This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/hx_-Nlwhp-rhcQWTiZp-K3bvoic.roa File: hx_-Nlwhp-rhcQWTiZp-K3bvoic.roa (raw, json) Hash identifier: +6qNvM+Po303423yisqL4uil5GDRIr4RzBGe2Izpxbs= Subject key identifier: 87:1F:FE:36:5C:21:A7:EA:E1:71:05:93:89:9A:7E:2B:76:EF:A2:27 Certificate issuer: /CN=1c683f95c98d2cfe9d79cdd3db8ee8138bb35772 Certificate serial: 019B79ED589B2808B37DD18AD5DC8D6C3110 Authority key identifier: 1C:68:3F:95:C9:8D:2C:FE:9D:79:CD:D3:DB:8E:E8:13:8B:B3:57:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGg_lcmNLP6dec3T247oE4uzV3I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/hx_-Nlwhp-rhcQWTiZp-K3bvoic.roa Signing time: Thu 01 Jan 2026 14:19:16 +0000 ROA not before: Thu 01 Jan 2026 14:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 212.61.166.0/24 maxlen: 24 2a02:830:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.crl rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.mft rsync://rpki.ripe.net/repository/DEFAULT/HGg_lcmNLP6dec3T247oE4uzV3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:58:9b:28:08:b3:7d:d1:8a:d5:dc:8d:6c:31:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c683f95c98d2cfe9d79cdd3db8ee8138bb35772 Validity Not Before: Jan 1 14:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=871ffe365c21a7eae1710593899a7e2b76efa227 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:56:7f:00:e5:de:10:21:9f:b6:90:bf:b2:de: 69:31:bd:26:ab:c3:f6:ef:b3:c0:d0:b7:a3:9e:5a: 96:86:94:4d:9e:37:38:48:0d:d0:c9:31:f2:40:ea: ed:39:72:3e:34:84:24:aa:81:fc:9b:bc:ac:76:5b: 4e:5a:cc:62:69:99:85:71:1e:97:49:15:1a:5d:4f: 23:d4:3c:95:1c:96:a5:85:3f:f4:58:81:af:67:ef: 16:82:77:42:c2:2f:1a:02:d6:b8:87:63:b1:7c:07: eb:8f:c4:7e:eb:3e:75:66:2a:be:e3:02:ef:93:d5: 5c:26:2d:8f:1e:ee:f6:2e:cb:33:a9:57:2f:67:d4: 13:13:0d:e7:f3:48:5b:a5:59:9f:56:cc:e6:be:cb: 82:80:ed:51:a2:84:28:bd:6b:20:23:04:d6:09:ed: 9f:42:24:70:fd:19:25:ca:ee:e1:61:8e:17:31:2e: eb:a0:f3:3c:30:af:ca:3c:89:1a:77:44:2e:5f:6a: ee:e9:0c:20:a5:49:d8:82:f8:b1:09:74:df:a9:3a: 93:24:78:ce:85:c7:45:e6:fc:f1:e8:a8:6d:e8:fa: cc:41:0c:08:6b:c0:be:17:b6:3b:bc:d5:ce:38:88: 15:65:10:62:19:77:23:cf:bb:bd:7a:d3:de:aa:7d: 53:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:1F:FE:36:5C:21:A7:EA:E1:71:05:93:89:9A:7E:2B:76:EF:A2:27 X509v3 Authority Key Identifier: keyid:1C:68:3F:95:C9:8D:2C:FE:9D:79:CD:D3:DB:8E:E8:13:8B:B3:57:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGg_lcmNLP6dec3T247oE4uzV3I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/hx_-Nlwhp-rhcQWTiZp-K3bvoic.