This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/HXXJ5U9DGvbbZuWvDguPFDAOEkc.roa File: HXXJ5U9DGvbbZuWvDguPFDAOEkc.roa (raw, json) Hash identifier: mEsE8YsZsxlgLGJIZIrrf3uSCgdInsp4ueGy7PdnCmU= Subject key identifier: 1D:75:C9:E5:4F:43:1A:F6:DB:66:E5:AF:0E:0B:8F:14:30:0E:12:47 Certificate issuer: /CN=caee41074e35990afe4f50a84e42eb09584a2f19 Certificate serial: 019B77C6B1E4EB7545C520AD4F50C3AFBA21 Authority key identifier: CA:EE:41:07:4E:35:99:0A:FE:4F:50:A8:4E:42:EB:09:58:4A:2F:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yu5BB041mQr-T1CoTkLrCVhKLxk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/HXXJ5U9DGvbbZuWvDguPFDAOEkc.roa Signing time: Thu 01 Jan 2026 04:17:48 +0000 ROA not before: Thu 01 Jan 2026 04:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3303 IP address blocks: 195.250.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft rsync://rpki.ripe.net/repository/DEFAULT/yu5BB041mQr-T1CoTkLrCVhKLxk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:b1:e4:eb:75:45:c5:20:ad:4f:50:c3:af:ba:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=caee41074e35990afe4f50a84e42eb09584a2f19 Validity Not Before: Jan 1 04:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1d75c9e54f431af6db66e5af0e0b8f14300e1247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:51:0e:e7:ee:d8:e0:98:2b:3a:72:0c:e3:8b: e1:d7:04:00:e6:d5:ce:98:27:6b:f2:03:d7:82:f8: b0:93:92:cd:3c:da:0f:1b:27:f2:c2:28:2f:b6:e3: 6d:b1:d6:45:bb:f5:bf:3b:13:e7:55:fd:1c:c4:4c: 15:05:4a:18:d9:fd:99:2e:fd:60:0d:ef:ff:2f:e6: 50:03:4f:29:1b:4e:1f:7e:5e:70:9d:92:9c:72:62: 5e:4b:cb:2c:c5:36:aa:0b:37:4c:8d:71:51:d6:b4: 64:95:3e:da:a4:92:54:ff:46:40:b4:10:c4:bd:1a: 96:aa:a3:94:a7:27:9b:28:20:a8:a5:a9:b1:47:76: 9f:75:38:55:04:94:9f:b1:af:0e:29:15:74:2a:7c: 74:4b:95:97:f6:bd:4b:82:8c:de:27:d8:59:25:c3: 15:47:90:1d:11:03:46:3f:c0:e9:17:19:22:e9:b1: ef:f7:9b:5a:f1:e9:50:a3:b5:10:e5:9f:aa:d9:68: e6:61:9f:10:45:43:5f:14:a5:63:a5:7d:3a:88:be: 6b:97:3b:97:57:43:70:14:b5:63:12:a6:a1:58:5a: 09:ab:37:e3:20:89:a9:d8:fc:c1:5c:20:cc:2b:57: bc:79:cb:a7:69:67:f9:67:26:43:ae:39:0b:d7:f0: b5:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:75:C9:E5:4F:43:1A:F6:DB:66:E5:AF:0E:0B:8F:14:30:0E:12:47 X509v3 Authority Key Identifier: keyid:CA:EE:41:07:4E:35:99:0A:FE:4F:50:A8:4E:42:EB:09:58:4A:2F:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yu5BB041mQr-T1CoTkLrCVhKLxk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/HXXJ5U9DGvbbZuWvDguPFDAOEkc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.250.44.