This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/hLXYn7_sE8_0uE-9APcSyfa3cKM.roa File: hLXYn7_sE8_0uE-9APcSyfa3cKM.roa (raw, json) Hash identifier: OnfUzd7ri0bA88lhkI8jx6ukwUTJ7Iy7tmQtDjoFSz0= Subject key identifier: 84:B5:D8:9F:BF:EC:13:CF:F4:B8:4F:BD:00:F7:12:C9:F6:B7:70:A3 Certificate issuer: /CN=48595d4a54ed644213c446195e36f78ec1a28399 Certificate serial: 019B7BA4AF998D92C95BADCDD279216BD78B Authority key identifier: 48:59:5D:4A:54:ED:64:42:13:C4:46:19:5E:36:F7:8E:C1:A2:83:99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFldSlTtZEITxEYZXjb3jsGig5k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/hLXYn7_sE8_0uE-9APcSyfa3cKM.roa Signing time: Thu 01 Jan 2026 22:19:09 +0000 ROA not before: Thu 01 Jan 2026 22:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204189 IP address blocks: 45.83.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.mft rsync://rpki.ripe.net/repository/DEFAULT/SFldSlTtZEITxEYZXjb3jsGig5k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:af:99:8d:92:c9:5b:ad:cd:d2:79:21:6b:d7:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48595d4a54ed644213c446195e36f78ec1a28399 Validity Not Before: Jan 1 22:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=84b5d89fbfec13cff4b84fbd00f712c9f6b770a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:0d:9f:c3:03:26:18:80:d2:88:ed:f1:62:8a: d5:c6:d6:1d:24:2d:2d:b3:a0:68:90:89:40:d1:a3: c1:52:ba:7f:1f:b8:3a:d2:3c:56:a4:b1:b0:89:1e: ca:80:8b:3a:12:6c:4d:cc:d5:eb:e3:21:73:bb:7c: c3:3a:f5:ec:5e:bb:15:10:bf:fe:10:7e:54:94:bb: 7d:a3:a9:3b:7f:09:5f:3a:7c:40:c2:fe:c9:94:e2: ac:75:b7:af:e3:40:6a:83:4a:06:9e:e5:06:9d:fb: 18:50:4e:03:52:f5:47:67:53:f6:c8:a8:e5:cb:b9: c8:85:6e:a6:6f:b0:a4:5d:73:ed:82:89:96:10:9c: 56:61:75:b2:ad:a4:25:db:3c:c2:d9:ce:27:08:01: 39:68:ef:5a:80:c5:86:12:c2:70:98:54:44:23:6d: 02:e6:a6:bd:31:df:bd:72:4f:4f:54:99:c8:d3:60: e3:64:94:cc:36:eb:3c:aa:a8:5b:86:c8:bf:5a:c8: b6:39:0d:1d:88:4e:15:b8:b4:20:20:7b:fe:5f:81: 04:63:e2:86:23:7c:dc:19:73:8e:d5:e2:22:88:9e: 7a:1b:f5:d5:b7:f1:ec:07:66:f5:cf:8a:fa:ef:80: bf:dd:f4:06:f7:e2:45:25:4a:cc:20:a4:15:20:69: 91:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:B5:D8:9F:BF:EC:13:CF:F4:B8:4F:BD:00:F7:12:C9:F6:B7:70:A3 X509v3 Authority Key Identifier: keyid:48:59:5D:4A:54:ED:64:42:13:C4:46:19:5E:36:F7:8E:C1:A2:83:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFldSlTtZEITxEYZXjb3jsGig5k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/hLXYn7_sE8_0uE-9APcSyfa3cKM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.83.100.0/22 