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.61.166.0/24 IPv6: 2a02:830:4::/48 Signature Algorithm: sha256WithRSAEncryption 03:06:6b:52:ae:ad:07:7c:d8:1b:16:33:0b:5c:d7:bc:02:57: fa:08:56:e1:be:4b:3e:ab:f2:b5:53:52:91:90:f9:dd:f3:87: ad:b1:4d:d3:19:90:ad:c6:42:c1:c1:43:ba:d9:38:2c:f8:cf: 4b:45:68:d5:07:6d:3e:ba:60:f9:ba:2d:16:8f:b6:05:b0:bd: a8:4c:fb:ad:39:b2:06:55:91:18:02:e9:41:b3:c3:9c:54:91: 7e:39:d5:24:4b:dd:7c:5b:6e:2c:92:cd:02:5d:09:d0:63:9f: b6:fa:18:0c:2a:f3:99:5e:ac:c8:87:72:e4:f7:5b:1f:89:97: 5d:d4:a0:52:2f:98:81:a9:da:c3:3d:e6:55:e6:51:11:75:7a: 2d:d9:66:a4:71:7b:eb:6c:f2:ff:b9:18:4e:9c:74:80:68:03: a5:78:ae:e6:43:e2:cb:0b:2b:0c:71:d4:43:24:28:52:50:b8: 17:6b:c3:e4:13:9d:67:e7:eb:42:6c:b8:10:82:00:aa:b5:69: c5:9b:06:b5:81:02:d2:6c:37:38:ce:97:d5:0c:07:7e:c4:d6: b8:e7:d2:f0:2d:73:dd:26:6b:ee:86:55:9c:75:e3:6f:27:36: 2f:f5:a2:bb:52:49:05:38:e2:6a:99:fa:4d:0c:58:b9:a4:c9: 08:56:7f:ed -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt57VibKAizfdGK1dyNbDEQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjNjgzZjk1Yzk4ZDJjZmU5ZDc5Y2RkM2RiOGVlODEzOGJi MzU3NzIwHhcNMjYwMTAxMTQxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NzFmZmUzNjVjMjFhN2VhZTE3MTA1OTM4OTlhN2UyYjc2ZWZhMjI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1Z/AOXeECGftpC/st5pMb0mq8P2 77PA0LejnlqWhpRNnjc4SA3QyTHyQOrtOXI+NIQkqoH8m7ysdltOWsxiaZmFcR6X SRUaXU8j1DyVHJalhT/0WIGvZ+8WgndCwi8aAta4h2OxfAfrj8R+6z51Ziq+4wLv k9VcJi2PHu72LsszqVcvZ9QTEw3n80hbpVmfVszmvsuCgO1RooQovWsgIwTWCe2f QiRw/Rklyu7hYY4XMS7roPM8MK/KPIkad0QuX2ru6QwgpUnYgvixCXTfqTqTJHjO hcdF5vzx6Kht6PrMQQwIa8C+F7Y7vNXOOIgVZRBiGXcjz7u9etPeqn1TyQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFIcf/jZcIafq4XEFk4mafit276InMB8GA1UdIwQY MBaAFBxoP5XJjSz+nXnN09uO6BOLs1dyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEdnX2xjbU5MUDZkZWMzVDI0N29FNHV6VjNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC81MDZmM2QtYzg2My00NjJmLTg3ZWIt YjNhZTFlNGMzMmI3LzEvaHhfLU5sd2hwLXJoY1FXVGlacC1LM2J2b2ljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC81MDZmM2QtYzg2My00NjJmLTg3ZWItYjNhZTFlNGMzMmI3 LzEvSEdnX2xjbU5MUDZkZWMzVDI0N29FNHV6VjNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQA1D2mMA8E AgACMAkDBwAqAggwAAQwDQYJKoZIhvcNAQELBQADggEBAAMGa1KurQd82BsWMwtc 17wCV/oIVuG+Sz6r8rVTUpGQ+d3zh62xTdMZkK3GQsHBQ7rZOCz4z0tFaNUHbT66 YPm6LRaPtgWwvahM+605sgZVkRgC6UGzw5xUkX451SRL3XxbbiySzQJdCdBjn7b6 GAwq85lerMiHcuT3Wx+Jl13UoFIvmIGp2sM95lXmURF1ei3ZZqRxe+ts8v+5GE6c dIBoA6V4ruZD4ssLKwxx1EMkKFJQuBdrw+QTnWfn60JsuBCCAKq1acWbBrWBAtJs NzjOl9UMB37E1rjn0vAtc90ma+6GVZx1428nNi/1ortSSQU44mqZ+k0MWLmkyQhW f+0= -----END CERTIFICATE-----Generated at Tue Jan 20 01:22:22 2026 by rpki-client