This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/hx04DxiZAHeQYm7pOZmel5U9TOA.roa File: hx04DxiZAHeQYm7pOZmel5U9TOA.roa (raw, json) Hash identifier: AjIfJ2c3ZWWZTkNvhuqTyJOvutKGVYOaZ7ocJjjxqUY= Subject key identifier: 87:1D:38:0F:18:99:00:77:90:62:6E:E9:39:99:9E:97:95:3D:4C:E0 Certificate issuer: /CN=aeec434f821c86b7ee6316691d71cc61c40c346c Certificate serial: 019B7AC8F6C2D5BE1E7894445645C4EB9BA0 Authority key identifier: AE:EC:43:4F:82:1C:86:B7:EE:63:16:69:1D:71:CC:61:C4:0C:34:6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruxDT4IchrfuYxZpHXHMYcQMNGw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/hx04DxiZAHeQYm7pOZmel5U9TOA.roa Signing time: Thu 01 Jan 2026 18:19:09 +0000 ROA not before: Thu 01 Jan 2026 18:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8758 IP address blocks: 212.6.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.crl rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft rsync://rpki.ripe.net/repository/DEFAULT/ruxDT4IchrfuYxZpHXHMYcQMNGw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 03:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:f6:c2:d5:be:1e:78:94:44:56:45:c4:eb:9b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aeec434f821c86b7ee6316691d71cc61c40c346c Validity Not Before: Jan 1 18:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=871d380f1899007790626ee939999e97953d4ce0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:9e:ec:43:28:b9:73:b6:da:51:1d:a5:6b:02: f2:0a:94:61:77:f2:1a:81:25:4c:ff:06:5f:e0:a3: 03:6b:1f:6e:de:36:09:d5:e8:08:f6:6a:1a:08:a8: de:98:e0:fa:a5:48:d5:f2:37:00:02:d3:e7:98:09: d5:7f:5d:64:f8:99:8f:56:1e:82:b2:dc:5a:7a:60: 51:9b:a3:5d:24:ed:7f:27:4f:74:1c:5c:da:04:80: 17:a0:7f:96:e1:20:55:23:68:e3:60:5d:65:a3:03: f5:38:ba:d1:0e:40:71:72:e7:d9:7b:e1:84:f1:a8: 37:aa:57:6e:06:49:90:21:09:62:b9:ff:a4:dd:da: e3:e2:ed:07:9a:c6:09:63:d6:0b:ba:1b:ff:7b:57: 2b:de:c1:95:03:d9:01:5d:ec:4b:d4:dc:f4:17:75: 3b:db:33:55:44:00:b6:e2:3c:fd:17:0c:dc:2f:6d: 26:3d:25:78:49:9f:e9:ee:29:b7:70:9b:db:e5:f6: 73:59:aa:60:76:d8:88:f5:99:8a:2f:85:95:6d:c1: 48:8b:55:d8:24:57:38:1c:23:1b:b5:eb:7b:70:6e: 28:a0:11:56:59:5f:c9:6c:d3:2b:16:94:42:1a:33: 4c:6a:f3:0d:c2:e2:85:ee:87:09:e2:30:04:99:25: 4c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:1D:38:0F:18:99:00:77:90:62:6E:E9:39:99:9E:97:95:3D:4C:E0 X509v3 Authority Key Identifier: keyid:AE:EC:43:4F:82:1C:86:B7:EE:63:16:69:1D:71:CC:61:C4:0C:34:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruxDT4IchrfuYxZpHXHMYcQMNGw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/hx04DxiZAHeQYm7pOZmel5U9TOA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.6.45.0/24 