This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/HxYp59riIlza87eFARnMPYgySWE.roa File: HxYp59riIlza87eFARnMPYgySWE.roa (raw, json) Hash identifier: IbWFXF9QrKF/nXu4+XYR7TDUvfZ6vCunnlKcD+Se6xU= Subject key identifier: 1F:16:29:E7:DA:E2:22:5C:DA:F3:B7:85:01:19:CC:3D:88:32:49:61 Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68 Certificate serial: 019B7BA45EBF545356F609E36FC8BF34EE68 Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/HxYp59riIlza87eFARnMPYgySWE.roa Signing time: Thu 01 Jan 2026 22:18:48 +0000 ROA not before: Thu 01 Jan 2026 22:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215046 IP address blocks: 37.156.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 16:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:5e:bf:54:53:56:f6:09:e3:6f:c8:bf:34:ee:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68 Validity Not Before: Jan 1 22:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f1629e7dae2225cdaf3b7850119cc3d88324961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c4:e0:d8:af:36:0f:ef:95:ae:51:6b:44:fc: c8:eb:04:f8:2d:f5:29:3c:17:64:8a:d3:60:2a:93: 62:58:e5:88:ba:d0:96:8b:d2:7d:73:84:dc:27:22: 42:dc:85:89:b9:75:7d:56:41:90:b9:f3:fc:fb:29: f9:20:98:94:be:a4:2b:be:32:8e:94:3c:e9:40:04: d5:21:fb:73:b8:3a:fb:2a:87:a3:95:40:24:ea:5a: 1e:1f:6a:1f:08:2d:c6:76:e6:63:77:d1:f4:bf:9d: 7f:71:57:98:49:20:e3:00:2e:7a:f1:30:05:be:34: f9:11:93:4e:2e:4d:97:bf:5a:59:03:d0:58:70:4a: 42:47:d8:84:9d:e6:b8:90:09:97:c2:eb:90:89:04: c2:fb:f3:a2:52:0e:49:4f:ae:7b:a2:ca:7f:99:e7: 07:a8:d7:d3:f7:78:b3:13:cf:20:71:c9:b9:18:2f: 07:a1:68:b2:a9:f3:d7:1d:c4:c9:05:b4:67:38:65: 35:c2:08:b8:b1:26:68:56:14:e3:c2:b1:7c:13:d7: 63:75:f6:75:be:6f:12:51:dc:4f:29:0e:bb:48:32: e6:95:71:fe:d4:e0:27:57:4e:a1:80:a4:62:dc:56: ca:e7:1a:7a:a7:5f:0f:73:c3:3d:5e:9a:d6:fb:c4: 3d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:16:29:E7:DA:E2:22:5C:DA:F3:B7:85:01:19:CC:3D:88:32:49:61 X509v3 Authority Key Identifier: keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/HxYp59riIlza87eFARnMPYgySWE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.156.35.0/24 Signature Algorithm: sha256WithRSAEncryption 62:32:24:89:73:3d:c9:21:5d:44:40:4f:bd:47:67:74:87:ae: 72:eb:6d:20:d6:e8:99:f4:3a:fa:8f:f9:e4:19:5f:c6:4e:96: 24:1f:b9:32:d2:35:b8:6e:f8:20:8c:f5:3d:11:cd:a3:a2:63: 88:33:96:b9:f7:7c:25:ce:bb:8d:73:e2:02:6e:72:35:f0:33: d3:b2:70:31:f9:98:c7:49:08:65:54:d7:c1:fb:e9:01:0d:25: b1:c2:ba:27:0c:a2:f5:99:9c:9b:b1:2f:91:05:bf:6d:33:71: 2c:a7:cd:b3:1c:b5:b5:c6:24:f7:45:38:2d:17:55:ea:2f:31: 2a:9a:41:68:2e:f9:37:be:c2:b8:da:01:04:0a:f7:fa:3c:ba: d8:60:1a:65:b3:00:d9:da:13:10:be:43:1a:72:60:13:2f:c6: c4:8f:82:f2:c6:a8:eb:24:e1:16:64:e9:2e:29:53:a6:1e:05: 00:00:15:a8:7e:d1:c1:d8:cd:e5:b3:f5:24:01:09:25:ad:7d: c4:2d:c0:2e:a5:2a:fe:11:07:19:56:41:e0:fc:62:c3:5e:74: eb:95:c5:db:51:95:33:35:d7:10:98:60:8f:bf:86:85:10:2f: dd:bf:5c:52:7e:29:9b:92:85:8b:72:c0:07:05:20:a1:fb:9c: c7:f1:58:c9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pF6/VFNW9gnjb8i/NO5oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMzU1ODU0NmEyYzU0YmJkODEyYTE5MjI4YWE5OGUwNzhk M2FhNjgwHhcNMjYwMTAxMjIxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjE2MjllN2RhZTIyMjVjZGFmM2I3ODUwMTE5Y2MzZDg4MzI0OTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsTg2K82D++VrlFrRPzI6wT4LfUp PBdkitNgKpNiWOWIutCWi9J9c4TcJyJC3IWJuXV9VkGQufP8+yn5IJiUvqQrvjKO lDzpQATVIftzuDr7KoejlUAk6loeH2ofCC3GduZjd9H0v51/cVeYSSDjAC568TAF vjT5EZNOLk2Xv1pZA9BYcEpCR9iEnea4kAmXwuuQiQTC+/OiUg5JT657osp/mecH qNfT93izE88gccm5GC8HoWiyqfPXHcTJBbRnOGU1wgi4sSZoVhTjwrF8E9djdfZ1 vm8SUdxPKQ67SDLmlXH+1OAnV06hgKRi3FbK5xp6p18Pc8M9XprW+8Q9oQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB8WKefa4iJc2vO3hQEZzD2IMklhMB8GA1UdIwQY MBaAFA01WFRqLFS72BKhkiiqmOB406poMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFRWWVZHb3NWTHZZRXFHU0tLcVk0SGpUcW1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi80NzRmMjctYjI4Ni00NmYwLWFlNDUt MTMyZmZjOGJkZTQ2LzEvSHhZcDU5cmlJbHphODdlRkFSbk1QWWd5U1dFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi80NzRmMjctYjI4Ni00NmYwLWFlNDUtMTMyZmZjOGJkZTQ2 LzEvRFRWWVZHb3NWTHZZRXFHU0tLcVk0SGpUcW1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJZwjMA0G CSqGSIb3DQEBCwUAA4IBAQBiMiSJcz3JIV1EQE+9R2d0h65y620g1uiZ9Dr6j/nk GV/GTpYkH7ky0jW4bvggjPU9Ec2jomOIM5a593wlzruNc+ICbnI18DPTsnAx+ZjH SQhlVNfB++kBDSWxwronDKL1mZybsS+RBb9tM3Esp82zHLW1xiT3RTgtF1XqLzEq mkFoLvk3vsK42gEECvf6PLrYYBplswDZ2hMQvkMacmATL8bEj4LyxqjrJOEWZOku KVOmHgUAABWoftHB2M3ls/UkAQklrX3ELcAupSr+EQcZVkHg/GLDXnTrlcXbUZUz NdcQmGCPv4aFEC/dv1xSfimbkoWLcsAHBSCh+5zH8VjJ -----END CERTIFICATE-----Generated at Sat Jan 3 01:01:55 2026 by rpki-client