This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/HXdTxxWcJtGk43e4sYB_pqFMLTc.roa File: HXdTxxWcJtGk43e4sYB_pqFMLTc.roa (raw, json) Hash identifier: RsmEntoDX046XG0OnjFT3g2UwaVd62q2eGZGnABzJrY= Subject key identifier: 1D:77:53:C7:15:9C:26:D1:A4:E3:77:B8:B1:80:7F:A6:A1:4C:2D:37 Certificate issuer: /CN=d2c1d5fd4e20ade5f11b66afb10a54c8ffe4b040 Certificate serial: 019B7834B58CB7E5C2CFE4D884D83B3D92BA Authority key identifier: D2:C1:D5:FD:4E:20:AD:E5:F1:1B:66:AF:B1:0A:54:C8:FF:E4:B0:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sHV_U4greXxG2avsQpUyP_ksEA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/HXdTxxWcJtGk43e4sYB_pqFMLTc.roa Signing time: Thu 01 Jan 2026 06:17:58 +0000 ROA not before: Thu 01 Jan 2026 06:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 192.118.70.0/24 maxlen: 24 192.118.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.mft rsync://rpki.ripe.net/repository/DEFAULT/0sHV_U4greXxG2avsQpUyP_ksEA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:b5:8c:b7:e5:c2:cf:e4:d8:84:d8:3b:3d:92:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2c1d5fd4e20ade5f11b66afb10a54c8ffe4b040 Validity Not Before: Jan 1 06:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1d7753c7159c26d1a4e377b8b1807fa6a14c2d37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:26:f8:d6:48:69:92:ab:9c:cb:e2:4f:34:70: 33:9b:bc:d2:70:52:ff:23:50:d1:14:7e:5a:5f:ce: 0e:d1:2e:f5:cd:dd:f7:d9:4f:22:6c:48:83:69:af: 1e:c6:4e:fd:61:41:63:ed:bd:bc:c5:1f:4b:17:67: 1e:01:73:66:10:6a:ad:38:90:5d:7e:c6:a9:c4:e4: 02:44:99:ea:22:82:13:0f:1a:1e:aa:79:41:69:2b: f1:0d:d9:f0:c3:5f:07:c5:98:05:85:6a:5a:6a:f9: 53:b2:a4:75:a7:18:bf:61:3b:be:f8:d9:ce:bb:d1: 38:59:db:76:c1:01:fd:74:47:1b:3b:8f:01:1c:db: 32:64:9e:9c:1b:e8:7b:36:fa:2b:e7:78:67:56:d3: ee:f8:12:ef:a7:bb:b4:96:c2:3c:f0:0d:f8:b5:c7: d8:05:5e:fd:4d:6c:6c:09:1f:63:00:da:1e:ce:36: 27:a0:f0:1c:71:50:c9:3c:e2:52:6d:d8:e9:0d:c4: 50:75:3c:e9:a3:c6:68:9b:52:0e:f9:f4:1a:80:ab: f8:6a:4d:e4:e2:0e:f9:7c:b0:4c:45:f3:a5:dc:77: 87:43:28:14:ad:ec:86:f5:57:23:ba:45:08:56:ca: ce:7e:39:e0:24:7b:6c:81:72:bd:85:c7:85:81:64: 7e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:77:53:C7:15:9C:26:D1:A4:E3:77:B8:B1:80:7F:A6:A1:4C:2D:37 X509v3 Authority Key Identifier: keyid:D2:C1:D5:FD:4E:20:AD:E5:F1:1B:66:AF:B1:0A:54:C8:FF:E4:B0:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sHV_U4greXxG2avsQpUyP_ksEA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/HXdTxxWcJtGk43e4sYB_pqFMLTc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.118.70.0/23 