This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/hXwiXKPzjzALLb2-aV0H6o80chE.roa File: hXwiXKPzjzALLb2-aV0H6o80chE.roa (raw, json) Hash identifier: KsKknnspRreD+LtOldSofmy5lxz3mxIMssf2KBvH1MI= Subject key identifier: 85:7C:22:5C:A3:F3:8F:30:0B:2D:BD:BE:69:5D:07:EA:8F:34:72:11 Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d Certificate serial: 019B7F844A56694658B2C0485F561371C7E4 Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/hXwiXKPzjzALLb2-aV0H6o80chE.roa Signing time: Fri 02 Jan 2026 16:22:14 +0000 ROA not before: Fri 02 Jan 2026 16:22:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198919 IP address blocks: 45.152.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:24:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:4a:56:69:46:58:b2:c0:48:5f:56:13:71:c7:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d Validity Not Before: Jan 2 16:22:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=857c225ca3f38f300b2dbdbe695d07ea8f347211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f0:78:d1:56:f7:4e:0d:e5:7d:fb:27:5c:b3: 1e:c1:a3:6b:11:3f:8e:3a:0f:a4:68:3d:a3:7a:4b: 77:cd:e2:19:5f:e9:2e:6b:4e:b6:93:c1:05:cd:2b: 08:48:48:33:10:c5:4d:56:83:26:3e:af:48:7a:d1: 3e:53:e3:b8:2a:c9:d9:5a:a0:7b:ed:58:9a:a9:f7: 57:54:40:04:42:58:14:ad:5c:c2:a2:c0:a5:5e:8c: 61:e3:41:1b:0f:5e:3c:3a:6c:f9:a3:70:c6:cd:62: ce:58:18:f9:cb:50:cf:d7:8e:72:a7:9b:48:88:8c: ce:b0:ce:a5:fd:54:b8:b2:d1:93:d4:21:76:f1:c6: cf:f9:c8:3f:02:11:40:80:97:e8:f7:fd:93:f8:8c: 16:ba:5c:f7:4f:2b:7c:b7:07:dd:96:e2:fc:24:94: 8c:2f:4d:c5:c2:47:45:f5:10:19:70:b2:87:8f:40: a0:0a:e5:43:f0:0d:4a:b0:e9:33:d0:f7:94:d4:d9: 46:08:62:41:2b:b4:29:8c:74:6f:e4:3a:85:4a:72: 8a:40:3d:db:1e:0f:2c:40:c3:f0:e5:76:8d:d6:ab: 10:e6:4c:4e:df:cb:d9:89:b7:ee:67:62:a0:5f:b3: ae:d9:0c:d7:76:60:8b:1d:c3:0a:fa:c9:34:3d:8a: c6:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:7C:22:5C:A3:F3:8F:30:0B:2D:BD:BE:69:5D:07:EA:8F:34:72:11 X509v3 Authority Key Identifier: keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/hXwiXKPzjzALLb2-aV0H6o80chE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.152.38.0/24 Signature Algorithm: sha256WithRSAEncryption 03:34:ba:91:f8:13:00:7c:2b:d4:a2:82:60:18:b1:6c:c5:39: ea:32:52:64:29:42:4c:e7:ac:b4:c8:3e:84:9d:e7:11:cc:4a: 55:91:43:35:34:3c:df:d4:bb:84:3c:69:4f:88:48:a0:33:2a: c1:88:72:38:69:5a:3f:6a:19:df:a0:70:cb:87:d5:24:5a:f5: 74:6d:13:06:da:c6:9e:7e:6c:92:6b:6f:97:6a:a5:3a:95:b1: 3a:d5:5d:d8:28:4e:8f:17:2a:a3:ac:65:58:59:81:66:68:43: dd:f6:1e:5e:2b:98:12:98:33:ed:f5:62:04:d0:3f:6a:e9:28: ba:24:97:0a:96:63:2b:f7:fb:17:cf:29:ce:90:f0:ac:99:dd: 22:db:45:d1:3b:87:7f:86:40:6d:3b:3f:5e:8f:e4:e9:ce:2c: ba:a1:9b:da:9e:7c:0e:9c:a7:a1:c8:ea:f7:41:47:b4:02:1b: 4a:0b:89:a2:ff:e2:a9:12:9f:8e:0d:6b:1f:43:c8:8d:b3:f7: 0b:a5:90:0c:be:57:b6:93:61:d2:7a:77:12:eb:ca:bc:95:24: bd:3f:d2:88:60:17:4f:0c:4a:19:36:cd:23:e3:a9:d3:7d:ff: 07:84:85:1c:55:ee:5b:e1:60:60:d7:9b:99:b6:31:42:7c:10: 00:1c:3f:80 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hEpWaUZYssBIX1YTccfkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NTdjY2Q0M2FmZTgxNmU0OTUzMjI4YmYxNGE3NWRjMjkw MTRiOGQwHhcNMjYwMTAyMTYyMjE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTdjMjI1Y2EzZjM4ZjMwMGIyZGJkYmU2OTVkMDdlYThmMzQ3MjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPB40Vb3Tg3lffsnXLMewaNrET+O Og+kaD2jekt3zeIZX+kua062k8EFzSsISEgzEMVNVoMmPq9IetE+U+O4KsnZWqB7 7ViaqfdXVEAEQlgUrVzCosClXoxh40EbD148Omz5o3DGzWLOWBj5y1DP145yp5tI iIzOsM6l/VS4stGT1CF28cbP+cg/AhFAgJfo9/2T+IwWulz3Tyt8twfdluL8JJSM L03FwkdF9RAZcLKHj0CgCuVD8A1KsOkz0PeU1NlGCGJBK7QpjHRv5DqFSnKKQD3b Hg8sQMPw5XaN1qsQ5kxO38vZibfuZ2KgX7Ou2QzXdmCLHcMK+sk0PYrGVQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIV8Ilyj848wCy29vmldB+qPNHIRMB8GA1UdIwQY MBaAFLVXzNQ6/oFuSVMii/FKddwpAUuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUt NmJjNzU1NzhiNGMzLzEvaFh3aVhLUHpqekFMTGIyLWFWMEg2bzgwY2hFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUtNmJjNzU1NzhiNGMz LzEvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZgmMA0G CSqGSIb3DQEBCwUAA4IBAQADNLqR+BMAfCvUooJgGLFsxTnqMlJkKUJM56y0yD6E necRzEpVkUM1NDzf1LuEPGlPiEigMyrBiHI4aVo/ahnfoHDLh9UkWvV0bRMG2sae fmySa2+XaqU6lbE61V3YKE6PFyqjrGVYWYFmaEPd9h5eK5gSmDPt9WIE0D9q6Si6 JJcKlmMr9/sXzynOkPCsmd0i20XRO4d/hkBtOz9ej+Tpziy6oZvannwOnKehyOr3 QUe0AhtKC4mi/+KpEp+ODWsfQ8iNs/cLpZAMvle2k2HSencS68q8lSS9P9KIYBdP DEoZNs0j46nTff8HhIUcVe5b4WBg15uZtjFCfBAAHD+A -----END CERTIFICATE-----Generated at Wed Jan 21 16:59:19 2026 by rpki-client