This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/Hl-oGjMEXSHh22tv7GvQWauR6Ls.roa File: Hl-oGjMEXSHh22tv7GvQWauR6Ls.roa (raw, json) Hash identifier: k0kjDMHyxNG6XHvsH8YWl0QTbYb+WeHWx5ruPE+qWhs= Subject key identifier: 1E:5F:A8:1A:33:04:5D:21:E1:DB:6B:6F:EC:6B:D0:59:AB:91:E8:BB Certificate issuer: /CN=aca6f0683cc74badd23a8140c385f1c81ce24df7 Certificate serial: 019B7E3739F038C32D707B5724004D3F3D63 Authority key identifier: AC:A6:F0:68:3C:C7:4B:AD:D2:3A:81:40:C3:85:F1:C8:1C:E2:4D:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKbwaDzHS63SOoFAw4XxyBziTfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/Hl-oGjMEXSHh22tv7GvQWauR6Ls.roa Signing time: Fri 02 Jan 2026 10:18:27 +0000 ROA not before: Fri 02 Jan 2026 10:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210797 IP address blocks: 178.22.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.crl rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.mft rsync://rpki.ripe.net/repository/DEFAULT/rKbwaDzHS63SOoFAw4XxyBziTfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:39:f0:38:c3:2d:70:7b:57:24:00:4d:3f:3d:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aca6f0683cc74badd23a8140c385f1c81ce24df7 Validity Not Before: Jan 2 10:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1e5fa81a33045d21e1db6b6fec6bd059ab91e8bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6d:d4:c6:0d:4d:15:e7:17:97:be:ce:42:fa: 6a:6f:28:35:40:fa:7b:3e:1d:22:6d:93:57:40:38: cd:c7:ba:f3:55:20:49:6c:0c:8a:a7:8d:9f:c9:c9: c9:c7:c2:b4:e4:7d:97:38:54:63:d4:41:8e:07:fb: 44:13:6a:54:7e:25:60:3e:a1:a1:df:a7:14:51:ff: fd:66:1b:c3:3a:07:d4:46:f0:4b:b6:dd:65:b5:f1: 58:e5:69:47:a5:83:0c:76:31:b0:2e:42:fc:ec:c7: ff:c2:bd:b8:d8:76:e7:f9:1b:f7:eb:fb:0c:42:65: a0:68:96:18:bd:96:7c:74:cc:cf:9b:fa:87:22:a6: 64:7b:71:11:49:78:87:89:46:ce:57:e4:9d:a5:81: f7:9e:df:16:0d:30:79:ab:45:cb:e9:58:1e:a6:57: 55:70:63:05:d2:d3:aa:81:9b:eb:4b:08:68:03:d7: 37:ba:a6:97:a1:c9:89:ca:a3:22:68:c8:6c:a8:9c: fa:f9:95:a1:4a:2f:7d:c4:f4:6a:f4:86:f9:79:74: 81:6b:0e:21:4b:4f:52:b5:4f:d1:2d:5c:e3:ba:0f: e7:7f:56:9d:0b:d3:0c:5b:7d:3c:3d:2f:b5:ce:b2: 74:f5:fc:78:05:4a:90:8e:0f:71:08:8f:4b:c7:7b: 67:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:5F:A8:1A:33:04:5D:21:E1:DB:6B:6F:EC:6B:D0:59:AB:91:E8:BB X509v3 Authority Key Identifier: keyid:AC:A6:F0:68:3C:C7:4B:AD:D2:3A:81:40:C3:85:F1:C8:1C:E2:4D:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKbwaDzHS63SOoFAw4XxyBziTfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/Hl-oGjMEXSHh22tv7GvQWauR6Ls.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.22.27.