This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/HL-ROcW7ouFfM-ooSu_o2VREjBY.roa File: HL-ROcW7ouFfM-ooSu_o2VREjBY.roa (raw, json) Hash identifier: ujK5KehUzQkF735/HRjccuZM+b+O1T9dLVbDOeZE17s= Subject key identifier: 1C:BF:91:39:C5:BB:A2:E1:5F:33:EA:28:4A:EF:E8:D9:54:44:8C:16 Certificate issuer: /CN=7384e508e3adf8edd6f2a242cdad6bde9a5ad018 Certificate serial: 019BA2F60D52B9C29CD9B4AAF914B3591A10 Authority key identifier: 73:84:E5:08:E3:AD:F8:ED:D6:F2:A2:42:CD:AD:6B:DE:9A:5A:D0:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c4TlCOOt-O3W8qJCza1r3ppa0Bg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/HL-ROcW7ouFfM-ooSu_o2VREjBY.roa Signing time: Fri 09 Jan 2026 13:33:12 +0000 ROA not before: Fri 09 Jan 2026 13:33:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59550 IP address blocks: 46.245.238.0/24 maxlen: 24 2a13:c080::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/c4TlCOOt-O3W8qJCza1r3ppa0Bg.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/c4TlCOOt-O3W8qJCza1r3ppa0Bg.mft rsync://rpki.ripe.net/repository/DEFAULT/c4TlCOOt-O3W8qJCza1r3ppa0Bg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a2:f6:0d:52:b9:c2:9c:d9:b4:aa:f9:14:b3:59:1a:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7384e508e3adf8edd6f2a242cdad6bde9a5ad018 Validity Not Before: Jan 9 13:33:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1cbf9139c5bba2e15f33ea284aefe8d954448c16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d7:23:a0:fc:6a:11:72:eb:e2:81:00:b7:67: d3:07:9d:79:0a:0f:a5:7f:88:78:31:b9:c1:bf:e0: 74:18:c2:e3:36:77:6f:da:12:86:e9:b2:01:04:ac: 43:80:5c:04:0d:e4:ef:27:d2:7b:9a:5e:24:b9:bd: 41:d7:c5:86:ae:e8:14:66:90:d1:cc:cf:3a:3d:40: 89:fe:58:b4:da:09:27:a5:92:eb:a6:cc:5b:6e:dd: a1:38:21:a4:e3:7d:bb:bb:f2:00:1c:14:80:4c:5e: 76:b9:8f:a3:54:6e:bb:39:72:aa:43:65:a5:19:7b: 70:f4:6b:7a:dd:59:72:99:e1:cf:3e:d7:1d:4b:cf: f1:7a:6d:7c:6d:2e:5b:1c:89:45:84:06:ae:28:27: db:92:9a:5a:b2:b1:d0:9e:09:d5:3a:6d:5a:70:06: 4d:68:08:88:4b:51:d9:46:80:38:51:c4:2d:56:c7: c5:d8:c6:e9:9b:a7:22:ef:57:e9:9d:a4:4f:e9:f6: 5b:ce:15:25:98:29:7b:a9:e5:87:44:94:15:c8:2f: 77:03:98:57:7e:e1:8a:65:2f:aa:00:a3:f9:a4:1f: 59:e6:66:27:f3:d3:08:40:61:32:b3:0b:ff:eb:7d: 88:6a:84:81:ef:eb:b0:78:7c:d8:4b:59:a0:54:b8: 93:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:BF:91:39:C5:BB:A2:E1:5F:33:EA:28:4A:EF:E8:D9:54:44:8C:16 X509v3 Authority Key Identifier: keyid:73:84:E5:08:E3:AD:F8:ED:D6:F2:A2:42:CD:AD:6B:DE:9A:5A:D0:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4TlCOOt-O3W8qJCza1r3ppa0Bg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/HL-ROcW7ouFfM-ooSu_o2VREjBY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/c4TlCOOt-O3W8qJCza1r3ppa0Bg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.245.238.0/24 