This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/HXsSRzV3rUhLkMN3xAsW0f7YXHg.roa File: HXsSRzV3rUhLkMN3xAsW0f7YXHg.roa (raw, json) Hash identifier: bXyG9rPhyBGq6asNTRsjYlab7E/O1eKTePVUK6urYbk= Subject key identifier: 1D:7B:12:47:35:77:AD:48:4B:90:C3:77:C4:0B:16:D1:FE:D8:5C:78 Certificate issuer: /CN=a2d5c7ae7e45c00734efbcc913a1b1ea3e964b40 Certificate serial: 019B7C128B88F985DED1096BB4EDD952E791 Authority key identifier: A2:D5:C7:AE:7E:45:C0:07:34:EF:BC:C9:13:A1:B1:EA:3E:96:4B:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/HXsSRzV3rUhLkMN3xAsW0f7YXHg.roa Signing time: Fri 02 Jan 2026 00:19:08 +0000 ROA not before: Fri 02 Jan 2026 00:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33915 IP address blocks: 185.117.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:8b:88:f9:85:de:d1:09:6b:b4:ed:d9:52:e7:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2d5c7ae7e45c00734efbcc913a1b1ea3e964b40 Validity Not Before: Jan 2 00:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1d7b12473577ad484b90c377c40b16d1fed85c78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f5:f4:d0:f3:07:2d:5c:75:73:b6:fa:2d:81: 31:dd:e7:06:e8:40:dc:a2:38:7d:cc:5b:26:db:a4: db:3f:f4:64:93:85:80:b4:af:32:af:75:92:a7:ab: 84:5f:ef:db:5a:b6:d9:08:8e:c7:d0:7d:5a:d3:f4: b7:34:b3:0e:81:54:5a:e8:d1:e8:e0:2b:46:f7:1a: 82:e2:f5:96:09:f1:21:b1:33:57:ce:66:36:5d:47: 80:d0:60:0c:c2:8d:92:ee:04:a4:2e:21:ea:66:4a: eb:a7:64:84:d7:27:01:0a:5b:f3:da:e1:2a:18:0b: 2d:90:e1:03:15:9e:c8:57:0f:fc:d7:c5:9c:b4:3f: b2:6d:6f:6d:b7:39:94:aa:d3:05:f2:11:d8:14:24: 9f:7a:bc:55:ab:c4:2e:fe:9b:b5:19:89:f9:be:1f: a0:6e:f3:f9:d5:0a:22:86:28:d6:49:2a:a6:e6:c0: bf:06:1a:5c:e1:5a:79:7c:61:13:ad:0d:ac:2e:70: e7:94:1d:da:5d:fc:ce:e7:ae:0f:1c:5e:22:fb:57: cd:bd:7c:b3:b1:87:d5:3b:5a:50:23:cb:e6:68:17: 1d:97:af:9a:73:12:45:b6:89:1d:5d:a1:2a:7e:33: e8:f1:f5:f0:e3:f1:e7:a6:43:56:90:b6:29:a0:81: 61:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:7B:12:47:35:77:AD:48:4B:90:C3:77:C4:0B:16:D1:FE:D8:5C:78 X509v3 Authority Key Identifier: keyid:A2:D5:C7:AE:7E:45:C0:07:34:EF:BC:C9:13:A1:B1:EA:3E:96:4B:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/HXsSRzV3rUhLkMN3xAsW0f7YXHg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.117.208.0/24 Signature Algorithm: sha256WithRSAEncryption a6:ce:a1:95:e8:27:4e:8f:20:10:21:8d:27:0e:ee:e1:89:63: e4:f0:6e:89:b4:3b:d4:63:ab:29:da:41:c5:10:6e:99:7b:d9: e6:be:80:fc:eb:3a:49:45:b7:7e:81:7e:84:c5:5f:28:77:ed: f3:5e:d0:38:13:02:73:1d:6a:60:fb:39:be:77:3b:1f:6f:2c: 03:45:56:57:88:98:54:8d:fc:4b:14:c9:b0:ad:c9:f6:96:f0: dd:80:33:46:5d:ed:ee:47:d4:f2:0e:52:69:35:27:38:1a:28: 53:8e:0f:a8:79:ea:81:56:11:3e:e5:82:3e:ef:78:2e:05:98: e5:2f:15:4d:ee:43:8f:c4:2c:9d:83:86:20:1b:94:bd:23:a8: f1:37:9c:57:2e:21:ed:d2:33:9c:21:a7:bf:6f:5d:24:45:52: bd:ed:98:ac:1b:3c:47:78:a3:0a:9f:02:a2:f3:58:2b:1c:cc: c2:79:63:bb:eb:9d:c2:dd:d5:84:8a:0b:1f:a8:b8:ac:ec:c8: f4:19:82:8e:e5:d6:d6:e4:cb:07:f6:0d:97:0c:d9:35:a2:27: 87:15:d3:b2:bc:36:65:ea:e4:f0:85:0b:29:e3:5d:2f:4d:47: 90:a0:a8:b7:d7:8f:86:78:b4:8b:d0:70:d9:ab:7e:f7:39:69: d0:df:86:20 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EouI+YXe0QlrtO3ZUueRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyZDVjN2FlN2U0NWMwMDczNGVmYmNjOTEzYTFiMWVhM2U5 NjRiNDAwHhcNMjYwMTAyMDAxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZDdiMTI0NzM1NzdhZDQ4NGI5MGMzNzdjNDBiMTZkMWZlZDg1Yzc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPX00PMHLVx1c7b6LYEx3ecG6EDc ojh9zFsm26TbP/Rkk4WAtK8yr3WSp6uEX+/bWrbZCI7H0H1a0/S3NLMOgVRa6NHo 4CtG9xqC4vWWCfEhsTNXzmY2XUeA0GAMwo2S7gSkLiHqZkrrp2SE1ycBClvz2uEq GAstkOEDFZ7IVw/818WctD+ybW9ttzmUqtMF8hHYFCSferxVq8Qu/pu1GYn5vh+g bvP51QoihijWSSqm5sC/Bhpc4Vp5fGETrQ2sLnDnlB3aXfzO564PHF4i+1fNvXyz sYfVO1pQI8vmaBcdl6+acxJFtokdXaEqfjPo8fXw4/HnpkNWkLYpoIFh+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB17Ekc1d61IS5DDd8QLFtH+2Fx4MB8GA1UdIwQY MBaAFKLVx65+RcAHNO+8yROhseo+lktAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3RYSHJuNUZ3QWMwNzd6SkU2R3g2ajZXUzBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC81MGYzNGMtMzM4ZC00ZmNlLTgxOTMt ZWMxNjczNWEzMzgyLzEvSFhzU1J6VjNyVWhMa01OM3hBc1cwZjdZWEhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC81MGYzNGMtMzM4ZC00ZmNlLTgxOTMtZWMxNjczNWEzMzgy LzEvb3RYSHJuNUZ3QWMwNzd6SkU2R3g2ajZXUzBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXXQMA0G CSqGSIb3DQEBCwUAA4IBAQCmzqGV6CdOjyAQIY0nDu7hiWPk8G6JtDvUY6sp2kHF EG6Ze9nmvoD86zpJRbd+gX6ExV8od+3zXtA4EwJzHWpg+zm+dzsfbywDRVZXiJhU jfxLFMmwrcn2lvDdgDNGXe3uR9TyDlJpNSc4GihTjg+oeeqBVhE+5YI+73guBZjl LxVN7kOPxCydg4YgG5S9I6jxN5xXLiHt0jOcIae/b10kRVK97ZisGzxHeKMKnwKi 81grHMzCeWO7653C3dWEigsfqLis7Mj0GYKO5dbW5MsH9g2XDNk1oieHFdOyvDZl 6uTwhQsp410vTUeQoKi314+GeLSL0HDZq373OWnQ34Yg -----END CERTIFICATE-----Generated at Mon Jan 26 22:36:33 2026 by rpki-client