This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/HjsUoqoPK-jxSAesZLIKCYVg8Ao.roa File: HjsUoqoPK-jxSAesZLIKCYVg8Ao.roa (raw, json) Hash identifier: HZ81msEvNMRqk5s5wQeDrE3aVOYI9QLZN/fVxCO3LFE= Subject key identifier: 1E:3B:14:A2:AA:0F:2B:E8:F1:48:07:AC:64:B2:0A:09:85:60:F0:0A Certificate issuer: /CN=464952bc165441ec6e2e2010c933dc830f361731 Certificate serial: 019B7C135DB5BA82DD6AA56F441A63736955 Authority key identifier: 46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/HjsUoqoPK-jxSAesZLIKCYVg8Ao.roa Signing time: Fri 02 Jan 2026 00:20:02 +0000 ROA not before: Fri 02 Jan 2026 00:20:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47414 IP address blocks: 217.19.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:5d:b5:ba:82:dd:6a:a5:6f:44:1a:63:73:69:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=464952bc165441ec6e2e2010c933dc830f361731 Validity Not Before: Jan 2 00:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1e3b14a2aa0f2be8f14807ac64b20a098560f00a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:8e:0d:4c:62:e4:35:57:87:a7:b6:c8:c2:d9: 3a:42:a6:a3:98:ca:90:50:de:76:3c:50:8b:46:3f: e6:48:15:72:22:cf:13:c2:1d:2d:02:59:e8:81:1e: f5:2e:f4:b1:62:2e:dc:84:70:3c:2a:f7:35:e4:bd: 6b:ea:cd:43:86:f3:65:b5:bc:7d:6b:a0:3e:00:89: 73:a7:bd:d0:99:35:d9:38:85:78:89:9f:8c:ea:4e: 06:18:a6:85:3a:1f:ee:a3:f0:f6:69:bb:ff:70:78: 13:18:f6:8c:85:d5:40:1d:a9:f2:c5:f5:ff:fa:7d: 90:78:67:2f:c7:01:cd:7e:e7:e3:7e:03:6a:5b:a1: 88:cc:0c:87:11:42:43:e4:d7:39:9c:25:89:96:f3: 4f:91:5a:1a:38:09:d8:f5:64:08:85:8c:29:0a:bf: 39:9a:aa:9e:30:d7:c3:68:67:92:38:0d:d1:2b:f1: c8:71:af:36:e5:68:5f:0c:0a:2c:f6:f5:b9:c3:9b: 94:49:56:4a:62:b0:96:54:3a:8c:c5:4f:8b:f7:b9: 2d:2a:b3:0f:b3:bf:a1:e0:df:5d:80:b0:19:d6:a1: f8:d7:76:78:03:64:46:ff:30:c2:0b:a8:b3:28:75: 18:1f:4f:cd:86:3c:f7:7c:f5:e7:c1:b0:96:2b:ca: 50:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:3B:14:A2:AA:0F:2B:E8:F1:48:07:AC:64:B2:0A:09:85:60:F0:0A X509v3 Authority Key Identifier: keyid:46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/HjsUoqoPK-jxSAesZLIKCYVg8Ao.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.19.6.0/24 Signature Algorithm: sha256WithRSAEncryption 15:f7:d3:38:27:8e:d4:71:bc:62:4e:5c:56:bd:e3:42:4e:c4: 7f:9b:38:2e:52:67:1d:0e:24:a5:6a:f0:69:c7:7c:43:31:fa: 3b:4a:72:f1:46:af:1d:a1:ed:5e:2d:ba:54:e1:38:33:54:68: 1f:d1:d4:ee:cf:d7:ad:56:ef:c3:b7:ac:f7:00:f6:56:af:3a: f2:48:ff:c5:43:bb:7b:7b:48:5c:66:e7:7b:4d:17:50:31:ee: ca:90:bc:4c:4b:03:47:cc:73:e0:1f:3b:d7:33:e2:60:07:f6: d4:9c:68:ba:af:8b:96:b5:b9:95:35:1d:08:2b:1b:09:88:5f: 4d:f3:d6:e1:d8:dd:12:36:53:d8:80:58:41:55:52:18:07:be: ee:9e:e1:cb:40:56:81:d2:81:35:4f:90:8f:11:05:6f:a3:f5: ce:cf:60:41:75:d6:ac:33:14:8e:3a:79:2e:94:1c:c3:6a:db: 31:07:94:f8:f3:7e:af:2f:26:84:7d:af:13:ad:ba:3d:ba:4a: a9:42:3b:87:16:81:93:aa:54:3b:3d:cd:00:db:1e:77:2e:f3: f9:b4:23:a4:c0:71:eb:a7:55:63:a5:76:1d:9c:92:2d:c1:b9: b1:f0:bd:9f:45:3a:28:71:9c:71:63:89:1d:55:6a:dc:43:91: 00:5d:9b:81 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E121uoLdaqVvRBpjc2lVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NDk1MmJjMTY1NDQxZWM2ZTJlMjAxMGM5MzNkYzgzMGYz NjE3MzEwHhcNMjYwMTAyMDAyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZTNiMTRhMmFhMGYyYmU4ZjE0ODA3YWM2NGIyMGEwOTg1NjBmMDBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6o4NTGLkNVeHp7bIwtk6QqajmMqQ UN52PFCLRj/mSBVyIs8Twh0tAlnogR71LvSxYi7chHA8Kvc15L1r6s1DhvNltbx9 a6A+AIlzp73QmTXZOIV4iZ+M6k4GGKaFOh/uo/D2abv/cHgTGPaMhdVAHanyxfX/ +n2QeGcvxwHNfufjfgNqW6GIzAyHEUJD5Nc5nCWJlvNPkVoaOAnY9WQIhYwpCr85 mqqeMNfDaGeSOA3RK/HIca825WhfDAos9vW5w5uUSVZKYrCWVDqMxU+L97ktKrMP s7+h4N9dgLAZ1qH413Z4A2RG/zDCC6izKHUYH0/Nhjz3fPXnwbCWK8pQXwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB47FKKqDyvo8UgHrGSyCgmFYPAKMB8GA1UdIwQY MBaAFEZJUrwWVEHsbi4gEMkz3IMPNhcxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQt ODQyODU4MTIyYmJjLzEvSGpzVW9xb1BLLWp4U0Flc1pMSUtDWVZnOEFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQtODQyODU4MTIyYmJj LzEvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2RMGMA0G CSqGSIb3DQEBCwUAA4IBAQAV99M4J47UcbxiTlxWveNCTsR/mzguUmcdDiSlavBp x3xDMfo7SnLxRq8doe1eLbpU4TgzVGgf0dTuz9etVu/Dt6z3APZWrzrySP/FQ7t7 e0hcZud7TRdQMe7KkLxMSwNHzHPgHzvXM+JgB/bUnGi6r4uWtbmVNR0IKxsJiF9N 89bh2N0SNlPYgFhBVVIYB77unuHLQFaB0oE1T5CPEQVvo/XOz2BBddasMxSOOnku lBzDatsxB5T4836vLyaEfa8Trbo9ukqpQjuHFoGTqlQ7Pc0A2x53LvP5tCOkwHHr p1VjpXYdnJItwbmx8L2fRToocZxxY4kdVWrcQ5EAXZuB -----END CERTIFICATE-----Generated at Wed Jan 7 22:30:53 2026 by rpki-client