This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/Hxhp2uGgJ96mDQMXtL0at3ZkeNo.roa File: Hxhp2uGgJ96mDQMXtL0at3ZkeNo.roa (raw, json) Hash identifier: JdSfPmOZyz9SS20YY9m/BqTfnfPdc3k8FKlJ51fneog= Subject key identifier: 1F:18:69:DA:E1:A0:27:DE:A6:0D:03:17:B4:BD:1A:B7:76:64:78:DA Certificate issuer: /CN=93c38d3e1c4e7e543a36c8b6353eb66da4dab40b Certificate serial: 019B7AC8D74D590085FB29A54AA4F3C41A48 Authority key identifier: 93:C3:8D:3E:1C:4E:7E:54:3A:36:C8:B6:35:3E:B6:6D:A4:DA:B4:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/Hxhp2uGgJ96mDQMXtL0at3ZkeNo.roa Signing time: Thu 01 Jan 2026 18:19:01 +0000 ROA not before: Thu 01 Jan 2026 18:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31463 IP address blocks: 93.177.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:d7:4d:59:00:85:fb:29:a5:4a:a4:f3:c4:1a:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93c38d3e1c4e7e543a36c8b6353eb66da4dab40b Validity Not Before: Jan 1 18:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f1869dae1a027dea60d0317b4bd1ab7766478da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:92:86:83:dc:a0:59:1e:33:9b:9e:40:40:68: 15:b9:5c:30:13:68:ce:55:c2:28:b9:09:2f:1f:1a: b6:75:74:bd:e2:0b:8c:10:e7:25:00:52:70:65:5d: 50:10:c6:66:0a:0d:0e:0d:7e:cc:1f:4c:52:b1:9e: c9:27:0e:e0:54:e4:2f:b7:6a:82:67:f3:a2:60:31: 1b:8b:84:05:7f:7a:8a:58:df:da:8b:3c:4b:46:6f: f8:dc:ba:86:ce:a8:52:49:d6:c7:c6:32:19:99:5e: 50:ef:e3:2d:ae:9c:75:25:4a:20:78:19:8d:73:06: 92:80:44:38:2d:f9:95:5c:ac:51:cd:63:11:ec:70: 46:c3:30:f2:ae:db:d7:d3:ad:e1:39:21:ce:2e:23: c1:7e:29:61:f3:9c:3c:4f:02:d2:fc:fa:aa:bb:2c: c3:b5:61:b1:43:52:ac:32:07:3c:6d:0f:90:20:c0: ad:b5:19:92:d3:43:7d:d9:96:0b:c4:bf:06:7d:93: 57:3d:f4:2f:b1:07:2e:35:b9:7b:1a:df:94:91:75: 43:3f:39:80:61:74:68:4d:ed:2f:47:ac:dc:c1:ec: a5:c0:22:47:ef:66:70:f2:71:3e:84:e1:d7:07:a5: ec:9c:11:1c:93:8f:3f:b4:7f:fc:c9:93:4c:df:fd: e6:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:18:69:DA:E1:A0:27:DE:A6:0D:03:17:B4:BD:1A:B7:76:64:78:DA X509v3 Authority Key Identifier: keyid:93:C3:8D:3E:1C:4E:7E:54:3A:36:C8:B6:35:3E:B6:6D:A4:DA:B4:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/Hxhp2uGgJ96mDQMXtL0at3ZkeNo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.177.127.0/24 Signature Algorithm: sha256WithRSAEncryption 61:58:1f:2a:4d:19:77:26:50:b2:5f:29:69:3e:31:39:f8:b0: 6f:ee:f2:e6:2b:68:db:ce:82:48:ce:15:8a:51:33:8c:b2:cc: 