This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/HxGP4RyCdmbtsC_X7rEOMPaadGs.roa File: HxGP4RyCdmbtsC_X7rEOMPaadGs.roa (raw, json) Hash identifier: E1pPUcXW5mPkpSrQhelqafY4OsK2tjQxSmKWda1vbOE= Subject key identifier: 1F:11:8F:E1:1C:82:76:66:ED:B0:2F:D7:EE:B1:0E:30:F6:9A:74:6B Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Certificate serial: 019B7CEDCF5F6738580A90D6C4C6B710E7E8 Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/HxGP4RyCdmbtsC_X7rEOMPaadGs.roa Signing time: Fri 02 Jan 2026 04:18:38 +0000 ROA not before: Fri 02 Jan 2026 04:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215362 IP address blocks: 88.80.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:cf:5f:67:38:58:0a:90:d6:c4:c6:b7:10:e7:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Validity Not Before: Jan 2 04:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f118fe11c827666edb02fd7eeb10e30f69a746b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6d:d6:01:32:96:9e:c9:25:43:25:e3:db:a0: 42:d8:11:ba:e8:93:12:35:ab:79:d8:9e:44:c1:d7: e1:01:bb:fe:2d:6e:bf:fe:42:5b:09:ff:2b:3e:dd: f7:cf:b3:75:df:84:5b:56:c9:40:7e:54:1d:9b:59: bf:9a:c3:cd:fe:e1:d8:c4:61:35:2a:43:6d:e1:ff: 5a:f8:c0:e2:27:2e:39:3d:3e:82:89:8d:08:bd:ba: cc:e1:38:88:6d:49:9c:1e:7b:54:1c:47:82:e1:2c: ec:0b:34:95:a4:12:63:2a:85:b5:b6:2f:b5:5a:b0: 5a:01:e1:bf:7c:43:09:9f:9e:2a:e6:ae:5a:6a:54: 46:02:c0:1d:00:c0:0f:1a:9d:d0:42:d3:16:53:09: 23:0f:13:5b:28:58:af:e4:f8:d3:db:8c:0a:a3:25: 0b:f8:3a:23:44:0d:6b:eb:8f:dd:61:24:6e:44:cf: fe:59:bf:13:2d:07:ff:1a:45:a8:b7:42:e7:d3:35: 69:e3:64:36:65:e0:bd:36:fe:b1:cd:bf:a6:cb:e4: 5f:8c:ee:ed:cc:0b:17:2c:5f:49:7d:ba:d0:a3:8a: 13:9b:bf:3d:38:da:f0:7b:08:30:9f:7f:45:14:5c: e1:90:2f:b5:d7:b6:71:c6:a5:5d:39:7f:42:af:f3: 20:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:11:8F:E1:1C:82:76:66:ED:B0:2F:D7:EE:B1:0E:30:F6:9A:74:6B X509v3 Authority Key Identifier: keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/HxGP4RyCdmbtsC_X7rEOMPaadGs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.80.135.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:92:20:fb:72:85:9c:d8:8c:41:be:d2:5a:39:24:ff:9d:fb: ef:51:29:e6:a9:98:e9:d7:8b:a1:85:bc:f8:bc:27:97:ea:5f: 25:19:52:e5:23:b2:c6:66:31:83:03:ec:c6:c0:1f:ea:41:37: ee:2b:37:a3:ec:b6:cd:5a:59:7e:df:f6:d9:9e:98:53:c8:37: 42:56:8d:b5:d9:fa:ba:3c:4b:aa:1d:21:8e:76:6f:79:66:43: 4d:e4:99:4b:16:d3:7f:93:ce:8f:fc:2e:af:03:5b:98:bd:20: ca:cc:46:16:95:8f:e8:a0:34:d5:dd:03:f0:a2:45:5d:30:d3: 19:a2:15:d5:86:e4:1d:01:b2:8f:0b:e8:72:92:d4:49:ae:7a: 56:fc:56:2f:17:46:69:02:71:17:95:2d:b7:dd:e4:a6:1e:d5: 84:46:62:61:92:a1:d7:58:0d:55:83:c7:31:c9:a9:a9:70:23: 21:a4:80:c1:d2:92:64:f2:75:78:17:16:aa:6a:a3:6e:e8:f5: eb:84:29:c9:8a:42:42:09:f6:ae:ed:22:b5:21:f6:cc:0d:04: f1:9a:01:81:c3:e7:7c:08:70:13:42:d8:e5:4c:73:8e:f9:69: b7:81:d2:d6:3b:0b:b3:6e:5e:60:b7:af:12:4d:c0:0a:0f:e3: f1:67:b7:bb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87c9fZzhYCpDWxMa3EOfoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2 MzFiZmIwHhcNMjYwMTAyMDQxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjExOGZlMTFjODI3NjY2ZWRiMDJmZDdlZWIxMGUzMGY2OWE3NDZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsm3WATKWnsklQyXj26BC2BG66JMS Nat52J5EwdfhAbv+LW6//kJbCf8rPt33z7N134RbVslAflQdm1m/msPN/uHYxGE1 KkNt4f9a+MDiJy45PT6CiY0IvbrM4TiIbUmcHntUHEeC4SzsCzSVpBJjKoW1ti+1 WrBaAeG/fEMJn54q5q5aalRGAsAdAMAPGp3QQtMWUwkjDxNbKFiv5PjT24wKoyUL +DojRA1r64/dYSRuRM/+Wb8TLQf/GkWot0Ln0zVp42Q2ZeC9Nv6xzb+my+RfjO7t zAsXLF9JfbrQo4oTm789ONrwewgwn39FFFzhkC+117ZxxqVdOX9Cr/MgGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB8Rj+EcgnZm7bAv1+6xDjD2mnRrMB8GA1UdIwQY MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt YWI4ZjFmMzM4N2VlLzEvSHhHUDRSeUNkbWJ0c0NfWDdyRU9NUGFhZEdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWFCHMA0G CSqGSIb3DQEBCwUAA4IBAQBckiD7coWc2IxBvtJaOST/nfvvUSnmqZjp14uhhbz4 vCeX6l8lGVLlI7LGZjGDA+zGwB/qQTfuKzej7LbNWll+3/bZnphTyDdCVo212fq6 PEuqHSGOdm95ZkNN5JlLFtN/k86P/C6vA1uYvSDKzEYWlY/ooDTV3QPwokVdMNMZ ohXVhuQdAbKPC+hyktRJrnpW/FYvF0ZpAnEXlS233eSmHtWERmJhkqHXWA1Vg8cx yampcCMhpIDB0pJk8nV4FxaqaqNu6PXrhCnJikJCCfau7SK1IfbMDQTxmgGBw+d8 CHATQtjlTHOO+Wm3gdLWOwuzbl5gt68STcAKD+PxZ7e7 -----END CERTIFICATE-----Generated at Mon Jan 19 11:08:33 2026 by rpki-client