Signature Algorithm: sha256WithRSAEncryption c6:f6:09:f9:0f:74:8c:aa:e1:29:87:73:aa:7c:77:56:ab:68: ff:4c:7a:0b:6d:07:68:18:a8:33:e6:6e:a1:63:bd:03:85:77: ef:c4:30:4f:46:0e:bc:73:8c:0d:b9:49:4c:69:28:54:92:e9: a1:45:f5:a2:f2:91:0c:a3:0b:45:5c:65:a8:52:4d:80:92:36: 46:13:00:ee:37:14:e2:3c:11:ba:cb:e1:02:2c:ed:c1:b1:bf: 61:a7:13:ee:83:c8:73:12:c9:9f:b4:9b:4a:4a:9f:c9:75:2b: f7:40:00:2f:63:c4:f4:8b:f5:40:32:e0:6f:d3:fb:b2:db:7b: 42:8e:61:c3:4d:92:8f:65:6d:58:67:c6:59:92:b8:82:5d:81: 62:9d:25:7d:e1:5e:e0:08:6a:d6:24:9d:89:93:2b:f8:8b:70: cf:ff:bc:40:74:a3:b8:a9:8b:84:73:d9:8c:66:fd:17:01:da: 14:2e:f1:5c:58:33:fe:6c:f0:1e:70:30:12:64:58:04:8d:be: 3c:c9:a9:af:d9:e5:06:11:c1:1b:a2:54:83:53:72:4c:18:21: 28:18:de:55:cc:cf:cd:4a:64:ef:d0:c4:95:52:e7:de:3c:ec: 17:33:44:1c:1f:72:7e:08:a0:2f:fb:03:cf:79:f6:8b:87:3e: 64:11:ff:85 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yPbC1b4eeJREVkXE65ugMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZWM0MzRmODIxYzg2YjdlZTYzMTY2OTFkNzFjYzYxYzQw YzM0NmMwHhcNMjYwMTAxMTgxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NzFkMzgwZjE4OTkwMDc3OTA2MjZlZTkzOTk5OWU5Nzk1M2Q0Y2UwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA057sQyi5c7baUR2lawLyCpRhd/Ia gSVM/wZf4KMDax9u3jYJ1egI9moaCKjemOD6pUjV8jcAAtPnmAnVf11k+JmPVh6C stxaemBRm6NdJO1/J090HFzaBIAXoH+W4SBVI2jjYF1lowP1OLrRDkBxcufZe+GE 8ag3qlduBkmQIQliuf+k3drj4u0HmsYJY9YLuhv/e1cr3sGVA9kBXexL1Nz0F3U7 2zNVRAC24jz9FwzcL20mPSV4SZ/p7im3cJvb5fZzWapgdtiI9ZmKL4WVbcFIi1XY JFc4HCMbtet7cG4ooBFWWV/JbNMrFpRCGjNMavMNwuKF7ocJ4jAEmSVMXQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIcdOA8YmQB3kGJu6TmZnpeVPUzgMB8GA1UdIwQY MBaAFK7sQ0+CHIa37mMWaR1xzGHEDDRsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnV4RFQ0SWNocmZ1WXhacEhYSE1ZY1FNTkd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny80YjA3OTAtNTc3OC00ZjYxLWEwZWUt OTEwZTA4MTBjYTk0LzEvaHgwNER4aVpBSGVRWW03cE9abWVsNVU5VE9BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny80YjA3OTAtNTc3OC00ZjYxLWEwZWUtOTEwZTA4MTBjYTk0 LzEvcnV4RFQ0SWNocmZ1WXhacEhYSE1ZY1FNTkd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1AYtMA0G CSqGSIb3DQEBCwUAA4IBAQDG9gn5D3SMquEph3OqfHdWq2j/THoLbQdoGKgz5m6h Y70DhXfvxDBPRg68c4wNuUlMaShUkumhRfWi8pEMowtFXGWoUk2AkjZGEwDuNxTi PBG6y+ECLO3Bsb9hpxPug8hzEsmftJtKSp/JdSv3QAAvY8T0i/VAMuBv0/uy23tC jmHDTZKPZW1YZ8ZZkriCXYFinSV94V7gCGrWJJ2Jkyv4i3DP/7xAdKO4qYuEc9mM Zv0XAdoULvFcWDP+bPAecDASZFgEjb48yamv2eUGEcEbolSDU3JMGCEoGN5VzM/N SmTv0MSVUufePOwXM0QcH3J+CKAv+wPPefaLhz5kEf+F -----END CERTIFICATE-----Generated at Mon Jan 26 13:31:13 2026 by rpki-client