This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/hxyVMvIP_SVcBThDF1ToAOfYVKI.roa File: hxyVMvIP_SVcBThDF1ToAOfYVKI.roa (raw, json) Hash identifier: 2tvRfORdoA5iduQPZSwIAmQn4zHIFUUAid+3PnQEwek= Subject key identifier: 87:1C:95:32:F2:0F:FD:25:5C:05:38:43:17:54:E8:00:E7:D8:54:A2 Certificate issuer: /CN=93f01e9086d40d508f5842e982f253689f7fe4c9 Certificate serial: 019B79ED229990F01D47B2D8FB205CF6E352 Authority key identifier: 93:F0:1E:90:86:D4:0D:50:8F:58:42:E9:82:F2:53:68:9F:7F:E4:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_AekIbUDVCPWELpgvJTaJ9_5Mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/hxyVMvIP_SVcBThDF1ToAOfYVKI.roa Signing time: Thu 01 Jan 2026 14:19:02 +0000 ROA not before: Thu 01 Jan 2026 14:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56640 IP address blocks: 195.22.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/k_AekIbUDVCPWELpgvJTaJ9_5Mk.crl rsync://rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/k_AekIbUDVCPWELpgvJTaJ9_5Mk.mft rsync://rpki.ripe.net/repository/DEFAULT/k_AekIbUDVCPWELpgvJTaJ9_5Mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:22:99:90:f0:1d:47:b2:d8:fb:20:5c:f6:e3:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93f01e9086d40d508f5842e982f253689f7fe4c9 Validity Not Before: Jan 1 14:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=871c9532f20ffd255c0538431754e800e7d854a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:26:16:54:3b:9f:b4:2d:36:fc:16:30:90:af: 70:dd:48:ca:95:38:0a:7d:80:6c:5c:2f:91:63:27: c9:2c:7e:ff:0f:21:53:aa:95:a3:ef:09:74:3c:7d: 34:c4:76:e7:1a:a6:33:15:3b:e3:57:16:ae:ee:7b: 63:1e:ca:03:d2:22:d0:cc:ad:48:cb:8a:2e:39:9c: 1a:db:88:89:1d:47:24:4b:92:19:65:a7:e2:8d:ca: 82:b9:d8:5f:3d:a3:dd:91:5e:4d:1d:b5:b0:d2:52: f0:5b:2b:01:13:72:df:18:b4:a0:64:50:37:1d:ca: 90:21:5e:e1:d9:d7:c4:64:26:5b:09:66:63:15:ad: 9c:be:ce:f1:b8:02:48:ff:6c:d3:78:cd:b4:80:de: e7:36:fe:72:1b:9d:09:ba:9c:d8:a5:fb:ff:3e:ab: 5b:f8:e1:78:97:f4:16:4c:fb:3f:75:77:32:03:9e: 3d:e2:5d:e1:24:4c:8e:26:e0:1f:ba:0c:02:24:4a: 98:63:a9:3f:70:f3:65:01:e2:5b:98:0e:56:e0:d6: 15:42:96:15:52:b3:9e:6c:15:8d:de:8a:42:a5:9e: 2f:1d:db:21:66:b2:f1:51:d1:ec:e9:88:3b:7f:a0: 6b:3f:ac:6c:73:ba:09:37:58:fe:39:09:49:cc:b8: ac:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:1C:95:32:F2:0F:FD:25:5C:05:38:43:17:54:E8:00:E7:D8:54:A2 X509v3 Authority Key Identifier: keyid:93:F0:1E:90:86:D4:0D:50:8F:58:42:E9:82:F2:53:68:9F:7F:E4:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_AekIbUDVCPWELpgvJTaJ9_5Mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/hxyVMvIP_SVcBThDF1ToAOfYVKI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/k_AekIbUDVCPWELpgvJTaJ9_5Mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.22.121.0/24 