Signature Algorithm: sha256WithRSAEncryption 0d:8e:00:36:71:82:4f:77:a8:bf:3e:b7:87:73:8f:b0:15:cf: e1:6f:d1:c7:47:c3:17:80:be:cb:69:ee:8f:a1:7e:79:fd:c2: 45:21:8a:c3:2c:a0:18:6c:91:f8:14:0e:da:94:e9:66:83:12: 99:df:bc:77:59:4e:01:90:d8:e0:1b:57:5a:7b:6e:7b:26:16: 2b:ee:bb:f5:03:cb:cc:d7:a9:1b:56:9b:b4:6b:d6:6b:6d:b6: 9a:ff:05:9e:fe:8f:3b:6b:6c:ea:8f:d5:ff:b4:16:16:f9:e3: 04:c5:82:14:c0:c0:10:1e:b7:3f:55:86:1c:56:12:46:79:0c: 84:ac:f5:3e:88:51:1e:b8:c1:46:f0:dc:7b:8b:c9:72:d9:59: be:e1:8a:a8:f4:ce:70:64:af:9b:b3:68:14:44:eb:60:1e:a9: 97:51:25:59:7c:49:bb:37:29:82:cf:c0:41:d2:4d:66:c7:24: 05:ff:b1:29:2c:1c:40:24:10:b2:0b:3e:25:ab:eb:72:db:d1: f0:db:24:88:95:ed:32:64:08:fd:85:9c:2c:18:c9:72:a4:d9: d1:ae:4b:e3:69:7a:88:c7:b1:88:be:e2:51:fa:a6:dd:eb:e5: 15:57:1a:84:b0:ca:13:e9:6a:e0:91:3f:e2:cf:32:7f:de:a7: 9d:97:4c:a1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pK+ZjZLJW63N0nkha9eLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4NTk1ZDRhNTRlZDY0NDIxM2M0NDYxOTVlMzZmNzhlYzFh MjgzOTkwHhcNMjYwMTAxMjIxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NGI1ZDg5ZmJmZWMxM2NmZjRiODRmYmQwMGY3MTJjOWY2Yjc3MGEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Q2fwwMmGIDSiO3xYorVxtYdJC0t s6BokIlA0aPBUrp/H7g60jxWpLGwiR7KgIs6EmxNzNXr4yFzu3zDOvXsXrsVEL/+ EH5UlLt9o6k7fwlfOnxAwv7JlOKsdbev40Bqg0oGnuUGnfsYUE4DUvVHZ1P2yKjl y7nIhW6mb7CkXXPtgomWEJxWYXWyraQl2zzC2c4nCAE5aO9agMWGEsJwmFREI20C 5qa9Md+9ck9PVJnI02DjZJTMNus8qqhbhsi/Wsi2OQ0diE4VuLQgIHv+X4EEY+KG I3zcGXOO1eIiiJ56G/XVt/HsB2b1z4r674C/3fQG9+JFJUrMIKQVIGmROwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIS12J+/7BPP9LhPvQD3Esn2t3CjMB8GA1UdIwQY MBaAFEhZXUpU7WRCE8RGGV42947BooOZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0ZsZFNsVHRaRUlUeEVZWlhqYjNqc0dpZzVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS82ZTZmNTEtNGUxMy00NjVlLWI0ZDYt MmU4ZGNkZDUxNjUxLzEvaExYWW43X3NFOF8wdUUtOUFQY1N5ZmEzY0tNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS82ZTZmNTEtNGUxMy00NjVlLWI0ZDYtMmU4ZGNkZDUxNjUx LzEvU0ZsZFNsVHRaRUlUeEVZWlhqYjNqc0dpZzVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVNkMA0G CSqGSIb3DQEBCwUAA4IBAQANjgA2cYJPd6i/PreHc4+wFc/hb9HHR8MXgL7Lae6P oX55/cJFIYrDLKAYbJH4FA7alOlmgxKZ37x3WU4BkNjgG1dae257JhYr7rv1A8vM 16kbVpu0a9Zrbbaa/wWe/o87a2zqj9X/tBYW+eMExYIUwMAQHrc/VYYcVhJGeQyE rPU+iFEeuMFG8Nx7i8ly2Vm+4Yqo9M5wZK+bs2gUROtgHqmXUSVZfEm7NymCz8BB 0k1mxyQF/7EpLBxAJBCyCz4lq+ty29Hw2ySIle0yZAj9hZwsGMlypNnRrkvjaXqI x7GIvuJR+qbd6+UVVxqEsMoT6WrgkT/izzJ/3qedl0yh -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:21 2026 by rpki-client