This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/83470b-90b0-46b6-b963-301373c04196/1/Hkxvl640wTVaCG4wxC1K28YsvUQ.roa File: Hkxvl640wTVaCG4wxC1K28YsvUQ.roa (raw, json) Hash identifier: ekA7LP7tcvUQDtaAhAw2EppmtQVZSvzCUQgbHmX4j7E= Subject key identifier: 1E:4C:6F:97:AE:34:C1:35:5A:08:6E:30:C4:2D:4A:DB:C6:2C:BD:44 Certificate issuer: /CN=f23586f220ccb0d1c52c0aedf5e766eca1a11c74 Certificate serial: 019B7AC80A229B99274AE58689EF38EFE7AA Authority key identifier: F2:35:86:F2:20:CC:B0:D1:C5:2C:0A:ED:F5:E7:66:EC:A1:A1:1C:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8jWG8iDMsNHFLArt9edm7KGhHHQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/83470b-90b0-46b6-b963-301373c04196/1/Hkxvl640wTVaCG4wxC1K28YsvUQ.roa Signing time: Thu 01 Jan 2026 18:18:08 +0000 ROA not before: Thu 01 Jan 2026 18:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35609 IP address blocks: 193.239.40.0/22 maxlen: 23 2001:67c:4c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/83470b-90b0-46b6-b963-301373c04196/1/8jWG8iDMsNHFLArt9edm7KGhHHQ.crl rsync://rpki.ripe.net/repository/DEFAULT/95/83470b-90b0-46b6-b963-301373c04196/1/8jWG8iDMsNHFLArt9edm7KGhHHQ.mft rsync://rpki.ripe.net/repository/DEFAULT/8jWG8iDMsNHFLArt9edm7KGhHHQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:0a:22:9b:99:27:4a:e5:86:89:ef:38:ef:e7:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f23586f220ccb0d1c52c0aedf5e766eca1a11c74 Validity Not Before: Jan 1 18:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1e4c6f97ae34c1355a086e30c42d4adbc62cbd44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b2:93:ab:9b:16:db:ad:b2:51:21:29:08:7c: b7:fe:a1:f1:10:62:2a:36:24:55:62:39:b0:c3:13: 2b:a0:1f:67:08:07:5d:2d:a4:09:b4:13:b6:a5:57: 26:6b:be:27:12:76:8d:33:50:ae:55:9f:70:a9:6c: c0:6d:85:57:0f:01:67:fa:c7:2a:fa:56:5c:d8:3a: 5f:ec:a7:4d:8c:81:ac:f1:4f:0f:1c:f7:3f:9a:34: 44:28:01:65:31:0e:15:2c:d9:5a:15:ce:83:3a:b6: f6:bb:f2:4b:5d:45:42:d7:f0:8d:7a:94:84:87:58: 94:42:20:21:87:78:35:4f:f6:10:0b:fc:10:f7:d0: eb:8e:99:39:00:e2:34:c5:cc:e3:cd:73:9f:01:60: 99:1b:3b:5c:22:70:df:04:57:b3:1d:e3:a8:a7:67: 1b:9f:d5:1f:bb:82:d6:5c:48:16:5e:7c:39:08:5e: e8:e4:89:a3:0b:ff:7e:fe:80:e8:5d:d4:be:d0:18: 03:7c:8a:98:77:12:73:f3:13:b5:1e:2a:77:60:88: a7:58:54:cc:cc:0a:7d:4b:0d:d4:24:52:84:c0:f5: 2d:d9:d9:72:bb:89:15:8b:9e:e8:2f:db:98:46:03: 03:a4:07:e6:30:75:63:45:4f:be:91:07:eb:0e:7c: 5e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:4C:6F:97:AE:34:C1:35:5A:08:6E:30:C4:2D:4A:DB:C6:2C:BD:44 X509v3 Authority Key Identifier: keyid:F2:35:86:F2:20:CC:B0:D1:C5:2C:0A:ED:F5:E7:66:EC:A1:A1:1C:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8jWG8iDMsNHFLArt9edm7KGhHHQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/83470b-90b0-46b6-b963-301373c04196/1/Hkxvl640wTVaCG4wxC1K28YsvUQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/83470b-90b0-46b6-b963-301373c04196/1/8jWG8iDMsNHFLArt9edm7KGhHHQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.239.40.0/22 