This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/hXykEKACOboZCO5aeEWdMYeE0Lc.roa File: hXykEKACOboZCO5aeEWdMYeE0Lc.roa (raw, json) Hash identifier: 7DfJrK0FEAGJWDjTUJ6JpGF4NCoaruD7Zg59w8fqoFY= Subject key identifier: 85:7C:A4:10:A0:02:39:BA:19:08:EE:5A:78:45:9D:31:87:84:D0:B7 Certificate issuer: /CN=1533cd2d1f6dcf1eec97e86943c4e53b0c88eaae Certificate serial: 019B791039829190203FCA1B0F04235DAA88 Authority key identifier: 15:33:CD:2D:1F:6D:CF:1E:EC:97:E8:69:43:C4:E5:3B:0C:88:EA:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/hXykEKACOboZCO5aeEWdMYeE0Lc.roa Signing time: Thu 01 Jan 2026 10:17:44 +0000 ROA not before: Thu 01 Jan 2026 10:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8978 IP address blocks: 193.43.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.crl rsync://rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.mft rsync://rpki.ripe.net/repository/DEFAULT/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:39:82:91:90:20:3f:ca:1b:0f:04:23:5d:aa:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1533cd2d1f6dcf1eec97e86943c4e53b0c88eaae Validity Not Before: Jan 1 10:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=857ca410a00239ba1908ee5a78459d318784d0b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c2:da:9b:8c:8f:66:ff:84:73:18:64:21:4e: a1:a0:f2:43:87:c0:da:68:76:39:16:8d:80:f9:14: c6:8c:ee:96:ff:56:82:3e:8e:a7:0b:d3:f3:3c:ba: 92:ae:04:a1:83:b4:de:c8:d9:26:1f:a0:0f:fa:ac: 5e:2f:9b:97:f0:0b:8a:97:8e:6f:d1:e8:7a:43:6a: 54:87:6e:99:0a:36:1f:90:03:00:11:8f:34:9b:5c: 63:52:7a:d0:f6:54:f3:bf:4a:56:6a:c7:3e:ed:55: 8c:d4:21:23:47:52:0b:72:d9:22:22:40:14:09:66: 81:22:eb:fa:2b:24:5d:c7:ea:76:39:19:92:51:45: 6a:af:f8:2f:75:18:77:3e:8e:90:fb:88:3e:84:f4: ca:69:cc:4b:34:20:dd:d0:8e:1a:9c:39:c5:35:1c: 9b:47:23:82:0c:83:4f:24:cd:37:14:7a:05:9a:c6: e4:a8:52:2e:5d:67:a8:fd:aa:60:d3:a6:ad:d0:4f: 40:cb:fc:2d:5b:da:00:de:bf:35:64:f9:71:7b:b5: 02:d1:51:44:8b:b7:40:09:0a:43:27:65:11:b4:2c: 94:79:d8:69:42:58:ed:cf:8e:bc:63:06:92:52:fb: 0b:c1:cb:4e:44:06:b8:ae:0d:47:5e:43:7f:14:5b: 02:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:7C:A4:10:A0:02:39:BA:19:08:EE:5A:78:45:9D:31:87:84:D0:B7 X509v3 Authority Key Identifier: keyid:15:33:CD:2D:1F:6D:CF:1E:EC:97:E8:69:43:C4:E5:3B:0C:88:EA:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/hXykEKACOboZCO5aeEWdMYeE0Lc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.43.128.0/22 Signature Algorithm: sha256WithRSAEncryption 