This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/hxArBBPEsBmh6lA8LmpqsGC-O9Y.roa File: hxArBBPEsBmh6lA8LmpqsGC-O9Y.roa (raw, json) Hash identifier: p7tJPFgjfUUpJQH1SrbPDkojOBWipCAp1Q6lO2Sk15g= Subject key identifier: 87:10:2B:04:13:C4:B0:19:A1:EA:50:3C:2E:6A:6A:B0:60:BE:3B:D6 Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27 Certificate serial: 019B78A2E1BE04A259CCBBA207583CC5EAED Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/hxArBBPEsBmh6lA8LmpqsGC-O9Y.roa Signing time: Thu 01 Jan 2026 08:18:19 +0000 ROA not before: Thu 01 Jan 2026 08:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201838 IP address blocks: 45.90.200.0/22 maxlen: 24 45.145.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:e1:be:04:a2:59:cc:bb:a2:07:58:3c:c5:ea:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27 Validity Not Before: Jan 1 08:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=87102b0413c4b019a1ea503c2e6a6ab060be3bd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:36:bb:51:39:e4:23:50:fe:02:c4:d7:01:09: e5:3d:d8:ce:c7:5d:b1:00:d0:27:5e:cf:c2:8e:c0: 6f:04:f0:31:b4:40:6a:7b:21:bc:61:52:ab:ac:bc: 2f:21:ff:4e:f4:eb:b2:89:1c:08:7b:2d:d7:17:13: ef:53:5a:fe:ee:ed:c1:63:07:59:bd:ee:7f:5d:3a: ac:50:98:ee:b9:df:92:f3:db:e8:9c:10:c1:4a:a6: 29:4e:4b:8a:16:09:5c:10:da:92:18:85:5f:61:2b: 47:6f:97:39:bf:ee:50:18:1a:fd:15:8c:eb:d0:af: dc:4d:b9:c3:9c:5e:a4:72:a8:32:ba:73:f5:ee:27: 78:95:9a:b4:b8:d2:eb:c4:48:a4:9e:ee:3c:ce:8a: 85:a6:eb:d7:8c:65:44:e5:de:05:c4:4b:2e:39:f9: d2:a6:f7:7b:56:56:44:ea:bd:90:43:da:a4:8f:dc: 71:79:dc:4b:19:81:5d:7c:7e:4b:d0:69:78:aa:05: c8:2a:18:dc:19:06:06:9c:dd:b6:e7:49:27:4d:48: 7f:26:de:50:b9:46:1f:67:bd:da:2a:1e:10:ca:44: 95:f2:b1:12:01:50:c6:00:c3:1e:ef:0d:38:6f:ba: 33:8f:93:6e:35:4c:e0:29:10:16:41:14:09:a3:1d: f0:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:10:2B:04:13:C4:B0:19:A1:EA:50:3C:2E:6A:6A:B0:60:BE:3B:D6 X509v3 Authority Key Identifier: keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/hxArBBPEsBmh6lA8LmpqsGC-O9Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.90.200.0/22 45.145.148.0/22 Signature Algorithm: sha256WithRSAEncryption 4a:d9:56:9f:fb:fa:3e:6c:ea:a5:f7:55:02:8a:dc:f3:07:0f: 9c:9e:b3:7c:ec:b0:01:1c:ec:92:f8:44:2e:6f:cb:a3:a0:40: 2c:a8:d3:cf:d8:bf:e4:a3:10:43:4e:fb:4a:84:11:cd:1c:78: 93:48:9f:b3:2a:d1:53:73:95:ee:cb:9e:00:98:8d:7f:cc:82: 40:e5:34:5b:85:93:c0:df:2b:65:a8:4b:98:72:59:a5:ab:be: 6b:00:ac:ee:49:53:46:ec:a1:f5:d3:58:7a:b4:73:17:d2:bf: 34:35:4e:0a:d2:fa:1f:a4:56:02:ab:b0:f0:ca:ef:6a:ae:5d: 8c:91:74:46:d6:e8:b9:5f:be:c7:e9:71:47:c2:cc:62:15:6f: 4d:e3:55:c9:57:36:44:32:91:eb:e6:39:19:79:c9:bf:cf:8d: 75:ad:17:51:cb:b0:5b:3d:7b:87:5f:af:32:ef:3e:f1:12:63: 0b:be:9d:2a:c3:b2:8f:99:ba:dd:17:80:b8:0d:bd:42:7b:f6: 36:6a:f2:9c:1e:6b:76:c3:61:c7:9a:6a:e9:df:7c:7a:34:54: e6:7b:08:ac:af:f7:95:20:4d:9f:a0:72:b5:03:f9:04:c0:5f: fd:61:4b:1a:bb:88:32:35:85:3a:a9:20:3e:9c:5a:c8:d8:7c: aa:80:ed:d4 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4ouG+BKJZzLuiB1g8xertMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4NjhhMTk5MmJiODAzN2RkZTgxZDBjOGNkYzA2OTVmY2Vl MTdjMjcwHhcNMjYwMTAxMDgxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NzEwMmIwNDEzYzRiMDE5YTFlYTUwM2MyZTZhNmFiMDYwYmUzYmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApja7UTnkI1D+AsTXAQnlPdjOx12x ANAnXs/CjsBvBPAxtEBqeyG8YVKrrLwvIf9O9OuyiRwIey3XFxPvU1r+7u3BYwdZ ve5/XTqsUJjuud+S89vonBDBSqYpTkuKFglcENqSGIVfYStHb5c5v+5QGBr9FYzr 0K/cTbnDnF6kcqgyunP17id4lZq0uNLrxEiknu48zoqFpuvXjGVE5d4FxEsuOfnS pvd7VlZE6r2QQ9qkj9xxedxLGYFdfH5L0Gl4qgXIKhjcGQYGnN2250knTUh/Jt5Q uUYfZ73aKh4QykSV8rESAVDGAMMe7w04b7ozj5NuNUzgKRAWQRQJox3w1QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIcQKwQTxLAZoepQPC5qarBgvjvWMB8GA1UdIwQY MBaAFJhooZkruAN93oHQyM3AaV/O4XwnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC82YjIyZTYtMzUyZi00ZTg4LTgyN2It ZDc4ZDU2MzFkN2Y2LzEvaHhBckJCUEVzQm1oNmxBOExtcHFzR0MtTzlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC82YjIyZTYtMzUyZi00ZTg4LTgyN2ItZDc4ZDU2MzFkN2Y2 LzEvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLVrIAwQC LZGUMA0GCSqGSIb3DQEBCwUAA4IBAQBK2Vaf+/o+bOql91UCitzzBw+cnrN87LAB HOyS+EQub8ujoEAsqNPP2L/koxBDTvtKhBHNHHiTSJ+zKtFTc5Xuy54AmI1/zIJA 5TRbhZPA3ytlqEuYclmlq75rAKzuSVNG7KH101h6tHMX0r80NU4K0vofpFYCq7Dw yu9qrl2MkXRG1ui5X77H6XFHwsxiFW9N41XJVzZEMpHr5jkZecm/z411rRdRy7Bb PXuHX68y7z7xEmMLvp0qw7KPmbrdF4C4Db1Ce/Y2avKcHmt2w2HHmmrp33x6NFTm ewisr/eVIE2foHK1A/kEwF/9YUsau4gyNYU6qSA+nFrI2HyqgO3U -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:10 2026 by rpki-client