This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/HLHqvk87Ei7Rb8vncCXmuWA4l5w.roa
File: HLHqvk87Ei7Rb8vncCXmuWA4l5w.roa (raw, json)
Hash identifier: qoKJ0OJaCDjYFA4CcCaaIa7Qb7ARu8S3G8wQDaTgwyY=
Subject key identifier: 1C:B1:EA:BE:4F:3B:12:2E:D1:6F:CB:E7:70:25:E6:B9:60:38:97:9C
Certificate issuer: /CN=cec5afe769b94346e1cd362eb85f875b23b17277
Certificate serial: 019B7835246B8D9A3E136FC7B938A0610D1A
Authority key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/HLHqvk87Ei7Rb8vncCXmuWA4l5w.roa
Signing time: Thu 01 Jan 2026 06:18:27 +0000
ROA not before: Thu 01 Jan 2026 06:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214300
IP address blocks: 80.83.88.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Feb 2026 09:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:35:24:6b:8d:9a:3e:13:6f:c7:b9:38:a0:61:0d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec5afe769b94346e1cd362eb85f875b23b17277
Validity
Not Before: Jan 1 06:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1cb1eabe4f3b122ed16fcbe77025e6b96038979c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:a0:40:e4:19:bf:49:1e:a4:d5:37:49:de:2a:
70:15:8f:d2:35:9c:3e:4d:bd:e7:45:c1:41:4f:72:
f0:78:0a:f7:ac:80:85:6d:c1:5c:ed:d7:14:b9:9b:
80:2f:dd:84:20:c4:bb:13:f4:67:07:75:11:f1:67:
ad:96:f9:a3:91:f6:06:f9:f5:bf:06:bf:6e:97:70:
0e:d4:53:d5:03:39:d7:1f:d3:db:78:35:d9:a2:09:
5c:2a:3c:e9:d2:7e:bb:b9:97:4a:79:75:e1:20:fd:
8f:89:49:3c:4b:ea:3e:2d:2e:72:bb:7b:15:0e:fe:
46:e5:da:29:ae:08:94:9c:c1:3b:86:2d:f5:c1:b2:
69:e0:7e:95:b3:89:ad:ff:98:9c:cb:04:8f:a1:7b:
cf:02:29:5f:03:f4:1b:64:91:67:04:17:09:f5:3e:
b5:12:90:a0:ea:ee:0d:48:77:e8:8c:de:91:b2:42:
27:24:89:c7:b2:b3:5c:81:7f:e0:a3:d9:40:2f:0d:
d8:7e:be:a2:49:be:e0:4e:b5:a2:29:2b:f9:2f:cb:
51:81:7e:25:66:69:f8:e3:d2:ee:f9:6d:b7:db:b4:
59:b7:ce:b7:96:36:6d:eb:6b:78:e3:55:da:a2:e2:
24:8a:7a:00:a8:b4:15:d2:25:81:ef:a4:40:00:a4:
32:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B1:EA:BE:4F:3B:12:2E:D1:6F:CB:E7:70:25:E6:B9:60:38:97:9C
X509v3 Authority Key Identifier:
keyid:CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/HLHqvk87Ei7Rb8vncCXmuWA4l5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.83.88.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:ae:47:81:48:d8:d5:89:9d:12:f3:76:92:58:bd:28:1a:26:
cb:7c:85:3c:57:0c:bf:df:0e:77:3e:d0:96:d1:9c:ac:aa:4d:
f6:9a:63:35:e1:26:51:71:3c:3e:b9:b2:91:28:ef:14:f9:ca:
9c:25:69:78:aa:ca:2d:3f:75:ac:70:55:60:73:17:a9:51:52:
8d:6e:fe:4e:78:c7:bd:e2:26:e3:8c:82:70:87:35:b0:93:df:
91:72:c4:71:af:b6:39:01:88:0c:e6:2e:95:75:d8:fe:2f:20:
f7:7c:f1:cb:af:ad:56:76:fa:9c:b9:b2:29:b3:04:c6:2f:2e:
b1:fd:b9:95:cf:53:e6:b8:9d:4b:87:1a:6b:78:e5:45:da:36:
ee:18:3b:a9:61:1a:c2:dc:59:0d:6e:43:b2:1e:80:d5:25:f0:
8a:49:d0:c4:d4:81:c6:45:65:ab:02:c0:bd:02:d2:a1:e5:9f:
ff:c4:f4:e2:46:16:f0:7e:78:96:0a:98:6e:3a:31:ab:e2:4a:
17:91:ce:6a:00:f3:1f:04:ce:2f:ba:41:ff:46:c9:3f:12:76:
52:23:e2:6d:0a:be:0d:03:12:2c:0c:35:f7:ea:b5:fd:0d:96:
03:c0:c9:a3:1a:25:3b:82:6b:1d:00:b5:9c:4d:b4:14:2a:fb:
38:62:6f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 13:41:50 2026 by rpki-client