This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/HXYHaazK-agsXQtrAp4TdIiFPCw.roa File: HXYHaazK-agsXQtrAp4TdIiFPCw.roa (raw, json) Hash identifier: 8c6r2+HmrNIxR72NP8l7eeROpR6oXO6CEMfBkvZx7+M= Subject key identifier: 1D:76:07:69:AC:CA:F9:A8:2C:5D:0B:6B:02:9E:13:74:88:85:3C:2C Certificate issuer: /CN=987277fc47d848fa5634ce8031a174fc249fa673 Certificate serial: 019B7E38DEC1B29B84C645EA9A15DD55DE3F Authority key identifier: 98:72:77:FC:47:D8:48:FA:56:34:CE:80:31:A1:74:FC:24:9F:A6:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/HXYHaazK-agsXQtrAp4TdIiFPCw.roa Signing time: Fri 02 Jan 2026 10:20:14 +0000 ROA not before: Fri 02 Jan 2026 10:20:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 185.194.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.mft rsync://rpki.ripe.net/repository/DEFAULT/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:de:c1:b2:9b:84:c6:45:ea:9a:15:dd:55:de:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=987277fc47d848fa5634ce8031a174fc249fa673 Validity Not Before: Jan 2 10:20:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1d760769accaf9a82c5d0b6b029e137488853c2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a9:36:4e:60:c1:b0:e7:94:b2:d0:78:ba:be: 90:a0:0e:72:40:86:e7:4e:be:3a:0c:a6:4b:27:e8: 99:93:7a:0f:3e:cf:f4:8b:78:5c:18:65:cd:e5:98: 3b:12:af:4c:3c:a7:08:14:39:e3:e6:b0:45:a4:f2: 6c:d5:e3:cf:c8:c0:9f:6d:14:a0:60:ed:8b:77:de: bd:7f:00:f1:c7:90:a4:f9:e0:17:a9:b2:dc:c1:c1: b9:d6:d4:cb:63:0b:ba:9f:5c:b8:58:89:42:6c:47: 98:81:34:76:cb:7b:46:e1:c2:a2:1f:e0:63:9d:9c: ad:1b:95:df:91:bb:f5:27:2d:46:aa:2b:2b:d5:1d: f7:86:d8:0c:41:67:c8:7e:0b:33:8f:f9:52:f4:ce: 64:b1:0d:0a:92:7e:0c:cc:23:ea:5d:37:91:52:ef: c8:f6:ed:de:0e:71:4a:b6:64:a2:61:7c:ca:7a:82: 44:1c:8a:84:f0:ab:02:40:51:44:7d:73:0d:d5:58: 01:b0:cd:10:d0:e6:5f:b8:a1:e4:e9:90:99:38:e2: 31:7b:d7:2d:7c:dd:6d:e5:94:1e:8d:2d:7f:07:61: 12:aa:9f:75:80:28:79:05:60:96:55:8d:14:1a:13: 8c:a1:e7:61:92:1a:4c:6d:01:37:ef:3e:16:27:4b: 4f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:76:07:69:AC:CA:F9:A8:2C:5D:0B:6B:02:9E:13:74:88:85:3C:2C X509v3 Authority Key Identifier: keyid:98:72:77:FC:47:D8:48:FA:56:34:CE:80:31:A1:74:FC:24:9F:A6:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/HXYHaazK-agsXQtrAp4TdIiFPCw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.194.8.0/22 Signature Algorithm: sha256WithRSAEncryption 6d:7a:ff:20:26:51:32:11:76:f5:ce:de:92:5e:d5:67:76:d1: 