This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/hxaq6eiJQ6KIeDkuFuKpk9DlMmM.roa File: hxaq6eiJQ6KIeDkuFuKpk9DlMmM.roa (raw, json) Hash identifier: xzNRvq9UxlokWK6wW9763CTDxuLBGl6gUz0jxPwvuI8= Subject key identifier: 87:16:AA:E9:E8:89:43:A2:88:78:39:2E:16:E2:A9:93:D0:E5:32:63 Certificate issuer: /CN=fc152b48b961649b37c1e89f81106153dc7b1435 Certificate serial: 019B79ED2D8225BF9B1B7B5DEA48B441793A Authority key identifier: FC:15:2B:48:B9:61:64:9B:37:C1:E8:9F:81:10:61:53:DC:7B:14:35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/hxaq6eiJQ6KIeDkuFuKpk9DlMmM.roa Signing time: Thu 01 Jan 2026 14:19:05 +0000 ROA not before: Thu 01 Jan 2026 14:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205619 IP address blocks: 185.211.192.0/22 maxlen: 24 2a0b:69c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.crl rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:2d:82:25:bf:9b:1b:7b:5d:ea:48:b4:41:79:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc152b48b961649b37c1e89f81106153dc7b1435 Validity Not Before: Jan 1 14:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8716aae9e88943a28878392e16e2a993d0e53263 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:bf:3c:ee:12:05:17:b3:06:43:4d:c1:d4:38: 90:37:14:1a:8f:f5:02:8e:a8:47:d6:e0:0c:a7:b3: fb:af:d0:f6:2b:ad:3a:cb:58:59:78:be:52:b2:b7: c9:74:ab:04:3e:88:f2:11:75:06:02:8c:fd:7a:34: 54:f2:b0:98:a5:24:7c:4c:4a:5e:fa:45:ac:1c:09: c5:9e:b5:aa:0b:a1:5e:b0:7b:0a:a1:eb:fb:8d:2d: a2:0d:82:8d:21:7c:e3:b9:4d:b6:b1:c9:18:e9:01: 84:df:85:c3:b1:c4:63:40:53:b3:8e:2d:48:4c:db: 18:c7:fb:84:a4:25:85:af:e8:3e:47:93:9b:c7:70: 17:b5:7d:01:51:2f:c3:61:f8:65:c4:5c:85:95:42: ea:e8:f3:18:53:77:1f:a9:00:8d:0e:fe:90:e9:04: 7d:27:64:5a:0a:8c:16:aa:45:a1:34:8a:27:8d:4a: 81:ff:0a:b7:49:0f:ee:4d:8d:5b:f7:a3:bc:5e:50: 16:a0:58:34:a2:c3:b8:d4:c4:9f:64:d9:b8:67:50: 3d:c9:17:c6:05:f6:c3:27:d4:e0:cd:d6:46:ca:a2: 57:ae:bf:40:63:6a:61:ff:9e:e4:84:d4:fd:32:30: 8a:f0:63:97:b1:55:e6:b3:f1:e2:d6:ac:66:df:da: 7e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:16:AA:E9:E8:89:43:A2:88:78:39:2E:16:E2:A9:93:D0:E5:32:63 X509v3 Authority Key Identifier: keyid:FC:15:2B:48:B9:61:64:9B:37:C1:E8:9F:81:10:61:53:DC:7B:14:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/hxaq6eiJQ6KIeDkuFuKpk9DlMmM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.211.192.0/22 IPv6: 2a0b:69c0::/29 Signature Algorithm: sha256WithRSAEncryption 68:ac:38:e7:f2:41:fe:e9:ab:95:0d:75:2b:1d:9d:98:5b:d6: 