This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/HXBc2A7MZIBk2r77DkihmzAMDb8.roa File: HXBc2A7MZIBk2r77DkihmzAMDb8.roa (raw, json) Hash identifier: ZfYjU3jnk0kh3i6Qv693kfddFUIwy1iuU4Sm8I9SGjA= Subject key identifier: 1D:70:5C:D8:0E:CC:64:80:64:DA:BE:FB:0E:48:A1:9B:30:0C:0D:BF Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294 Certificate serial: 019C44A336E59E59EE92C7908FA3867165F3 Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/HXBc2A7MZIBk2r77DkihmzAMDb8.roa Signing time: Mon 09 Feb 2026 23:01:12 +0000 ROA not before: Mon 09 Feb 2026 23:01:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 36137 IP address blocks: 103.17.202.0/24 maxlen: 24 103.17.203.0/24 maxlen: 24 103.86.36.0/23 maxlen: 24 103.124.156.0/23 maxlen: 24 110.34.38.0/24 maxlen: 24 116.204.166.0/24 maxlen: 24 192.144.78.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:a3:36:e5:9e:59:ee:92:c7:90:8f:a3:86:71:65:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294 Validity Not Before: Feb 9 23:01:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1d705cd80ecc648064dabefb0e48a19b300c0dbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:91:3d:15:e0:f7:f0:1b:de:b0:7f:d2:6b:22: 37:fd:b5:b9:88:11:f8:7e:cd:15:b9:b1:1c:46:00: 74:c5:2f:b1:a1:52:f2:ce:e1:5b:ae:16:5c:59:9d: 7c:9f:8c:c0:9b:a5:93:6c:e6:48:1a:99:54:24:66: 79:95:a3:10:36:92:50:76:5a:13:bb:0f:72:76:92: 27:18:bd:57:2a:2f:6a:4d:c7:b2:3c:a1:2d:6a:b2: 2c:fe:61:8b:92:02:8e:16:68:f1:00:4b:cc:5a:37: 5b:b9:3b:54:81:65:03:57:ce:d8:37:18:55:b4:c9: 9c:3c:0d:4c:5e:29:e1:f2:74:08:28:76:7d:59:1b: 3f:0c:70:21:22:c9:f7:98:e1:1f:0c:64:24:eb:eb: ae:05:be:4b:8f:4e:d0:b2:2e:b5:9c:ab:77:b7:57: 10:8c:42:52:85:36:8f:75:15:c6:67:64:1c:1c:9c: 14:f6:47:fb:fc:10:2b:f5:7b:45:86:d0:af:66:e1: 52:e2:ca:ed:90:c2:b9:95:65:a4:42:33:97:d7:48: 77:ef:7b:8c:c5:fa:13:ce:eb:df:6d:7d:e5:3b:84: f1:5d:09:d5:87:0a:fb:c1:f9:05:86:c7:52:85:73: 9e:91:c5:d2:82:83:ef:b1:1c:83:51:63:99:2c:f7: 38:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:70:5C:D8:0E:CC:64:80:64:DA:BE:FB:0E:48:A1:9B:30:0C:0D:BF X509v3 Authority Key Identifier: keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/HXBc2A7MZIBk2r77DkihmzAMDb8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.17.202.0/23 103.86.36.0/23 103.124.156.0/23 110.34.38.0/24 116.204.166.0/24 192.144.78.0/23 Signature Algorithm: sha256WithRSAEncryption