4c:35:c3:7d:7f:b8:5f:e8:56:eb:db:76:4d:a3:25:c6:ea:40: 2c:9d:98:0d:43:4c:43:4f:bc:26:5a:70:87:84:e1:59:ea:2d: e7:d8:1a:e2:5d:24:e2:d6:f6:cc:b9:aa:72:ee:41:50:59:d7: e7:09:0f:cb:bd:fe:d5:cd:90:a6:a7:e7:40:e6:02:b5:46:e5: 9a:c5:cf:96:05:4b:52:11:5c:94:ed:e9:8f:53:27:1d:95:5b: 82:3b:4a:4a:14:4d:9e:0b:78:c9:95:72:88:dd:4a:c9:38:3b: 2f:14:e7:09:5a:81:3e:88:03:d3:c9:3a:d2:fe:04:c5:31:9f: 81:99:ef:95:64:62:e2:95:fa:02:2c:59:2b:53:cc:dc:91:fb: a2:d5:29:39:8a:71:f3:23:8f:48:aa:f5:f8:b6:cc:6c:fb:39: 46:4f:9d:7f:ee:65:55:3a:28:72:b9:42:43:44:a9:d3:ca:e6: 3a:b8:49:f1:43:37:01:d0:dd:cc:2b:6d:c8:35:eb:a0:c6:a4: cf:26:95:3a:77:77:25:5b:43:ce:58:7a:82:79:6f:48:5b:3c: 32:a8:e5:0e:e2:2d:bf:7a:49:09:4b:eb:d2:9f:28:b6:5e:78: b8:5f:dc:0a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+ON7BspuExkXqmhXdVd4/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4NzI3N2ZjNDdkODQ4ZmE1NjM0Y2U4MDMxYTE3NGZjMjQ5 ZmE2NzMwHhcNMjYwMTAyMTAyMDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZDc2MDc2OWFjY2FmOWE4MmM1ZDBiNmIwMjllMTM3NDg4ODUzYzJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKk2TmDBsOeUstB4ur6QoA5yQIbn Tr46DKZLJ+iZk3oPPs/0i3hcGGXN5Zg7Eq9MPKcIFDnj5rBFpPJs1ePPyMCfbRSg YO2Ld969fwDxx5Ck+eAXqbLcwcG51tTLYwu6n1y4WIlCbEeYgTR2y3tG4cKiH+Bj nZytG5Xfkbv1Jy1Gqisr1R33htgMQWfIfgszj/lS9M5ksQ0Kkn4MzCPqXTeRUu/I 9u3eDnFKtmSiYXzKeoJEHIqE8KsCQFFEfXMN1VgBsM0Q0OZfuKHk6ZCZOOIxe9ct fN1t5ZQejS1/B2ESqp91gCh5BWCWVY0UGhOMoedhkhpMbQE37z4WJ0tPqwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB12B2msyvmoLF0LawKeE3SIhTwsMB8GA1UdIwQY MBaAFJhyd/xH2Ej6VjTOgDGhdPwkn6ZzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUhKM19FZllTUHBXTk02QU1hRjBfQ1NmcG5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi83MTA5MzQtMzA0Yi00ZjVmLTk1MGUt MTJlODI3NmZkYWM0LzEvSFhZSGFhekstYWdzWFF0ckFwNFRkSWlGUEN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi83MTA5MzQtMzA0Yi00ZjVmLTk1MGUtMTJlODI3NmZkYWM0 LzEvbUhKM19FZllTUHBXTk02QU1hRjBfQ1NmcG5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucIIMA0G CSqGSIb3DQEBCwUAA4IBAQBtev8gJlEyEXb1zt6SXtVndtFMNcN9f7hf6Fbr23ZN oyXG6kAsnZgNQ0xDT7wmWnCHhOFZ6i3n2BriXSTi1vbMuapy7kFQWdfnCQ/Lvf7V zZCmp+dA5gK1RuWaxc+WBUtSEVyU7emPUycdlVuCO0pKFE2eC3jJlXKI3UrJODsv FOcJWoE+iAPTyTrS/gTFMZ+Bme+VZGLilfoCLFkrU8zckfui1Sk5inHzI49IqvX4 tsxs+zlGT51/7mVVOihyuUJDRKnTyuY6uEnxQzcB0N3MK23INeugxqTPJpU6d3cl W0POWHqCeW9IWzwyqOUO4i2/ekkJS+vSnyi2Xni4X9wK -----END CERTIFICATE-----Generated at Tue Jan 20 01:19:51 2026 by rpki-client