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:a9:41:a1:98:2d:f6:7c:3f:96:70:7a:51:3c:5a:34:67:53: f1:65:9c:d8:9a:8f:6c:78:a5:c1:d9:b6:f3:2a:88:75:9a:c2: 0f:a7:cb:10:66:70:e9:b5:2d:fe:31:bf:1e:9d:77:68:d6:5b: 15:e0:d9:e4:05:c7:c9:e1:54:2b:fc:86:6b:24:9f:d5:4d:98: 56:73:d6:3b:d3:0e:b3:5d:87:4e:05:51:72:a2:9a:14:d8:1c: 42:02:fa:73:fc:25:68:e5:1e:c9:e6:31:9d:41:4a:d5:7c:bb: cd:cf:9d:4c:b8:b6:b0:61:82:1b:d7:38:a6:30:d2:56:9f:34: 55:29:64:49:6b:bd:a9:8c:56:0e:c6:a6:d2:3c:90:3b:40:1f: 5a:10:bd:7a:9d:68:a7:b1:d5:86:48:6b:ca:5c:d0:5a:da:21: 01:8a:da:08:9d:e6:c3:22:bc:85:bf:42:a4:93:f1:5f:24:ac: e1:dd:ab:60:ef:67:13:da:97:fd:e5:88:0f:4a:36:7e:a6:de: 1d:15:ed:e3:ce:ee:3f:e7:43:d8:1c:e7:a1:1a:ba:1b:92:e6: fd:cf:fa:be:10:c3:64:cd:49:f3:b7:e4:0b:c7:04:e9:df:f1: 73:98:99:65:46:f0:d0:f4:20:a5:32:a0:03:b3:45:b6:1a:e7: 43:0e:cc:7f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+NznwOMMtcHtXJABNPz1jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjYTZmMDY4M2NjNzRiYWRkMjNhODE0MGMzODVmMWM4MWNl MjRkZjcwHhcNMjYwMTAyMTAxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZTVmYTgxYTMzMDQ1ZDIxZTFkYjZiNmZlYzZiZDA1OWFiOTFlOGJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsG3Uxg1NFecXl77OQvpqbyg1QPp7 Ph0ibZNXQDjNx7rzVSBJbAyKp42fycnJx8K05H2XOFRj1EGOB/tEE2pUfiVgPqGh 36cUUf/9ZhvDOgfURvBLtt1ltfFY5WlHpYMMdjGwLkL87Mf/wr242Hbn+Rv36/sM QmWgaJYYvZZ8dMzPm/qHIqZke3ERSXiHiUbOV+SdpYH3nt8WDTB5q0XL6VgepldV cGMF0tOqgZvrSwhoA9c3uqaXocmJyqMiaMhsqJz6+ZWhSi99xPRq9Ib5eXSBaw4h S09StU/RLVzjug/nf1adC9MMW308PS+1zrJ09fx4BUqQjg9xCI9Lx3tnmQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB5fqBozBF0h4dtrb+xr0Fmrkei7MB8GA1UdIwQY MBaAFKym8Gg8x0ut0jqBQMOF8cgc4k33MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcktid2FEekhTNjNTT29GQXc0WHh5QnppVGZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8yZDQ4MTgtZjE4Mi00YjQ2LTllOGMt MDgyNzk2MWMwNWUwLzEvSGwtb0dqTUVYU0hoMjJ0djdHdlFXYXVSNkxzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8yZDQ4MTgtZjE4Mi00YjQ2LTllOGMtMDgyNzk2MWMwNWUw LzEvcktid2FEekhTNjNTT29GQXc0WHh5QnppVGZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAshYbMA0G CSqGSIb3DQEBCwUAA4IBAQAKqUGhmC32fD+WcHpRPFo0Z1PxZZzYmo9seKXB2bbz Koh1msIPp8sQZnDptS3+Mb8enXdo1lsV4NnkBcfJ4VQr/IZrJJ/VTZhWc9Y70w6z XYdOBVFyopoU2BxCAvpz/CVo5R7J5jGdQUrVfLvNz51MuLawYYIb1zimMNJWnzRV KWRJa72pjFYOxqbSPJA7QB9aEL16nWinsdWGSGvKXNBa2iEBitoInebDIryFv0Kk k/FfJKzh3atg72cT2pf95YgPSjZ+pt4dFe3jzu4/50PYHOehGrobkub9z/q+EMNk zUnzt+QLxwTp3/FzmJllRvDQ9CClMqADs0W2GudDDsx/ -----END CERTIFICATE-----Generated at Sun Jan 25 19:39:38 2026 by rpki-client