This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/HLxK0SHaAN4A3oDtW-6ynwZMoGM.roa File: HLxK0SHaAN4A3oDtW-6ynwZMoGM.roa (raw, json) Hash identifier: cKsTdXMzCKVpvlljEBVOuNNhrA+YItiJ4O+zqqSok5Q= Subject key identifier: 1C:BC:4A:D1:21:DA:00:DE:00:DE:80:ED:5B:EE:B2:9F:06:4C:A0:63 Certificate issuer: /CN=93c5f10af8bcb5fc6e34a473b4a6cae7ad02d902 Certificate serial: 019B7C134D542729941588BB9A53D5EEF91F Authority key identifier: 93:C5:F1:0A:F8:BC:B5:FC:6E:34:A4:73:B4:A6:CA:E7:AD:02:D9:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8XxCvi8tfxuNKRztKbK560C2QI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/HLxK0SHaAN4A3oDtW-6ynwZMoGM.roa Signing time: Fri 02 Jan 2026 00:19:58 +0000 ROA not before: Fri 02 Jan 2026 00:19:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204954 IP address blocks: 91.244.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.mft rsync://rpki.ripe.net/repository/DEFAULT/k8XxCvi8tfxuNKRztKbK560C2QI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:4d:54:27:29:94:15:88:bb:9a:53:d5:ee:f9:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93c5f10af8bcb5fc6e34a473b4a6cae7ad02d902 Validity Not Before: Jan 2 00:19:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1cbc4ad121da00de00de80ed5beeb29f064ca063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:38:49:94:64:89:05:44:7e:2d:e2:8b:39:28: ef:dd:6c:97:78:7f:64:87:90:1c:ec:80:d9:39:73: f0:a0:18:3a:3c:ea:8c:10:41:de:5e:c6:c4:0d:b8: 11:dc:e7:46:47:7b:b9:16:de:3f:3f:b1:47:42:b8: 8e:d2:1b:2e:9e:a9:77:f0:4d:54:5f:13:8a:c9:f7: 7a:33:f6:22:9e:98:60:e2:5a:f1:01:72:b4:07:10: c0:92:74:89:13:9e:9e:8f:71:80:49:ef:4f:de:c0: 39:68:c7:6e:dd:15:34:2b:6d:b1:df:5d:4b:61:03: c7:15:52:75:c2:a3:03:73:8c:e3:f5:32:18:59:af: 3d:f5:0f:27:94:d4:f0:d5:11:13:ab:17:a3:d4:fa: d9:46:56:75:4d:fa:c5:ba:8c:fb:11:9a:7f:93:51: 86:6b:ac:56:c9:6b:50:15:92:97:6d:bd:17:8d:21: 3c:d4:d3:71:b7:87:fd:7c:91:e1:e8:18:4c:40:8e: bb:5e:23:51:bd:d6:4f:e8:7f:fb:93:05:fc:16:a6: 2f:62:87:3c:30:cf:e6:b2:09:23:1d:4f:8e:59:2f: 20:e9:2a:b2:53:f0:ea:6f:8e:5a:70:64:8d:fb:4a: 54:1c:9d:ed:e9:18:53:54:4c:2d:18:00:f4:1f:bd: 5f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:BC:4A:D1:21:DA:00:DE:00:DE:80:ED:5B:EE:B2:9F:06:4C:A0:63 X509v3 Authority Key Identifier: keyid:93:C5:F1:0A:F8:BC:B5:FC:6E:34:A4:73:B4:A6:CA:E7:AD:02:D9:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8XxCvi8tfxuNKRztKbK560C2QI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/HLxK0SHaAN4A3oDtW-6ynwZMoGM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.244.126.0/24 