This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/hx2nn1CjUdGBDRiyiARfgFgKlYY.roa File: hx2nn1CjUdGBDRiyiARfgFgKlYY.roa (raw, json) Hash identifier: b0/X4HcqCanIY+MSQh0Y434IU8rH9hmOTAB9oiJ8V5A= Subject key identifier: 87:1D:A7:9F:50:A3:51:D1:81:0D:18:B2:88:04:5F:80:58:0A:95:86 Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019B7F14A17B93F241F2FBD326AF0FC2AB9D Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/hx2nn1CjUdGBDRiyiARfgFgKlYY.roa Signing time: Fri 02 Jan 2026 14:20:17 +0000 ROA not before: Fri 02 Jan 2026 14:20:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9033 IP address blocks: 194.122.80.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:a1:7b:93:f2:41:f2:fb:d3:26:af:0f:c2:ab:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Jan 2 14:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=871da79f50a351d1810d18b288045f80580a9586 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:8a:f1:bb:c5:37:ea:db:f0:64:bf:ee:ca:1f: cd:b7:7c:ef:29:41:16:4f:4d:25:2c:93:d0:1d:0c: 3e:51:80:34:6a:b1:2c:52:00:a2:f1:89:3d:43:c7: e6:63:66:18:3b:61:7e:62:1b:cf:ac:14:57:60:89: 07:11:1d:7f:4e:7e:cc:94:37:ae:c4:dc:07:b1:ad: 0c:38:b6:66:fa:f3:a7:ae:2e:f4:d3:2b:60:1b:dd: d8:63:d8:e9:77:3f:1f:f3:e6:0b:99:27:5b:a7:fc: f0:5a:2f:d8:7a:1c:91:10:71:74:f7:74:98:6e:e6: a5:c7:ee:e2:51:b3:7d:c2:b9:b3:be:8a:a5:b5:b3: a0:79:42:4c:8a:3c:4c:b0:06:5c:4c:23:00:39:18: dc:9f:42:a8:52:1d:61:1c:0e:86:1a:e3:88:26:fa: 0c:a5:4e:30:f3:21:6a:8d:23:a1:6c:db:92:ab:12: c7:26:99:fa:e6:25:c7:8f:e8:f6:dc:cc:23:bb:e6: 91:49:0e:82:f7:ce:18:6b:62:55:1c:cf:3d:63:fe: 40:ed:00:ca:12:8b:1b:c9:79:12:d3:4e:31:5b:b2: 72:46:52:2b:19:12:08:8a:be:0f:40:88:1e:6f:51: 1d:90:52:93:3b:59:c8:7a:4c:ce:50:e0:c2:28:54: fa:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:1D:A7:9F:50:A3:51:D1:81:0D:18:B2:88:04:5F:80:58:0A:95:86 X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/hx2nn1CjUdGBDRiyiARfgFgKlYY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.122.80.0/22 Signature Algorithm: sha256WithRSAEncryption 9b:a0:9a:23:4e:d8:45:c3:eb:1d:5e:a8:c9:24:86:32:bc:dd: 8e:c3:31:35:00:9e:6e:b9:aa:27:77:15:2c:3a:81:d0:b3:d8: b6:33:a8:26:6f:a3:83:70:6a:77:3c:08:20:ab:a8:b0:8a:86: bd:38:b9:51:c0:15:9d:4c:c9:c2:83:91:56:41:d9:fd:c0:d3: c0:ca:05:8a:3d:c4:2d:c2:80:68:a8:2a:ad:e1:86:43:fd:49: 08:81:f3:88:69:c2:93:e0:88:fb:f4:04:15:91:40:2d:ea:96: 3a:4d:29:46:a0:40:98:14:67:c8:b7:d2:70:e0:52:2e:fa:5b: 60:67:34:84:f8:d4:d2:49:a2:97:ec:2d:c8:13:c1:8a:67:12: 3d:b0:74:fa:96:dc:14:71:5c:1b:d1:4e:6b:97:9b:ca:b2:c7: bd:9e:69:57:fc:3c:a4:0d:ce:23:a2:5b:49:b8:35:4f:7b:93: 72:80:ed:25:9f:88:bb:31:42:52:cb:8c:a6:e7:d6:3c:2f:9e: d0:92:ff:b8:c5:25:17:4f:75:a7:61:1b:e0:65:ac:2e:bf:ce: 38:00:84:8a:70:5b:b8:09:17:91:ab:b1:2e:cd:0d:b7:7b:f0: 2d:9f:12:ab:46:0f:a5:5e:9a:ee:89:c3:1f:92:9c:81:08:53: 09:a1:42:96 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FKF7k/JB8vvTJq8PwqudMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjYwMTAyMTQyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NzFkYTc5ZjUwYTM1MWQxODEwZDE4YjI4ODA0NWY4MDU4MGE5NTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Yrxu8U36tvwZL/uyh/Nt3zvKUEW T00lLJPQHQw+UYA0arEsUgCi8Yk9Q8fmY2YYO2F+YhvPrBRXYIkHER1/Tn7MlDeu xNwHsa0MOLZm+vOnri700ytgG93YY9jpdz8f8+YLmSdbp/zwWi/YehyREHF093SY bualx+7iUbN9wrmzvoqltbOgeUJMijxMsAZcTCMAORjcn0KoUh1hHA6GGuOIJvoM pU4w8yFqjSOhbNuSqxLHJpn65iXHj+j23Mwju+aRSQ6C984Ya2JVHM89Y/5A7QDK EosbyXkS004xW7JyRlIrGRIIir4PQIgeb1EdkFKTO1nIekzOUODCKFT6JQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIcdp59Qo1HRgQ0YsogEX4BYCpWGMB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvaHgybm4xQ2pVZEdCRFJpeWlBUmZnRmdLbFlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwnpQMA0G CSqGSIb3DQEBCwUAA4IBAQCboJojTthFw+sdXqjJJIYyvN2OwzE1AJ5uuaondxUs OoHQs9i2M6gmb6ODcGp3PAggq6iwioa9OLlRwBWdTMnCg5FWQdn9wNPAygWKPcQt woBoqCqt4YZD/UkIgfOIacKT4Ij79AQVkUAt6pY6TSlGoECYFGfIt9Jw4FIu+ltg ZzSE+NTSSaKX7C3IE8GKZxI9sHT6ltwUcVwb0U5rl5vKsse9nmlX/DykDc4joltJ uDVPe5NygO0ln4i7MUJSy4ym59Y8L57Qkv+4xSUXT3WnYRvgZawuv844AISKcFu4 CReRq7EuzQ23e/AtnxKrRg+lXpruicMfkpyBCFMJoUKW -----END CERTIFICATE-----Generated at Sun Jan 25 10:51:58 2026 by rpki-client