This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/HXGNMLUxYfLt2IxSXdMd7iMfgVw.roa File: HXGNMLUxYfLt2IxSXdMd7iMfgVw.roa (raw, json) Hash identifier: rGZ8j3Yypq0spYgSmlQPy3xpKi1OQAliNPVd0/dnsVw= Subject key identifier: 1D:71:8D:30:B5:31:61:F2:ED:D8:8C:52:5D:D3:1D:EE:23:1F:81:5C Certificate issuer: /CN=ec05986897d024e48c7cd25e1891c4208ff3bbb2 Certificate serial: 019B7E38310D9364AB7B3FC8227702C039EC Authority key identifier: EC:05:98:68:97:D0:24:E4:8C:7C:D2:5E:18:91:C4:20:8F:F3:BB:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7AWYaJfQJOSMfNJeGJHEII_zu7I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/HXGNMLUxYfLt2IxSXdMd7iMfgVw.roa Signing time: Fri 02 Jan 2026 10:19:30 +0000 ROA not before: Fri 02 Jan 2026 10:19:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20624 IP address blocks: 193.178.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.crl rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.mft rsync://rpki.ripe.net/repository/DEFAULT/7AWYaJfQJOSMfNJeGJHEII_zu7I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:31:0d:93:64:ab:7b:3f:c8:22:77:02:c0:39:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec05986897d024e48c7cd25e1891c4208ff3bbb2 Validity Not Before: Jan 2 10:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1d718d30b53161f2edd88c525dd31dee231f815c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a2:7b:fc:f1:33:92:39:1d:e3:9f:43:2a:54: f5:c9:80:cd:da:8e:a1:1c:d3:52:25:1d:85:7c:17: 27:1d:e6:3f:a1:03:54:25:58:70:d0:2c:56:91:a8: 81:7d:59:e6:fd:b4:3b:15:dc:b0:9f:29:54:f5:53: 3d:40:d1:95:eb:cd:cb:a1:93:b6:81:3d:8d:13:d9: 94:e0:db:ca:ce:54:a3:f2:24:ec:75:01:36:72:fa: 19:8c:72:ee:eb:e0:44:aa:c6:d0:e7:64:40:80:cd: e7:d4:be:7b:15:3a:f1:1f:f8:50:7c:79:25:44:d1: cd:87:99:6f:fb:48:31:2f:6a:f7:89:e3:19:e2:33: 8d:cd:4e:61:20:1e:ef:56:65:15:31:61:e0:ca:87: 87:04:cc:d0:24:8b:1e:8c:60:2c:f0:7f:ea:70:c9: 36:07:d9:6d:cf:2b:0d:d2:33:a6:bf:ee:a6:e7:0e: 32:6c:48:91:fb:19:66:34:df:f9:ec:24:0f:d8:72: 21:f6:60:9d:1a:66:2d:ba:64:c8:ce:67:69:0a:ac: 01:59:39:77:79:cc:e8:3d:6a:66:5b:43:69:bc:91: 1c:a7:e8:f1:c5:33:04:34:4b:41:43:57:8e:e0:07: c6:0d:b2:21:47:db:d5:27:b7:d6:4e:60:c7:5c:94: 4a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:71:8D:30:B5:31:61:F2:ED:D8:8C:52:5D:D3:1D:EE:23:1F:81:5C X509v3 Authority Key Identifier: keyid:EC:05:98:68:97:D0:24:E4:8C:7C:D2:5E:18:91:C4:20:8F:F3:BB:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7AWYaJfQJOSMfNJeGJHEII_zu7I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/HXGNMLUxYfLt2IxSXdMd7iMfgVw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.178.168.0/24 