This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/68a7ea-d50a-4a30-9513-e909a77cda98/1/HwX_IRdskXcAV_np2ZkdO8Ut9Eo.roa File: HwX_IRdskXcAV_np2ZkdO8Ut9Eo.roa (raw, json) Hash identifier: YW9KO6pt+dk+m3/5lsQ1NeGU+nKFSfub7NQ+6nyySSs= Subject key identifier: 1F:05:FF:21:17:6C:91:77:00:57:F9:E9:D9:99:1D:3B:C5:2D:F4:4A Certificate issuer: /CN=c43c222fad2c27ca612c98c273d4f16506e1b2e5 Certificate serial: 019B7F8118492F7C8EA37CFA2DE71A14A9A0 Authority key identifier: C4:3C:22:2F:AD:2C:27:CA:61:2C:98:C2:73:D4:F1:65:06:E1:B2:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xDwiL60sJ8phLJjCc9TxZQbhsuU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/68a7ea-d50a-4a30-9513-e909a77cda98/1/HwX_IRdskXcAV_np2ZkdO8Ut9Eo.roa Signing time: Fri 02 Jan 2026 16:18:45 +0000 ROA not before: Fri 02 Jan 2026 16:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49718 IP address blocks: 176.100.64.0/18 maxlen: 18 176.100.64.0/22 maxlen: 22 176.100.68.0/22 maxlen: 22 176.100.72.0/22 maxlen: 22 176.100.76.0/22 maxlen: 22 176.100.80.0/22 maxlen: 22 176.100.84.0/22 maxlen: 22 176.100.88.0/22 maxlen: 22 176.100.92.0/22 maxlen: 22 176.100.96.0/22 maxlen: 22 176.100.100.0/22 maxlen: 22 176.100.104.0/22 maxlen: 22 176.100.108.0/22 maxlen: 22 176.100.112.0/22 maxlen: 22 176.100.116.0/22 maxlen: 22 176.100.120.0/22 maxlen: 22 176.100.124.0/22 maxlen: 22 213.108.168.0/21 maxlen: 21 213.108.168.0/24 maxlen: 24 213.108.169.0/24 maxlen: 24 213.108.170.0/24 maxlen: 24 213.108.171.0/24 maxlen: 24 213.108.172.0/24 maxlen: 24 213.108.173.0/24 maxlen: 24 213.108.174.0/24 maxlen: 24 213.108.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/68a7ea-d50a-4a30-9513-e909a77cda98/1/xDwiL60sJ8phLJjCc9TxZQbhsuU.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/68a7ea-d50a-4a30-9513-e909a77cda98/1/xDwiL60sJ8phLJjCc9TxZQbhsuU.mft rsync://rpki.ripe.net/repository/DEFAULT/xDwiL60sJ8phLJjCc9TxZQbhsuU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:18:49:2f:7c:8e:a3:7c:fa:2d:e7:1a:14:a9:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c43c222fad2c27ca612c98c273d4f16506e1b2e5 Validity Not Before: Jan 2 16:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f05ff21176c91770057f9e9d9991d3bc52df44a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:b4:a0:e3:19:e4:e1:bc:7c:fe:35:1c:fb:6f: 8d:0b:6a:19:94:e7:6f:13:3d:9e:a3:cc:71:28:1f: ee:57:63:d5:b3:16:e7:da:6f:39:57:cd:92:8a:c7: a8:ad:df:54:86:ab:2e:da:a3:8b:29:8f:f1:ac:44: 1d:f1:df:b5:34:7b:0e:7a:28:69:ca:f9:97:6c:1f: 42:2b:bd:33:a4:e6:86:f2:10:c5:00:74:89:3c:a5: f5:a6:8b:96:cd:23:ed:fe:61:9f:06:6b:b7:6d:12: 0f:fe:03:88:5a:b0:7d:ed:88:fe:7b:84:bf:ed:3f: 4d:87:e5:6c:80:6f:4e:15:6f:eb:3e:aa:fb:06:a6: 98:bd:2c:18:75:0f:60:39:23:f6:05:23:f7:69:63: 20:40:62:94:20:04:81:15:61:d1:c4:73:d0:c7:81: 76:7c:83:a9:d9:5e:52:8f:e6:20:0a:eb:90:d5:9f: 77:c8:9f:87:1b:97:27:5f:10:c5:b2:cf:fd:8f:77: f0:35:39:38:b5:b5:bf:08:1f:f5:8b:a3:ce:8f:e7: f8:ab:d7:cf:b9:0f:7d:2b:4e:e9:da:ce:d4:76:8d: 4e:9f:66:6a:b4:56:d7:a0:25:59:54:be:a8:3e:92: 3c:1a:57:ea:80:db:31:81:d7:f9:f8:36:6a:f1:af: ff:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:05:FF:21:17:6C:91:77:00:57:F9:E9:D9:99:1D:3B:C5:2D:F4:4A