This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5c3e6e-107d-47f8-9d3f-b5b629cbb43b/1/HxgFtKY-FdBKivYX4ofR2G2Ingw.roa File: HxgFtKY-FdBKivYX4ofR2G2Ingw.roa (raw, json) Hash identifier: F8oVsi3NQ7SnAZ7NOaSE6jSz4t5cp7NKd8HZi8hYWXM= Subject key identifier: 1F:18:05:B4:A6:3E:15:D0:4A:8A:F6:17:E2:87:D1:D8:6D:88:9E:0C Certificate issuer: /CN=eb5be331de09bbc58df65aea75334b490c6f7fc7 Certificate serial: 019B79ECD57D23776CECD5DD1991BCFC3695 Authority key identifier: EB:5B:E3:31:DE:09:BB:C5:8D:F6:5A:EA:75:33:4B:49:0C:6F:7F:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61vjMd4Ju8WN9lrqdTNLSQxvf8c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/5c3e6e-107d-47f8-9d3f-b5b629cbb43b/1/HxgFtKY-FdBKivYX4ofR2G2Ingw.roa Signing time: Thu 01 Jan 2026 14:18:42 +0000 ROA not before: Thu 01 Jan 2026 14:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211731 IP address blocks: 91.214.156.0/23 maxlen: 23 91.214.158.0/23 maxlen: 23 2001:67c:26c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/5c3e6e-107d-47f8-9d3f-b5b629cbb43b/1/61vjMd4Ju8WN9lrqdTNLSQxvf8c.crl rsync://rpki.ripe.net/repository/DEFAULT/51/5c3e6e-107d-47f8-9d3f-b5b629cbb43b/1/61vjMd4Ju8WN9lrqdTNLSQxvf8c.mft rsync://rpki.ripe.net/repository/DEFAULT/61vjMd4Ju8WN9lrqdTNLSQxvf8c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:d5:7d:23:77:6c:ec:d5:dd:19:91:bc:fc:36:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb5be331de09bbc58df65aea75334b490c6f7fc7 Validity Not Before: Jan 1 14:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f1805b4a63e15d04a8af617e287d1d86d889e0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:83:55:18:f4:1d:77:f7:41:db:1a:32:b9:64: bf:ab:de:4d:91:02:48:7b:c2:d9:b6:74:a6:9e:98: e6:d6:43:34:28:33:6b:60:8b:9d:d3:13:48:dc:a8: 34:4c:98:10:ae:e1:8d:3a:a0:ad:c1:df:ad:ec:dc: 72:f9:28:3f:d3:81:6a:37:ee:79:00:86:e7:de:96: b8:99:9b:38:50:f2:e5:a9:3d:35:33:5b:f2:7c:9a: b6:92:61:81:29:dd:7f:05:c3:1f:50:e9:bb:78:10: 8f:33:8a:2a:0f:05:18:3f:53:83:3b:cc:52:78:38: 78:26:62:77:01:43:50:69:7f:ee:c8:dc:e1:d4:95: d2:5d:a1:a6:98:50:89:c5:6d:39:9c:9c:6e:d6:87: 98:e2:4f:1b:74:01:9c:bb:1f:6d:14:b5:10:de:23: ad:fb:c9:61:ef:7b:48:38:61:8a:fa:a5:d2:c3:70: 64:0c:62:10:d1:55:0b:19:ff:15:93:cf:75:22:9f: 94:4f:74:13:b2:51:9f:a1:73:65:50:2f:3d:c6:cf: 24:4f:eb:57:82:ac:6d:52:25:ff:10:00:55:9e:8d: 04:7d:41:12:8b:39:b0:0d:c6:3b:37:39:82:a9:60: fa:33:95:0c:6d:ec:f5:9b:da:6e:d2:6b:e4:a2:0c: c7:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:18:05:B4:A6:3E:15:D0:4A:8A:F6:17:E2:87:D1:D8:6D:88:9E:0C X509v3 Authority Key Identifier: keyid:EB:5B:E3:31:DE:09:BB:C5:8D:F6:5A:EA:75:33:4B:49:0C:6F:7F:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61vjMd4Ju8WN9lrqdTNLSQxvf8c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5c3e6e-107d-47f8-9d3f-b5b629cbb43b/1/HxgFtKY-FdBKivYX4ofR2G2Ingw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5c3e6e-107d-47f8-9d3f-b5b629cbb43b/1/61vjMd4Ju8WN9lrqdTNLSQxvf8c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.214.156.0/22 