Signature Algorithm: sha256WithRSAEncryption 42:58:34:7c:28:d3:61:d2:6c:bc:15:e3:43:26:ff:b4:44:1b: ea:bd:9b:08:4d:80:84:b3:c6:c6:c0:39:77:cc:b6:e9:82:06: 7e:c5:2b:1e:aa:ae:39:da:2a:c9:1f:fb:68:e5:16:c1:79:53: 2f:25:c1:5c:de:c6:14:ea:63:7c:e4:fe:98:f0:89:01:d8:0d: f9:c2:9c:1e:df:93:60:3c:4d:79:e4:3e:ed:95:bd:4f:cf:ee: f4:f3:53:03:0e:8b:5b:f8:7d:70:46:76:89:ef:70:47:ef:e6: 14:a2:31:ba:f3:ce:4f:4d:db:01:1d:8f:ab:46:09:1d:ee:fe: 26:2a:16:38:c2:72:9f:c1:53:ae:23:f3:66:5f:3a:53:7a:c3: da:eb:53:1b:7a:37:67:bb:57:8d:f8:3e:a5:0d:b8:11:be:6a: b0:4c:28:71:1f:3b:98:9e:8b:6c:e9:97:0f:67:59:e7:1c:2c: 22:7c:f6:52:8e:37:4d:bf:68:26:c3:81:0f:cc:c2:55:bf:09: b9:e4:a8:8c:aa:76:d1:b0:1f:8b:fa:72:62:28:c5:1f:a0:93: db:88:d6:33:63:3f:19:0c:6e:9d:7e:41:a5:39:c1:56:bf:df: 20:d4:c3:59:0a:04:de:60:a2:23:ce:13:a9:2f:7f:82:4d:0b: 92:d0:1b:b5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+ODENk2Srez/IIncCwDnsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjMDU5ODY4OTdkMDI0ZTQ4YzdjZDI1ZTE4OTFjNDIwOGZm M2JiYjIwHhcNMjYwMTAyMTAxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZDcxOGQzMGI1MzE2MWYyZWRkODhjNTI1ZGQzMWRlZTIzMWY4MTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06J7/PEzkjkd459DKlT1yYDN2o6h HNNSJR2FfBcnHeY/oQNUJVhw0CxWkaiBfVnm/bQ7FdywnylU9VM9QNGV683LoZO2 gT2NE9mU4NvKzlSj8iTsdQE2cvoZjHLu6+BEqsbQ52RAgM3n1L57FTrxH/hQfHkl RNHNh5lv+0gxL2r3ieMZ4jONzU5hIB7vVmUVMWHgyoeHBMzQJIsejGAs8H/qcMk2 B9ltzysN0jOmv+6m5w4ybEiR+xlmNN/57CQP2HIh9mCdGmYtumTIzmdpCqwBWTl3 eczoPWpmW0NpvJEcp+jxxTMENEtBQ1eO4AfGDbIhR9vVJ7fWTmDHXJRKMwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB1xjTC1MWHy7diMUl3THe4jH4FcMB8GA1UdIwQY MBaAFOwFmGiX0CTkjHzSXhiRxCCP87uyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0FXWWFKZlFKT1NNZk5KZUdKSEVJSV96dTdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9hZDZhZjAtMDA1Zi00M2EzLWFhOWQt NzY2ZDFmMzI0MzNjLzEvSFhHTk1MVXhZZkx0Mkl4U1hkTWQ3aU1mZ1Z3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni9hZDZhZjAtMDA1Zi00M2EzLWFhOWQtNzY2ZDFmMzI0MzNj LzEvN0FXWWFKZlFKT1NNZk5KZUdKSEVJSV96dTdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwbKoMA0G CSqGSIb3DQEBCwUAA4IBAQBCWDR8KNNh0my8FeNDJv+0RBvqvZsITYCEs8bGwDl3 zLbpggZ+xSseqq452irJH/to5RbBeVMvJcFc3sYU6mN85P6Y8IkB2A35wpwe35Ng PE155D7tlb1Pz+7081MDDotb+H1wRnaJ73BH7+YUojG6885PTdsBHY+rRgkd7v4m KhY4wnKfwVOuI/NmXzpTesPa61Mbejdnu1eN+D6lDbgRvmqwTChxHzuYnots6ZcP Z1nnHCwifPZSjjdNv2gmw4EPzMJVvwm55KiMqnbRsB+L+nJiKMUfoJPbiNYzYz8Z DG6dfkGlOcFWv98g1MNZCgTeYKIjzhOpL3+CTQuS0Bu1 -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:01 2026 by rpki-client