This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/HXm9TuEN-hZFRnz7zB9tqLYv1uY.roa File: HXm9TuEN-hZFRnz7zB9tqLYv1uY.roa (raw, json) Hash identifier: GWW+sIHLIiiJupwbdRvejiFrWNMJqUsJJSuoaM3Fa6s= Subject key identifier: 1D:79:BD:4E:E1:0D:FA:16:45:46:7C:FB:CC:1F:6D:A8:B6:2F:D6:E6 Certificate issuer: /CN=fe24fb2812ae2f3d4d9bb4589dd731e546979109 Certificate serial: 019B79ED2E0D5D9157569018E0E6B46B83C9 Authority key identifier: FE:24:FB:28:12:AE:2F:3D:4D:9B:B4:58:9D:D7:31:E5:46:97:91:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_iT7KBKuLz1Nm7RYndcx5UaXkQk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/HXm9TuEN-hZFRnz7zB9tqLYv1uY.roa Signing time: Thu 01 Jan 2026 14:19:05 +0000 ROA not before: Thu 01 Jan 2026 14:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42180 IP address blocks: 194.0.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.crl rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.mft rsync://rpki.ripe.net/repository/DEFAULT/_iT7KBKuLz1Nm7RYndcx5UaXkQk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:2e:0d:5d:91:57:56:90:18:e0:e6:b4:6b:83:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe24fb2812ae2f3d4d9bb4589dd731e546979109 Validity Not Before: Jan 1 14:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1d79bd4ee10dfa1645467cfbcc1f6da8b62fd6e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ac:bc:71:36:e5:a8:80:cc:ee:0d:ef:d7:5b: 9d:42:1a:a3:20:f0:9e:4d:e2:64:cf:a2:3c:49:dc: 82:ff:bb:34:59:03:36:61:42:b5:d2:14:a0:ff:a6: f6:2f:1e:30:82:9c:0f:41:68:79:37:8e:aa:9a:7c: 3f:1b:48:58:13:f3:bc:d6:0a:1a:25:82:d9:1e:92: a6:35:1d:c7:c5:17:bb:6b:70:33:72:67:c0:79:e1: ec:0d:4b:39:b3:47:de:80:de:e9:43:2b:b8:ac:01: 20:c1:0f:b6:40:90:9f:ac:7a:79:f8:7b:62:71:f9: 4c:e9:0c:fc:f4:65:72:17:98:1d:b4:7d:2f:e8:43: 26:34:cd:a8:94:8c:24:a7:9b:c6:ab:f8:e2:78:4b: b0:76:54:c4:59:7e:61:d1:11:1b:5d:b5:8b:93:94: 54:2d:ea:e7:5e:4b:9f:33:a5:e8:4e:f4:b4:da:5b: f2:cc:87:92:cb:47:06:3b:1e:27:1f:ad:95:14:f9: 71:2b:ee:cf:15:ae:82:73:22:f2:90:1f:25:5d:57: 9e:3c:e7:eb:cd:50:37:09:bc:16:24:d8:d9:f4:e4: 85:74:86:02:18:71:2f:1c:7a:2e:9c:39:b1:1c:4b: 2d:9c:50:37:e6:0b:8a:ac:ec:0f:6a:a4:f0:c9:21: 0d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:79:BD:4E:E1:0D:FA:16:45:46:7C:FB:CC:1F:6D:A8:B6:2F:D6:E6 X509v3 Authority Key Identifier: keyid:FE:24:FB:28:12:AE:2F:3D:4D:9B:B4:58:9D:D7:31:E5:46:97:91:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_iT7KBKuLz1Nm7RYndcx5UaXkQk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/HXm9TuEN-hZFRnz7zB9tqLYv1uY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.0.140.