IPv6: 2001:67c:26c::/48 Signature Algorithm: sha256WithRSAEncryption 38:af:ff:b4:f3:d5:87:b2:21:26:e7:3c:52:a2:1c:b0:6f:44: 09:b3:c8:e4:40:ca:bb:fb:9c:ad:3b:18:95:05:74:4a:e6:73: c5:3b:93:f3:7c:b9:30:b6:9b:94:50:b2:0c:d6:f1:10:92:48: 98:75:bf:7c:f5:0a:12:48:d3:55:96:1b:76:79:58:0e:33:6f: 0d:5e:47:45:f7:cd:f1:43:64:9d:0f:37:cf:71:7c:22:15:4a: ea:05:fa:89:33:8e:5d:b4:76:3b:da:19:5f:0c:b8:c3:55:3f: de:fc:0e:ee:d5:15:10:96:99:d2:58:fa:74:71:5d:a8:13:0c: 15:c4:f1:a1:2b:89:4b:47:c0:41:bd:0f:40:0e:d1:0f:e1:ce: 90:be:54:a1:5f:24:55:a0:80:72:09:05:3e:a1:13:11:58:ae: 0d:6a:60:6c:57:54:36:ec:3e:3b:a2:30:30:d3:23:f2:d1:79: f1:d0:fa:81:0b:e0:23:6d:9e:4c:24:92:7f:21:ca:ec:57:b9: 63:b9:53:19:aa:6f:28:95:57:20:fb:d3:eb:a4:4f:d5:e9:d4: 42:1d:5d:45:52:03:17:6b:ee:12:59:ab:e0:b1:0e:21:41:bc: 3d:cc:20:e9:c8:93:c9:da:0d:30:d1:b8:4a:c3:e2:dd:00:bc: 07:29:97:c1 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt57NV9I3ds7NXdGZG8/DaVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViNWJlMzMxZGUwOWJiYzU4ZGY2NWFlYTc1MzM0YjQ5MGM2 ZjdmYzcwHhcNMjYwMTAxMTQxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjE4MDViNGE2M2UxNWQwNGE4YWY2MTdlMjg3ZDFkODZkODg5ZTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8oNVGPQdd/dB2xoyuWS/q95NkQJI e8LZtnSmnpjm1kM0KDNrYIud0xNI3Kg0TJgQruGNOqCtwd+t7Nxy+Sg/04FqN+55 AIbn3pa4mZs4UPLlqT01M1vyfJq2kmGBKd1/BcMfUOm7eBCPM4oqDwUYP1ODO8xS eDh4JmJ3AUNQaX/uyNzh1JXSXaGmmFCJxW05nJxu1oeY4k8bdAGcux9tFLUQ3iOt +8lh73tIOGGK+qXSw3BkDGIQ0VULGf8Vk891Ip+UT3QTslGfoXNlUC89xs8kT+tX gqxtUiX/EABVno0EfUESizmwDcY7NzmCqWD6M5UMbez1m9pu0mvkogzHlwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFB8YBbSmPhXQSor2F+KH0dhtiJ4MMB8GA1UdIwQY MBaAFOtb4zHeCbvFjfZa6nUzS0kMb3/HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjF2ak1kNEp1OFdOOWxycWRUTkxTUXh2ZjhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS81YzNlNmUtMTA3ZC00N2Y4LTlkM2Yt YjViNjI5Y2JiNDNiLzEvSHhnRnRLWS1GZEJLaXZZWDRvZlIyRzJJbmd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS81YzNlNmUtMTA3ZC00N2Y4LTlkM2YtYjViNjI5Y2JiNDNi LzEvNjF2ak1kNEp1OFdOOWxycWRUTkxTUXh2ZjhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCW9acMA8E AgACMAkDBwAgAQZ8AmwwDQYJKoZIhvcNAQELBQADggEBADiv/7Tz1YeyISbnPFKi HLBvRAmzyORAyrv7nK07GJUFdErmc8U7k/N8uTC2m5RQsgzW8RCSSJh1v3z1ChJI 01WWG3Z5WA4zbw1eR0X3zfFDZJ0PN89xfCIVSuoF+okzjl20djvaGV8MuMNVP978 Du7VFRCWmdJY+nRxXagTDBXE8aEriUtHwEG9D0AO0Q/hzpC+VKFfJFWggHIJBT6h ExFYrg1qYGxXVDbsPjuiMDDTI/LRefHQ+oEL4CNtnkwkkn8hyuxXuWO5UxmqbyiV VyD70+ukT9Xp1EIdXUVSAxdr7hJZq+CxDiFBvD3MIOnIk8naDTDRuErD4t0AvAcp l8E= -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:59 2026 by rpki-client