This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/HBQXe_ETYd72t1BF1lo-kpTks4g.roa File: HBQXe_ETYd72t1BF1lo-kpTks4g.roa (raw, json) Hash identifier: ty/h9QM8gXepF/5QGH2G4nh3fXbO4USGLA+C6Nw1mOw= Subject key identifier: 1C:14:17:7B:F1:13:61:DE:F6:B7:50:45:D6:5A:3E:92:94:E4:B3:88 Certificate issuer: /CN=321ec194107843848cd36330232b5f6a43791db4 Certificate serial: 019B7AC946AD18E81A0F83524D016C08271D Authority key identifier: 32:1E:C1:94:10:78:43:84:8C:D3:63:30:23:2B:5F:6A:43:79:1D:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/HBQXe_ETYd72t1BF1lo-kpTks4g.roa Signing time: Thu 01 Jan 2026 18:19:29 +0000 ROA not before: Thu 01 Jan 2026 18:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 155.231.208.0/24 maxlen: 24 155.231.209.0/24 maxlen: 24 195.105.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:46:ad:18:e8:1a:0f:83:52:4d:01:6c:08:27:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=321ec194107843848cd36330232b5f6a43791db4 Validity Not Before: Jan 1 18:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1c14177bf11361def6b75045d65a3e9294e4b388 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d8:78:7e:89:54:eb:ac:3f:8a:e3:a1:d6:61: 7c:1c:51:92:90:51:0e:d9:16:e3:fd:ea:35:78:4e: 0c:9f:94:65:1f:ba:57:33:66:21:5b:67:88:2c:cf: 78:bb:c5:5f:28:05:ae:9f:e7:5d:10:08:e2:a2:76: 28:71:dc:38:f3:50:e4:c8:9f:6d:16:1f:1d:1d:0b: a9:ca:3d:6a:d6:71:26:79:cc:65:a0:50:86:2b:53: 8e:5b:9e:ba:56:97:f1:53:59:67:76:1a:35:6f:c1: a4:8b:2f:d7:c0:3b:83:86:73:da:7a:f3:59:a5:92: ec:6c:64:76:53:c9:05:b5:ac:58:fa:bb:76:9b:98: 8f:c2:84:2a:1e:a6:ee:21:c8:59:f1:50:12:dc:45: 3a:c5:7f:e1:76:d9:b1:92:02:69:23:2a:3f:42:d1: fb:c8:0e:dd:e8:c4:01:48:90:ad:86:1c:fd:6a:33: 86:0e:7b:c8:f4:a6:22:f8:f7:d6:eb:fc:07:c8:1e: 0b:0e:ed:21:80:b1:15:f9:1c:3d:b1:10:f4:2b:b0: 37:44:75:6b:b5:86:a0:06:00:ae:46:c4:3b:f9:6a: dc:c5:26:ba:67:67:43:1a:f7:46:be:be:30:df:05: cd:21:9c:c4:07:bb:28:b8:58:e7:d7:47:bc:0b:aa: 4c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:14:17:7B:F1:13:61:DE:F6:B7:50:45:D6:5A:3E:92:94:E4:B3:88 X509v3 Authority Key Identifier: keyid:32:1E:C1:94:10:78:43:84:8C:D3:63:30:23:2B:5F:6A:43:79:1D:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/HBQXe_ETYd72t1BF1lo-kpTks4g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 155.231.208.0/23 195.105.26.0/24 Signature Algorithm: sha256WithRSAEncryption 00:ad:b8:8e:b0:ae:83:65:ad:87:34:49:e2:97:e9:05:0d:ea: 