This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/HXtw_REMuYJU-uoqytyoK089wJo.roa File: HXtw_REMuYJU-uoqytyoK089wJo.roa (raw, json) Hash identifier: y0auMTcaijuymINcdrlEwiSn0wKl15siQmyezHbX9Mk= Subject key identifier: 1D:7B:70:FD:11:0C:B9:82:54:FA:EA:2A:CA:DC:A8:2B:4F:3D:C0:9A Certificate issuer: /CN=3e25ab6985f79ca9de06e98e8b9da245d8559ab6 Certificate serial: 019B79ED018C62245B0FDB2844581B6A40AD Authority key identifier: 3E:25:AB:69:85:F7:9C:A9:DE:06:E9:8E:8B:9D:A2:45:D8:55:9A:B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PiWraYX3nKneBumOi52iRdhVmrY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/HXtw_REMuYJU-uoqytyoK089wJo.roa Signing time: Thu 01 Jan 2026 14:18:54 +0000 ROA not before: Thu 01 Jan 2026 14:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51559 IP address blocks: 80.253.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.crl rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.mft rsync://rpki.ripe.net/repository/DEFAULT/PiWraYX3nKneBumOi52iRdhVmrY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:01:8c:62:24:5b:0f:db:28:44:58:1b:6a:40:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e25ab6985f79ca9de06e98e8b9da245d8559ab6 Validity Not Before: Jan 1 14:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1d7b70fd110cb98254faea2acadca82b4f3dc09a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ca:e0:2a:e4:0f:06:d3:ce:be:52:2c:79:55: 4c:87:c1:14:70:02:c6:5c:66:79:9d:90:bf:58:45: cc:c4:1f:71:03:10:92:6c:98:39:9b:d5:51:3f:1f: af:06:6f:43:34:a1:e5:a1:0d:19:c8:79:8d:d1:d0: 77:7e:d1:32:3e:99:f7:24:11:bf:a5:34:3a:11:66: 3d:ff:ed:26:06:99:88:c9:47:96:f7:30:ea:b8:59: 0f:e6:73:ab:9d:78:e6:70:88:d4:c2:d5:f0:64:fc: 62:2b:46:d4:0e:c4:48:8f:82:93:ef:dc:a2:6e:a7: f2:d8:16:98:d0:90:da:18:ba:68:fa:ca:60:aa:d9: 78:1a:42:f3:3c:93:1e:d2:64:f2:ed:f0:00:c4:c9: 63:84:3f:05:0f:50:bc:4a:47:d6:11:45:e3:dd:8a: 4d:62:64:1f:97:aa:97:c3:d0:40:0f:1e:7d:7c:5b: 44:7d:7d:37:fd:02:bc:03:3f:d8:ea:2c:36:7c:d2: c1:ef:ed:31:84:f4:b3:de:4d:21:ff:8b:ba:81:cc: 9f:23:f7:75:76:9b:54:75:22:6d:b9:0a:81:39:97: 60:fb:4c:23:e1:b5:81:02:39:82:90:81:dd:39:b0: 6f:1a:ca:67:4a:ad:19:4c:c6:32:67:4b:2a:a3:f2: 41:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:7B:70:FD:11:0C:B9:82:54:FA:EA:2A:CA:DC:A8:2B:4F:3D:C0:9A X509v3 Authority Key Identifier: keyid:3E:25:AB:69:85:F7:9C:A9:DE:06:E9:8E:8B:9D:A2:45:D8:55:9A:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiWraYX3nKneBumOi52iRdhVmrY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/HXtw_REMuYJU-uoqytyoK089wJo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.253.245.