This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/hx06a9Y6DJXW5viO7AF50cly-LQ.roa File: hx06a9Y6DJXW5viO7AF50cly-LQ.roa (raw, json) Hash identifier: sbONt0qG8LbgOpeBXJ/XAcdZt9F40k9lXBYQTxo5q0s= Subject key identifier: 87:1D:3A:6B:D6:3A:0C:95:D6:E6:F8:8E:EC:01:79:D1:C9:72:F8:B4 Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019B791055FE1E9C6C6E07CBC787C5987352 Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/hx06a9Y6DJXW5viO7AF50cly-LQ.roa Signing time: Thu 01 Jan 2026 10:17:52 +0000 ROA not before: Thu 01 Jan 2026 10:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198662 IP address blocks: 188.132.164.0/24 maxlen: 24 188.132.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:55:fe:1e:9c:6c:6e:07:cb:c7:87:c5:98:73:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Jan 1 10:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=871d3a6bd63a0c95d6e6f88eec0179d1c972f8b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:c7:e7:b2:c6:5d:28:49:67:b8:9f:53:9b:6e: 14:2f:02:a9:ac:a3:d4:ab:fc:58:fe:1a:0c:53:3b: 49:9e:2c:5d:d8:03:22:f6:e0:8c:ca:57:3a:48:01: 39:67:46:1d:82:17:ee:a1:cd:f6:b1:d5:89:17:00: 53:d6:fd:b6:da:fa:17:98:ff:b4:b7:0e:ab:a5:9d: 02:94:6f:fb:76:33:8f:b3:13:da:e2:a9:39:f0:e8: 44:37:36:74:2e:39:2d:33:c9:2c:99:80:f5:dd:de: 93:d8:f3:5e:cb:07:2d:61:0b:14:55:b5:03:00:1c: 26:50:f3:86:13:c7:90:02:73:67:ef:5e:9e:4e:46: 64:fc:fc:25:3a:28:3b:f2:91:ac:fe:3c:6b:0c:e3: 22:47:c4:68:75:e4:15:d7:30:a9:4d:e8:f1:d4:d8: 43:12:a1:2f:5a:a4:d9:4d:50:3e:a8:e3:d1:cc:b4: 49:17:b6:b0:2d:4a:1f:08:4c:37:f8:43:c2:7c:24: 02:a4:32:a8:68:32:e7:41:72:5b:06:45:80:c7:a6: 8f:87:0a:d4:78:66:8a:5c:99:c2:c6:34:2a:66:91: 82:91:73:92:99:53:d5:a2:56:f2:c9:ba:cf:a4:6a: 35:3d:b6:00:34:6d:57:0f:41:d0:c2:04:97:a8:cf: 3a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:1D:3A:6B:D6:3A:0C:95:D6:E6:F8:8E:EC:01:79:D1:C9:72:F8:B4 X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/hx06a9Y6DJXW5viO7AF50cly-LQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.132.164.0/24 188.132.190.0/24 Signature Algorithm: sha256WithRSAEncryption 82:73:47:40:47:3f:7d:1c:89:4b:70:6b:8e:74:91:3a:25:77: 8b:2c:a0:0d:2f:f8:0e:40:a7:c9:21:c7:e6:a6:ad:fe:c4:c3: 5b:1b:7a:9f:b9:13:59:58:3f:74:52:e7:05:bb:f4:10:8e:97: 0c:5d:c4:77:0f:6d:00:d2:2d:72:eb:b2:e2:41:4a:41:07:79: 6e:39:4b:40:b7:92:90:05:8a:7f:a1:16:43:bc:5b:53:a4:eb: a4:f9:24:c4:a7:10:06:88:1e:62:ee:8c:e8:0e:95:f2:50:0f: 60:57:bf:f5:93:20:f2:12:bb:80:28:a8:e9:a5:08:fa:9e:12: f0:cc:1f:98:54:09:be:27:ff:1f:83:e0:7c:39:b2:2a:cb:70: ea:ee:3e:11:f3:52:2e:bc:fb:bc:5f:01:f4:cf:2c:ef:1e:48: 84:13:b0:dc:c2:f4:a0:f2:e3:f9:f5:e8:32:67:8c:94:d8:8e: bd:28:ae:9a:82:5e:16:cf:0b:b4:9a:9c:28:30:39:f3:f6:1f: dd:d9:e8:74:29:8b:04:5b:4d:07:28:10:9d:db:61:34:96:e2: cd:b3:58:41:cb:17:05:8a:9d:ea:ea:3e:b3:9c:81:34:02:e8: 02:21:a1:c6:85:f4:ca:b5:36:ef:d9:37:30:09:5e:8e:9d:91: 4e:18:00:a8 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5EFX+HpxsbgfLx4fFmHNSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjYwMTAxMTAxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NzFkM2E2YmQ2M2EwYzk1ZDZlNmY4OGVlYzAxNzlkMWM5NzJmOGI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMfnssZdKElnuJ9Tm24ULwKprKPU q/xY/hoMUztJnixd2AMi9uCMylc6SAE5Z0Ydghfuoc32sdWJFwBT1v222voXmP+0 tw6rpZ0ClG/7djOPsxPa4qk58OhENzZ0LjktM8ksmYD13d6T2PNeywctYQsUVbUD ABwmUPOGE8eQAnNn716eTkZk/PwlOig78pGs/jxrDOMiR8RodeQV1zCpTejx1NhD EqEvWqTZTVA+qOPRzLRJF7awLUofCEw3+EPCfCQCpDKoaDLnQXJbBkWAx6aPhwrU eGaKXJnCxjQqZpGCkXOSmVPVolbyybrPpGo1PbYANG1XD0HQwgSXqM86VQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIcdOmvWOgyV1ub4juwBedHJcvi0MB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEvaHgwNmE5WTZESlhXNXZpTzdBRjUwY2x5LUxRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAvISkAwQA vIS+MA0GCSqGSIb3DQEBCwUAA4IBAQCCc0dARz99HIlLcGuOdJE6JXeLLKANL/gO QKfJIcfmpq3+xMNbG3qfuRNZWD90UucFu/QQjpcMXcR3D20A0i1y67LiQUpBB3lu OUtAt5KQBYp/oRZDvFtTpOuk+STEpxAGiB5i7ozoDpXyUA9gV7/1kyDyEruAKKjp pQj6nhLwzB+YVAm+J/8fg+B8ObIqy3Dq7j4R81IuvPu8XwH0zyzvHkiEE7DcwvSg 8uP59egyZ4yU2I69KK6agl4Wzwu0mpwoMDnz9h/d2eh0KYsEW00HKBCd22E0luLN s1hByxcFip3q6j6znIE0AugCIaHGhfTKtTbv2TcwCV6OnZFOGACo -----END CERTIFICATE-----Generated at Wed Jan 21 13:33:06 2026 by rpki-client