This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/HxVorLXm0yTMdgmPOzs8OYBM6LM.roa File: HxVorLXm0yTMdgmPOzs8OYBM6LM.roa (raw, json) Hash identifier: z2JydnrSsQ2VCjSLoL2TGZXu5BWrRoEvvg+D8RtBoMk= Subject key identifier: 1F:15:68:AC:B5:E6:D3:24:CC:76:09:8F:3B:3B:3C:39:80:4C:E8:B3 Certificate issuer: /CN=8133d89c06a8a1cc9dbc362201f7ec559d7fdd48 Certificate serial: 019B7A5AF6FC251ABF39EE525CEF516921FC Authority key identifier: 81:33:D8:9C:06:A8:A1:CC:9D:BC:36:22:01:F7:EC:55:9D:7F:DD:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/HxVorLXm0yTMdgmPOzs8OYBM6LM.roa Signing time: Thu 01 Jan 2026 16:19:00 +0000 ROA not before: Thu 01 Jan 2026 16:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64475 IP address blocks: 45.157.8.0/23 maxlen: 24 2a0f:3785::/32 maxlen: 48 2a0f:3786::/40 maxlen: 40 2a0f:3786:10::/44 maxlen: 44 2a0f:3786:20::/44 maxlen: 44 2a0f:3786:80::/41 maxlen: 48 2a0f:3786:100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.crl rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.mft rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:f6:fc:25:1a:bf:39:ee:52:5c:ef:51:69:21:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8133d89c06a8a1cc9dbc362201f7ec559d7fdd48 Validity Not Before: Jan 1 16:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f1568acb5e6d324cc76098f3b3b3c39804ce8b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:91:4e:61:1b:7b:4c:24:6d:25:0b:a7:cf:7c: 60:9f:61:06:2d:f3:e2:d5:f3:c3:22:c8:ee:eb:b3: a2:28:d8:66:f1:2d:f3:99:83:fe:65:5f:bd:3d:db: dd:14:ec:54:b9:45:40:0e:14:3c:90:99:00:59:05: 83:5e:70:23:80:3b:f0:04:f2:9d:05:e5:68:71:ee: 1a:18:02:f2:96:27:5e:8e:a5:a6:26:fe:32:83:f6: 3a:a7:80:c2:e7:42:d5:9c:47:d2:56:c3:82:ce:5e: c7:87:76:bb:3c:7f:ec:db:1d:d9:ec:ca:9f:dd:c4: 5c:4b:fb:31:bf:5d:05:c2:60:c2:4b:2c:54:b1:98: b2:a0:03:bf:28:61:39:f5:3a:5f:47:95:e3:a2:bd: 24:ef:8f:77:1a:39:07:55:c7:95:cb:77:0c:10:5d: 96:9c:17:67:63:4c:09:59:17:ac:90:6f:89:05:23: a5:0e:5d:4a:3f:ed:ab:50:b1:5e:2e:85:3c:cc:7e: 21:be:04:da:90:28:d4:19:dc:e6:6f:20:64:a4:ef: a1:f9:85:4f:ba:7e:47:ad:45:14:10:79:43:f3:74: 5b:c8:b0:ec:a9:85:76:3e:bd:a7:bf:8b:8c:38:56: 28:50:6d:6c:2c:c3:e7:a0:f9:8d:f0:a6:e0:eb:f5: 76:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:15:68:AC:B5:E6:D3:24:CC:76:09:8F:3B:3B:3C:39:80:4C:E8:B3 X509v3 Authority Key Identifier: keyid:81:33:D8:9C:06:A8:A1:CC:9D:BC:36:22:01:F7:EC:55:9D:7F:DD:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/HxVorLXm0yTMdgmPOzs8OYBM6LM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.157.8.0/23 IPv6: 