49:f4:8f:2e:2a:c7:29:e6:36:1d:92:22:fc:77:3f:55:91:eb: 81:b3:df:95:70:2c:ed:7d:02:3d:d5:3b:b0:09:48:1b:c9:47: 7b:17:6d:a9:8b:ea:03:85:10:25:94:de:2a:7a:85:d1:cd:6a: 0e:5b:e7:07:be:e1:27:03:d3:12:f0:d1:29:4b:ae:6c:b3:00: 85:ca:1b:53:f2:ab:b4:66:28:18:99:73:92:28:82:59:a7:65: b0:fb:05:e7:cf:10:a8:a8:50:cc:a3:d5:21:ac:1e:8c:41:91: 56:87:18:16:6d:a7:6b:c6:90:93:d6:cd:8c:9e:18:eb:b2:93: b1:3e:fc:b3:f3:66:30:8c:f4:94:c2:9e:b2:58:9d:26:90:75: 42:a9:1e:ff:68:b0:f5:fa:9a:3d:ed:06:ba:bc:e8:e9:bd:fc: 27:df:29:f5:d0:c5:01:e7:ee:22:4d:6f:53:6b:7d:d9:1b:de: 52:c3:91:e1:52:ea:82:04:63:48:e1:6d:90:d9:15:9c:b7:6a: c7:2a:99:b7:95:be:55:fa:51:21:b5:ca:89:05:73:38:06:e7: 5e:8c:bb:f4:35:eb:55:46:f6:c6:87:51:04:2f:1c:c6:6c:c8: d8:b7:a0:e9 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6yUatGOgaD4NSTQFsCCcdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyMWVjMTk0MTA3ODQzODQ4Y2QzNjMzMDIzMmI1ZjZhNDM3 OTFkYjQwHhcNMjYwMTAxMTgxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzE0MTc3YmYxMTM2MWRlZjZiNzUwNDVkNjVhM2U5Mjk0ZTRiMzg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNh4folU66w/iuOh1mF8HFGSkFEO 2Rbj/eo1eE4Mn5RlH7pXM2YhW2eILM94u8VfKAWun+ddEAjionYocdw481DkyJ9t Fh8dHQupyj1q1nEmecxloFCGK1OOW566VpfxU1lndho1b8Gkiy/XwDuDhnPaevNZ pZLsbGR2U8kFtaxY+rt2m5iPwoQqHqbuIchZ8VAS3EU6xX/hdtmxkgJpIyo/QtH7 yA7d6MQBSJCthhz9ajOGDnvI9KYi+PfW6/wHyB4LDu0hgLEV+Rw9sRD0K7A3RHVr tYagBgCuRsQ7+WrcxSa6Z2dDGvdGvr4w3wXNIZzEB7souFjn10e8C6pMUQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBwUF3vxE2He9rdQRdZaPpKU5LOIMB8GA1UdIwQY MBaAFDIewZQQeEOEjNNjMCMrX2pDeR20MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWg3QmxCQjRRNFNNMDJNd0l5dGZha041SGJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9mMTQ1OGYtYmRjMy00ZTRiLTlmNjgt M2E2MTFjMDkzYTJjLzEvSEJRWGVfRVRZZDcydDFCRjFsby1rcFRrczRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9mMTQ1OGYtYmRjMy00ZTRiLTlmNjgtM2E2MTFjMDkzYTJj LzEvTWg3QmxCQjRRNFNNMDJNd0l5dGZha041SGJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBm+fQAwQA w2kaMA0GCSqGSIb3DQEBCwUAA4IBAQAArbiOsK6DZa2HNEnil+kFDepJ9I8uKscp 5jYdkiL8dz9VkeuBs9+VcCztfQI91TuwCUgbyUd7F22pi+oDhRAllN4qeoXRzWoO W+cHvuEnA9MS8NEpS65sswCFyhtT8qu0ZigYmXOSKIJZp2Ww+wXnzxCoqFDMo9Uh rB6MQZFWhxgWbadrxpCT1s2MnhjrspOxPvyz82YwjPSUwp6yWJ0mkHVCqR7/aLD1 +po97Qa6vOjpvfwn3yn10MUB5+4iTW9Ta33ZG95Sw5HhUuqCBGNI4W2Q2RWct2rH Kpm3lb5V+lEhtcqJBXM4BudejLv0NetVRvbGh1EELxzGbMjYt6Dp -----END CERTIFICATE-----Generated at Sun Jan 18 16:38:01 2026 by rpki-client