This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/hXAXsmUnJiWV8z-SUw75JeiGESc.roa File: hXAXsmUnJiWV8z-SUw75JeiGESc.roa (raw, json) Hash identifier: VUrv1bazpJi2/YTeV0TBl6sYZknhiXdswe7oWJCYACU= Subject key identifier: 85:70:17:B2:65:27:26:25:95:F3:3F:92:53:0E:F9:25:E8:86:11:27 Certificate issuer: /CN=a077a356f07e074cae6f26e7f5893dce9dac8ad3 Certificate serial: 019B7758894E21F6A6CDCC22AD2185D42D7C Authority key identifier: A0:77:A3:56:F0:7E:07:4C:AE:6F:26:E7:F5:89:3D:CE:9D:AC:8A:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oHejVvB-B0yubybn9Yk9zp2sitM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/hXAXsmUnJiWV8z-SUw75JeiGESc.roa Signing time: Thu 01 Jan 2026 02:17:29 +0000 ROA not before: Thu 01 Jan 2026 02:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209295 IP address blocks: 193.228.229.0/24 maxlen: 24 2001:678:ea8::/48 maxlen: 48 2001:67c:1788::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.mft rsync://rpki.ripe.net/repository/DEFAULT/oHejVvB-B0yubybn9Yk9zp2sitM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:89:4e:21:f6:a6:cd:cc:22:ad:21:85:d4:2d:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a077a356f07e074cae6f26e7f5893dce9dac8ad3 Validity Not Before: Jan 1 02:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=857017b26527262595f33f92530ef925e8861127 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:77:f4:f2:1b:61:9d:d6:26:e1:e8:9b:f9:db: 25:5d:8b:b3:8b:d5:c8:0f:fa:b3:c3:b7:68:00:e2: b0:1e:6a:93:43:19:6c:5b:68:93:8d:dd:43:3f:60: c2:78:b0:9c:d2:f8:27:0d:9e:0d:9f:c5:b7:54:82: 83:13:12:04:04:a6:2b:51:cf:89:7a:f2:cf:5f:d2: fc:e6:a5:c4:11:dc:97:fc:f9:b9:a2:01:a4:4e:59: 38:90:f6:f9:0f:5e:81:26:22:5f:56:83:4c:fc:20: a1:5d:cb:9e:1d:5a:6c:fe:14:58:cb:60:46:49:55: 46:c7:0e:00:ee:e7:bc:94:d3:df:1c:30:8d:db:85: 90:4e:89:38:f6:b0:89:ca:68:5f:c3:c0:7a:8f:4f: 96:e4:8f:de:9c:a8:ca:be:ab:78:75:1b:db:1e:b3: 7c:9a:9f:d3:b4:a7:f3:2a:8b:43:d5:78:aa:29:4e: ad:01:47:4a:71:3d:49:52:e7:8f:6a:4b:f5:55:12: c4:b0:4a:dc:b6:4d:c9:b6:f5:57:f3:ac:81:f3:a6: ab:1e:73:19:a7:a1:9b:6b:6b:1c:b6:b5:6f:25:1f: 32:5d:e6:0f:28:86:b3:0e:44:2a:26:49:57:8f:75: 95:ff:74:6a:1e:f1:74:f8:c8:4d:94:0a:c8:e9:93: cf:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:70:17:B2:65:27:26:25:95:F3:3F:92:53:0E:F9:25:E8:86:11:27 X509v3 Authority Key Identifier: keyid:A0:77:A3:56:F0:7E:07:4C:AE:6F:26:E7:F5:89:3D:CE:9D:AC:8A:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oHejVvB-B0yubybn9Yk9zp2sitM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/hXAXsmUnJiWV8z-SUw75JeiGESc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.228.229.0/24 IPv6: 