This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/HbEx7H1JLwPBlmcAN-xpDopPNGM.roa File: HbEx7H1JLwPBlmcAN-xpDopPNGM.roa (raw, json) Hash identifier: YJcx1ed3tK16bbLzRe+E+u16eoX0vPPKSbeVN78fzcs= Subject key identifier: 1D:B1:31:EC:7D:49:2F:03:C1:96:67:00:37:EC:69:0E:8A:4F:34:63 Certificate issuer: /CN=f9856d674f0e9dbf6012d5b5d3d96b43afd76473 Certificate serial: 019B78A29D4FA5A8AB4A866ECDFD683042A7 Authority key identifier: F9:85:6D:67:4F:0E:9D:BF:60:12:D5:B5:D3:D9:6B:43:AF:D7:64:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/HbEx7H1JLwPBlmcAN-xpDopPNGM.roa Signing time: Thu 01 Jan 2026 08:18:01 +0000 ROA not before: Thu 01 Jan 2026 08:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198949 IP address blocks: 192.115.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 08:19:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:9d:4f:a5:a8:ab:4a:86:6e:cd:fd:68:30:42:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9856d674f0e9dbf6012d5b5d3d96b43afd76473 Validity Not Before: Jan 1 08:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1db131ec7d492f03c196670037ec690e8a4f3463 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5f:8e:ee:57:4e:3c:02:a1:88:96:0c:75:8d: 23:73:32:7f:7d:35:8c:71:40:b9:25:6c:fc:a0:60: 7c:5d:41:3f:b9:97:11:38:b0:15:f9:96:ab:bb:da: 38:a7:f8:60:05:3f:95:f6:f1:a7:8b:80:ae:bb:93: 39:80:40:a9:6f:16:f0:5d:a8:75:49:c7:e8:7f:a2: 7c:83:05:e0:a3:97:84:88:7b:9c:06:c9:15:23:06: 2d:19:9b:00:51:27:e3:80:34:00:b2:3d:86:d0:e5: 58:75:70:16:d0:f3:1a:8c:97:79:ed:da:95:a5:c6: 15:51:b7:1d:de:43:d9:e8:83:cb:93:15:60:4d:bc: 17:d2:2b:ef:83:49:a0:e0:df:4e:e1:5c:fe:bf:08: 94:69:ad:44:0b:f0:59:43:19:e1:cf:0b:27:bc:c3: a9:98:81:2a:49:f8:5a:15:13:50:90:12:97:71:68: ed:7e:5f:ff:06:ec:f0:ba:a0:13:22:72:06:42:a6: ff:c0:68:e5:cf:d5:0d:1a:33:a5:9c:c0:66:23:32: 7b:d3:40:97:19:d9:c0:93:2b:10:51:54:bd:c0:d5: 27:ae:b2:81:86:85:64:11:03:f8:f1:cc:e0:44:a2: ee:73:4d:0a:a8:63:40:dc:bb:cf:72:21:fa:5b:17: 6b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:B1:31:EC:7D:49:2F:03:C1:96:67:00:37:EC:69:0E:8A:4F:34:63 X509v3 Authority Key Identifier: keyid:F9:85:6D:67:4F:0E:9D:BF:60:12:D5:B5:D3:D9:6B:43:AF:D7:64:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/HbEx7H1JLwPBlmcAN-xpDopPNGM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.115.232.