b3:29:8f:de:af:31:df:b9:b1:75:48:e6:66:d6:0a:02:19:9a: db:cb:36:5e:54:aa:58:59:79:d8:ab:8f:69:0b:07:b1:9f:58: 44:3d:08:8e:a0:d2:58:e5:06:63:aa:ae:04:11:17:54:44:cb: 32:ff:43:27:0b:62:e0:38:6f:8a:58:87:39:74:8e:24:68:0f: 30:39:70:02:ba:80:26:dc:ae:63:da:2a:43:74:ff:c0:a8:f2: a7:45:13:96:69:9d:57:3d:71:c5:0b:c6:19:d6:71:79:b6:ec: b0:47:93:e9:68:e2:62:8d:58:09:cd:5a:ac:7e:80:ad:c9:ec: d6:66:aa:04:66:9d:bb:29:89:bf:60:c6:76:1b:7d:78:d5:07: c3:bf:7b:78:07:31:78:c9:d6:d0:0d:33:45:62:a0:44:24:85: 4c:17:9a:e3:f2:42:5f:be:1e:be:35:63:35:17:84:55:22:b3: d2:a1:33:3b:a5:2e:e7:40:2c:ce:4a:91:3a:07:fe:4d:53:f5: 29:0b:ba:b1:b3:67:e3:bd:0f:f1:f8:cf:3a:64:82:42:2f:97: 65:73:0a:8a:6d:85:67:38:47:96:7d:7f:10:21:90:95:fa:a5: fb:5d:b0:e8:5b:5b:7c:ce:8c:69:ac:85:1e:e1:1c:6e:cd:07: f9:27:50:c8 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZxEozblnlnukseQj6OGcWXzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxNGFhNTU3YzNkM2QxZTZiN2YwNTI1YzM0Y2MxZDQ4OGE1 YTkyOTQwHhcNMjYwMjA5MjMwMTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZDcwNWNkODBlY2M2NDgwNjRkYWJlZmIwZTQ4YTE5YjMwMGMwZGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA55E9FeD38BvesH/SayI3/bW5iBH4 fs0VubEcRgB0xS+xoVLyzuFbrhZcWZ18n4zAm6WTbOZIGplUJGZ5laMQNpJQdloT uw9ydpInGL1XKi9qTceyPKEtarIs/mGLkgKOFmjxAEvMWjdbuTtUgWUDV87YNxhV tMmcPA1MXinh8nQIKHZ9WRs/DHAhIsn3mOEfDGQk6+uuBb5Lj07Qsi61nKt3t1cQ jEJShTaPdRXGZ2QcHJwU9kf7/BAr9XtFhtCvZuFS4srtkMK5lWWkQjOX10h373uM xfoTzuvfbX3lO4TxXQnVhwr7wfkFhsdShXOekcXSgoPvsRyDUWOZLPc4dwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFB1wXNgOzGSAZNq++w5IoZswDA2/MB8GA1UdIwQY MBaAFJFKpVfD09Hmt/BSXDTMHUiKWpKUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYt NGEzNDhlN2JlNDQxLzEvSFhCYzJBN01aSUJrMnI3N0RraWhtekFNRGI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYtNGEzNDhlN2JlNDQx LzEva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQBZxHKAwQB Z1YkAwQBZ3ycAwQAbiImAwQAdMymAwQBwJBOMA0GCSqGSIb3DQEBCwUAA4IBAQCz KY/erzHfubF1SOZm1goCGZrbyzZeVKpYWXnYq49pCwexn1hEPQiOoNJY5QZjqq4E ERdURMsy/0MnC2LgOG+KWIc5dI4kaA8wOXACuoAm3K5j2ipDdP/AqPKnRROWaZ1X PXHFC8YZ1nF5tuywR5PpaOJijVgJzVqsfoCtyezWZqoEZp27KYm/YMZ2G3141QfD v3t4BzF4ydbQDTNFYqBEJIVMF5rj8kJfvh6+NWM1F4RVIrPSoTM7pS7nQCzOSpE6 B/5NU/UpC7qxs2fjvQ/x+M86ZIJCL5dlcwqKbYVnOEeWfX8QIZCV+qX7XbDoW1t8 zoxprIUe4RxuzQf5J1DI -----END CERTIFICATE-----Generated at Tue Feb 10 02:54:50 2026 by rpki-client