This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/1HXGb5-BWji6FxKqR9J69GxxjeY.roa File: 1HXGb5-BWji6FxKqR9J69GxxjeY.roa (raw, json) Hash identifier: +4VLoXs2I/t3CPnVmm9jbZnZFGbEot/glqmRqD+Blr8= Subject key identifier: D4:75:C6:6F:9F:81:5A:38:BA:17:12:AA:47:D2:7A:F4:6C:71:8D:E6 Certificate issuer: /CN=459b2fd0053bdd7e7775398db163bee8772478a5 Certificate serial: 019B78353E8977556295A43DF9D553724FF1 Authority key identifier: 45:9B:2F:D0:05:3B:DD:7E:77:75:39:8D:B1:63:BE:E8:77:24:78:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/1HXGb5-BWji6FxKqR9J69GxxjeY.roa Signing time: Thu 01 Jan 2026 06:18:33 +0000 ROA not before: Thu 01 Jan 2026 06:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19624 IP address blocks: 31.14.40.0/23 maxlen: 23 89.39.149.0/24 maxlen: 24 185.105.4.0/23 maxlen: 23 185.105.6.0/24 maxlen: 24 2a01:4ce0:61::/48 maxlen: 48 2a01:4ce0:161::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.crl rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:3e:89:77:55:62:95:a4:3d:f9:d5:53:72:4f:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=459b2fd0053bdd7e7775398db163bee8772478a5 Validity Not Before: Jan 1 06:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d475c66f9f815a38ba1712aa47d27af46c718de6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:2d:93:74:f9:5d:55:db:c6:a0:c9:87:53:d7: 56:33:c2:16:62:55:e0:cb:c8:12:06:f9:2c:4b:33: 46:b5:e8:5f:e2:59:6e:a9:d9:34:86:bc:10:a4:0e: c3:b3:f1:17:ae:2f:c2:2e:b3:ef:12:32:43:1b:02: 77:ae:ec:6a:1a:a4:4d:04:eb:df:bd:a4:62:3d:42: 35:e0:25:3d:c3:38:d8:72:4a:03:2a:06:44:c7:f4: 73:c2:b4:c6:76:87:66:4c:00:7a:0e:03:3b:74:e8: dc:39:62:64:c6:c9:9e:20:52:74:3c:6d:d7:a0:84: e0:99:82:61:bc:03:79:ff:db:30:ed:a2:9c:96:d4: 71:f9:82:10:ec:b2:b2:a7:e3:06:bc:1f:52:89:47: 05:78:d5:6e:f0:c7:82:2a:ec:46:e8:ff:00:9c:7c: 8d:e6:9f:70:b6:85:19:18:88:58:89:b3:d9:92:10: f0:26:4d:65:fa:f0:41:db:2a:a5:03:0f:df:ed:a7: 63:50:06:a5:ec:00:05:bf:3f:9c:a9:19:09:70:1e: 0b:48:ca:c3:5b:70:60:8f:1d:89:10:ae:19:8b:55: d1:6f:2d:af:c1:80:aa:20:81:7c:09:7c:61:61:8e: 5d:c7:41:93:3b:b1:fd:d3:89:97:f3:4a:82:73:4b: 8b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:75:C6:6F:9F:81:5A:38:BA:17:12:AA:47:D2:7A:F4:6C:71:8D:E6 X509v3 Authority Key Identifier: keyid:45:9B:2F:D0:05:3B:DD:7E:77:75:39:8D:B1:63:BE:E8:77:24:78:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/1HXGb5-BWji6FxKqR9J69GxxjeY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.14.40.0/23 89.39.149.0/24 185.105.4.0-185.105.6.255 IPv6: 2a01:4ce0:61::/48 2a01:4ce0:161::/48 Signature Algorithm: sha256WithRSAEncryption 