This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/1-HxunCEu3Y-L5oAVVKO35PcAYpw.roa File: 1-HxunCEu3Y-L5oAVVKO35PcAYpw.roa (raw, json) Hash identifier: 5WKu4LWonKHRxxs99iSw6h5aj4s3WEayXBY2TqBi9nA= Subject key identifier: F8:7C:6E:9C:21:2E:DD:8F:8B:E6:80:15:54:A3:B7:E4:F7:00:62:9C Certificate issuer: /CN=2c3963ba2aae5abd38a6eed09da985611f1b5021 Certificate serial: 019B7F144996F4CA4DDFA7E4015EFF46685D Authority key identifier: 2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/1-HxunCEu3Y-L5oAVVKO35PcAYpw.roa Signing time: Fri 02 Jan 2026 14:19:54 +0000 ROA not before: Fri 02 Jan 2026 14:19:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211025 IP address blocks: 92.55.208.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:49:96:f4:ca:4d:df:a7:e4:01:5e:ff:46:68:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c3963ba2aae5abd38a6eed09da985611f1b5021 Validity Not Before: Jan 2 14:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f87c6e9c212edd8f8be6801554a3b7e4f700629c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b0:0d:86:75:2e:0b:91:9d:4c:75:05:83:fa: be:a3:5b:bc:5e:2f:09:0c:15:49:e8:7a:55:b0:93: 5b:ce:7d:44:b5:e1:12:ba:3b:cd:df:46:08:fe:c1: 5e:4e:52:e9:c9:f6:ac:33:4a:38:1b:3d:83:f7:7f: 25:fc:27:7c:1a:00:32:a7:ee:0c:5e:39:70:bd:52: 00:2a:de:83:ef:24:9c:a6:90:bb:f0:f3:34:31:55: 04:4d:a8:6b:f6:bd:a0:9b:d3:41:0e:73:6c:1f:58: 7c:d5:40:0a:87:5b:0d:79:f1:9e:c9:9a:3b:49:3d: c2:06:80:35:49:10:9c:1d:d3:48:c1:c7:38:0d:36: 2d:88:cc:3f:9f:56:80:ff:83:7a:dd:80:91:b4:e6: bf:d0:fb:ac:0d:19:4d:32:7b:3c:ce:8b:37:c8:39: 45:0c:f2:e0:b6:17:e4:06:37:de:05:d4:ae:0b:f7: d0:72:35:95:71:67:be:ac:d2:85:ac:d4:16:a8:5d: ad:fa:fb:e5:59:da:73:ef:74:6f:06:79:b7:86:fa: 8a:dd:57:e9:ed:36:fc:a1:59:82:1d:89:b3:a2:4f: d5:c6:4e:77:8f:c9:04:23:da:67:60:b3:0f:63:f2: 96:3c:be:cb:ea:75:12:57:3d:16:be:e9:fb:4e:7e: ca:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:7C:6E:9C:21:2E:DD:8F:8B:E6:80:15:54:A3:B7:E4:F7:00:62:9C X509v3 Authority Key Identifier: keyid:2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/1-HxunCEu3Y-L5oAVVKO35PcAYpw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.55.208.0/23 Signature Algorithm: sha256WithRSAEncryption 6a:a8:82:a0:af:f0:61:73:f8:06:07:11:2d:d3:be:68:17:c9: 11:a6:1c:a7:11:fd:89:20:2d:de:dc:82:f8:0b:28:58:80:42: a7:a4:c1:cf:ac:93:b4:e7:22:e4:6b:bc:53:cf:96:da:24:60: f1:e1:9e:ba:d7:0a:7a:04:d7:c8:d2:0a:4a:72:b0:3f:64:3a: fc:78:69:9a:44:b6:a7:ac:5a:7c:4a:c3:c3:dc:a6:0b:d6:0a: b7:68:6b:1f:75:c1:89:b6:1d:7a:dd:73:60:6b:96:3e:54:83: 28:b2:a8:f6:a6:39:ec:95:1d:1f:7f:bd:52:09:a4:88:e8:45: 15:8d:33:91:0e:a5:2d:49:97:be:46:64:88:0d:df:a1:8a:0f: 95:13:c6:76:0d:ec:d3:69:d9:f7:f7:85:a4:98:ea:0c:fe:ec: 3f:0d:19:8d:93:c0:31:7a:88:29:f7:df:35:a4:b7:94:a2:1c: 39:9f:fc:44:62:ee:7b:d4:04:f1:17:c7:69:10:52:c1:5a:fb: 00:eb:6d:4f:fc:ba:3d:37:dd:33:e7:a5:17:59:86:66:98:6a: 17:ce:db:74:27:c7:b1:08:47:2b:c9:73:ca:40:6f:dc:0a:cb: 2d:21:ee:e2:f3:15:2d:29:f6:b0:3c:44:78:74:1d:f0:c4:66: 2e:bc:61:ba -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/FEmW9MpN36fkAV7/RmhdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjMzk2M2JhMmFhZTVhYmQzOGE2ZWVkMDlkYTk4NTYxMWYx YjUwMjEwHhcNMjYwMTAyMTQxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODdjNmU5YzIxMmVkZDhmOGJlNjgwMTU1NGEzYjdlNGY3MDA2MjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4bANhnUuC5GdTHUFg/q+o1u8Xi8J DBVJ6HpVsJNbzn1EteESujvN30YI/sFeTlLpyfasM0o4Gz2D938l/Cd8GgAyp+4M XjlwvVIAKt6D7yScppC78PM0MVUETahr9r2gm9NBDnNsH1h81UAKh1sNefGeyZo7 ST3CBoA1SRCcHdNIwcc4DTYtiMw/n1aA/4N63YCRtOa/0PusDRlNMns8zos3yDlF DPLgthfkBjfeBdSuC/fQcjWVcWe+rNKFrNQWqF2t+vvlWdpz73RvBnm3hvqK3Vfp 7Tb8oVmCHYmzok/Vxk53j8kEI9pnYLMPY/KWPL7L6nUSVz0Wvun7Tn7KLwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPh8bpwhLt2Pi+aAFVSjt+T3AGKcMB8GA1UdIwQY MBaAFCw5Y7oqrlq9OKbu0J2phWEfG1AhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTERsanVpcXVXcjA0cHU3UW5hbUZZUjhiVUNFLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8zODFlY2MtOWQ3NS00MWJhLTg1ZjYt MTc2OTNlN2VhNjdhLzEvMS1IeHVuQ0V1M1ktTDVvQVZWS08zNVBjQVlwdy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZGMvMzgxZWNjLTlkNzUtNDFiYS04NWY2LTE3NjkzZTdlYTY3 YS8xL0xEbGp1aXF1V3IwNHB1N1FuYW1GWVI4YlVDRS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAVw30DAN BgkqhkiG9w0BAQsFAAOCAQEAaqiCoK/wYXP4BgcRLdO+aBfJEaYcpxH9iSAt3tyC +AsoWIBCp6TBz6yTtOci5Gu8U8+W2iRg8eGeutcKegTXyNIKSnKwP2Q6/HhpmkS2 p6xafErDw9ymC9YKt2hrH3XBibYdet1zYGuWPlSDKLKo9qY57JUdH3+9UgmkiOhF FY0zkQ6lLUmXvkZkiA3foYoPlRPGdg3s02nZ9/eFpJjqDP7sPw0ZjZPAMXqIKfff NaS3lKIcOZ/8RGLue9QE8RfHaRBSwVr7AOttT/y6PTfdM+elF1mGZphqF87bdCfH sQhHK8lzykBv3ArLLSHu4vMVLSn2sDxEeHQd8MRmLrxhug== -----END CERTIFICATE-----Generated at Mon Jan 26 00:37:27 2026 by rpki-client