This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/hkxJH8qDns81hHO_TEwuH8z_Eac.roa File: hkxJH8qDns81hHO_TEwuH8z_Eac.roa (raw, json) Hash identifier: WI/ahDUF+5IzjpWVPH44VyOD7TChtaZ1JW84a/hYGec= Subject key identifier: 86:4C:49:1F:CA:83:9E:CF:35:84:73:BF:4C:4C:2E:1F:CC:FF:11:A7 Certificate issuer: /CN=e930b76e721f5d834ed53e49284d9790339211c8 Certificate serial: 019B7C804E8040A246AAAF081A5351FB0220 Authority key identifier: E9:30:B7:6E:72:1F:5D:83:4E:D5:3E:49:28:4D:97:90:33:92:11:C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6TC3bnIfXYNO1T5JKE2XkDOSEcg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/hkxJH8qDns81hHO_TEwuH8z_Eac.roa Signing time: Fri 02 Jan 2026 02:19:02 +0000 ROA not before: Fri 02 Jan 2026 02:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210618 IP address blocks: 194.9.180.0/24 maxlen: 28 194.9.180.240/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.mft rsync://rpki.ripe.net/repository/DEFAULT/6TC3bnIfXYNO1T5JKE2XkDOSEcg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:4e:80:40:a2:46:aa:af:08:1a:53:51:fb:02:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e930b76e721f5d834ed53e49284d9790339211c8 Validity Not Before: Jan 2 02:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=864c491fca839ecf358473bf4c4c2e1fccff11a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:34:7a:21:96:33:08:a0:50:3e:13:6b:d1:b0: 8f:1f:4d:d8:62:fd:17:55:f2:aa:4f:50:fc:06:52: 4d:2e:77:55:7c:1e:b7:ea:e2:9a:4f:1d:23:70:b5: 5f:5b:b2:77:98:e3:8e:99:53:f0:72:5d:7b:81:2d: 50:21:cc:2f:f3:99:8f:bd:7b:c2:d2:55:c8:dc:10: 23:30:26:33:62:5d:b8:b6:9b:64:e7:41:2b:89:07: a1:1e:7c:b0:55:3f:59:3c:bf:b9:1d:dd:3a:ce:f4: 9d:bc:b9:58:63:c7:92:bf:91:87:35:d6:ea:a8:c7: 3e:26:31:bb:4d:90:9e:cf:84:cb:3b:f9:98:96:59: be:3f:85:29:45:a3:b2:d9:4a:49:49:b1:20:a2:04: e8:39:7b:9e:81:da:2c:49:47:1a:2e:9e:06:69:e4: 06:a8:82:c5:14:c2:24:a5:5e:6c:cb:0e:76:e7:47: 70:82:f6:cb:1c:e9:1b:39:5b:46:c3:c2:95:07:ec: c3:e3:ba:23:5e:8b:5f:28:b5:3a:0c:d5:4c:14:aa: 1e:16:be:7b:5e:c9:b7:7b:2c:06:db:4f:1a:65:b9: 81:35:d2:ff:2a:77:39:4e:d2:b6:89:49:b1:5c:fa: f8:af:c9:2f:f8:01:e7:53:7d:7c:34:17:f0:c0:c1: 22:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:4C:49:1F:CA:83:9E:CF:35:84:73:BF:4C:4C:2E:1F:CC:FF:11:A7 X509v3 Authority Key Identifier: keyid:E9:30:B7:6E:72:1F:5D:83:4E:D5:3E:49:28:4D:97:90:33:92:11:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6TC3bnIfXYNO1T5JKE2XkDOSEcg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/hkxJH8qDns81hHO_TEwuH8z_Eac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.9.180.0/24 