This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/HvxaqPnCVzCzJqdTxy9QM7dhpvo.roa File: HvxaqPnCVzCzJqdTxy9QM7dhpvo.roa (raw, json) Hash identifier: jvJDycM8Kwx/kDrj1W5EYQK9WGSm7y5sJzrsu3gD7EA= Subject key identifier: 1E:FC:5A:A8:F9:C2:57:30:B3:26:A7:53:C7:2F:50:33:B7:61:A6:FA Certificate issuer: /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41 Certificate serial: 019B7E3883108CD3A52E75F8CB12CB91A0AD Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/HvxaqPnCVzCzJqdTxy9QM7dhpvo.roa Signing time: Fri 02 Jan 2026 10:19:51 +0000 ROA not before: Fri 02 Jan 2026 10:19:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29667 IP address blocks: 78.130.132.0/22 maxlen: 22 78.130.136.0/22 maxlen: 22 78.130.140.0/23 maxlen: 23 78.130.142.0/24 maxlen: 24 84.22.2.0/23 maxlen: 23 84.22.4.0/23 maxlen: 23 84.22.25.0/24 maxlen: 24 84.22.27.0/24 maxlen: 24 84.22.28.0/24 maxlen: 24 87.116.96.0/20 maxlen: 20 87.118.142.0/24 maxlen: 24 87.118.156.0/22 maxlen: 22 89.25.16.0/22 maxlen: 22 89.25.24.0/21 maxlen: 21 89.25.25.0/24 maxlen: 24 89.25.26.0/23 maxlen: 23 89.25.28.0/22 maxlen: 22 89.25.112.0/21 maxlen: 21 89.25.112.0/22 maxlen: 22 89.25.116.0/23 maxlen: 23 89.25.118.0/24 maxlen: 24 213.145.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:83:10:8c:d3:a5:2e:75:f8:cb:12:cb:91:a0:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41 Validity Not Before: Jan 2 10:19:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1efc5aa8f9c25730b326a753c72f5033b761a6fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:44:79:da:3f:1a:c4:1c:aa:f2:12:da:b1:bb: 0d:68:71:d4:9b:7a:fd:e8:6d:10:66:ab:da:0f:1e: 33:d2:50:1c:ff:37:8b:0b:8b:3b:78:fb:e7:f5:ec: 9f:65:e9:95:f7:d4:bb:fd:61:57:bb:b8:e6:35:b9: 7a:9a:54:5b:dd:4b:e4:3e:54:3d:2c:aa:43:42:cb: 2d:2c:9e:b3:d1:8a:a1:20:6e:50:80:71:16:6d:cf: 2d:e1:25:27:27:46:c3:6a:dd:db:4f:cf:f6:40:c0: bb:cf:24:9f:2d:5d:57:b4:72:9a:d6:39:1d:10:75: 67:7b:2f:59:44:5e:d3:ec:29:73:9f:bf:b7:42:d9: b4:02:a9:2c:b2:fd:60:27:4c:20:2c:31:69:25:6a: f5:be:f2:3a:7c:06:07:49:11:25:8d:03:ad:c7:d3: 9a:bc:50:32:84:c5:5a:57:0f:e1:13:59:46:7b:94: 70:71:b3:21:c6:84:08:ad:40:1c:c2:33:fd:59:c1: 65:fd:41:e8:2d:ab:95:da:3f:8c:ce:92:3d:b3:93: 5b:d1:80:98:36:e2:cc:e7:67:60:96:25:21:4a:fb: da:90:71:08:02:c5:40:86:04:cc:9a:35:31:d5:9f: c6:6e:25:20:3f:2e:f4:f3:cf:0e:2f:4f:fd:02:84: 6d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:FC:5A:A8:F9:C2:57:30:B3:26:A7:53:C7:2F:50:33:B7:61:A6:FA X509v3 Authority Key Identifier: keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/HvxaqPnCVzCzJqdTxy9QM7dhpvo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.130.132.0-78.130.142.255 84.22.2.0-84.22.5.255 84.22.25.0/24 84.22.27.0-84.22.28.255 87.116.96.0/20 87.118.142.0/24 87.118.156.0/22 