This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/HxcwusE96Pu4klA3JVP9ca71QRk.roa File: HxcwusE96Pu4klA3JVP9ca71QRk.roa (raw, json) Hash identifier: geWZwbjFXtpXNCgh8QcSp0aqYZouzyEjG0Xg6ZT16Q0= Subject key identifier: 1F:17:30:BA:C1:3D:E8:FB:B8:92:50:37:25:53:FD:71:AE:F5:41:19 Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4 Certificate serial: 019B77C7485511B3F0B21F1ED91B07E912D7 Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/HxcwusE96Pu4klA3JVP9ca71QRk.roa Signing time: Thu 01 Jan 2026 04:18:27 +0000 ROA not before: Thu 01 Jan 2026 04:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 46475 IP address blocks: 77.223.214.0/23 maxlen: 24 77.223.214.0/24 maxlen: 24 77.223.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 13:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:48:55:11:b3:f0:b2:1f:1e:d9:1b:07:e9:12:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4 Validity Not Before: Jan 1 04:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f1730bac13de8fbb89250372553fd71aef54119 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e1:d0:a6:88:f5:8a:fc:b0:6c:3b:cd:ba:ec: 25:85:6b:63:3d:91:2d:64:c6:05:27:3d:4e:a6:f9: 0b:54:2b:78:7e:0b:a1:69:20:e3:d0:a2:05:d4:72: 90:7a:f4:6f:2c:70:72:7c:55:5d:d0:ab:c6:34:34: ec:77:ad:2a:f3:0a:3e:74:5c:e0:40:7f:80:54:e1: 36:98:53:80:b2:65:99:1b:c6:9e:4f:80:f9:65:34: 49:07:aa:fc:8a:50:b3:df:5f:23:00:4f:48:c5:75: 4f:43:5a:b9:a7:ba:86:c5:86:a5:a8:07:d5:78:7e: d5:8f:23:8f:a5:fe:9f:19:a2:4d:1e:3e:90:eb:4f: 42:fb:a8:d6:c7:14:dd:68:c2:38:7e:32:0b:38:78: b2:e3:cf:5f:37:6a:bc:36:16:50:df:7d:86:aa:7f: 82:47:8a:85:88:a6:4d:e4:6e:75:7f:e7:d3:b6:0e: 44:84:89:74:ae:eb:ea:a5:04:d8:5b:ad:c4:8a:b3: 13:99:bc:c4:c7:07:b3:2a:44:e6:ad:04:49:d9:bd: 5e:54:b7:1e:88:02:f6:72:57:90:45:e4:73:4f:bd: 07:30:ef:39:39:70:ec:d7:2a:79:2b:de:6d:8a:de: ed:ed:e7:f6:c7:bd:db:33:19:0a:4e:e0:e6:6c:67: d9:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:17:30:BA:C1:3D:E8:FB:B8:92:50:37:25:53:FD:71:AE:F5:41:19 X509v3 Authority Key Identifier: keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/HxcwusE96Pu4klA3JVP9ca71QRk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.223.214.0/23 Signature Algorithm: sha256WithRSAEncryption 19:fb:d7:35:94:63:f9:04:46:e6:f0:61:41:56:9a:ec:3f:91: aa:6f:06:19:b7:39:40:5e:c0:80:67:46:34:e1:56:fa:f9:d3: cd:aa:75:7e:37:96:31:c5:9b:b1:ff:47:44:ec:22:c5:71:47: 5f:7d:f8:4d:ee:9a:f1:5b:ab:30:b9:bd:ce:c0:c2:45:47:8c: 2b:e4:f7:40:d1:b3:8b:77:51:c2:58:1d:51:9e:96:2f:03:07: 38:cc:bb:13:90:aa:48:b7:36:04:c6:60:7c:25:8d:b3:67:bc: f0:11:d9:f7:01:67:22:70:3f:a9:45:ab:55:57:9a:1c:ad:d3: 6a:67:31:8e:a9:1d:51:bf:46:b1:df:a4:96:a7:33:65:3c:70: 26:89:d2:b6:c2:95:ac:2e:be:9c:13:e0:68:b8:25:56:ea:e9: 34:b8:60:74:23:f7:9e:df:70:95:14:e2:09:80:b1:ad:37:13: dc:b6:f6:b7:57:2d:3b:d1:9c:9a:f3:04:b9:a0:e2:1d:6b:7f: 6f:4d:74:3e:77:4c:52:2f:15:aa:85:cd:49:fb:ed:78:51:02: d2:83:ad:0f:3b:1c:84:75:ea:a3:a0:f5:49:56:5d:19:e1:87: 33:5a:2e:af:34:89:67:d8:0c:dd:3b:0f:57:f7:58:94:f2:34: 7d:1f:b2:d1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x0hVEbPwsh8e2RsH6RLXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0OGEyN2Y0NGIxMDQwNGM1MmY2ZmZjNGUwOGRjODJiZjhi NWRlZTQwHhcNMjYwMTAxMDQxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjE3MzBiYWMxM2RlOGZiYjg5MjUwMzcyNTUzZmQ3MWFlZjU0MTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4eHQpoj1ivywbDvNuuwlhWtjPZEt ZMYFJz1OpvkLVCt4fguhaSDj0KIF1HKQevRvLHByfFVd0KvGNDTsd60q8wo+dFzg QH+AVOE2mFOAsmWZG8aeT4D5ZTRJB6r8ilCz318jAE9IxXVPQ1q5p7qGxYalqAfV eH7VjyOPpf6fGaJNHj6Q609C+6jWxxTdaMI4fjILOHiy489fN2q8NhZQ332Gqn+C R4qFiKZN5G51f+fTtg5EhIl0ruvqpQTYW63EirMTmbzExwezKkTmrQRJ2b1eVLce iAL2cleQReRzT70HMO85OXDs1yp5K95tit7t7ef2x73bMxkKTuDmbGfZowIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB8XMLrBPej7uJJQNyVT/XGu9UEZMB8GA1UdIwQY MBaAFNSKJ/RLEEBMUvb/xOCNyCv4td7kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYt NTlmNTk4NGI2NGVhLzEvSHhjd3VzRTk2UHU0a2xBM0pWUDljYTcxUVJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYtNTlmNTk4NGI2NGVh LzEvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTd/WMA0G CSqGSIb3DQEBCwUAA4IBAQAZ+9c1lGP5BEbm8GFBVprsP5GqbwYZtzlAXsCAZ0Y0 4Vb6+dPNqnV+N5YxxZux/0dE7CLFcUdfffhN7prxW6swub3OwMJFR4wr5PdA0bOL d1HCWB1RnpYvAwc4zLsTkKpItzYExmB8JY2zZ7zwEdn3AWcicD+pRatVV5ocrdNq ZzGOqR1Rv0ax36SWpzNlPHAmidK2wpWsLr6cE+BouCVW6uk0uGB0I/ee33CVFOIJ gLGtNxPctva3Vy070Zya8wS5oOIda39vTXQ+d0xSLxWqhc1J++14UQLSg60POxyE deqjoPVJVl0Z4YczWi6vNIln2AzdOw9X91iU8jR9H7LR -----END CERTIFICATE-----Generated at Thu Jan 1 20:22:38 2026 by rpki-client