Signature Algorithm: sha256WithRSAEncryption 14:a9:e8:98:7d:92:1a:45:96:96:5c:26:d0:5a:99:73:f7:35: c1:61:95:4a:eb:4e:ef:2c:10:ac:9c:53:3b:eb:22:0b:30:bf: a9:3f:33:c0:95:26:41:7d:ac:f7:6e:67:f4:c9:ef:a2:51:28: a7:d9:dd:f5:75:58:1c:d1:42:95:dd:9e:f3:f3:91:d6:2e:af: 68:64:af:59:d4:60:3f:37:1d:7c:c1:cd:3c:5e:d6:87:f7:c3: cb:91:1c:6c:46:d4:05:9a:f4:8c:5d:19:61:af:62:1d:40:a6: 52:16:6e:ff:f5:a0:45:d1:3b:93:81:66:a5:fc:ee:78:a5:54: 65:b4:9a:0a:5b:43:29:eb:e7:b9:cf:cc:00:b5:d1:7c:25:e7: 00:9a:b7:fd:c6:7c:88:0b:38:6a:6a:91:b2:5c:40:89:71:4a: 42:a1:23:cb:0d:fa:5f:d3:a9:cf:c1:86:3d:21:5e:f0:d2:4d: 54:f7:3f:40:f5:ee:7d:6c:23:fc:82:a1:13:ba:2b:57:ac:5a: 8d:4b:76:f0:1c:02:59:20:03:8c:99:5f:23:b0:8a:ca:ec:4c: 4a:08:5e:9b:48:8b:16:3c:a9:d2:51:a7:34:65:75:8d:37:59: dd:1a:a7:e9:bc:55:34:93:8d:10:7a:dc:d9:16:57:a5:e1:4d: cc:31:f4:fb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E01UJymUFYi7mlPV7vkfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzYzVmMTBhZjhiY2I1ZmM2ZTM0YTQ3M2I0YTZjYWU3YWQw MmQ5MDIwHhcNMjYwMTAyMDAxOTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxY2JjNGFkMTIxZGEwMGRlMDBkZTgwZWQ1YmVlYjI5ZjA2NGNhMDYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjhJlGSJBUR+LeKLOSjv3WyXeH9k h5Ac7IDZOXPwoBg6POqMEEHeXsbEDbgR3OdGR3u5Ft4/P7FHQriO0hsunql38E1U XxOKyfd6M/Yinphg4lrxAXK0BxDAknSJE56ej3GASe9P3sA5aMdu3RU0K22x311L YQPHFVJ1wqMDc4zj9TIYWa899Q8nlNTw1RETqxej1PrZRlZ1TfrFuoz7EZp/k1GG a6xWyWtQFZKXbb0XjSE81NNxt4f9fJHh6BhMQI67XiNRvdZP6H/7kwX8FqYvYoc8 MM/msgkjHU+OWS8g6SqyU/Dqb45acGSN+0pUHJ3t6RhTVEwtGAD0H71fCQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBy8StEh2gDeAN6A7Vvusp8GTKBjMB8GA1UdIwQY MBaAFJPF8Qr4vLX8bjSkc7SmyuetAtkCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazhYeEN2aTh0Znh1TktSenRLYks1NjBDMlFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9mYTAyY2ItYjM3OC00ZmE3LTg4MDMt OGVhYWQwYjA0OWE3LzEvSEx4SzBTSGFBTjRBM29EdFctNnlud1pNb0dNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9mYTAyY2ItYjM3OC00ZmE3LTg4MDMtOGVhYWQwYjA0OWE3 LzEvazhYeEN2aTh0Znh1TktSenRLYks1NjBDMlFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/R+MA0G CSqGSIb3DQEBCwUAA4IBAQAUqeiYfZIaRZaWXCbQWplz9zXBYZVK607vLBCsnFM7 6yILML+pPzPAlSZBfaz3bmf0ye+iUSin2d31dVgc0UKV3Z7z85HWLq9oZK9Z1GA/ Nx18wc08XtaH98PLkRxsRtQFmvSMXRlhr2IdQKZSFm7/9aBF0TuTgWal/O54pVRl tJoKW0Mp6+e5z8wAtdF8JecAmrf9xnyICzhqapGyXECJcUpCoSPLDfpf06nPwYY9 IV7w0k1U9z9A9e59bCP8gqETuitXrFqNS3bwHAJZIAOMmV8jsIrK7ExKCF6bSIsW PKnSUac0ZXWNN1ndGqfpvFU0k40QetzZFlel4U3MMfT7 -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:44 2026 by rpki-client