Signature Algorithm: sha256WithRSAEncryption 76:77:1b:ff:73:72:30:68:a7:cd:4f:a7:e2:df:45:f1:45:6a: 2b:f7:ae:ee:7b:9e:1d:b4:82:3e:7e:f5:47:0a:0e:53:06:20: a8:de:fc:29:c3:5e:1d:b3:ec:33:ab:a4:5a:21:2a:bd:4b:dd: 89:9a:7f:b8:40:9e:d9:92:48:f8:16:48:4e:ee:47:92:19:48: 72:34:a2:b6:52:e2:79:73:01:1d:43:6e:7f:3d:9b:49:60:f1: 93:bd:1d:77:07:1e:fd:aa:1d:b6:32:7b:3a:5f:3b:17:09:4f: 82:4f:ec:e7:94:12:20:44:a0:5e:9d:82:df:6a:3a:14:a4:1c: 1e:83:16:79:94:4b:b3:23:a5:4a:ab:22:91:c8:54:5c:13:99: f7:fb:6d:e2:02:0a:2e:b4:b8:41:2c:30:e0:7e:41:dd:1d:bf: f3:fd:fc:ca:7f:65:eb:ad:b5:2e:1b:0a:cb:c4:52:56:0d:68: 94:02:4e:ed:7f:0e:dd:a3:06:f5:03:b1:68:a0:69:c5:97:cd: d5:cf:f3:1c:81:0d:53:bf:f8:d5:7f:ae:fd:12:ef:d3:d9:e6: 5b:8d:3b:a5:ae:a4:85:84:1f:8c:3c:d7:51:27:72:55:e5:fd: 18:b5:59:24:02:7b:e8:8e:41:4c:f2:6d:31:76:fb:32:b1:4e: a3:72:50:19 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gE6AQKJGqq8IGlNR+wIgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5MzBiNzZlNzIxZjVkODM0ZWQ1M2U0OTI4NGQ5NzkwMzM5 MjExYzgwHhcNMjYwMTAyMDIxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NjRjNDkxZmNhODM5ZWNmMzU4NDczYmY0YzRjMmUxZmNjZmYxMWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDR6IZYzCKBQPhNr0bCPH03YYv0X VfKqT1D8BlJNLndVfB636uKaTx0jcLVfW7J3mOOOmVPwcl17gS1QIcwv85mPvXvC 0lXI3BAjMCYzYl24tptk50EriQehHnywVT9ZPL+5Hd06zvSdvLlYY8eSv5GHNdbq qMc+JjG7TZCez4TLO/mYllm+P4UpRaOy2UpJSbEgogToOXuegdosSUcaLp4GaeQG qILFFMIkpV5syw5250dwgvbLHOkbOVtGw8KVB+zD47ojXotfKLU6DNVMFKoeFr57 Xsm3eywG208aZbmBNdL/Knc5TtK2iUmxXPr4r8kv+AHnU318NBfwwMEiAwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIZMSR/Kg57PNYRzv0xMLh/M/xGnMB8GA1UdIwQY MBaAFOkwt25yH12DTtU+SShNl5AzkhHIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlRDM2JuSWZYWU5PMVQ1SktFMlhrRE9TRWNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9hOWRiMjMtYTY3Yy00ZjhiLThhZGYt NzA1MjJkODE0ZTBjLzEvaGt4Skg4cURuczgxaEhPX1RFd3VIOHpfRWFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9hOWRiMjMtYTY3Yy00ZjhiLThhZGYtNzA1MjJkODE0ZTBj LzEvNlRDM2JuSWZYWU5PMVQ1SktFMlhrRE9TRWNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwgm0MA0G CSqGSIb3DQEBCwUAA4IBAQB2dxv/c3IwaKfNT6fi30XxRWor967ue54dtII+fvVH Cg5TBiCo3vwpw14ds+wzq6RaISq9S92Jmn+4QJ7Zkkj4FkhO7keSGUhyNKK2UuJ5 cwEdQ25/PZtJYPGTvR13Bx79qh22Mns6XzsXCU+CT+znlBIgRKBenYLfajoUpBwe gxZ5lEuzI6VKqyKRyFRcE5n3+23iAgoutLhBLDDgfkHdHb/z/fzKf2XrrbUuGwrL xFJWDWiUAk7tfw7dowb1A7FooGnFl83Vz/McgQ1Tv/jVf679Eu/T2eZbjTulrqSF hB+MPNdRJ3JV5f0YtVkkAnvojkFM8m0xdvsysU6jclAZ -----END CERTIFICATE-----Generated at Mon Jan 26 05:32:12 2026 by rpki-client