94:f6:51:9f:9a:34:4e:d8:2d:d2:3a:83:fd:5f:71:10:f6:d3: d9:68:83:00:5d:6c:c9:ab:6b:92:2f:fb:e2:88:80:5a:93:db: dc:bc:89:37:c2:47:ab:c9:e9:f5:b3:74:2e:ba:28:8f:63:3c: ff:70:ef:ad:3c:4b:26:cb:8b:0a:06:6a:78:03:7c:b4:27:04: 5a:be:5b:c3:31:2f:54:03:99:5b:aa:89:f7:5b:eb:e1:96:9e: 22:e8:c0:f4:5e:dc:e7:ad:16:35:d0:ef:2e:3f:11:af:b2:32: f2:9b:ac:a2:bb:a2:45:14:6e:f0:18:4e:cf:17:60:3d:21:36: 87:22:14:52:2c:45:00:4c:b1:81:37:9b:a5:52:c4:d4:8b:1b: 1d:d0:b6:9b:4c:42:bc:ab:e2:67:9b:de:65:fc:17:0e:f7:74: 38:bf:8f:3b:73:a1:5c:88:58:88:b2:64:31:2e:21:c5:95:92: 8b:71:ec:e9:28:c5:b2:35:7f:16:c3:90:68:ef:78:d2:47:15: 04:6c:d8:ed:4c:e4:98:a8:dc:73:2c:fb:0d:d9:40:f0:3b:ef: c5:71:20:f7:c4:10:3a:20:1a:4e:d9:25:1b:cd:0c:ba:a0:5e: 57:87:f4:15:14:12:ce:0a:84:1d:f8:0d:c2:90:ba:ee:1b:e4: d3:d6:66:d8 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgISAZt4NT6Jd1VilaQ9+dVTck/xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1OWIyZmQwMDUzYmRkN2U3Nzc1Mzk4ZGIxNjNiZWU4Nzcy NDc4YTUwHhcNMjYwMTAxMDYxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDc1YzY2ZjlmODE1YTM4YmExNzEyYWE0N2QyN2FmNDZjNzE4ZGU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5S2TdPldVdvGoMmHU9dWM8IWYlXg y8gSBvksSzNGtehf4lluqdk0hrwQpA7Ds/EXri/CLrPvEjJDGwJ3ruxqGqRNBOvf vaRiPUI14CU9wzjYckoDKgZEx/RzwrTGdodmTAB6DgM7dOjcOWJkxsmeIFJ0PG3X oITgmYJhvAN5/9sw7aKcltRx+YIQ7LKyp+MGvB9SiUcFeNVu8MeCKuxG6P8AnHyN 5p9wtoUZGIhYibPZkhDwJk1l+vBB2yqlAw/f7adjUAal7AAFvz+cqRkJcB4LSMrD W3Bgjx2JEK4Zi1XRby2vwYCqIIF8CXxhYY5dx0GTO7H904mX80qCc0uLkwIDAQAB o4ICNzCCAjMwHQYDVR0OBBYEFNR1xm+fgVo4uhcSqkfSevRscY3mMB8GA1UdIwQY MBaAFEWbL9AFO91+d3U5jbFjvuh3JHilMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlpzdjBBVTczWDUzZFRtTnNXTy02SGNrZUtVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8yZGRkNTgtNjAzNy00OTRiLTk5MmYt YWI4ZTk3ZDg1NWNjLzEvMUhYR2I1LUJXamk2RnhLcVI5SjY5R3h4amVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy8yZGRkNTgtNjAzNy00OTRiLTk5MmYtYWI4ZTk3ZDg1NWNj LzEvUlpzdjBBVTczWDUzZFRtTnNXTy02SGNrZUtVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDAgBAIAATAaAwQBHw4oAwQA WSeVMAwDBAK5aQQDBAC5aQYwGAQCAAIwEgMHACoBTOAAYQMHACoBTOABYTANBgkq hkiG9w0BAQsFAAOCAQEAlPZRn5o0Ttgt0jqD/V9xEPbT2WiDAF1syatrki/74oiA WpPb3LyJN8JHq8np9bN0Lrooj2M8/3DvrTxLJsuLCgZqeAN8tCcEWr5bwzEvVAOZ W6qJ91vr4ZaeIujA9F7c560WNdDvLj8Rr7Iy8pusoruiRRRu8BhOzxdgPSE2hyIU UixFAEyxgTebpVLE1IsbHdC2m0xCvKviZ5veZfwXDvd0OL+PO3OhXIhYiLJkMS4h xZWSi3Hs6SjFsjV/FsOQaO940kcVBGzY7UzkmKjccyz7DdlA8DvvxXEg98QQOiAa TtklG80MuqBeV4f0FRQSzgqEHfgNwpC67hvk09Zm2A== -----END CERTIFICATE-----Generated at Mon Jan 12 04:00:32 2026 by rpki-client