Signature Algorithm: sha256WithRSAEncryption bc:8d:c9:6c:82:33:1a:02:9b:4b:d4:49:c2:b9:16:19:f8:03: dc:b1:c0:27:a9:1d:8b:a8:5a:09:24:2a:7c:fa:ce:e7:49:bc: bd:9d:06:50:ec:a1:74:36:e6:bd:54:a8:34:9b:cb:50:c7:de: 86:cf:3a:86:52:0d:c0:94:92:c2:a0:d2:7d:56:21:80:09:48: 07:f0:1a:7c:8a:11:86:4e:f3:6d:06:a1:33:d7:5e:78:ee:59: 7f:ad:18:e2:1c:b2:03:62:60:0f:89:57:a3:9b:28:fd:c3:7e: 3c:d2:1d:7c:aa:af:e3:49:1b:a3:d2:68:b9:49:2f:2f:6a:15: 81:e2:47:a8:70:75:78:71:ce:6b:62:84:c1:42:80:bd:99:a4: ee:91:0b:f6:41:15:62:2f:f1:06:42:f2:db:82:c5:ec:aa:f9: 30:f3:d6:5d:ea:3a:f6:18:7c:9a:e8:49:6f:2d:0e:e7:04:40: f7:4f:a3:bc:ef:c1:9c:32:49:9b:57:0d:63:dd:fd:18:53:d4: 44:be:ed:0c:16:c0:5c:6d:54:99:94:c9:b9:1b:5f:4a:95:81: dd:90:7d:d9:5e:a8:a4:c8:02:8f:56:d4:2d:cc:a6:35:09:c5: 6b:e2:bd:07:4a:63:87:76:8c:c3:2b:5c:62:b3:26:6b:1c:87: 2f:64:37:a8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57SKZkPAdR7LY+yBc9uNSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzZjAxZTkwODZkNDBkNTA4ZjU4NDJlOTgyZjI1MzY4OWY3 ZmU0YzkwHhcNMjYwMTAxMTQxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NzFjOTUzMmYyMGZmZDI1NWMwNTM4NDMxNzU0ZTgwMGU3ZDg1NGEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCYWVDuftC02/BYwkK9w3UjKlTgK fYBsXC+RYyfJLH7/DyFTqpWj7wl0PH00xHbnGqYzFTvjVxau7ntjHsoD0iLQzK1I y4ouOZwa24iJHUckS5IZZafijcqCudhfPaPdkV5NHbWw0lLwWysBE3LfGLSgZFA3 HcqQIV7h2dfEZCZbCWZjFa2cvs7xuAJI/2zTeM20gN7nNv5yG50JupzYpfv/Pqtb +OF4l/QWTPs/dXcyA5494l3hJEyOJuAfugwCJEqYY6k/cPNlAeJbmA5W4NYVQpYV UrOebBWN3opCpZ4vHdshZrLxUdHs6Yg7f6BrP6xsc7oJN1j+OQlJzListwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIcclTLyD/0lXAU4QxdU6ADn2FSiMB8GA1UdIwQY MBaAFJPwHpCG1A1Qj1hC6YLyU2iff+TJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva19BZWtJYlVEVkNQV0VMcGd2SlRhSjlfNU1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC82MjVhOTItYzJkMS00ZWE4LTljZTgt ZTljOTJiNzFmNTBjLzEvaHh5Vk12SVBfU1ZjQlRoREYxVG9BT2ZZVktJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC82MjVhOTItYzJkMS00ZWE4LTljZTgtZTljOTJiNzFmNTBj LzEva19BZWtJYlVEVkNQV0VMcGd2SlRhSjlfNU1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwxZ5MA0G CSqGSIb3DQEBCwUAA4IBAQC8jclsgjMaAptL1EnCuRYZ+APcscAnqR2LqFoJJCp8 +s7nSby9nQZQ7KF0Nua9VKg0m8tQx96GzzqGUg3AlJLCoNJ9ViGACUgH8Bp8ihGG TvNtBqEz11547ll/rRjiHLIDYmAPiVejmyj9w3480h18qq/jSRuj0mi5SS8vahWB 4keocHV4cc5rYoTBQoC9maTukQv2QRViL/EGQvLbgsXsqvkw89Zd6jr2GHya6Elv LQ7nBED3T6O878GcMkmbVw1j3f0YU9REvu0MFsBcbVSZlMm5G19KlYHdkH3ZXqik yAKPVtQtzKY1CcVr4r0HSmOHdozDK1xisyZrHIcvZDeo -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:45 2026 by rpki-client