This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/HxaAYOadFUt_TLVqbPD2f0mU6HE.roa File: HxaAYOadFUt_TLVqbPD2f0mU6HE.roa (raw, json) Hash identifier: XUpOxSS1DmAvympYf4/luiffAEU6fK5cecSF5YVTzUA= Subject key identifier: 1F:16:80:60:E6:9D:15:4B:7F:4C:B5:6A:6C:F0:F6:7F:49:94:E8:71 Certificate issuer: /CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f Certificate serial: 019B7DDB89369138D57DEA6F006584C4E822 Authority key identifier: 29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/HxaAYOadFUt_TLVqbPD2f0mU6HE.roa Signing time: Fri 02 Jan 2026 08:38:18 +0000 ROA not before: Fri 02 Jan 2026 08:38:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 5.10.222.0/24 maxlen: 24 185.23.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 17:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:db:89:36:91:38:d5:7d:ea:6f:00:65:84:c4:e8:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f Validity Not Before: Jan 2 08:38:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f168060e69d154b7f4cb56a6cf0f67f4994e871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0b:4c:e6:f1:b2:13:d4:2e:d0:b6:2c:4a:13: d8:1a:98:e2:09:ba:18:25:30:a7:2c:e5:17:21:42: 1a:b7:8a:c1:ec:1a:04:92:6d:a7:34:de:b7:5a:e5: 3d:53:05:43:82:40:c3:d0:31:0e:0a:d2:bb:b2:5f: 09:d1:20:bb:94:4e:3a:a8:cd:e3:38:ad:14:50:49: d4:4a:6c:ad:5c:c1:5a:65:52:06:7d:e8:b3:b0:3d: d0:72:b3:1a:f0:3d:10:f1:52:31:48:84:96:02:4c: d5:8d:5a:f4:a6:72:7a:16:dd:a8:5f:d5:07:d5:df: 04:53:5c:dd:e0:01:19:2f:09:ba:8d:ef:34:eb:40: 21:f6:58:5b:4e:89:eb:d2:90:35:68:c7:98:b6:25: fa:c3:8b:b9:cc:94:33:3a:9e:2a:e2:1e:61:78:03: a7:7d:5e:bd:06:e2:99:cd:f7:48:b1:fd:25:b1:01: 86:29:61:34:17:57:94:0f:f6:c4:94:7a:d8:3f:1e: cd:04:ba:53:6f:db:60:a3:ba:8a:49:70:c3:63:32: 6d:7a:f7:c8:e4:ec:1e:c2:2a:4e:c8:cb:bf:55:45: b9:4e:a1:ed:d7:79:33:ec:57:29:3e:51:9e:ab:bf: a0:e7:30:28:a3:9a:6e:91:f9:77:60:e7:e1:51:29: e2:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:16:80:60:E6:9D:15:4B:7F:4C:B5:6A:6C:F0:F6:7F:49:94:E8:71 X509v3 Authority Key Identifier: keyid:29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/HxaAYOadFUt_TLVqbPD2f0mU6HE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.10.222.0/24 185.23.237.0/24 Signature Algorithm: sha256WithRSAEncryption 25:01:c5:3e:ce:ee:d3:44:4d:9e:ee:84:60:62:ec:f3:44:01: 74:f3:66:ff:ce:1a:2d:00:82:34:67:5b:e5:6b:ba:e1:2b:77: 85:cb:d6:b2:52:c6:4d:d5:52:15:2d:30:8a:f4:64:c2:90:e9: f5:b1:6a:4d:6d:bd:86:2b:1d:b7:fc:20:f2:71:fb:cc:a5:b4: 5c:17:df:c4:e7:05:8a:8b:e9:dd:56:44:8f:e0:46:c9:e0:94: a7:d4:39:6d:f7:9f:4d:0f:90:8d:7a:0d:e4:5d:a8:5d:1c:1b: 43:8a:02:1e:56:ad:d5:84:d2:fd:ed:d3:7e:98:c6:2c:a5:cd: 04:19:6b:2a:3d:c7:e4:3a:6d:87:06:01:ce:9c:86:9a:34:14: 9b:94:8e:d9:d8:5b:40:b7:6a:82:e0:7f:1e:e9:86:08:35:67: 02:a6:3f:59:70:46:f4:b2:35:05:23:fc:df:94:41:3c:6b:6b: 28:1b:4e:ed:13:32:93:23:cc:7c:15:0e:ba:59:d8:b3:eb:f0: d2:12:7c:1d:d3:7f:cc:6c:c4:cb:bf:83:ba:8a:09:bd:eb:bf: 90:06:06:f7:24:e7:f1:16:bf:7d:0d:18:fe:12:f9:8f:96:d5: 0a:36:f8:8f:04:ff:3f:24:25:62:2d:bb:73:19:a8:e2:48:d5: 6b:96:7f:03 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt924k2kTjVfepvAGWExOgiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2VmOWJlZmQxYTdlMjRjMGNjOTcyOTk4N2ZjMDY1ZDZi NzEzMmYwHhcNMjYwMTAyMDgzODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjE2ODA2MGU2OWQxNTRiN2Y0Y2I1NmE2Y2YwZjY3ZjQ5OTRlODcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswtM5vGyE9Qu0LYsShPYGpjiCboY JTCnLOUXIUIat4rB7BoEkm2nNN63WuU9UwVDgkDD0DEOCtK7sl8J0SC7lE46qM3j OK0UUEnUSmytXMFaZVIGfeizsD3QcrMa8D0Q8VIxSISWAkzVjVr0pnJ6Ft2oX9UH 1d8EU1zd4AEZLwm6je8060Ah9lhbTonr0pA1aMeYtiX6w4u5zJQzOp4q4h5heAOn fV69BuKZzfdIsf0lsQGGKWE0F1eUD/bElHrYPx7NBLpTb9tgo7qKSXDDYzJtevfI 5OwewipOyMu/VUW5TqHt13kz7FcpPlGeq7+g5zAoo5pukfl3YOfhUSniTQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFB8WgGDmnRVLf0y1amzw9n9JlOhxMB8GA1UdIwQY MBaAFCl++b79Gn4kwMyXKZh/wGXWtxMvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9iZTQ5MDktNzQ1Zi00ZDBjLWJmYWIt ZGVlNzY4NjAwMTNkLzEvSHhhQVlPYWRGVXRfVExWcWJQRDJmMG1VNkhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS9iZTQ5MDktNzQ1Zi00ZDBjLWJmYWItZGVlNzY4NjAwMTNk LzEvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABQreAwQA uRftMA0GCSqGSIb3DQEBCwUAA4IBAQAlAcU+zu7TRE2e7oRgYuzzRAF082b/zhot AII0Z1vla7rhK3eFy9ayUsZN1VIVLTCK9GTCkOn1sWpNbb2GKx23/CDycfvMpbRc F9/E5wWKi+ndVkSP4EbJ4JSn1Dlt959ND5CNeg3kXahdHBtDigIeVq3VhNL97dN+ mMYspc0EGWsqPcfkOm2HBgHOnIaaNBSblI7Z2FtAt2qC4H8e6YYINWcCpj9ZcEb0 sjUFI/zflEE8a2soG07tEzKTI8x8FQ66Wdiz6/DSEnwd03/MbMTLv4O6igm967+Q Bgb3JOfxFr99DRj+EvmPltUKNviPBP8/JCViLbtzGajiSNVrln8D -----END CERTIFICATE-----Generated at Fri Jan 9 00:58:31 2026 by rpki-client