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:ed:c4:28:34:65:9f:d6:57:b7:71:eb:0b:e2:41:05:92:9d: 8d:f7:5c:f2:5e:a1:37:40:29:f1:be:7e:bb:22:d3:80:33:6e: 78:87:db:c2:33:41:1f:74:73:af:fa:c2:02:43:9a:46:e8:18: b0:9f:03:d7:5d:b1:f3:9c:3b:3b:44:e3:a7:c0:5d:aa:49:67: 2f:5c:2a:91:57:f4:19:65:39:8d:ea:dc:8e:ff:0f:a2:e3:d3: 94:ee:f6:11:82:15:88:61:78:0c:10:13:d8:51:48:a4:98:ce: 0a:94:71:9d:1f:2e:4a:8a:8b:23:62:d7:5d:17:6f:16:e0:08: 33:e1:ef:6c:4d:39:a0:1d:69:9c:2b:8c:d7:c6:fc:3d:ba:d5: 02:a5:d6:a7:c6:04:54:b3:1d:1a:e1:a6:d2:51:3f:fa:a9:16: fe:ad:fc:6c:3e:7f:a1:f5:ca:08:7d:93:70:99:d3:6f:7d:bf: 97:28:4e:c0:93:d6:da:e5:91:62:fb:9c:37:30:e0:51:f8:94: bf:87:26:b3:61:49:b4:ba:1f:aa:02:41:cc:c0:bf:9e:68:3d: 0c:ec:76:92:51:91:a4:ed:e0:ed:e1:de:a7:5c:34:72:8a:b0: 54:ac:0e:21:d5:df:b1:28:8a:b2:fb:43:b6:7b:38:9b:99:98: e9:98:d4:f7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57QGMYiRbD9soRFgbakCtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlMjVhYjY5ODVmNzljYTlkZTA2ZTk4ZThiOWRhMjQ1ZDg1 NTlhYjYwHhcNMjYwMTAxMTQxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZDdiNzBmZDExMGNiOTgyNTRmYWVhMmFjYWRjYTgyYjRmM2RjMDlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMrgKuQPBtPOvlIseVVMh8EUcALG XGZ5nZC/WEXMxB9xAxCSbJg5m9VRPx+vBm9DNKHloQ0ZyHmN0dB3ftEyPpn3JBG/ pTQ6EWY9/+0mBpmIyUeW9zDquFkP5nOrnXjmcIjUwtXwZPxiK0bUDsRIj4KT79yi bqfy2BaY0JDaGLpo+spgqtl4GkLzPJMe0mTy7fAAxMljhD8FD1C8SkfWEUXj3YpN YmQfl6qXw9BADx59fFtEfX03/QK8Az/Y6iw2fNLB7+0xhPSz3k0h/4u6gcyfI/d1 dptUdSJtuQqBOZdg+0wj4bWBAjmCkIHdObBvGspnSq0ZTMYyZ0sqo/JBCQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB17cP0RDLmCVPrqKsrcqCtPPcCaMB8GA1UdIwQY MBaAFD4lq2mF95yp3gbpjoudokXYVZq2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGlXcmFZWDNuS25lQnVtT2k1MmlSZGhWbXJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8yMmQxNzUtYzcxZC00NjM3LWEwOTAt YjE5YWQ1NDU1YmZkLzEvSFh0d19SRU11WUpVLXVvcXl0eW9LMDg5d0pvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS8yMmQxNzUtYzcxZC00NjM3LWEwOTAtYjE5YWQ1NDU1YmZk LzEvUGlXcmFZWDNuS25lQnVtT2k1MmlSZGhWbXJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUP31MA0G CSqGSIb3DQEBCwUAA4IBAQB77cQoNGWf1le3cesL4kEFkp2N91zyXqE3QCnxvn67 ItOAM254h9vCM0EfdHOv+sICQ5pG6BiwnwPXXbHznDs7ROOnwF2qSWcvXCqRV/QZ ZTmN6tyO/w+i49OU7vYRghWIYXgMEBPYUUikmM4KlHGdHy5KiosjYtddF28W4Agz 4e9sTTmgHWmcK4zXxvw9utUCpdanxgRUsx0a4abSUT/6qRb+rfxsPn+h9coIfZNw mdNvfb+XKE7Ak9ba5ZFi+5w3MOBR+JS/hyazYUm0uh+qAkHMwL+eaD0M7HaSUZGk 7eDt4d6nXDRyirBUrA4h1d+xKIqy+0O2ezibmZjpmNT3 -----END CERTIFICATE-----Generated at Sun Jan 25 16:39:34 2026 by rpki-client