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:46:9a:9e:5e:fa:70:e5:79:45:47:8d:5a:fa:cb:ef:e2:8d: 00:61:d0:14:a8:80:65:0d:19:9b:bc:6e:7d:e2:c7:03:60:7b: 39:48:ba:67:67:ab:74:a4:65:c8:39:4a:7b:09:a3:9d:03:46: 0a:85:5f:71:d3:a3:14:3d:a6:b0:88:60:d6:f2:8b:49:03:a6: 92:d3:4b:40:b9:94:b5:19:11:11:37:d0:e6:87:03:15:62:73: 99:6c:56:eb:10:0c:e6:ff:fd:1e:e0:1b:91:08:9b:6e:b2:d2: 6f:1a:a3:fa:27:d0:da:33:b1:06:62:3f:0c:df:7f:77:43:11: 45:51:b0:6d:47:0a:f6:e5:ef:14:5a:80:da:e3:d0:d4:32:2c: 7d:66:80:18:e4:bb:b0:a0:96:ca:f7:9c:45:40:39:13:cd:e7: e8:2d:c6:8a:55:59:ca:49:23:a3:5f:20:bc:4a:49:e6:e2:2c: 31:31:e1:ae:5d:8c:8f:9f:4c:34:5a:09:50:37:2b:b4:c4:c6: f5:cf:88:76:e9:d4:c5:f8:79:7a:ab:ff:80:4f:fa:32:b0:b9: 23:33:2d:1f:2f:36:0c:43:66:57:ec:cd:33:9a:fb:43:9a:b2: dd:38:42:4e:af:53:73:2f:13:82:5b:df:08:00:4b:f8:aa:51: 5b:12:63:af -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt4op1PpairSoZuzf1oMEKnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5ODU2ZDY3NGYwZTlkYmY2MDEyZDViNWQzZDk2YjQzYWZk NzY0NzMwHhcNMjYwMTAxMDgxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZGIxMzFlYzdkNDkyZjAzYzE5NjY3MDAzN2VjNjkwZThhNGYzNDYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1+O7ldOPAKhiJYMdY0jczJ/fTWM cUC5JWz8oGB8XUE/uZcROLAV+Zaru9o4p/hgBT+V9vGni4Cuu5M5gECpbxbwXah1 Scfof6J8gwXgo5eEiHucBskVIwYtGZsAUSfjgDQAsj2G0OVYdXAW0PMajJd57dqV pcYVUbcd3kPZ6IPLkxVgTbwX0ivvg0mg4N9O4Vz+vwiUaa1EC/BZQxnhzwsnvMOp mIEqSfhaFRNQkBKXcWjtfl//BuzwuqATInIGQqb/wGjlz9UNGjOlnMBmIzJ700CX GdnAkysQUVS9wNUnrrKBhoVkEQP48czgRKLuc00KqGNA3LvPciH6WxdrCwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFB2xMex9SS8DwZZnADfsaQ6KTzRjMB8GA1UdIwQY MBaAFPmFbWdPDp2/YBLVtdPZa0Ov12RzMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1ZVnRaMDhPbmI5Z0V0VzEwOWxyUTZfWFpITS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGEvOWY5NTkwLTdmMGEtNDFiMy1hYzRm LWVmZDE0ZGI5NTdmYi8xL0hiRXg3SDFKTHdQQmxtY0FOLXhwRG9wUE5HTS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMGEvOWY5NTkwLTdmMGEtNDFiMy1hYzRmLWVmZDE0ZGI5NTdm Yi8xLzEtWVZ0WjA4T25iOWdFdFcxMDlsclE2X1haSE0uY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADAc+gw DQYJKoZIhvcNAQELBQADggEBABtGmp5e+nDleUVHjVr6y+/ijQBh0BSogGUNGZu8 bn3ixwNgezlIumdnq3SkZcg5SnsJo50DRgqFX3HToxQ9prCIYNbyi0kDppLTS0C5 lLUZERE30OaHAxVic5lsVusQDOb//R7gG5EIm26y0m8ao/on0NozsQZiPwzff3dD EUVRsG1HCvbl7xRagNrj0NQyLH1mgBjku7Cglsr3nEVAORPN5+gtxopVWcpJI6Nf ILxKSebiLDEx4a5djI+fTDRaCVA3K7TExvXPiHbp1MX4eXqr/4BP+jKwuSMzLR8v NgxDZlfszTOa+0Oast04Qk6vU3MvE4Jb3wgAS/iqUVsSY68= -----END CERTIFICATE-----Generated at Thu Jan 1 12:27:02 2026 by rpki-client