IPv6: 2001:67c:4c::/48 Signature Algorithm: sha256WithRSAEncryption 7f:c0:b0:03:5d:f6:17:17:f6:32:1a:06:4e:bb:4b:4a:f3:5f: 95:20:9c:b9:77:aa:c7:c5:b1:13:ca:be:2c:32:27:70:0a:72: d6:31:e1:a6:3f:93:dc:de:5b:96:6b:38:e1:0d:d0:bd:6d:e6: 01:9e:f7:02:3c:86:bb:e9:54:8a:13:7e:b8:a6:cd:da:54:49: 70:9e:d9:36:e2:1b:91:73:e8:00:b7:1b:1f:62:91:e5:7b:db: 7f:61:0a:71:1b:fd:c5:95:ab:83:d4:81:1c:ad:31:0d:5b:70: 82:96:96:76:34:75:e0:e3:78:df:cc:4d:96:18:34:e8:d0:8c: fc:70:e3:97:c1:13:12:72:ef:bc:ee:c1:b3:00:41:a1:46:c4: 3d:ec:2b:ff:6a:9d:9f:73:d7:81:f6:31:44:f2:b9:6b:20:17: 9e:99:be:77:76:8d:50:d3:a3:d7:cd:e2:a9:80:31:17:e7:9d: da:a0:5e:5a:99:92:f3:11:4c:14:ac:35:8d:93:c7:3f:6c:ac: b8:c0:3a:bf:39:7d:46:d3:6a:b6:a9:6e:4a:85:9d:eb:21:a6: ca:9b:af:05:a5:b6:80:96:7d:8b:0a:6b:b4:b9:af:a1:3d:66: 46:ef:49:0d:8d:da:f4:dd:c9:e2:98:59:b5:bc:bb:54:cb:fa: 7f:3f:33:78 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt6yAoim5knSuWGie847+eqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyMzU4NmYyMjBjY2IwZDFjNTJjMGFlZGY1ZTc2NmVjYTFh MTFjNzQwHhcNMjYwMTAxMTgxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZTRjNmY5N2FlMzRjMTM1NWEwODZlMzBjNDJkNGFkYmM2MmNiZDQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLKTq5sW262yUSEpCHy3/qHxEGIq NiRVYjmwwxMroB9nCAddLaQJtBO2pVcma74nEnaNM1CuVZ9wqWzAbYVXDwFn+scq +lZc2Dpf7KdNjIGs8U8PHPc/mjREKAFlMQ4VLNlaFc6DOrb2u/JLXUVC1/CNepSE h1iUQiAhh3g1T/YQC/wQ99Drjpk5AOI0xczjzXOfAWCZGztcInDfBFezHeOop2cb n9Ufu4LWXEgWXnw5CF7o5ImjC/9+/oDoXdS+0BgDfIqYdxJz8xO1Hip3YIinWFTM zAp9Sw3UJFKEwPUt2dlyu4kVi57oL9uYRgMDpAfmMHVjRU++kQfrDnxecwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFB5Mb5euNME1WghuMMQtStvGLL1EMB8GA1UdIwQY MBaAFPI1hvIgzLDRxSwK7fXnZuyhoRx0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGpXRzhpRE1zTkhGTEFydDllZG03S0doSEhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS84MzQ3MGItOTBiMC00NmI2LWI5NjMt MzAxMzczYzA0MTk2LzEvSGt4dmw2NDB3VFZhQ0c0d3hDMUsyOFlzdlVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS84MzQ3MGItOTBiMC00NmI2LWI5NjMtMzAxMzczYzA0MTk2 LzEvOGpXRzhpRE1zTkhGTEFydDllZG03S0doSEhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCwe8oMA8E AgACMAkDBwAgAQZ8AEwwDQYJKoZIhvcNAQELBQADggEBAH/AsANd9hcX9jIaBk67 S0rzX5UgnLl3qsfFsRPKviwyJ3AKctYx4aY/k9zeW5ZrOOEN0L1t5gGe9wI8hrvp VIoTfrimzdpUSXCe2TbiG5Fz6AC3Gx9ikeV7239hCnEb/cWVq4PUgRytMQ1bcIKW lnY0deDjeN/MTZYYNOjQjPxw45fBExJy77zuwbMAQaFGxD3sK/9qnZ9z14H2MUTy uWsgF56Zvnd2jVDTo9fN4qmAMRfnndqgXlqZkvMRTBSsNY2Txz9srLjAOr85fUbT arapbkqFneshpsqbrwWltoCWfYsKa7S5r6E9ZkbvSQ2N2vTdyeKYWbW8u1TL+n8/ M3g= -----END CERTIFICATE-----Generated at Tue Feb 10 01:24:02 2026 by rpki-client