X509v3 Authority Key Identifier: keyid:C4:3C:22:2F:AD:2C:27:CA:61:2C:98:C2:73:D4:F1:65:06:E1:B2:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xDwiL60sJ8phLJjCc9TxZQbhsuU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/68a7ea-d50a-4a30-9513-e909a77cda98/1/HwX_IRdskXcAV_np2ZkdO8Ut9Eo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/68a7ea-d50a-4a30-9513-e909a77cda98/1/xDwiL60sJ8phLJjCc9TxZQbhsuU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.100.64.0/18 213.108.168.0/21 Signature Algorithm: sha256WithRSAEncryption 50:1e:7a:f7:19:6f:1a:b4:a5:66:53:f8:ce:cb:b3:0a:71:e0: 95:2d:53:d5:8d:71:87:33:3b:20:43:45:30:ea:1d:ca:6b:1b: e1:51:2c:4f:da:a5:c2:4b:3b:ac:73:4e:86:dd:54:0c:d2:27: 4d:3a:53:05:8e:df:e9:ec:05:a8:e2:66:32:fd:a6:e6:db:ed: 03:61:5d:62:66:07:fa:00:02:87:fa:10:e9:a2:43:67:fc:3b: 08:0a:09:19:7f:32:f5:97:44:b3:5f:a7:af:45:20:b4:e3:2f: 8a:37:1c:c7:eb:ae:0d:b7:03:57:25:1c:87:9a:4d:10:05:da: da:5a:ee:21:43:b0:09:db:bb:26:05:e7:01:07:2e:c2:81:6e: df:08:8f:78:51:aa:a4:24:95:83:8c:70:a2:93:98:3d:03:bc: 89:bc:a2:9a:74:00:d5:e1:a1:d5:a9:29:40:81:73:ac:e6:ee: 06:29:00:bd:53:85:4b:5a:8b:6d:15:da:21:07:35:2c:eb:e5: c8:0d:6b:eb:05:16:de:89:77:7e:f4:d5:94:22:2c:aa:c5:06: 23:1e:93:f0:4f:16:22:e2:64:69:09:f9:38:9e:d3:85:99:fc: 00:a0:fd:54:c9:db:dc:3e:23:88:f5:46:2d:99:fb:c9:bf:33: cd:98:cd:77 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/gRhJL3yOo3z6LecaFKmgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0M2MyMjJmYWQyYzI3Y2E2MTJjOThjMjczZDRmMTY1MDZl MWIyZTUwHhcNMjYwMTAyMTYxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjA1ZmYyMTE3NmM5MTc3MDA1N2Y5ZTlkOTk5MWQzYmM1MmRmNDRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA67Sg4xnk4bx8/jUc+2+NC2oZlOdv Ez2eo8xxKB/uV2PVsxbn2m85V82Siseord9Uhqsu2qOLKY/xrEQd8d+1NHsOeihp yvmXbB9CK70zpOaG8hDFAHSJPKX1pouWzSPt/mGfBmu3bRIP/gOIWrB97Yj+e4S/ 7T9Nh+VsgG9OFW/rPqr7BqaYvSwYdQ9gOSP2BSP3aWMgQGKUIASBFWHRxHPQx4F2 fIOp2V5Sj+YgCuuQ1Z93yJ+HG5cnXxDFss/9j3fwNTk4tbW/CB/1i6POj+f4q9fP uQ99K07p2s7Udo1On2ZqtFbXoCVZVL6oPpI8GlfqgNsxgdf5+DZq8a//XQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFB8F/yEXbJF3AFf56dmZHTvFLfRKMB8GA1UdIwQY MBaAFMQ8Ii+tLCfKYSyYwnPU8WUG4bLlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveER3aUw2MHNKOHBoTEpqQ2M5VHhaUWJoc3VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC82OGE3ZWEtZDUwYS00YTMwLTk1MTMt ZTkwOWE3N2NkYTk4LzEvSHdYX0lSZHNrWGNBVl9ucDJaa2RPOFV0OUVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC82OGE3ZWEtZDUwYS00YTMwLTk1MTMtZTkwOWE3N2NkYTk4 LzEveER3aUw2MHNKOHBoTEpqQ2M5VHhaUWJoc3VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQGsGRAAwQD 1WyoMA0GCSqGSIb3DQEBCwUAA4IBAQBQHnr3GW8atKVmU/jOy7MKceCVLVPVjXGH MzsgQ0Uw6h3KaxvhUSxP2qXCSzusc06G3VQM0idNOlMFjt/p7AWo4mYy/abm2+0D YV1iZgf6AAKH+hDpokNn/DsICgkZfzL1l0SzX6evRSC04y+KNxzH664NtwNXJRyH mk0QBdraWu4hQ7AJ27smBecBBy7CgW7fCI94UaqkJJWDjHCik5g9A7yJvKKadADV 4aHVqSlAgXOs5u4GKQC9U4VLWottFdohBzUs6+XIDWvrBRbeiXd+9NWUIiyqxQYj HpPwTxYi4mRpCfk4ntOFmfwAoP1UydvcPiOI9UYtmfvJvzPNmM13 -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:30 2026 by rpki-client