89.25.16.0/22 89.25.24.0/21 89.25.112.0/21 213.145.105.0/24 Signature Algorithm: sha256WithRSAEncryption 56:8f:36:60:10:93:b1:dc:53:8f:05:f8:48:b8:e5:02:df:61: 1a:5e:82:16:24:1e:2e:37:ef:73:95:04:14:36:3c:03:f9:d0: 51:4e:06:47:6b:43:0d:47:c0:3d:21:21:12:80:09:06:7d:bb: c1:a7:73:c6:ac:69:d5:73:f9:2e:8a:78:a0:02:be:e1:7b:33: 8a:22:0a:15:36:dd:8a:5f:ce:aa:8e:0b:2e:eb:57:56:d6:a5: 0f:c9:fb:50:d4:88:e1:39:89:29:25:63:b6:41:b3:53:90:d4: 72:bb:1f:2b:f2:82:c1:32:da:38:bc:7f:4c:2f:1e:68:ed:c4: c0:85:88:70:70:6a:91:fe:77:37:dd:e8:b0:55:aa:0a:09:59: ff:5a:0d:93:c4:9a:24:1c:a0:11:7a:88:64:58:4e:30:54:8c: cc:0d:5f:2f:bd:1f:13:7a:84:85:c4:74:e8:14:e0:09:c2:49: 1a:f9:0a:7d:b0:bc:7e:be:7d:64:85:c3:e2:78:fa:52:b9:40: 6f:41:1b:bf:91:e1:13:bb:61:db:e6:81:30:47:2c:e8:8c:b4: 23:fa:13:fe:37:68:ee:01:8c:8b:30:7e:58:c0:19:a4:d4:25: 3f:46:6a:f4:37:22:57:c2:e0:e6:69:9b:ea:2c:8b:3f:91:d4: 5b:4c:e8:8d -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgISAZt+OIMQjNOlLnX4yxLLkaCtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwN2Q3NTczYWFjYWU4MjFjODdkNmQzNjQzMWNmZTRiMjgw MWFiNDEwHhcNMjYwMTAyMTAxOTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZWZjNWFhOGY5YzI1NzMwYjMyNmE3NTNjNzJmNTAzM2I3NjFhNmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0R52j8axByq8hLasbsNaHHUm3r9 6G0QZqvaDx4z0lAc/zeLC4s7ePvn9eyfZemV99S7/WFXu7jmNbl6mlRb3UvkPlQ9 LKpDQsstLJ6z0YqhIG5QgHEWbc8t4SUnJ0bDat3bT8/2QMC7zySfLV1XtHKa1jkd EHVney9ZRF7T7Clzn7+3Qtm0Aqkssv1gJ0wgLDFpJWr1vvI6fAYHSREljQOtx9Oa vFAyhMVaVw/hE1lGe5RwcbMhxoQIrUAcwjP9WcFl/UHoLauV2j+MzpI9s5Nb0YCY NuLM52dgliUhSvvakHEIAsVAhgTMmjUx1Z/GbiUgPy70888OL0/9AoRtAwIDAQAB o4ICXTCCAlkwHQYDVR0OBBYEFB78Wqj5wlcwsyanU8cvUDO3Yab6MB8GA1UdIwQY MBaAFNB9dXOqyughyH1tNkMc/ksoAatBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEgxMWM2cks2Q0hJZlcwMlF4ei1TeWdCcTBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi81NzI1Y2MtYWQ3MC00NmY4LWJiNjIt Y2Y5ZGM1YmFhYTc5LzEvSHZ4YXFQbkNWekN6SnFkVHh5OVFNN2RocHZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi81NzI1Y2MtYWQ3MC00NmY4LWJiNjItY2Y5ZGM1YmFhYTc5 LzEvMEgxMWM2cks2Q0hJZlcwMlF4ei1TeWdCcTBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHMGCCsGAQUFBwEHAQH/BGQwYjBgBAIAATBaMAwDBAJOgoQD BABOgo4wDAMEAVQWAgMEAVQWBAMEAFQWGTAMAwQAVBYbAwQAVBYcAwQEV3RgAwQA V3aOAwQCV3acAwQCWRkQAwQDWRkYAwQDWRlwAwQA1ZFpMA0GCSqGSIb3DQEBCwUA A4IBAQBWjzZgEJOx3FOPBfhIuOUC32EaXoIWJB4uN+9zlQQUNjwD+dBRTgZHa0MN R8A9ISESgAkGfbvBp3PGrGnVc/kuinigAr7hezOKIgoVNt2KX86qjgsu61dW1qUP yftQ1IjhOYkpJWO2QbNTkNRyux8r8oLBMto4vH9MLx5o7cTAhYhwcGqR/nc33eiw VaoKCVn/Wg2TxJokHKAReohkWE4wVIzMDV8vvR8TeoSFxHToFOAJwkka+Qp9sLx+ vn1khcPiePpSuUBvQRu/keETu2Hb5oEwRyzojLQj+hP+N2juAYyLMH5YwBmk1CU/ Rmr0NyJXwuDmaZvqLIs/kdRbTOiN -----END CERTIFICATE-----Generated at Sun Jan 25 22:31:30 2026 by rpki-client