2001:678:ea8::/48 2001:67c:1788::/48 Signature Algorithm: sha256WithRSAEncryption 3e:e7:61:62:eb:ef:83:6c:90:0f:78:d4:ba:bc:44:ed:ce:7f: 3d:f2:1f:89:b9:dc:30:2a:7c:cb:12:fe:66:e2:cb:f5:37:5c: 71:af:8e:cd:63:57:53:21:21:92:56:d3:2c:af:f2:4a:e7:15: 36:a0:e2:b6:b8:b8:3d:20:8c:7f:a4:cb:b9:58:64:b2:5b:9f: d0:8a:2e:79:47:58:53:b1:ae:78:e6:1c:af:a4:c2:42:f4:05: d6:c9:0d:4b:df:c8:68:19:15:10:09:b6:21:a9:34:d0:cc:34: 13:66:08:4e:a7:ac:48:3a:89:9a:51:97:4a:8e:b4:71:44:10: 0d:25:c5:93:4b:b0:06:9f:72:5e:c4:2e:67:2f:c5:29:63:bf: 96:c6:42:07:d8:3f:66:6d:5d:48:66:8d:15:a3:90:53:af:6b: 7b:5c:20:40:d1:59:10:d8:7f:5d:25:08:14:03:5a:94:27:43: cf:ba:e5:83:7f:c7:b2:bf:e7:7a:07:73:e2:8e:b9:be:66:9f: f4:f5:fd:85:65:a2:e6:bf:da:72:b3:e8:3f:c7:b1:d0:a2:2d: 0c:c9:13:67:53:8a:79:7a:4c:15:da:6d:84:0f:e7:05:31:65: 35:aa:27:51:a2:12:c7:9f:4b:57:fc:e3:c0:47:13:41:d3:d8: 70:91:b0:ae -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt3WIlOIfamzcwirSGF1C18MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwNzdhMzU2ZjA3ZTA3NGNhZTZmMjZlN2Y1ODkzZGNlOWRh YzhhZDMwHhcNMjYwMTAxMDIxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTcwMTdiMjY1MjcyNjI1OTVmMzNmOTI1MzBlZjkyNWU4ODYxMTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3f08hthndYm4eib+dslXYuzi9XI D/qzw7doAOKwHmqTQxlsW2iTjd1DP2DCeLCc0vgnDZ4Nn8W3VIKDExIEBKYrUc+J evLPX9L85qXEEdyX/Pm5ogGkTlk4kPb5D16BJiJfVoNM/CChXcueHVps/hRYy2BG SVVGxw4A7ue8lNPfHDCN24WQTok49rCJymhfw8B6j0+W5I/enKjKvqt4dRvbHrN8 mp/TtKfzKotD1XiqKU6tAUdKcT1JUuePakv1VRLEsErctk3JtvVX86yB86arHnMZ p6Gba2sctrVvJR8yXeYPKIazDkQqJklXj3WV/3RqHvF0+MhNlArI6ZPP0wIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFIVwF7JlJyYllfM/klMO+SXohhEnMB8GA1UdIwQY MBaAFKB3o1bwfgdMrm8m5/WJPc6drIrTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0hlalZ2Qi1CMHl1YnlibjlZazl6cDJzaXRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8yM2IzY2UtOTkyMi00MmZiLWExMjQt NDgwOTNmYjZjNjdmLzEvaFhBWHNtVW5KaVdWOHotU1V3NzVKZWlHRVNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS8yM2IzY2UtOTkyMi00MmZiLWExMjQtNDgwOTNmYjZjNjdm LzEvb0hlalZ2Qi1CMHl1YnlibjlZazl6cDJzaXRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQAweTlMBgE AgACMBIDBwAgAQZ4DqgDBwAgAQZ8F4gwDQYJKoZIhvcNAQELBQADggEBAD7nYWLr 74NskA941Lq8RO3Ofz3yH4m53DAqfMsS/mbiy/U3XHGvjs1jV1MhIZJW0yyv8krn FTag4ra4uD0gjH+ky7lYZLJbn9CKLnlHWFOxrnjmHK+kwkL0BdbJDUvfyGgZFRAJ tiGpNNDMNBNmCE6nrEg6iZpRl0qOtHFEEA0lxZNLsAafcl7ELmcvxSljv5bGQgfY P2ZtXUhmjRWjkFOva3tcIEDRWRDYf10lCBQDWpQnQ8+65YN/x7K/53oHc+KOub5m n/T1/YVloua/2nKz6D/HsdCiLQzJE2dTinl6TBXabYQP5wUxZTWqJ1GiEsefS1f8 48BHE0HT2HCRsK4= -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:56 2026 by rpki-client