This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/HXbd8YE3koobug8ONVH1l3Tkvu0.roa File: HXbd8YE3koobug8ONVH1l3Tkvu0.roa (raw, json) Hash identifier: coLH6jx8YkTdalarRq46o6EBhv+pN85X5wLOXfVjseY= Subject key identifier: 1D:76:DD:F1:81:37:92:8A:1B:BA:0F:0E:35:51:F5:97:74:E4:BE:ED Certificate issuer: /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244 Certificate serial: 019A90C31DC6C614EC9961C3B3B2053FE8D8 Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/HXbd8YE3koobug8ONVH1l3Tkvu0.roa Signing time: Mon 17 Nov 2025 07:41:37 +0000 ROA not before: Mon 17 Nov 2025 07:41:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 55933 IP address blocks: 45.153.128.0/22 maxlen: 24 193.42.24.0/22 maxlen: 24 193.42.26.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 15:55:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:90:c3:1d:c6:c6:14:ec:99:61:c3:b3:b2:05:3f:e8:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244 Validity Not Before: Nov 17 07:41:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1d76ddf18137928a1bba0f0e3551f59774e4beed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:78:4e:11:8c:92:2e:54:32:24:26:f8:a4:cb: 71:9b:90:4b:5b:ee:d2:2f:7c:a2:43:7f:d8:5e:47: bb:0d:a6:b5:cf:27:43:48:9f:46:a7:f2:9e:e2:24: c3:bb:7f:eb:ab:8e:2f:4c:23:e2:d7:83:82:dc:7a: b2:84:fc:28:2d:1a:99:1b:91:33:a6:f9:39:f3:8e: c3:08:42:83:76:3f:8c:a7:14:1a:52:5a:12:fc:97: 07:d5:5d:35:60:cf:5a:33:0d:24:30:26:e8:cf:83: b9:f2:61:af:b7:18:12:6e:96:e5:f4:eb:0f:1d:75: d6:cc:7d:3c:87:d6:4c:f3:46:e3:10:1d:0b:ba:8e: 11:75:09:d4:0e:db:a8:f9:35:f4:c4:33:79:81:1a: 95:e5:7d:72:3b:46:e6:08:e8:1e:15:86:93:6e:8e: 0e:28:00:d4:16:5d:24:8c:e0:86:66:63:5f:fa:c6: fb:a4:e2:2e:3b:0e:54:dc:c6:6c:4b:b5:dd:51:a5: da:4e:9a:1c:4a:f2:6c:9e:30:d3:84:64:f7:32:c7: f3:8a:06:73:30:90:b3:0c:a0:10:3b:00:04:39:3d: 0a:a8:71:38:07:dd:18:c0:e5:95:6f:2c:aa:02:fc: dd:5e:3f:ad:fc:13:a0:65:f0:e6:96:f2:c5:fa:fd: 54:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:76:DD:F1:81:37:92:8A:1B:BA:0F:0E:35:51:F5:97:74:E4:BE:ED X509v3 Authority Key Identifier: keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/HXbd8YE3koobug8ONVH1l3Tkvu0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.153.128.0/22 193.42.24.0/22 Signature Algorithm: sha256WithRSAEncryption 1a:9c:b5:64:2f:eb:d9:e2:61:01:d8:d6:03:7b:3f:e2:4f:13: 80:0c:d8:00:e0:5c:91:2d:f2:e4:d6:05:19:b9:b9:4f:d7:11: f1:f0:ae:5a:f0:f8:f0:b1:61:9e:45:7d:1f:eb:14:9e:92:2c: ce:ec:e8:98:eb:ca:bd:d3:9f:5a:37:68:6e:63:db:63:4d:7f: d0:d3:12:b5:b9:f9:26:bd:0e:fb:7d:8a:10:72:b2:e9:40:1e: 8e:f0:44:98:d9:16:55:e1:86:c4:fd:6e:02:d8:d4:da:74:f2: 31:d0:33:0d:99:dd:1b:13:72:a6:e9:23:b6:7d:3f:b9:24:3b: 0a:c6:0f:16:75:dd:2a:18:5d:24:bd:d5:eb:4b:97:0a:a8:75: 1e:80:6b:ac:d5:f8:90:06:06:38:37:0f:d8:4d:5a:f4:0a:d7: 92:fc:3a:9e:15:b7:e0:5d:85:61:01:8f:ef:5f:32:de:c5:33: ce:22:0a:9e:3b:15:b9:77:22:86:86:0a:92:d4:d4:3e:6f:d7: 6c:b5:26:de:1e:61:ac:1c:23:ef:59:88:01:0c:8a:85:b4:f1: f4:1d:dd:d5:c8:67:73:45:00:c0:91:34:54:3c:3c:c8:a3:a2: d7:3e:17:d4:3b:95:2b:7b:65:03:b4:55:9d:d3:13:08:cb:40: 22:88:77:9b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZqQwx3GxhTsmWHDs7IFP+jYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMzcxODMzNDFhMmFiNmRmM2M1OWVjODI3ZWQ3MTIwMGI1 YTYyNDQwHhcNMjUxMTE3MDc0MTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZDc2ZGRmMTgxMzc5MjhhMWJiYTBmMGUzNTUxZjU5Nzc0ZTRiZWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3hOEYySLlQyJCb4pMtxm5BLW+7S L3yiQ3/YXke7Daa1zydDSJ9Gp/Ke4iTDu3/rq44vTCPi14OC3HqyhPwoLRqZG5Ez pvk5847DCEKDdj+MpxQaUloS/JcH1V01YM9aMw0kMCboz4O58mGvtxgSbpbl9OsP HXXWzH08h9ZM80bjEB0Luo4RdQnUDtuo+TX0xDN5gRqV5X1yO0bmCOgeFYaTbo4O KADUFl0kjOCGZmNf+sb7pOIuOw5U3MZsS7XdUaXaTpocSvJsnjDThGT3MsfzigZz MJCzDKAQOwAEOT0KqHE4B90YwOWVbyyqAvzdXj+t/BOgZfDmlvLF+v1UVQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFB123fGBN5KKG7oPDjVR9Zd05L7tMB8GA1UdIwQY MBaAFIs3GDNBoqtt88WeyCftcSALWmJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUt MDg1MmNiMzUzMjkzLzEvSFhiZDhZRTNrb29idWc4T05WSDFsM1RrdnUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUtMDg1MmNiMzUzMjkz LzEvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLZmAAwQC wSoYMA0GCSqGSIb3DQEBCwUAA4IBAQAanLVkL+vZ4mEB2NYDez/iTxOADNgA4FyR LfLk1gUZublP1xHx8K5a8PjwsWGeRX0f6xSekizO7OiY68q9059aN2huY9tjTX/Q 0xK1ufkmvQ77fYoQcrLpQB6O8ESY2RZV4YbE/W4C2NTadPIx0DMNmd0bE3Km6SO2 fT+5JDsKxg8Wdd0qGF0kvdXrS5cKqHUegGus1fiQBgY4Nw/YTVr0CteS/DqeFbfg XYVhAY/vXzLexTPOIgqeOxW5dyKGhgqS1NQ+b9dstSbeHmGsHCPvWYgBDIqFtPH0 Hd3VyGdzRQDAkTRUPDzIo6LXPhfUO5Ure2UDtFWd0xMIy0AiiHeb -----END CERTIFICATE-----Generated at Thu Dec 4 00:02:46 2025 by rpki-client