16:b1:7e:f8:a0:85:bb:e0:23:fe:14:e3:19:64:88:49:96:5d: eb:1b:12:37:44:fd:59:28:05:eb:5c:91:77:42:e4:d4:2e:10: a3:36:55:12:cc:24:f4:25:89:ec:6e:a7:0f:79:2f:0a:95:3f: bc:83:cf:4b:30:8c:d1:d9:a7:21:3d:a1:59:55:39:a2:fe:49: 73:66:99:b7:fd:a6:49:4c:9d:cc:7d:68:1c:d9:95:91:37:0d: ba:05:72:fd:65:7e:cc:a4:f6:2c:ee:e9:2f:57:3f:d9:23:e4: 84:6b:6b:87:26:4e:e7:f3:e9:58:b0:0d:a9:c0:cc:8e:a7:6f: b7:59:a2:37:87:6a:be:74:d7:90:4a:d8:ab:99:2f:b4:f4:6e: bc:6a:5b:6f:f8:72:4a:06:00:44:ad:68:5d:78:68:d5:32:68: fa:a7:78:1d:de:95:9e:f2:18:d8:80:e5:fd:67:3a:af:9f:90: 22:f0:b2:9e:9d:2c:1d:25:85:b2:ad:c6:43:b7:f4:44:0d:86: 06:3b:b0:0e:c5:e4:bd:68:2e:33:69:59:ba:42:81:a1:6f:c7: 2e:43:86:75:31:b4:af:fc:fc:35:34:b4:28:72:fc:88:f4:fc: c0:fa:ff:19 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt57S2CJb+bG3td6ki0QXk6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjMTUyYjQ4Yjk2MTY0OWIzN2MxZTg5ZjgxMTA2MTUzZGM3 YjE0MzUwHhcNMjYwMTAxMTQxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NzE2YWFlOWU4ODk0M2EyODg3ODM5MmUxNmUyYTk5M2QwZTUzMjYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAur887hIFF7MGQ03B1DiQNxQaj/UC jqhH1uAMp7P7r9D2K606y1hZeL5SsrfJdKsEPojyEXUGAoz9ejRU8rCYpSR8TEpe +kWsHAnFnrWqC6FesHsKoev7jS2iDYKNIXzjuU22sckY6QGE34XDscRjQFOzji1I TNsYx/uEpCWFr+g+R5Obx3AXtX0BUS/DYfhlxFyFlULq6PMYU3cfqQCNDv6Q6QR9 J2RaCowWqkWhNIonjUqB/wq3SQ/uTY1b96O8XlAWoFg0osO41MSfZNm4Z1A9yRfG BfbDJ9TgzdZGyqJXrr9AY2ph/57khNT9MjCK8GOXsVXms/Hi1qxm39p+DwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFIcWqunoiUOiiHg5LhbiqZPQ5TJjMB8GA1UdIwQY MBaAFPwVK0i5YWSbN8Hon4EQYVPcexQ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0JVclNMbGhaSnMzd2VpZmdSQmhVOXg3RkRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9hOWIzNTUtN2U1YS00MDVkLThlNGIt YTQ3Njk1MTQxYTliLzEvaHhhcTZlaUpRNktJZURrdUZ1S3BrOURsTW1NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS9hOWIzNTUtN2U1YS00MDVkLThlNGItYTQ3Njk1MTQxYTli LzEvX0JVclNMbGhaSnMzd2VpZmdSQmhVOXg3RkRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCudPAMA0E AgACMAcDBQMqC2nAMA0GCSqGSIb3DQEBCwUAA4IBAQBorDjn8kH+6auVDXUrHZ2Y W9YWsX74oIW74CP+FOMZZIhJll3rGxI3RP1ZKAXrXJF3QuTULhCjNlUSzCT0JYns bqcPeS8KlT+8g89LMIzR2achPaFZVTmi/klzZpm3/aZJTJ3MfWgc2ZWRNw26BXL9 ZX7MpPYs7ukvVz/ZI+SEa2uHJk7n8+lYsA2pwMyOp2+3WaI3h2q+dNeQStirmS+0 9G68altv+HJKBgBErWhdeGjVMmj6p3gd3pWe8hjYgOX9Zzqvn5Ai8LKenSwdJYWy rcZDt/REDYYGO7AOxeS9aC4zaVm6QoGhb8cuQ4Z1MbSv/Pw1NLQocvyI9PzA+v8Z -----END CERTIFICATE-----Generated at Mon Feb 2 08:07:53 2026 by rpki-client