This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/HXx-9xf840ychc1XFQvrQhYAMc8.roa
File: HXx-9xf840ychc1XFQvrQhYAMc8.roa (raw, json)
Hash identifier: wEQlpP9y0gAps6ZTYiJzXEzVVAyiwRr/90bpIEEpgsY=
Subject key identifier: 1D:7C:7E:F7:17:FC:E3:4C:9C:85:CD:57:15:0B:EB:42:16:00:31:CF
Certificate issuer: /CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Certificate serial: 019B77C6998206898DA71BEE0DE5971C7DAB
Authority key identifier: D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/HXx-9xf840ychc1XFQvrQhYAMc8.roa
Signing time: Thu 01 Jan 2026 04:17:42 +0000
ROA not before: Thu 01 Jan 2026 04:17:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48940
IP address blocks: 77.232.140.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 04:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c6:99:82:06:89:8d:a7:1b:ee:0d:e5:97:1c:7d:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Validity
Not Before: Jan 1 04:17:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d7c7ef717fce34c9c85cd57150beb42160031cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f6:48:f9:b3:68:db:b1:87:10:91:f6:ba:df:
58:70:82:3b:26:0c:33:ca:3a:26:a7:22:20:37:6d:
ce:16:60:f7:7a:04:f8:cf:60:5e:65:67:eb:7a:07:
53:10:2d:8c:55:e9:25:e9:00:27:56:6a:bf:23:37:
09:a1:3b:a1:8f:5e:3e:7c:f3:c6:3d:4e:f4:8d:19:
d8:89:24:ab:e6:b3:84:51:e3:51:07:c0:70:dd:2f:
7d:25:f3:94:16:b8:63:0e:ae:c5:0f:5f:c5:97:d4:
37:59:c8:2c:1f:bc:4f:8e:0a:e2:13:03:8e:4d:bb:
fa:9d:b1:1f:e5:28:6f:5e:a9:5f:6f:6f:e1:3e:a5:
48:e2:35:23:02:96:bd:b9:03:8c:b4:80:b6:cd:c6:
a2:ee:94:cc:83:e7:b4:1a:93:52:e4:90:36:ce:b3:
32:5f:77:68:e6:98:fa:c0:21:72:39:a5:2d:aa:56:
d1:35:82:6a:3c:d2:8b:0f:43:6b:b1:08:8f:7e:c5:
8b:6d:29:a5:fc:59:97:ef:24:c2:2d:2d:a4:9a:78:
38:9a:48:61:de:b6:c2:ee:44:f2:54:08:43:2e:ef:
a1:c3:d1:5f:ad:1d:43:ee:c2:4b:40:d2:c8:34:f5:
15:af:ed:50:74:17:f5:4b:df:44:e3:4c:57:88:22:
d2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:7C:7E:F7:17:FC:E3:4C:9C:85:CD:57:15:0B:EB:42:16:00:31:CF
X509v3 Authority Key Identifier:
keyid:D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/HXx-9xf840ychc1XFQvrQhYAMc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.232.140.0/22
Signature Algorithm: sha256WithRSAEncryption
69:63:27:ae:b7:98:6c:8c:fc:a3:d9:ae:47:c3:7a:26:54:7b:
70:a0:09:13:28:52:bb:99:de:15:7d:e2:d9:c2:25:39:66:eb:
1c:fc:9b:b1:ff:93:b2:88:1d:0b:31:f2:fd:8a:de:e6:84:89:
0c:d5:3f:eb:97:c1:3f:7d:e8:9e:19:b8:0c:2c:72:00:da:16:
d1:8b:bf:95:46:16:3b:0a:fc:b0:60:20:1b:7f:d7:cb:30:29:
52:55:49:5b:e6:cd:d8:fd:90:b3:6e:96:a4:b0:36:42:16:2c:
1a:fa:41:fe:96:82:a7:10:70:2b:1c:79:16:fe:ec:55:ae:c1:
d4:1a:c5:77:10:0b:95:34:5c:ca:a3:cc:cd:86:b5:31:e0:ac:
1e:54:d3:14:44:8c:ea:23:b1:6a:86:96:9b:b8:22:5b:e7:6d:
fb:91:43:9d:0a:6c:15:38:d3:7d:b6:73:93:80:7c:81:35:b8:
54:47:34:2e:a7:fb:68:4a:d7:6b:b9:6d:88:90:b1:36:ad:3d:
4c:bd:bf:ac:61:9b:3b:0c:a1:57:8e:08:65:d5:49:49:32:1b:
26:61:b5:82:ea:15:ea:a2:e8:71:8d:30:60:8d:4b:67:94:26:
70:fe:f3:dd:34:57:3e:2f:7d:1f:fc:96:13:d9:be:9f:16:ff:
15:a4:31:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:18:05 2026 by rpki-client