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:f6:7e:9d:db:e5:83:3a:16:18:53:ba:7c:27:23:15:17:c2: cb:58:2e:43:2e:26:01:fc:67:95:3d:77:f6:2c:1a:8c:d5:c5: ae:4b:71:74:ab:78:31:5e:55:bb:72:33:0b:0a:7f:5b:11:00: 24:5d:f8:85:b9:23:92:79:12:87:96:cb:6d:2e:f9:85:77:de: b6:7b:25:ff:0a:ea:7b:a7:95:46:b7:73:4c:c3:ad:3e:40:b0: 3f:1c:2a:f8:51:99:4a:2b:97:e5:67:80:49:a1:fa:2c:73:24: 7e:78:5a:2a:55:e0:9d:25:b1:cb:6e:29:f3:d6:15:6b:20:e6: aa:c0:8e:76:9d:9e:d7:6d:cd:f5:be:38:f8:68:aa:46:80:d1: 33:7e:e9:84:11:7c:a2:e0:10:8a:62:72:0e:61:f5:28:cf:98: 1a:8d:c6:db:b8:2c:46:54:40:ca:d4:92:df:53:3d:93:13:18: 9d:cc:47:fa:37:b8:d1:80:46:5f:34:f8:24:bd:c2:4e:13:9f: 76:ca:e4:d5:51:bf:60:0b:4d:f2:b7:f2:a2:3a:5d:01:5e:b6: 35:ef:22:2e:76:b9:f5:b6:af:58:be:9e:51:d2:ce:30:e0:49: 0a:50:83:54:1f:89:89:18:31:ef:01:6e:08:49:98:67:96:da: db:8c:31:ed -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57S4NXZFXVpAY4Oa0a4PJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlMjRmYjI4MTJhZTJmM2Q0ZDliYjQ1ODlkZDczMWU1NDY5 NzkxMDkwHhcNMjYwMTAxMTQxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZDc5YmQ0ZWUxMGRmYTE2NDU0NjdjZmJjYzFmNmRhOGI2MmZkNmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKy8cTblqIDM7g3v11udQhqjIPCe TeJkz6I8SdyC/7s0WQM2YUK10hSg/6b2Lx4wgpwPQWh5N46qmnw/G0hYE/O81goa JYLZHpKmNR3HxRe7a3AzcmfAeeHsDUs5s0fegN7pQyu4rAEgwQ+2QJCfrHp5+Hti cflM6Qz89GVyF5gdtH0v6EMmNM2olIwkp5vGq/jieEuwdlTEWX5h0REbXbWLk5RU LernXkufM6XoTvS02lvyzIeSy0cGOx4nH62VFPlxK+7PFa6CcyLykB8lXVeePOfr zVA3CbwWJNjZ9OSFdIYCGHEvHHounDmxHEstnFA35guKrOwPaqTwySENCQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB15vU7hDfoWRUZ8+8wfbai2L9bmMB8GA1UdIwQY MBaAFP4k+ygSri89TZu0WJ3XMeVGl5EJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2lUN0tCS3VMejFObTdSWW5kY3g1VWFYa1FrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9jNjZmZjktMTBlYS00YjQ0LTkxNjkt YzVmNjcwMjM5NzE4LzEvSFhtOVR1RU4taFpGUm56N3pCOXRxTFl2MXVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny9jNjZmZjktMTBlYS00YjQ0LTkxNjktYzVmNjcwMjM5NzE4 LzEvX2lUN0tCS3VMejFObTdSWW5kY3g1VWFYa1FrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwgCMMA0G CSqGSIb3DQEBCwUAA4IBAQBq9n6d2+WDOhYYU7p8JyMVF8LLWC5DLiYB/GeVPXf2 LBqM1cWuS3F0q3gxXlW7cjMLCn9bEQAkXfiFuSOSeRKHlsttLvmFd962eyX/Cup7 p5VGt3NMw60+QLA/HCr4UZlKK5flZ4BJofoscyR+eFoqVeCdJbHLbinz1hVrIOaq wI52nZ7Xbc31vjj4aKpGgNEzfumEEXyi4BCKYnIOYfUoz5gajcbbuCxGVEDK1JLf Uz2TExidzEf6N7jRgEZfNPgkvcJOE592yuTVUb9gC03yt/KiOl0BXrY17yIudrn1 tq9Yvp5R0s4w4EkKUINUH4mJGDHvAW4ISZhnltrbjDHt -----END CERTIFICATE-----Generated at Tue Feb 10 04:32:20 2026 by rpki-client