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:e4:b7:7c:0b:68:cb:98:25:b3:5e:d3:be:ee:b3:a0:55:50: df:47:55:a8:44:99:24:c8:b4:69:38:48:92:fc:fb:72:c5:1f: bd:a9:b9:f4:6e:52:76:f2:6b:9b:3b:19:30:cd:0b:e4:3c:d6: 72:12:98:fb:d0:70:09:f8:ff:dc:5e:36:d7:40:60:98:04:b8: 68:4a:4f:5b:00:f3:f9:37:1f:60:c5:6e:63:bf:22:44:8c:41: e3:09:77:d7:2c:a1:17:25:dd:1f:49:ae:51:17:46:25:fc:06: d3:cd:74:b4:2a:d7:69:09:1e:2f:f6:04:7e:cf:8b:2a:1a:9b: 7a:a8:b0:9b:8c:38:7d:8e:9e:97:97:b6:61:c9:5f:e9:45:de: 7a:76:64:c8:b5:d6:4d:cb:32:d5:01:28:5b:2e:d6:ea:f3:73: 9b:6c:fc:99:b1:ae:90:fe:e3:24:67:6b:af:f1:c0:22:5b:47: 92:4d:75:40:5e:c7:9d:8c:ad:66:f6:47:c6:23:78:a1:53:2d: f2:42:9f:8d:de:89:06:49:f2:0a:49:e0:9c:ea:2f:c3:15:68: 5c:da:1d:94:3c:a9:2a:44:80:db:8f:af:8d:0e:5e:65:be:be: 36:5e:a9:4b:2c:eb:ad:4d:bd:a9:01:4a:05:53:50:3b:92:2a: 66:f8:ec:b4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xrHk63VFxSCtT1DDr7ohMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhZWU0MTA3NGUzNTk5MGFmZTRmNTBhODRlNDJlYjA5NTg0 YTJmMTkwHhcNMjYwMTAxMDQxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZDc1YzllNTRmNDMxYWY2ZGI2NmU1YWYwZTBiOGYxNDMwMGUxMjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklEO5+7Y4JgrOnIM44vh1wQA5tXO mCdr8gPXgviwk5LNPNoPGyfywigvtuNtsdZFu/W/OxPnVf0cxEwVBUoY2f2ZLv1g De//L+ZQA08pG04ffl5wnZKccmJeS8ssxTaqCzdMjXFR1rRklT7apJJU/0ZAtBDE vRqWqqOUpyebKCCopamxR3afdThVBJSfsa8OKRV0Knx0S5WX9r1LgozeJ9hZJcMV R5AdEQNGP8DpFxki6bHv95ta8elQo7UQ5Z+q2WjmYZ8QRUNfFKVjpX06iL5rlzuX V0NwFLVjEqahWFoJqzfjIImp2PzBXCDMK1e8ecunaWf5ZyZDrjkL1/C1FQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB11yeVPQxr222blrw4LjxQwDhJHMB8GA1UdIwQY MBaAFMruQQdONZkK/k9QqE5C6wlYSi8ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXU1QkIwNDFtUXItVDFDb1RrTHJDVmhLTHhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC81ZDgwYjAtZmM0YS00Y2RlLTljNTMt Yjg1MTg5MDk4MjBmLzEvSFhYSjVVOURHdmJiWnVXdkRndVBGREFPRWtjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC81ZDgwYjAtZmM0YS00Y2RlLTljNTMtYjg1MTg5MDk4MjBm LzEveXU1QkIwNDFtUXItVDFDb1RrTHJDVmhLTHhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw/osMA0G CSqGSIb3DQEBCwUAA4IBAQA+5Ld8C2jLmCWzXtO+7rOgVVDfR1WoRJkkyLRpOEiS /PtyxR+9qbn0blJ28mubOxkwzQvkPNZyEpj70HAJ+P/cXjbXQGCYBLhoSk9bAPP5 Nx9gxW5jvyJEjEHjCXfXLKEXJd0fSa5RF0Yl/AbTzXS0KtdpCR4v9gR+z4sqGpt6 qLCbjDh9jp6Xl7ZhyV/pRd56dmTItdZNyzLVAShbLtbq83ObbPyZsa6Q/uMkZ2uv 8cAiW0eSTXVAXsedjK1m9kfGI3ihUy3yQp+N3okGSfIKSeCc6i/DFWhc2h2UPKkq RIDbj6+NDl5lvr42XqlLLOutTb2pAUoFU1A7kipm+Oy0 -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:14 2026 by rpki-client