2a0f:3785::-2a0f:3786:100:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 12:1b:23:0a:e5:6f:1c:35:b4:1f:1f:1e:a8:4e:23:50:23:a4: f7:f6:bd:ca:ff:66:67:9e:c1:7b:26:3a:ca:bc:98:68:7a:d6: e5:85:ca:8a:fd:1d:01:39:18:2c:49:fa:99:00:21:3f:8a:9f: 3b:ad:49:3e:9d:2b:3a:0e:a8:28:9f:1e:db:18:af:d1:db:2e: ed:e4:d8:0e:d0:d6:fa:80:77:21:1e:27:36:61:da:e4:95:b6: b5:05:ff:30:d3:cd:0d:dc:45:62:db:a9:c9:50:72:19:8a:43: 55:41:34:eb:8f:e3:37:3b:bc:67:c9:5f:50:3e:80:ae:7a:ba: a4:77:07:54:e2:84:75:ce:32:9f:50:f2:dc:6d:04:49:b2:50: f2:5b:8b:68:5b:b4:19:b1:03:92:35:50:d9:a2:ca:43:58:1d: c3:bb:52:70:ab:eb:ac:66:e3:33:9b:a4:9e:8c:59:d2:68:b9: d8:8a:48:76:da:65:1e:20:2c:1c:20:78:3c:d4:23:b0:80:97: 7b:b3:c7:31:2a:7f:54:a6:0f:19:43:95:58:56:09:a0:5c:3a: e4:96:c9:9b:b7:47:52:66:e4:53:61:07:05:a4:6a:32:39:ad: da:dc:9f:9b:f5:a2:9a:53:98:a8:a1:0b:85:e6:55:61:4b:99: 44:b2:4c:be -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt6Wvb8JRq/Oe5SXO9RaSH8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxMzNkODljMDZhOGExY2M5ZGJjMzYyMjAxZjdlYzU1OWQ3 ZmRkNDgwHhcNMjYwMTAxMTYxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjE1NjhhY2I1ZTZkMzI0Y2M3NjA5OGYzYjNiM2MzOTgwNGNlOGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZFOYRt7TCRtJQunz3xgn2EGLfPi 1fPDIsju67OiKNhm8S3zmYP+ZV+9PdvdFOxUuUVADhQ8kJkAWQWDXnAjgDvwBPKd BeVoce4aGALylidejqWmJv4yg/Y6p4DC50LVnEfSVsOCzl7Hh3a7PH/s2x3Z7Mqf 3cRcS/sxv10FwmDCSyxUsZiyoAO/KGE59TpfR5Xjor0k7493GjkHVceVy3cMEF2W nBdnY0wJWReskG+JBSOlDl1KP+2rULFeLoU8zH4hvgTakCjUGdzmbyBkpO+h+YVP un5HrUUUEHlD83RbyLDsqYV2Pr2nv4uMOFYoUG1sLMPnoPmN8Kbg6/V2QQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFB8VaKy15tMkzHYJjzs7PDmATOizMB8GA1UdIwQY MBaAFIEz2JwGqKHMnbw2IgH37FWdf91IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1RQWW5BYW9vY3lkdkRZaUFmZnNWWjFfM1VnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9lOTBmZjItNmM5MS00ZWI4LWE0YjEt YzVmZWJlNDg3YzQwLzEvSHhWb3JMWG0weVRNZGdtUE96czhPWUJNNkxNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC9lOTBmZjItNmM5MS00ZWI4LWE0YjEtYzVmZWJlNDg3YzQw LzEvZ1RQWW5BYW9vY3lkdkRZaUFmZnNWWjFfM1VnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQBLZ0IMBgE AgACMBIwEAMFACoPN4UDBwAqDzeGAQAwDQYJKoZIhvcNAQELBQADggEBABIbIwrl bxw1tB8fHqhOI1AjpPf2vcr/ZmeewXsmOsq8mGh61uWFyor9HQE5GCxJ+pkAIT+K nzutST6dKzoOqCifHtsYr9HbLu3k2A7Q1vqAdyEeJzZh2uSVtrUF/zDTzQ3cRWLb qclQchmKQ1VBNOuP4zc7vGfJX1A+gK56uqR3B1TihHXOMp9Q8txtBEmyUPJbi2hb tBmxA5I1UNmiykNYHcO7UnCr66xm4zObpJ6MWdJoudiKSHbaZR4gLBwgeDzUI7CA l3uzxzEqf1SmDxlDlVhWCaBcOuSWyZu3R1Jm5FNhBwWkajI5rdrcn5v1oppTmKih C4XmVWFLmUSyTL4= -----END CERTIFICATE-----Generated at Mon Feb 2 07:53:45 2026 by rpki-client