This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/hpf_CEMkLorIKvLyN-JcZEe8ptI.roa File: hpf_CEMkLorIKvLyN-JcZEe8ptI.roa (raw, json) Hash identifier: 2BuEcKt8pkg3PWstEMN+HFgmR1tbhBkfcpJh+d1wIHc= Subject key identifier: 86:97:FF:08:43:24:2E:8A:C8:2A:F2:F2:37:E2:5C:64:47:BC:A6:D2 Certificate issuer: /CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5 Certificate serial: 019B77C66F7C45A23E84C40E5A7D693DEE55 Authority key identifier: 8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/hpf_CEMkLorIKvLyN-JcZEe8ptI.roa Signing time: Thu 01 Jan 2026 04:17:31 +0000 ROA not before: Thu 01 Jan 2026 04:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208690 IP address blocks: 212.66.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:6f:7c:45:a2:3e:84:c4:0e:5a:7d:69:3d:ee:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5 Validity Not Before: Jan 1 04:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8697ff0843242e8ac82af2f237e25c6447bca6d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d3:72:b6:ae:7e:a2:70:58:2a:ef:d6:8c:95: 52:e9:21:b1:d6:df:31:b3:f3:74:10:78:03:5f:5c: eb:54:4c:44:80:fe:83:1f:be:f1:28:59:ef:39:fc: b9:03:d8:cb:1c:3d:7d:96:14:42:a0:fb:57:e1:6a: 22:c6:bc:38:4a:4f:7b:90:3d:a5:8b:da:e5:af:4a: 01:51:16:9a:57:52:f3:d0:be:86:19:35:75:91:ce: 2d:9e:f3:c8:fb:19:1c:b1:a8:dd:b2:20:5f:98:96: 3c:9a:72:09:b9:81:07:88:20:7c:ac:e3:42:50:3c: b7:8e:50:d6:72:9c:b4:44:aa:b3:c1:67:3a:bf:d1: b8:78:8f:da:02:88:3d:0f:35:6d:4c:98:0d:12:db: 29:18:50:ab:ea:25:b6:a6:3b:75:43:ff:23:28:f2: ed:af:57:a6:80:da:11:9d:92:9d:f2:9c:f2:d2:b0: 12:f0:22:43:0d:97:13:59:22:04:08:62:3f:99:12: 52:50:ae:52:55:3f:01:56:f1:aa:0c:57:0b:01:4c: 02:f7:bf:33:35:7a:8d:86:ae:d6:eb:da:25:4e:e8: bf:a0:2e:ff:ae:22:6f:93:90:c3:c0:43:5f:f8:fd: 9c:c0:18:31:d2:15:ac:f0:19:68:2b:ab:e0:39:4a: 28:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:97:FF:08:43:24:2E:8A:C8:2A:F2:F2:37:E2:5C:64:47:BC:A6:D2 X509v3 Authority Key Identifier: keyid:8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/hpf_CEMkLorIKvLyN-JcZEe8ptI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.66.52.0/24 Signature Algorithm: sha256WithRSAEncryption 14:c3:a3:ff:77:f8:31:ab:40:25:4c:d0:57:92:40:a5:8c:d9: f1:a1:d4:5b:36:16:5c:93:55:11:84:4d:50:f7:4e:67:09:1e: a7:1c:7e:05:ef:34:c5:ea:03:3e:7b:de:0f:92:75:41:c7:dd: 3e:dd:17:77:8f:1c:eb:4f:c8:4b:f8:8a:16:be:d9:06:ae:c4: 19:93:38:81:56:d5:2d:00:52:21:94:cd:76:0c:d9:11:fb:8b: 40:69:5e:43:43:a5:ce:99:16:d6:14:d5:c8:46:6c:17:4b:35: eb:82:57:a4:f9:47:65:77:5c:40:de:66:a3:51:46:3e:7c:b9: dc:35:1f:ce:53:ee:6c:f3:08:5a:1b:76:9b:6c:c3:9f:90:0e: 9b:f6:52:67:d9:d6:09:51:c8:45:cb:f3:ec:3c:e2:13:6f:30: 88:5a:68:7d:a4:69:b4:9e:87:de:64:ca:48:b2:7c:aa:2f:8f: 3e:bb:35:1b:3f:12:f6:58:33:a8:23:70:27:92:4a:32:08:ef: dc:bb:e4:ab:15:4e:ac:6e:d1:17:f9:92:8d:9a:be:33:db:e9: ab:8e:12:83:c3:4f:f1:6a:2f:81:de:1c:e7:b5:97:81:9c:80: 88:56:8a:73:1c:25:e6:83:d1:ca:93:2f:5f:96:83:67:b6:4d: f2:0e:3f:ca -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xm98RaI+hMQOWn1pPe5VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMDFhYjZjZDQ0YTdhM2VhNDAwMmMxMDZhOTZjNDI3YjUy YzgxZDUwHhcNMjYwMTAxMDQxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Njk3ZmYwODQzMjQyZThhYzgyYWYyZjIzN2UyNWM2NDQ3YmNhNmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNNytq5+onBYKu/WjJVS6SGx1t8x s/N0EHgDX1zrVExEgP6DH77xKFnvOfy5A9jLHD19lhRCoPtX4Woixrw4Sk97kD2l i9rlr0oBURaaV1Lz0L6GGTV1kc4tnvPI+xkcsajdsiBfmJY8mnIJuYEHiCB8rONC UDy3jlDWcpy0RKqzwWc6v9G4eI/aAog9DzVtTJgNEtspGFCr6iW2pjt1Q/8jKPLt r1emgNoRnZKd8pzy0rAS8CJDDZcTWSIECGI/mRJSUK5SVT8BVvGqDFcLAUwC978z NXqNhq7W69olTui/oC7/riJvk5DDwENf+P2cwBgx0hWs8BloK6vgOUoo4QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIaX/whDJC6KyCry8jfiXGRHvKbSMB8GA1UdIwQY MBaAFIoBq2zUSno+pAAsEGqWxCe1LIHVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEt OWZlYmY4YzNlMzNmLzEvaHBmX0NFTWtMb3JJS3ZMeU4tSmNaRWU4cHRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEtOWZlYmY4YzNlMzNm LzEvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1EI0MA0G CSqGSIb3DQEBCwUAA4IBAQAUw6P/d/gxq0AlTNBXkkCljNnxodRbNhZck1URhE1Q 905nCR6nHH4F7zTF6gM+e94PknVBx90+3Rd3jxzrT8hL+IoWvtkGrsQZkziBVtUt AFIhlM12DNkR+4tAaV5DQ6XOmRbWFNXIRmwXSzXrglek+Udld1xA3majUUY+fLnc NR/OU+5s8whaG3abbMOfkA6b9lJn2dYJUchFy/PsPOITbzCIWmh9pGm0nofeZMpI snyqL48+uzUbPxL2WDOoI3AnkkoyCO/cu+SrFU6sbtEX+ZKNmr4z2+mrjhKDw0/x ai+B3hzntZeBnICIVopzHCXmg9HKky9floNntk3yDj/K -----END CERTIFICATE-----Generated at Sun Jan 25 11:40:13 2026 by rpki-client