This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hx0R3y72-RDvmtfUGBbSq48CkiY.roa File: hx0R3y72-RDvmtfUGBbSq48CkiY.roa (raw, json) Hash identifier: xdo/1BtIz6wSNGBj6uL19ie+8BLOhooIY/hZW1sLrxI= Subject key identifier: 87:1D:11:DF:2E:F6:F9:10:EF:9A:D7:D4:18:16:D2:AB:8F:02:92:26 Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d Certificate serial: 019B7C12F540BE438AC95AB104E34C63B00F Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hx0R3y72-RDvmtfUGBbSq48CkiY.roa Signing time: Fri 02 Jan 2026 00:19:35 +0000 ROA not before: Fri 02 Jan 2026 00:19:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41503 IP address blocks: 194.209.23.0/24 maxlen: 24 212.243.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:f5:40:be:43:8a:c9:5a:b1:04:e3:4c:63:b0:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d Validity Not Before: Jan 2 00:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=871d11df2ef6f910ef9ad7d41816d2ab8f029226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:2d:c4:65:ff:88:42:6e:ac:7b:fe:e1:51:a3: 27:1c:da:4f:c5:f5:43:84:32:97:4b:f4:de:ed:83: 76:7c:c6:42:bb:47:83:b5:50:4c:a6:e9:90:11:6a: 03:e9:3f:49:af:9f:38:0d:e9:ed:0a:e3:73:ad:b6: 3a:a7:51:51:7d:4c:fa:a8:1c:c7:d5:6f:e0:b6:59: 5f:9e:d7:98:d4:a3:07:e0:75:cc:41:5c:1d:c0:4d: e6:19:b3:34:d4:d9:b9:9b:86:0d:89:c6:e7:56:54: a0:48:91:8f:a1:a1:39:7c:7f:32:45:ef:82:d3:c5: 9c:71:fa:13:c9:9d:86:f3:f2:48:f3:9d:69:87:95: df:2c:28:de:4b:78:44:dd:f5:0d:bd:3f:c3:82:5b: 5f:6a:bc:87:63:f4:70:76:0b:4c:2c:94:bd:d7:ac: f2:0d:c5:74:41:0e:41:11:e9:2d:85:0f:19:70:e1: 10:ab:de:bc:f8:8c:ef:71:f7:42:a6:75:2d:23:c1: bf:f1:d7:ae:31:f2:0c:2c:43:63:2d:1b:8a:57:52: e6:9f:da:e6:27:a7:14:c3:d1:b4:13:16:ef:ce:16: 57:15:b1:fb:0b:37:53:94:d0:1d:be:f8:65:d4:94: b1:b1:f6:07:0d:0c:35:fe:4e:6f:ce:10:4f:4e:36: 81:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:1D:11:DF:2E:F6:F9:10:EF:9A:D7:D4:18:16:D2:AB:8F:02:92:26 X509v3 Authority Key Identifier: keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hx0R3y72-RDvmtfUGBbSq48CkiY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.209.23.0/24 212.243.33.0/24 Signature Algorithm: sha256WithRSAEncryption 04:2a:0f:78:b0:13:7c:35:62:c5:f2:4e:f8:ac:97:0a:f0:b2: f4:4a:6f:a4:ae:a7:b3:28:76:47:a1:1a:9a:2e:54:54:f3:84: 5f:ed:cc:1b:10:5c:c2:c1:0b:b8:e3:ed:6e:a2:f7:05:69:b9: b7:a3:8b:5f:2b:7f:58:fa:21:fc:5a:08:5a:0f:79:38:0e:1d: 51:a7:64:15:ca:9e:a7:5e:4e:10:d4:e6:a2:20:3e:19:9c:d3: ea:46:97:12:72:23:3f:d5:e5:c8:67:cb:e5:85:d5:e1:97:9c: b1:b8:00:ab:19:40:54:e0:51:36:ab:b3:01:08:39:83:5a:da: 13:80:6f:d7:bb:0f:2b:6a:71:6d:e5:63:62:f6:6f:e5:3a:69: 7b:2b:78:f1:b5:50:1d:5c:79:d3:d6:0f:47:c1:cc:d3:c2:79: 51:75:0a:14:9b:18:cf:c2:4d:6f:81:ff:f2:ff:6a:42:f6:40: ad:68:3c:62:e7:a4:a2:41:62:c6:56:11:e6:1c:3c:e4:a5:d2: ca:f7:7f:58:b6:61:c9:d4:73:f2:e5:9d:46:b8:88:bf:b7:64: 3c:ab:2d:0c:fa:79:b3:6b:c0:56:8c:2d:44:ef:be:8c:bf:b0: ba:6c:4f:e2:61:d1:f1:90:7c:42:a2:9c:b6:d1:96:f4:15:9a: 74:93:c6:a4 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8EvVAvkOKyVqxBONMY7APMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NjNmM2RiMTUyZTA1NWFjMTQ1YmRiYjQyOWUwMTg2NTQy MDRjOGQwHhcNMjYwMTAyMDAxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NzFkMTFkZjJlZjZmOTEwZWY5YWQ3ZDQxODE2ZDJhYjhmMDI5MjI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1S3EZf+IQm6se/7hUaMnHNpPxfVD hDKXS/Te7YN2fMZCu0eDtVBMpumQEWoD6T9Jr584DentCuNzrbY6p1FRfUz6qBzH 1W/gtllfnteY1KMH4HXMQVwdwE3mGbM01Nm5m4YNicbnVlSgSJGPoaE5fH8yRe+C 08WccfoTyZ2G8/JI851ph5XfLCjeS3hE3fUNvT/DgltfaryHY/RwdgtMLJS916zy DcV0QQ5BEekthQ8ZcOEQq968+IzvcfdCpnUtI8G/8deuMfIMLENjLRuKV1Lmn9rm J6cUw9G0ExbvzhZXFbH7CzdTlNAdvvhl1JSxsfYHDQw1/k5vzhBPTjaBywIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIcdEd8u9vkQ75rX1BgW0quPApImMB8GA1UdIwQY MBaAFCZj89sVLgVawUW9u0KeAYZUIEyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt YmQxOTI2NzZjOWJiLzEvaHgwUjN5NzItUkR2bXRmVUdCYlNxNDhDa2lZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi LzEvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwtEXAwQA 1PMhMA0GCSqGSIb3DQEBCwUAA4IBAQAEKg94sBN8NWLF8k74rJcK8LL0Sm+krqez KHZHoRqaLlRU84Rf7cwbEFzCwQu44+1uovcFabm3o4tfK39Y+iH8WghaD3k4Dh1R p2QVyp6nXk4Q1OaiID4ZnNPqRpcSciM/1eXIZ8vlhdXhl5yxuACrGUBU4FE2q7MB CDmDWtoTgG/Xuw8ranFt5WNi9m/lOml7K3jxtVAdXHnT1g9HwczTwnlRdQoUmxjP wk1vgf/y/2pC9kCtaDxi56SiQWLGVhHmHDzkpdLK939YtmHJ1HPy5Z1GuIi/t2Q8 qy0M+nmza8BWjC1E776Mv7C6bE/iYdHxkHxCopy20Zb0FZp0k8ak -----END CERTIFICATE-----Generated at Mon Jan 26 17:46:27 2026 by rpki-client