This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/HXApDbBFjZ5P8YYPxxOP43B_61E.roa File: HXApDbBFjZ5P8YYPxxOP43B_61E.roa (raw, json) Hash identifier: PABHtWG+f2nnmj23DcOFA1VpAaq32GiJAfPfR67Vqzs= Subject key identifier: 1D:70:29:0D:B0:45:8D:9E:4F:F1:86:0F:C7:13:8F:E3:70:7F:EB:51 Certificate issuer: /CN=2bd2c37284d84426f05e325b6b047ad5cf3fe4f2 Certificate serial: 019B797E194404E84AF36ABB0807AAE03A26 Authority key identifier: 2B:D2:C3:72:84:D8:44:26:F0:5E:32:5B:6B:04:7A:D5:CF:3F:E4:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/HXApDbBFjZ5P8YYPxxOP43B_61E.roa Signing time: Thu 01 Jan 2026 12:17:45 +0000 ROA not before: Thu 01 Jan 2026 12:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 138915 IP address blocks: 185.23.180.0/24 maxlen: 24 185.23.181.0/24 maxlen: 24 185.23.182.0/24 maxlen: 24 185.23.183.0/24 maxlen: 24 194.110.134.0/24 maxlen: 24 194.110.135.0/24 maxlen: 24 194.110.138.0/24 maxlen: 24 194.110.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.crl rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:19:44:04:e8:4a:f3:6a:bb:08:07:aa:e0:3a:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bd2c37284d84426f05e325b6b047ad5cf3fe4f2 Validity Not Before: Jan 1 12:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1d70290db0458d9e4ff1860fc7138fe3707feb51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:8b:3d:87:2f:60:ff:f4:a9:7a:df:35:33:49: fc:ff:bb:c8:4c:c4:9c:ff:c5:87:ce:8f:69:8d:87: 3c:d2:8f:fe:52:b5:eb:39:6e:55:2e:da:70:c3:dd: 57:31:11:a8:3f:ae:f6:45:e4:e9:fd:9d:33:60:5a: 3c:e9:4b:53:9b:18:d8:b3:99:89:61:0b:a2:cd:15: 0c:bb:72:33:6d:e4:ae:1e:42:56:47:6d:32:a7:6d: 3c:f1:db:ca:a5:1b:47:9e:17:29:2d:7f:ac:5b:a6: 2a:84:c1:14:fa:2b:70:b9:fa:42:58:a6:d9:5d:f4: d7:e9:1b:ef:76:c4:d2:29:05:88:fb:74:f4:60:43: e1:76:89:5c:38:d9:a5:8b:32:09:92:ae:17:4d:73: b3:e3:96:26:dc:c1:9d:eb:42:89:6c:be:2f:21:24: 09:83:cb:ce:91:d0:a3:a7:6e:ee:cc:d8:00:bf:33: 45:d0:91:c5:b1:da:b5:10:3e:2a:38:72:4b:5d:9b: fe:ae:b1:eb:55:1e:45:24:c8:3a:b7:dd:79:f3:cc: c1:17:fc:1f:5a:f2:f7:70:5a:31:1e:b8:9e:6e:d9: b5:c3:e5:46:c9:65:a5:88:59:82:ba:4d:e4:b9:5b: e8:2d:7a:15:bb:0b:1f:8c:10:d0:e8:c5:53:b1:00: 02:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:70:29:0D:B0:45:8D:9E:4F:F1:86:0F:C7:13:8F:E3:70:7F:EB:51 X509v3 Authority Key Identifier: keyid:2B:D2:C3:72:84:D8:44:26:F0:5E:32:5B:6B:04:7A:D5:CF:3F:E4:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/HXApDbBFjZ5P8YYPxxOP43B_61E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.23.180.0/22 194.110.134.0/23 194.110.138.0/23 Signature