2f:87:4f:50:3e:1f:b4:f0:a1:6e:9f:53:a7:a7:ef:e9:0a:4e: 7d:f4:97:1e:8d:ea:f8:0a:39:c4:1f:e9:5b:68:d0:53:99:07: c7:2d:ea:49:8a:c3:4a:17:ef:c3:e4:8d:ea:6f:c5:a8:0a:fd: af:f8:19:4b:74:f0:26:36:0b:f5:a3:be:98:ee:89:78:55:f4: 3f:41:be:e6:69:d9:94:fc:76:34:a5:85:aa:5e:3d:f2:f8:03: bc:79:fe:56:69:3e:52:39:6b:df:08:0d:0a:25:c8:fd:a6:d0: eb:93:2e:83:65:46:a8:9e:b3:d2:86:1f:f8:37:60:5c:b3:a7: f7:ce:9a:54:c7:88:51:00:e2:d8:6c:fd:6a:1c:3f:2f:df:2a: 94:a7:6b:6f:b5:7b:05:0b:59:ef:5a:17:43:8b:8e:55:a8:f2: f8:7e:49:f0:67:a2:dc:63:6a:0f:04:87:50:bd:0e:1e:48:e5: 29:52:55:64:dc:1c:b6:53:70:5f:6e:1d:f9:03:c8:46:c2:11: af:fe:e7:ee:ac:c6:4b:e3:ab:ef:c8:9b:da:79:33:2a:a7:cf: 4d:0f:99:3f:48:35:9c:7d:5e:79:64:5d:0b:ba:ae:5e:42:4c: dc:35:3e:e3:e5:47:3b:eb:d3:7f:55:e1:b0:0c:3b:1d:ae:93: 14:11:b6:7b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EDmCkZAgP8obDwQjXaqIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1MzNjZDJkMWY2ZGNmMWVlYzk3ZTg2OTQzYzRlNTNiMGM4 OGVhYWUwHhcNMjYwMTAxMTAxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTdjYTQxMGEwMDIzOWJhMTkwOGVlNWE3ODQ1OWQzMTg3ODRkMGI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA38Lam4yPZv+EcxhkIU6hoPJDh8Da aHY5Fo2A+RTGjO6W/1aCPo6nC9PzPLqSrgShg7TeyNkmH6AP+qxeL5uX8AuKl45v 0eh6Q2pUh26ZCjYfkAMAEY80m1xjUnrQ9lTzv0pWasc+7VWM1CEjR1ILctkiIkAU CWaBIuv6KyRdx+p2ORmSUUVqr/gvdRh3Po6Q+4g+hPTKacxLNCDd0I4anDnFNRyb RyOCDINPJM03FHoFmsbkqFIuXWeo/apg06at0E9Ay/wtW9oA3r81ZPlxe7UC0VFE i7dACQpDJ2URtCyUedhpQljtz468YwaSUvsLwctORAa4rg1HXkN/FFsCnwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIV8pBCgAjm6GQjuWnhFnTGHhNC3MB8GA1UdIwQY MBaAFBUzzS0fbc8e7JfoaUPE5TsMiOquMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlRQTkxSOXR6eDdzbC1ocFE4VGxPd3lJNnE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC81NjUxOTEtZDk4MS00MWU1LTk2MWMt OWZlNTViMTcxNjgzLzEvaFh5a0VLQUNPYm9aQ081YWVFV2RNWWVFMExjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC81NjUxOTEtZDk4MS00MWU1LTk2MWMtOWZlNTViMTcxNjgz LzEvRlRQTkxSOXR6eDdzbC1ocFE4VGxPd3lJNnE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwSuAMA0G CSqGSIb3DQEBCwUAA4IBAQAvh09QPh+08KFun1Onp+/pCk599Jcejer4CjnEH+lb aNBTmQfHLepJisNKF+/D5I3qb8WoCv2v+BlLdPAmNgv1o76Y7ol4VfQ/Qb7madmU /HY0pYWqXj3y+AO8ef5WaT5SOWvfCA0KJcj9ptDrky6DZUaonrPShh/4N2Bcs6f3 zppUx4hRAOLYbP1qHD8v3yqUp2tvtXsFC1nvWhdDi45VqPL4fknwZ6LcY2oPBIdQ vQ4eSOUpUlVk3By2U3Bfbh35A8hGwhGv/ufurMZL46vvyJvaeTMqp89ND5k/SDWc fV55ZF0Luq5eQkzcNT7j5Uc769N/VeGwDDsdrpMUEbZ7 -----END CERTIFICATE-----Generated at Mon Feb 9 20:10:18 2026 by rpki-client