This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/hxTWlwt6XxySSXQcOC1UwXbMwbk.roa File: hxTWlwt6XxySSXQcOC1UwXbMwbk.roa (raw, json) Hash identifier: aX7p2s147zlrrkvvAok2NDrpVfnLraj+bgXnwC8UznU= Subject key identifier: 87:14:D6:97:0B:7A:5F:1C:92:49:74:1C:38:2D:54:C1:76:CC:C1:B9 Certificate issuer: /CN=b3a4714a695c63cf2e9c4adea6171827d866e298 Certificate serial: 019B7BA51AAC8725C03E6C295BA436B1AD9B Authority key identifier: B3:A4:71:4A:69:5C:63:CF:2E:9C:4A:DE:A6:17:18:27:D8:66:E2:98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6RxSmlcY88unErephcYJ9hm4pg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/hxTWlwt6XxySSXQcOC1UwXbMwbk.roa Signing time: Thu 01 Jan 2026 22:19:36 +0000 ROA not before: Thu 01 Jan 2026 22:19:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212818 IP address blocks: 195.177.214.0/23 maxlen: 23 195.177.214.0/24 maxlen: 24 195.177.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.mft rsync://rpki.ripe.net/repository/DEFAULT/s6RxSmlcY88unErephcYJ9hm4pg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:1a:ac:87:25:c0:3e:6c:29:5b:a4:36:b1:ad:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3a4714a695c63cf2e9c4adea6171827d866e298 Validity Not Before: Jan 1 22:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8714d6970b7a5f1c9249741c382d54c176ccc1b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:19:56:ed:bd:b9:45:35:c5:d7:a0:89:e4:0f: 42:4f:b7:3c:85:7e:8c:8e:c0:e3:6f:f3:40:93:4c: d3:73:8d:2f:1b:c5:61:84:45:39:2e:5f:e5:fe:fd: 0d:e8:58:52:71:94:1a:4f:ae:55:4a:be:62:28:f5: ed:37:57:ee:0e:48:b2:e9:a5:10:54:bc:b3:5d:57: b8:cb:53:14:71:40:47:2a:fb:18:c8:83:ef:f7:70: 28:12:a2:39:a1:c5:8b:d6:5a:82:b2:36:b1:47:c6: eb:68:24:50:55:46:36:b3:56:68:f4:f3:e6:d8:c1: 0f:71:93:91:33:dd:71:c1:40:c1:60:48:fc:cb:70: e4:fe:7c:c9:e8:b0:ba:db:50:93:8c:4a:b7:30:44: 93:d4:cc:09:54:89:d4:14:48:a7:5b:e7:08:5c:ed: fa:6c:eb:70:c8:7a:5d:52:33:6f:5e:f0:e0:9f:18: 79:3e:20:d1:59:c9:db:ec:66:01:6c:94:9c:70:ee: ca:3b:c7:c0:ff:74:c7:f8:f8:97:64:f7:85:d2:a6: b4:32:01:42:a6:68:5b:7b:ff:a6:16:2e:33:e7:07: 94:78:f4:b6:3d:a9:09:3f:23:46:f5:7a:a8:a4:06: 48:a4:9f:15:f5:9c:0c:28:ae:c5:66:d8:d6:1a:f0: 67:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:14:D6:97:0B:7A:5F:1C:92:49:74:1C:38:2D:54:C1:76:CC:C1:B9 X509v3 Authority Key Identifier: keyid:B3:A4:71:4A:69:5C:63:CF:2E:9C:4A:DE:A6:17:18:27:D8:66:E2:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6RxSmlcY88unErephcYJ9hm4pg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/hxTWlwt6XxySSXQcOC1UwXbMwbk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.177.214.0/23 