Algorithm: sha256WithRSAEncryption a0:76:a9:07:47:60:c6:1b:ef:28:3d:fc:fb:05:a8:ec:85:62: df:60:79:9b:23:69:1d:d7:30:0b:97:fa:63:06:82:d1:8b:8c: 1d:ca:98:6a:99:c6:0a:b6:b6:d8:b2:1b:28:ec:4d:76:33:98: 27:42:00:7c:2f:8f:63:4b:87:c6:9b:22:96:bb:c9:0a:48:04: d5:d3:01:42:86:a9:dd:2d:67:25:ea:5f:a6:fd:c6:2d:2a:12: 71:22:c1:1e:71:38:6e:20:b7:58:d8:4f:e0:2b:f3:31:73:23: bc:e4:56:52:90:69:70:40:12:b4:4e:4f:45:ce:c1:7e:57:d9: 97:c3:0e:82:59:5f:cf:4f:f6:ab:3f:f4:8f:86:5d:e5:27:68: 33:8a:4a:ce:7e:cd:74:58:41:c9:0f:bc:4d:97:da:a2:77:8f: bd:6c:d2:51:b3:6b:d0:f2:ff:b0:fc:69:35:3e:20:9c:eb:99: 65:f9:06:b7:c4:91:f8:b2:75:a0:f6:d2:ab:ba:2c:39:69:fa: 4e:76:fc:10:ff:51:84:61:74:43:a8:ac:3a:38:08:0c:6c:bc: 1f:8e:ae:bc:e9:a4:8f:7c:b2:46:9b:95:a0:29:99:aa:32:af: 70:30:b3:b1:a0:ae:e5:4e:4e:37:e6:bb:b4:d2:94:d5:aa:d9: ef:8d:ea:8e -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5fhlEBOhK82q7CAeq4DomMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiZDJjMzcyODRkODQ0MjZmMDVlMzI1YjZiMDQ3YWQ1Y2Yz ZmU0ZjIwHhcNMjYwMTAxMTIxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZDcwMjkwZGIwNDU4ZDllNGZmMTg2MGZjNzEzOGZlMzcwN2ZlYjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14s9hy9g//Spet81M0n8/7vITMSc /8WHzo9pjYc80o/+UrXrOW5VLtpww91XMRGoP672ReTp/Z0zYFo86UtTmxjYs5mJ YQuizRUMu3IzbeSuHkJWR20yp2088dvKpRtHnhcpLX+sW6YqhMEU+itwufpCWKbZ XfTX6RvvdsTSKQWI+3T0YEPhdolcONmlizIJkq4XTXOz45Ym3MGd60KJbL4vISQJ g8vOkdCjp27uzNgAvzNF0JHFsdq1ED4qOHJLXZv+rrHrVR5FJMg6t91588zBF/wf WvL3cFoxHriebtm1w+VGyWWliFmCuk3kuVvoLXoVuwsfjBDQ6MVTsQACNQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFB1wKQ2wRY2eT/GGD8cTj+Nwf+tRMB8GA1UdIwQY MBaAFCvSw3KE2EQm8F4yW2sEetXPP+TyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzlMRGNvVFlSQ2J3WGpKYmF3UjYxYzhfNVBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9jNDY0ZDYtMGNiZC00ZWZkLTk4YWMt NTNkOWQzYTQ0ZmNmLzEvSFhBcERiQkZqWjVQOFlZUHh4T1A0M0JfNjFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9jNDY0ZDYtMGNiZC00ZWZkLTk4YWMtNTNkOWQzYTQ0ZmNm LzEvSzlMRGNvVFlSQ2J3WGpKYmF3UjYxYzhfNVBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCuRe0AwQB wm6GAwQBwm6KMA0GCSqGSIb3DQEBCwUAA4IBAQCgdqkHR2DGG+8oPfz7BajshWLf YHmbI2kd1zALl/pjBoLRi4wdyphqmcYKtrbYshso7E12M5gnQgB8L49jS4fGmyKW u8kKSATV0wFChqndLWcl6l+m/cYtKhJxIsEecThuILdY2E/gK/MxcyO85FZSkGlw QBK0Tk9FzsF+V9mXww6CWV/PT/arP/SPhl3lJ2gzikrOfs10WEHJD7xNl9qid4+9 bNJRs2vQ8v+w/Gk1PiCc65ll+Qa3xJH4snWg9tKruiw5afpOdvwQ/1GEYXRDqKw6 OAgMbLwfjq686aSPfLJGm5WgKZmqMq9wMLOxoK7lTk435ru00pTVqtnvjeqO -----END CERTIFICATE-----Generated at Mon Jan 19 08:58:37 2026 by rpki-client