This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/Hxp2KZnDVTAomBXoNFjjRH1VUTM.roa File: Hxp2KZnDVTAomBXoNFjjRH1VUTM.roa (raw, json) Hash identifier: 6wCn2sStp7lMoBisyxoOVg7CQrVyP+8JEmZ6TdkNK6k= Subject key identifier: 1F:1A:76:29:99:C3:55:30:28:98:15:E8:34:58:E3:44:7D:55:51:33 Certificate issuer: /CN=7e750d6fcb8a40cd661cf73d1acabd8305e877fd Certificate serial: 019B7E38F95D3234E2A89F3F451CA457F3B8 Authority key identifier: 7E:75:0D:6F:CB:8A:40:CD:66:1C:F7:3D:1A:CA:BD:83:05:E8:77:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fnUNb8uKQM1mHPc9Gsq9gwXod_0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/Hxp2KZnDVTAomBXoNFjjRH1VUTM.roa Signing time: Fri 02 Jan 2026 10:20:21 +0000 ROA not before: Fri 02 Jan 2026 10:20:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31027 IP address blocks: 91.230.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft rsync://rpki.ripe.net/repository/DEFAULT/fnUNb8uKQM1mHPc9Gsq9gwXod_0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:f9:5d:32:34:e2:a8:9f:3f:45:1c:a4:57:f3:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e750d6fcb8a40cd661cf73d1acabd8305e877fd Validity Not Before: Jan 2 10:20:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f1a762999c35530289815e83458e3447d555133 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:68:36:f2:eb:80:6a:9a:8a:ed:c7:9c:75:a7: f4:6f:8f:94:f7:7c:0d:d2:58:81:c7:8b:48:bc:12: f8:dd:7d:08:82:1e:8d:ad:0d:a0:02:ea:21:f2:11: 83:2d:98:83:7b:d3:9d:cf:fa:d6:85:42:c8:75:e9: 55:ff:f6:47:29:42:82:10:b0:35:9d:9c:34:4c:26: c1:ab:7e:1b:fc:6a:73:61:d7:fb:d4:05:bd:fd:2e: fe:84:ff:97:4b:c7:56:f1:02:a9:f3:2c:f5:03:b7: e0:1a:0d:54:7d:3e:e3:23:0c:32:f0:43:10:60:ea: 12:ca:cb:c0:32:21:91:95:1e:ea:48:12:d3:43:4d: 10:8b:7e:f8:3b:60:e2:37:85:15:e2:cb:4d:4b:f1: 43:d5:03:59:e3:95:1a:13:fe:ba:a2:84:8f:c3:2a: 79:b1:ea:99:a1:14:39:34:3c:11:8f:d0:7c:1d:d7: 01:0a:32:c2:41:5e:60:43:bb:6b:5d:b4:b8:4a:0e: 03:12:d4:1b:78:b7:dc:38:b4:b3:e7:0a:e9:2f:cd: 41:14:0d:65:36:3d:3f:a6:80:36:4e:38:f6:ce:15: 83:c0:0c:d6:1b:6c:ae:78:6f:9b:da:95:2d:de:3e: d2:f6:5e:f9:2c:76:f9:14:63:b5:23:f9:89:2e:14: 8e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:1A:76:29:99:C3:55:30:28:98:15:E8:34:58:E3:44:7D:55:51:33 X509v3 Authority Key Identifier: keyid:7E:75:0D:6F:CB:8A:40:CD:66:1C:F7:3D:1A:CA:BD:83:05:E8:77:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fnUNb8uKQM1mHPc9Gsq9gwXod_0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/Hxp2KZnDVTAomBXoNFjjRH1VUTM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.230.68.0/22 