Signature Algorithm: sha256WithRSAEncryption 4c:ba:99:ca:06:06:e7:df:0b:9b:ad:0d:53:33:98:8d:fe:49: 7a:ba:dc:ff:ed:fd:99:28:fc:0d:94:70:ce:ed:af:64:68:fd: d6:58:2b:c6:17:38:55:1b:b9:64:8f:6d:e8:cc:bb:df:c2:45: a3:e5:f9:61:40:42:43:f8:32:c0:19:40:c7:3a:4e:4f:b1:ae: df:9a:12:92:15:68:14:8c:96:c6:c7:07:1c:a1:6a:74:92:05: 8b:09:56:87:f9:20:00:4c:52:e9:38:d7:a5:e5:6a:d1:7a:42: 91:79:5c:e6:33:5b:2e:0b:89:70:81:1d:b7:1a:ed:28:4c:c3: 87:a7:a5:d1:b7:ce:5c:0e:90:ad:cd:39:f0:4d:0e:70:3f:ff: 1c:68:44:26:28:e1:65:17:7a:41:9b:6a:b6:a5:28:fa:1a:fa: 5c:09:f0:6d:94:07:f5:f7:82:e1:2e:bd:c3:5d:c9:5e:a1:0f: 3a:42:a1:a0:45:9a:ba:65:74:67:d7:b8:8a:88:9c:86:9c:7d: 92:85:1e:5c:e7:e9:68:0b:8a:a1:29:3c:a1:ff:ed:84:ed:75: 6c:eb:8f:bd:9a:a5:d9:bd:15:9d:d1:10:b4:b6:96:ab:a7:90: d2:dd:f2:f3:80:b6:d9:5e:b3:38:4b:59:d8:57:7a:f9:2f:92: f8:c2:cb:63 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pRqshyXAPmwpW6Q2sa2bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzYTQ3MTRhNjk1YzYzY2YyZTljNGFkZWE2MTcxODI3ZDg2 NmUyOTgwHhcNMjYwMTAxMjIxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NzE0ZDY5NzBiN2E1ZjFjOTI0OTc0MWMzODJkNTRjMTc2Y2NjMWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxlW7b25RTXF16CJ5A9CT7c8hX6M jsDjb/NAk0zTc40vG8VhhEU5Ll/l/v0N6FhScZQaT65VSr5iKPXtN1fuDkiy6aUQ VLyzXVe4y1MUcUBHKvsYyIPv93AoEqI5ocWL1lqCsjaxR8braCRQVUY2s1Zo9PPm 2MEPcZORM91xwUDBYEj8y3Dk/nzJ6LC621CTjEq3MEST1MwJVInUFEinW+cIXO36 bOtwyHpdUjNvXvDgnxh5PiDRWcnb7GYBbJSccO7KO8fA/3TH+PiXZPeF0qa0MgFC pmhbe/+mFi4z5weUePS2PakJPyNG9XqopAZIpJ8V9ZwMKK7FZtjWGvBn7QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIcU1pcLel8ckkl0HDgtVMF2zMG5MB8GA1UdIwQY MBaAFLOkcUppXGPPLpxK3qYXGCfYZuKYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczZSeFNtbGNZODh1bkVyZXBoY1lKOWhtNHBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy85YTcyZTAtZmI5Yy00ZTcyLWFmMzQt ZGM0OGNlY2QxNTQ1LzEvaHhUV2x3dDZYeHlTU1hRY09DMVV3WGJNd2JrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy85YTcyZTAtZmI5Yy00ZTcyLWFmMzQtZGM0OGNlY2QxNTQ1 LzEvczZSeFNtbGNZODh1bkVyZXBoY1lKOWhtNHBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw7HWMA0G CSqGSIb3DQEBCwUAA4IBAQBMupnKBgbn3wubrQ1TM5iN/kl6utz/7f2ZKPwNlHDO 7a9kaP3WWCvGFzhVG7lkj23ozLvfwkWj5flhQEJD+DLAGUDHOk5Psa7fmhKSFWgU jJbGxwccoWp0kgWLCVaH+SAATFLpONel5WrRekKReVzmM1suC4lwgR23Gu0oTMOH p6XRt85cDpCtzTnwTQ5wP/8caEQmKOFlF3pBm2q2pSj6GvpcCfBtlAf194LhLr3D XcleoQ86QqGgRZq6ZXRn17iKiJyGnH2ShR5c5+loC4qhKTyh/+2E7XVs64+9mqXZ vRWd0RC0tparp5DS3fLzgLbZXrM4S1nYV3r5L5L4wstj -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:06 2026 by rpki-client