This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Hax8GB2J-H6R3iCVpemu2tiF_sI.roa File: Hax8GB2J-H6R3iCVpemu2tiF_sI.roa (raw, json) Hash identifier: PIhzPmv1YvR0IXTdZTTCMYypFucD2j1EiLvFEqHiGI0= Subject key identifier: 1D:AC:7C:18:1D:89:F8:7E:91:DE:20:95:A5:E9:AE:DA:D8:85:FE:C2 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84C81A799336B06E480818F04EAE80 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Hax8GB2J-H6R3iCVpemu2tiF_sI.roa Signing time: Fri 02 Jan 2026 16:22:47 +0000 ROA not before: Fri 02 Jan 2026 16:22:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214957 IP address blocks: 94.183.150.0/24 maxlen: 24 94.183.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:c8:1a:79:93:36:b0:6e:48:08:18:f0:4e:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1dac7c181d89f87e91de2095a5e9aedad885fec2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:de:8d:ef:aa:b9:28:a1:6c:7b:2b:d0:cb:31: fd:e3:f1:4c:9d:13:50:b1:11:87:37:09:b1:7e:eb: d6:5e:5d:9d:30:3d:38:ed:10:96:f4:46:4a:b5:c5: d6:95:02:8f:5a:12:4b:a9:d6:78:98:5f:be:b6:85: 93:16:87:5e:58:e0:6f:4c:c3:e8:f9:8a:aa:33:89: 9a:fe:0b:4b:fd:5e:c8:92:30:6a:1e:9c:f1:1d:69: e7:6a:e0:bd:43:15:8f:1a:a0:60:05:d4:58:5c:7d: ef:cd:7b:9b:4e:9e:60:f1:c1:f8:29:59:bc:ad:2f: 84:f0:f0:71:34:4a:28:a0:34:44:27:a3:ec:78:56: e9:70:14:2e:24:df:76:98:7f:60:e8:29:5a:28:c7: 60:8c:3b:b6:28:47:f7:91:ac:af:30:97:fb:d7:88: 7f:a4:c1:c1:b8:b6:cb:2e:fa:4f:39:e5:30:7a:da: 66:d1:1d:6f:a4:0d:27:0b:66:94:cb:95:db:45:95: e1:ff:f5:47:2c:8f:c6:25:32:d6:0f:7b:70:d3:87: 2f:84:64:b3:42:c0:3c:71:62:7d:7e:0e:8a:52:76: 71:42:16:2e:b3:69:3d:fa:ea:38:5e:9e:aa:03:8c: 0a:68:7f:7d:af:bb:e3:75:52:c0:b7:a4:05:15:90: 54:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:AC:7C:18:1D:89:F8:7E:91:DE:20:95:A5:E9:AE:DA:D8:85:FE:C2 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Hax8GB2J-H6R3iCVpemu2tiF_sI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.183.150.0/24 94.183.162.0/24 Signature Algorithm: sha256WithRSAEncryption b4:97:aa:fd:6a:ca:5c:98:4a:3b:dc:27:03:5b:c9:cf:b3:49: ec:f1:a5:25:f7:3f:8a:93:ed:1f:7d:c9:0c:2d:74:03:6f:51: 1f:05:a5:a5:59:b0:4e:04:d5:59:cf:2c:33:5f:79:86:64:59: 9c:f7:44:d1:a9:6e:27:65:52:8e:e3:cd:b0:ee:bd:53:f8:fe: b2:cc:3d:24:ff:05:67:d9:66:f6:c8:85:72:d6:1a:1b:77:1f: e0:83:6d:bb:24:88:db:8a:78:4d:e0:d9:2e:98:5e:59:97:92: d2:60:fc:b9:7d:bd:cb:5c:69:4b:2a:9b:5d:b4:d1:a3:bb:6d: 33:db:bf:59:39:58:1b:fb:6e:54:a7:6e:70:3a:84:0d:33:c0: c8:7d:31:87:66:95:78:95:f0:ba:d5:cd:12:8f:a8:a4:1d:a6: 5f:7d:10:6c:65:2f:b6:65:3e:6d:9f:10:b7:b8:41:94:3d:e2: ce:f4:f4:18:a2:4c:af:da:10:ed:31:5d:30:df:b0:48:21:14: 8f:80:bd:f6:ee:94:43:b6:20:40:0e:e2:1f:03:60:8e:20:1c: f0:96:cb:e3:5b:63:aa:6b:5e:e6:97:6b:22:67:7c:97:31:08: 10:db:7e:8e:ac:2f:90:3e:70:d9:fc:45:c2:1a:99:64:df:fc: b0:8e:ff:12 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hMgaeZM2sG5ICBjwTq6AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZGFjN2MxODFkODlmODdlOTFkZTIwOTVhNWU5YWVkYWQ4ODVmZWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlN6N76q5KKFseyvQyzH94/FMnRNQ sRGHNwmxfuvWXl2dMD047RCW9EZKtcXWlQKPWhJLqdZ4mF++toWTFodeWOBvTMPo +YqqM4ma/gtL/V7IkjBqHpzxHWnnauC9QxWPGqBgBdRYXH3vzXubTp5g8cH4KVm8 rS+E8PBxNEoooDREJ6PseFbpcBQuJN92mH9g6ClaKMdgjDu2KEf3kayvMJf714h/ pMHBuLbLLvpPOeUwetpm0R1vpA0nC2aUy5XbRZXh//VHLI/GJTLWD3tw04cvhGSz QsA8cWJ9fg6KUnZxQhYus2k9+uo4Xp6qA4wKaH99r7vjdVLAt6QFFZBUUwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFB2sfBgdifh+kd4glaXprtrYhf7CMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvSGF4OEdCMkotSDZSM2lDVnBlbXUydGlGX3NJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXreWAwQA XreiMA0GCSqGSIb3DQEBCwUAA4IBAQC0l6r9aspcmEo73CcDW8nPs0ns8aUl9z+K k+0ffckMLXQDb1EfBaWlWbBOBNVZzywzX3mGZFmc90TRqW4nZVKO482w7r1T+P6y zD0k/wVn2Wb2yIVy1hobdx/gg227JIjbinhN4NkumF5Zl5LSYPy5fb3LXGlLKptd tNGju20z279ZOVgb+25Up25wOoQNM8DIfTGHZpV4lfC61c0Sj6ikHaZffRBsZS+2 ZT5tnxC3uEGUPeLO9PQYokyv2hDtMV0w37BIIRSPgL327pRDtiBADuIfA2COIBzw lsvjW2Oqa17ml2siZ3yXMQgQ236OrC+QPnDZ/EXCGplk3/ywjv8S -----END CERTIFICATE-----Generated at Mon Jan 5 14:35:52 2026 by rpki-client