69:14:0c:ec:60:a3:db:79:fe:2b:27:12:e6:6e:28:81:61:99: b3:28:af:24:88:7b:b8:97:85:ef:07:57:1d:89:27:46:25:1e: 72:64:6e:35:a5:22:1a:f1:b2:5b:9b:ab:09:e6:bb:90:ef:08: 42:d9:26:fc:00:fa:5c:fb:f7:22:93:d1:b8:97:04:99:c9:61: af:f9:1c:2f:55:b1:16:96:b8:a1:67:4a:ec:f9:be:e3:24:91: 3a:20:dd:be:cf:fc:04:14:13:a9:7b:20:3d:3c:a4:f1:e0:9c: bc:b4:98:91:0c:e5:4a:81:2a:8b:12:cb:f3:2b:74:f7:02:8a: 07:4e:d4:0b:28:4d:1b:3a:da:a1:fb:39:87:e2:fc:3c:c8:d9: 34:f1:7e:7a:04:50:57:e6:e0:83:aa:a2:a7:18:ef:14:39:bb: 7a:af:89:c2:b8:be:32:d9:14:58:fb:9d:b6:97:40:86:d8:0b: 55:64:87:e7:c1:1d:68:2f:ab:39:78:9c:50:71:d9:cc:10:b5: 3b:4e:56:a5:fd:04:7e:69:b3:3b:8f:0d:48:e1:0b:47:5c:85: 7c:49:68:4d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yNdNWQCF+ymlSqTzxBpIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzYzM4ZDNlMWM0ZTdlNTQzYTM2YzhiNjM1M2ViNjZkYTRk YWI0MGIwHhcNMjYwMTAxMTgxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjE4NjlkYWUxYTAyN2RlYTYwZDAzMTdiNGJkMWFiNzc2NjQ3OGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5KGg9ygWR4zm55AQGgVuVwwE2jO VcIouQkvHxq2dXS94guMEOclAFJwZV1QEMZmCg0ODX7MH0xSsZ7JJw7gVOQvt2qC Z/OiYDEbi4QFf3qKWN/aizxLRm/43LqGzqhSSdbHxjIZmV5Q7+Mtrpx1JUogeBmN cwaSgEQ4LfmVXKxRzWMR7HBGwzDyrtvX063hOSHOLiPBfilh85w8TwLS/PqquyzD tWGxQ1KsMgc8bQ+QIMCttRmS00N92ZYLxL8GfZNXPfQvsQcuNbl7Gt+UkXVDPzmA YXRoTe0vR6zcweylwCJH72Zw8nE+hOHXB6XsnBEck48/tH/8yZNM3/3mnwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB8YadrhoCfepg0DF7S9Grd2ZHjaMB8GA1UdIwQY MBaAFJPDjT4cTn5UOjbItjU+tm2k2rQLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazhPTlBoeE9mbFE2TnNpMk5UNjJiYVRhdEFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9jNzFlMzAtYzg2OC00OGZjLTgwZGYt MzY0ODMxMzlkYzVlLzEvSHhocDJ1R2dKOTZtRFFNWHRMMGF0M1prZU5vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9jNzFlMzAtYzg2OC00OGZjLTgwZGYtMzY0ODMxMzlkYzVl LzEvazhPTlBoeE9mbFE2TnNpMk5UNjJiYVRhdEFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXbF/MA0G CSqGSIb3DQEBCwUAA4IBAQBhWB8qTRl3JlCyXylpPjE5+LBv7vLmK2jbzoJIzhWK UTOMssxpFAzsYKPbef4rJxLmbiiBYZmzKK8kiHu4l4XvB1cdiSdGJR5yZG41pSIa 8bJbm6sJ5ruQ7whC2Sb8APpc+/cik9G4lwSZyWGv+RwvVbEWlrihZ0rs+b7jJJE6 IN2+z/wEFBOpeyA9PKTx4Jy8tJiRDOVKgSqLEsvzK3T3AooHTtQLKE0bOtqh+zmH 4vw8yNk08X56BFBX5uCDqqKnGO8UObt6r4nCuL4y2RRY+522l0CG2AtVZIfnwR1o L6s5eJxQcdnMELU7Tlal/QR+abM7jw1I4QtHXIV8SWhN -----END CERTIFICATE-----Generated at Mon Jan 26 09:23:41 2026 by rpki-client