IPv6: 2a13:c080::/29 Signature Algorithm: sha256WithRSAEncryption 5a:bd:2b:e6:97:a3:29:45:67:a6:f0:ce:b2:ab:7c:57:af:fd: b6:e6:2b:fa:6b:40:2f:4e:ea:1e:29:74:56:a7:ee:7c:32:5e: 41:26:e1:9a:cd:90:18:32:4b:5d:d0:29:fe:a0:45:6e:6c:87: eb:88:7a:c2:c4:5f:02:95:79:67:ce:a6:d3:40:65:64:92:fa: 88:d1:9e:5c:e8:6b:fd:5a:be:b7:8a:36:91:b0:d4:96:86:5e: 6d:31:78:a7:5c:7d:87:d9:00:e7:3b:8a:51:43:90:61:ac:4e: 3b:52:64:8e:72:a8:df:3e:67:fc:9d:b2:fc:98:90:ab:05:61: fa:7e:c0:e8:1a:98:6b:1a:f1:b8:46:4c:b1:a9:27:f0:19:46: 9c:d1:e7:fe:9e:11:8d:fc:5f:c4:f8:5b:83:2d:ee:d9:4c:6b: 7f:bf:e4:30:d3:3d:20:bd:38:1f:c7:6c:ff:06:15:f2:aa:00: 61:12:ab:ae:fb:8e:2a:33:5e:91:41:0b:99:45:14:fa:bb:6a: d8:75:02:c1:d1:f8:ea:dc:2b:70:5b:b6:8c:06:79:32:ef:3c: db:85:6c:2a:a3:ea:6c:1f:9b:d8:6b:4b:ae:a0:b6:52:b4:86: 6e:87:70:89:1b:a3:48:ed:92:30:24:3d:07:1b:bc:c9:ec:d3: 4b:76:67:7f -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZui9g1SucKc2bSq+RSzWRoQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczODRlNTA4ZTNhZGY4ZWRkNmYyYTI0MmNkYWQ2YmRlOWE1 YWQwMTgwHhcNMjYwMTA5MTMzMzEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxY2JmOTEzOWM1YmJhMmUxNWYzM2VhMjg0YWVmZThkOTU0NDQ4YzE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9cjoPxqEXLr4oEAt2fTB515Cg+l f4h4MbnBv+B0GMLjNndv2hKG6bIBBKxDgFwEDeTvJ9J7ml4kub1B18WGrugUZpDR zM86PUCJ/li02gknpZLrpsxbbt2hOCGk4327u/IAHBSATF52uY+jVG67OXKqQ2Wl GXtw9Gt63VlymeHPPtcdS8/xem18bS5bHIlFhAauKCfbkppasrHQngnVOm1acAZN aAiIS1HZRoA4UcQtVsfF2Mbpm6ci71fpnaRP6fZbzhUlmCl7qeWHRJQVyC93A5hX fuGKZS+qAKP5pB9Z5mYn89MIQGEyswv/632IaoSB7+uweHzYS1mgVLiTGQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBy/kTnFu6LhXzPqKErv6NlURIwWMB8GA1UdIwQY MBaAFHOE5Qjjrfjt1vKiQs2ta96aWtAYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzRUbENPT3QtTzNXOHFKQ3phMXIzcHBhMEJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8wNjZkYjItZDM1Yy00ODFmLWJhNTUt NTViNjc3MjM1ZWIzLzEvSEwtUk9jVzdvdUZmTS1vb1N1X28yVlJFakJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8wNjZkYjItZDM1Yy00ODFmLWJhNTUtNTViNjc3MjM1ZWIz LzEvYzRUbENPT3QtTzNXOHFKQ3phMXIzcHBhMEJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQALvXuMA0E AgACMAcDBQMqE8CAMA0GCSqGSIb3DQEBCwUAA4IBAQBavSvml6MpRWem8M6yq3xX r/225iv6a0AvTuoeKXRWp+58Ml5BJuGazZAYMktd0Cn+oEVubIfriHrCxF8ClXln zqbTQGVkkvqI0Z5c6Gv9Wr63ijaRsNSWhl5tMXinXH2H2QDnO4pRQ5BhrE47UmSO cqjfPmf8nbL8mJCrBWH6fsDoGphrGvG4RkyxqSfwGUac0ef+nhGN/F/E+FuDLe7Z TGt/v+Qw0z0gvTgfx2z/BhXyqgBhEquu+44qM16RQQuZRRT6u2rYdQLB0fjq3Ctw W7aMBnky7zzbhWwqo+psH5vYa0uuoLZStIZuh3CJG6NI7ZIwJD0HG7zJ7NNLdmd/ -----END CERTIFICATE-----Generated at Sun Jan 25 16:11:24 2026 by rpki-client