjrl4oeG66EKH2Vypg4_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:7f:15:58:65:f1:c2:75:d1:86:9a:bb:dd:1c:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=669f5c8b9b63ae5e28786eba10a1f6572a60e3fc Validity Not Before: Jan 1 02:17:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f29ad635c413d3aa0b29cb647d5a50e34eaec2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ff:52:3a:d9:8e:07:39:72:a3:d8:11:70:9f: 28:c2:c9:b7:77:3d:b4:8d:1a:9c:64:96:fb:9c:49: bc:50:03:8f:bc:25:4a:59:fb:10:04:82:c8:0e:26: 47:36:c2:d4:9c:cb:b9:db:52:be:1f:cd:e6:f6:fc: e6:3a:3e:61:18:a3:a6:4a:3b:6c:4e:16:dc:df:fc: 23:8e:99:7a:b2:1b:a2:d6:01:c3:47:65:a9:d9:6f: 17:3c:da:36:0a:4b:50:fe:45:29:cd:60:09:91:62: ad:45:7b:ea:8b:fa:94:90:8c:3a:38:ff:52:41:f8: b6:9a:93:a4:29:a7:75:aa:9c:d4:60:83:a0:e7:63: 63:65:70:cc:e1:17:02:37:ec:d2:5b:e1:a9:8d:88: 0f:9b:f1:b7:1d:b3:79:a9:f1:d2:c8:e7:b4:f2:3a: 0d:08:29:dc:ff:57:33:9c:f2:74:72:45:eb:d8:65: b1:ca:02:8d:ee:34:fc:39:c9:a9:0f:05:d0:55:12: e3:e8:cc:5a:68:c4:b4:e9:0c:54:7a:6c:de:1a:20: 4f:3a:f1:b6:5c:2e:c0:e7:90:91:76:4e:25:e8:a0: 29:22:95:db:a3:0b:9e:74:41:d5:41:5e:7c:33:11: 96:81:2d:66:5f:ed:65:d6:70:68:c7:53:0b:cd:e1: 86:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:29:AD:63:5C:41:3D:3A:A0:B2:9C:B6:47:D5:A5:0E:34:EA:EC:2D X509v3 Authority Key Identifier: keyid:66:9F:5C:8B:9B:63:AE:5E:28:78:6E:BA:10:A1:F6:57:2A:60:E3:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zp9ci5tjrl4oeG66EKH2Vypg4_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/HymtY1xBPTqgspy2R9WlDjTq7C0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.104.13.0/24 Signature Algorithm: sha256WithRSAEncryption 43:6b:6e:12:12:75:1c:bb:8c:4c:61:86:4b:47:70:7e:5c:e2: 25:30:ef:83:1a:20:f1:3b:a4:3b:3f:75:3b:b1:70:1b:d9:5b: 63:e5:c6:29:dd:20:f0:85:96:b1:9a:d7:e6:a4:47:09:93:29: a6:33:ac:28:56:98:cb:41:42:dc:c2:3b:92:c3:21:94:63:c6: d0:3e:c3:66:e9:00:1e:62:68:5f:24:0d:fb:24:fe:09:b0:30: d1:79:50:79:01:50:6c:6e:9f:ba:bf:4a:a6:8d:ab:ba:36:f2: c1:4d:c5:14:85:43:e3:07:c3:cd:92:b5:23:98:6b:9d:b6:52: 85:64:0e:97:09:c5:93:c5:0a:ce:58:ee:90:bd:21:b6:e0:89: 07:d4:af:71:a6:5d:1e:2d:74:21:a7:96:26:7e:50:e7:52:87: 2e:36:b6:e3:41:2f:fa:c4:cb:7e:cb:f6:3a:7d:d0:e2:22:e6: 23:16:01:4e:e6:9b:f3:e9:4c:8c:73:08:27:42:0c:bd:a6:a3: 54:2b:b2:64:f8:65:6f:f7:00:d0:18:85:bf:bc:54:b5:56:71: d7:3c:21:bb:69:1c:df:3c:aa:15:d3:f9:4e:31:b5:d7:d3:0f: cb:fe:06:15:48:86:04:5a:61:dd:d4:f5:98:b4:db:bb:8d:f6: 79:b8:33:af -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WH8VWGXxwnXRhpq73RwOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2OWY1YzhiOWI2M2FlNWUyODc4NmViYTEwYTFmNjU3MmE2 MGUzZmMwHhcNMjYwMTAxMDIxNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjI5YWQ2MzVjNDEzZDNhYTBiMjljYjY0N2Q1YTUwZTM0ZWFlYzJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuP9SOtmOBzlyo9gRcJ8owsm3dz20 jRqcZJb7nEm8UAOPvCVKWfsQBILIDiZHNsLUnMu521K+H83m9vzmOj5hGKOmSjts Thbc3/wjjpl6shui1gHDR2Wp2W8XPNo2CktQ/kUpzWAJkWKtRXvqi/qUkIw6OP9S Qfi2mpOkKad1qpzUYIOg52NjZXDM4RcCN+zSW+GpjYgPm/G3HbN5qfHSyOe08joN CCnc/1cznPJ0ckXr2GWxygKN7jT8OcmpDwXQVRLj6MxaaMS06QxUemzeGiBPOvG2 XC7A55CRdk4l6KApIpXbowuedEHVQV58MxGWgS1mX+1l1nBox1MLzeGG7wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB8prWNcQT06oLKctkfVpQ406uwtMB8GA1UdIwQY MBaAFGafXIubY65eKHhuuhCh9lcqYOP8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnA5Y2k1dGpybDRvZUc2NkVLSDJWeXBnNF93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8zYzJlZmItMjI5Mi00YzZhLTkxNGIt NTVlYjgyMGZkNTk2LzEvSHltdFkxeEJQVHFnc3B5MlI5V2xEalRxN0MwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi8zYzJlZmItMjI5Mi00YzZhLTkxNGItNTVlYjgyMGZkNTk2 LzEvWnA5Y2k1dGpybDRvZUc2NkVLSDJWeXBnNF93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWgNMA0G CSqGSIb3DQEBCwUAA4IBAQBDa24SEnUcu4xMYYZLR3B+XOIlMO+DGiDxO6Q7P3U7 sXAb2Vtj5cYp3SDwhZaxmtfmpEcJkymmM6woVpjLQULcwjuSwyGUY8bQPsNm6QAe YmhfJA37JP4JsDDReVB5AVBsbp+6v0qmjau6NvLBTcUUhUPjB8PNkrUjmGudtlKF ZA6XCcWTxQrOWO6QvSG24IkH1K9xpl0eLXQhp5YmflDnUocuNrbjQS/6xMt+y/Y6 fdDiIuYjFgFO5pvz6UyMcwgnQgy9pqNUK7Jk+GVv9wDQGIW/vFS1VnHXPCG7aRzf PKoV0/lOMbXX0w/L/gYVSIYEWmHd1PWYtNu7jfZ5uDOv -----END CERTIFICATE-----Generated at Mon Jan 12 01:42:45 2026 by rpki-client