Signature Algorithm: sha256WithRSAEncryption 65:ea:57:85:d2:f6:8b:69:2c:e4:b8:40:03:27:9c:c5:14:40: 54:3c:98:bc:71:2f:56:6d:ec:81:78:a5:a3:18:53:75:bb:4b: d5:2c:6b:96:e5:d5:3b:39:a8:37:82:02:da:14:d7:8c:26:57: 50:38:65:f6:ba:b3:83:d3:9f:65:76:bc:e8:44:b0:d9:e5:a8: a3:00:d4:d4:97:b6:9d:59:24:e4:c8:66:7c:3a:8b:b9:cf:5a: 52:6b:5d:6b:c8:e9:f3:e8:37:ab:1f:14:d5:99:c7:a2:4e:38: ff:5b:1c:55:3d:47:72:2c:e1:19:cc:a2:92:ba:f8:06:06:7d: 7f:17:a5:b2:43:10:8f:a6:f8:54:5b:d6:b9:53:02:8e:50:81: 2c:79:d9:1b:98:ba:64:bc:be:ff:41:14:ee:43:a8:af:a0:7b: 80:1f:b3:2a:37:93:13:16:b4:a5:15:47:26:09:7e:91:e1:10: eb:3b:fa:3a:ce:d9:01:1c:45:73:32:b4:5c:76:22:90:26:23: 55:b1:b9:54:08:ae:1f:31:d4:b2:6d:48:b5:af:c0:e7:bd:10: 66:95:34:1d:a3:1e:46:b2:c8:20:a3:04:e1:44:07:02:17:b5: 31:02:ac:98:c8:e4:f8:90:2a:a6:aa:aa:04:b0:e1:5c:dc:39: 1e:ca:4a:92 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NLWMt+XCz+TYhNg7PZK6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyYzFkNWZkNGUyMGFkZTVmMTFiNjZhZmIxMGE1NGM4ZmZl NGIwNDAwHhcNMjYwMTAxMDYxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZDc3NTNjNzE1OWMyNmQxYTRlMzc3YjhiMTgwN2ZhNmExNGMyZDM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtib41khpkqucy+JPNHAzm7zScFL/ I1DRFH5aX84O0S71zd332U8ibEiDaa8exk79YUFj7b28xR9LF2ceAXNmEGqtOJBd fsapxOQCRJnqIoITDxoeqnlBaSvxDdnww18HxZgFhWpaavlTsqR1pxi/YTu++NnO u9E4Wdt2wQH9dEcbO48BHNsyZJ6cG+h7Nvor53hnVtPu+BLvp7u0lsI88A34tcfY BV79TWxsCR9jANoezjYnoPAccVDJPOJSbdjpDcRQdTzpo8Zom1IO+fQagKv4ak3k 4g75fLBMRfOl3HeHQygUreyG9VcjukUIVsrOfjngJHtsgXK9hceFgWR+WQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB13U8cVnCbRpON3uLGAf6ahTC03MB8GA1UdIwQY MBaAFNLB1f1OIK3l8Rtmr7EKVMj/5LBAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHNIVl9VNGdyZVh4RzJhdnNRcFV5UF9rc0VBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC84NjEzYWQtNGY1Zi00NWZkLTg3OTkt YTA5YTg3NWY1OTAzLzEvSFhkVHh4V2NKdEdrNDNlNHNZQl9wcUZNTFRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC84NjEzYWQtNGY1Zi00NWZkLTg3OTktYTA5YTg3NWY1OTAz LzEvMHNIVl9VNGdyZVh4RzJhdnNRcFV5UF9rc0VBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwHZGMA0G CSqGSIb3DQEBCwUAA4IBAQBl6leF0vaLaSzkuEADJ5zFFEBUPJi8cS9WbeyBeKWj GFN1u0vVLGuW5dU7Oag3ggLaFNeMJldQOGX2urOD059ldrzoRLDZ5aijANTUl7ad WSTkyGZ8Oou5z1pSa11ryOnz6DerHxTVmceiTjj/WxxVPUdyLOEZzKKSuvgGBn1/ F6WyQxCPpvhUW9a5UwKOUIEsedkbmLpkvL7/QRTuQ6ivoHuAH7MqN5MTFrSlFUcm CX6R4RDrO/o6ztkBHEVzMrRcdiKQJiNVsblUCK4fMdSybUi1r8DnvRBmlTQdox5G ssggowThRAcCF7UxAqyYyOT4kCqmqqoEsOFc3DkeykqS -----END CERTIFICATE-----Generated at Wed Jan 7 23:51:45 2026 by rpki-client