Signature Algorithm: sha256WithRSAEncryption 5b:65:fe:dc:f5:39:f9:87:0a:d9:6c:54:35:76:8a:da:65:c6: 67:bd:76:4d:5c:bb:9f:13:f4:df:45:c3:29:cd:0d:75:43:f1: 46:dc:1c:c3:32:26:5a:78:f7:88:8c:fd:20:1d:be:cf:72:aa: d4:74:b6:6b:0b:59:2c:ed:35:83:7e:8a:94:b6:03:d8:1c:da: 6c:38:db:7f:96:dd:ee:a1:77:e6:15:67:33:29:f7:2c:f0:08: ce:4c:7f:6b:09:83:b2:24:03:95:fc:02:c1:05:c0:a6:fb:e4: 08:41:42:b3:12:77:7c:2f:1f:a0:85:70:1c:ae:39:a1:5a:e3: 03:0b:9d:a4:eb:a5:92:3a:71:ed:9b:95:94:2e:95:73:c9:2e: 99:99:b9:7a:98:d2:56:c3:fb:23:ad:43:5d:d8:c7:72:64:83: 9f:12:6c:91:7f:56:c0:60:19:68:34:6f:61:24:84:19:5c:5b: dd:03:70:ab:43:9b:8c:43:47:81:14:89:bf:6c:5f:b5:19:25: 41:db:5b:f6:94:06:80:22:80:9a:45:0f:a3:8c:8f:fd:b4:7a: e4:51:c5:8c:e1:7b:a4:39:5d:ef:32:f7:16:de:ce:2e:0b:c8: 2d:b7:58:1d:18:66:07:76:4e:c8:d4:9f:c6:89:19:ff:44:3a: 05:3a:a9:bb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OPldMjTiqJ8/RRykV/O4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlNzUwZDZmY2I4YTQwY2Q2NjFjZjczZDFhY2FiZDgzMDVl ODc3ZmQwHhcNMjYwMTAyMTAyMDIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjFhNzYyOTk5YzM1NTMwMjg5ODE1ZTgzNDU4ZTM0NDdkNTU1MTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmg28uuAapqK7cecdaf0b4+U93wN 0liBx4tIvBL43X0Igh6NrQ2gAuoh8hGDLZiDe9Odz/rWhULIdelV//ZHKUKCELA1 nZw0TCbBq34b/GpzYdf71AW9/S7+hP+XS8dW8QKp8yz1A7fgGg1UfT7jIwwy8EMQ YOoSysvAMiGRlR7qSBLTQ00Qi374O2DiN4UV4stNS/FD1QNZ45UaE/66ooSPwyp5 seqZoRQ5NDwRj9B8HdcBCjLCQV5gQ7trXbS4Sg4DEtQbeLfcOLSz5wrpL81BFA1l Nj0/poA2Tjj2zhWDwAzWG2yueG+b2pUt3j7S9l75LHb5FGO1I/mJLhSOQQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB8adimZw1UwKJgV6DRY40R9VVEzMB8GA1UdIwQY MBaAFH51DW/LikDNZhz3PRrKvYMF6Hf9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZm5VTmI4dUtRTTFtSFBjOUdzcTlnd1hvZF8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS80Y2UwMTItMzNlYS00YjZlLTkwNjUt YTJjNGMyMzFkZGY3LzEvSHhwMktabkRWVEFvbUJYb05GampSSDFWVVRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS80Y2UwMTItMzNlYS00YjZlLTkwNjUtYTJjNGMyMzFkZGY3 LzEvZm5VTmI4dUtRTTFtSFBjOUdzcTlnd1hvZF8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW+ZEMA0G CSqGSIb3DQEBCwUAA4IBAQBbZf7c9Tn5hwrZbFQ1doraZcZnvXZNXLufE/TfRcMp zQ11Q/FG3BzDMiZaePeIjP0gHb7PcqrUdLZrC1ks7TWDfoqUtgPYHNpsONt/lt3u oXfmFWczKfcs8AjOTH9rCYOyJAOV/ALBBcCm++QIQUKzEnd8Lx+ghXAcrjmhWuMD C52k66WSOnHtm5WULpVzyS6Zmbl6mNJWw/sjrUNd2MdyZIOfEmyRf1bAYBloNG9h JIQZXFvdA3CrQ5uMQ0eBFIm/bF+1GSVB21v2lAaAIoCaRQ+jjI/9tHrkUcWM4Xuk OV3vMvcW3s4uC8gtt1gdGGYHdk7I1J/GiRn/RDoFOqm7 -----END CERTIFICATE-----Generated at Mon Jan 26 00:24:31 2026 by rpki-client