This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/Hp_Gc-MeEHfiIFKxwdo4RZH0DN0.roa File: Hp_Gc-MeEHfiIFKxwdo4RZH0DN0.roa (raw, json) Hash identifier: QEG1q15wYS2ew+Kh4uZkYIw3mpuL2NKJ2QKJR/2BO4A= Subject key identifier: 1E:9F:C6:73:E3:1E:10:77:E2:20:52:B1:C1:DA:38:45:91:F4:0C:DD Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc Certificate serial: 019B9BA1DB8BCC348A2AE3D8FF60C31F9ABB Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/Hp_Gc-MeEHfiIFKxwdo4RZH0DN0.roa Signing time: Thu 08 Jan 2026 03:23:54 +0000 ROA not before: Thu 08 Jan 2026 03:23:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197730 IP address blocks: 45.135.238.0/24 maxlen: 24 2a06:da40::/40 maxlen: 40 2a0b:1f00::/32 maxlen: 32 2a0e:31c0::/40 maxlen: 40 2a0f:22c0::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9b:a1:db:8b:cc:34:8a:2a:e3:d8:ff:60:c3:1f:9a:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc Validity Not Before: Jan 8 03:23:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1e9fc673e31e1077e22052b1c1da384591f40cdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c6:76:1e:cb:92:a4:ef:f5:36:96:e0:00:18: 55:ec:bf:13:ec:64:d4:9f:12:92:48:85:36:3d:67: 5a:98:b8:f6:1f:6c:ac:86:a6:80:11:68:82:3b:d3: 3e:d0:c9:73:d1:48:4f:4b:d2:44:f2:39:69:2e:9a: 70:37:d7:a7:bc:6b:78:8e:31:7b:fb:d9:52:e6:3e: 25:ed:79:b7:93:47:9a:be:a8:96:6c:43:34:83:24: c3:32:cb:19:d4:58:84:70:e0:c3:39:e8:50:d5:da: 80:1b:30:d1:43:9d:ab:46:93:1e:26:63:00:48:99: 57:40:03:74:f9:b2:06:c8:db:59:8b:b8:36:ac:43: 19:f7:c9:d8:f3:87:f7:b8:e8:28:90:b3:15:8d:ad: c5:b0:d9:25:e3:97:63:9e:01:65:ea:60:8f:91:2e: 9f:d4:b6:96:7a:9e:19:20:e4:ef:f7:de:04:1c:ad: b6:2f:93:40:9a:81:cd:e8:ea:6b:65:30:63:5e:91: 5a:bd:8a:70:29:65:05:bf:5d:e1:fe:8e:36:05:6c: 5c:1e:42:02:7e:d7:43:74:e6:83:7b:ae:63:c9:2a: 47:4e:a5:06:4a:b7:7b:24:c8:3f:8a:a3:a6:e3:f6: 51:91:44:26:84:d2:33:ff:55:a6:6a:b5:a9:06:a5: 17:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:9F:C6:73:E3:1E:10:77:E2:20:52:B1:C1:DA:38:45:91:F4:0C:DD X509v3 Authority Key Identifier: keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/Hp_Gc-MeEHfiIFKxwdo4RZH0DN0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.135.238.0/24 IPv6: 2a06:da40::/40 2a0b:1f00::/32 2a0e:31c0::/40 2a0f:22c0::/40 Signature Algorithm: sha256WithRSAEncryption c5:5f:78:e8:4a:69:63:05:01:de:13:2f:7e:f5:7a:07:12:07: e7:0c:29:f0:a5:65:2a:c9:cf:55:ff:3b:a7:04:b6:17:28:df: 3f:13:ba:2b:bd:0d:ff:1f:7d:a6:75:52:b3:6c:9c:b4:ea:5b: e9:7e:33:6e:55:44:b7:d9:b8:6d:a7:0a:cc:c8:bd:a7:62:a6: bd:12:c2:01:11:a6:d0:2d:8b:d0:dc:d5:8b:0d:e2:10:1b:39: dd:70:bf:40:3c:ca:f6:63:81:49:0a:02:f1:5e:a7:6a:17:b2: 4b:43:7f:97:44:88:d8:11:20:d8:75:38:7e:34:5d:06:32:80: df:6c:e8:68:54:87:ab:ba:3a:97:0d:cd:7f:3f:a6:9d:9d:6a: 51:64:67:41:4b:27:c1:93:4d:cb:3f:7b:88:47:0a:08:7f:46: d5:ab:31:9f:50:09:2a:ad:ed:ef:67:09:ab:9d:e6:60:64:1e: 54:33:40:cb:27:c3:83:2a:98:c5:66:d0:62:a0:67:67:b7:46: 7b:b2:75:c6:07:05:91:f9:57:03:3e:48:a5:ed:42:62:53:5e: ad:cf:c7:3e:88:66:f8:00:bd:2f:85:a2:e4:7b:8d:51:b9:4c: 7b:85:3e:6b:06:3c:f2:fb:a0:74:5d:ed:97:4e:42:c9:ef:f6: 5e:bb:3e:19 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZuboduLzDSKKuPY/2DDH5q7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2 YzhkY2MwHhcNMjYwMTA4MDMyMzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZTlmYzY3M2UzMWUxMDc3ZTIyMDUyYjFjMWRhMzg0NTkxZjQwY2RkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsZ2HsuSpO/1NpbgABhV7L8T7GTU nxKSSIU2PWdamLj2H2yshqaAEWiCO9M+0Mlz0UhPS9JE8jlpLppwN9envGt4jjF7 +9lS5j4l7Xm3k0eavqiWbEM0gyTDMssZ1FiEcODDOehQ1dqAGzDRQ52rRpMeJmMA SJlXQAN0+bIGyNtZi7g2rEMZ98nY84f3uOgokLMVja3FsNkl45djngFl6mCPkS6f 1LaWep4ZIOTv994EHK22L5NAmoHN6OprZTBjXpFavYpwKWUFv13h/o42BWxcHkIC ftdDdOaDe65jySpHTqUGSrd7JMg/iqOm4/ZRkUQmhNIz/1WmarWpBqUX7wIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFB6fxnPjHhB34iBSscHaOEWR9AzdMB8GA1UdIwQY MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt OTE4YWM2NDYyNjc5LzEvSHBfR2MtTWVFSGZpSUZLeHdkbzRSWkgwRE4wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5 LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAMBAIAATAGAwQALYfuMCUE AgACMB8DBgAqBtpAAAMFACoLHwADBgAqDjHAAAMGACoPIsAAMA0GCSqGSIb3DQEB CwUAA4IBAQDFX3joSmljBQHeEy9+9XoHEgfnDCnwpWUqyc9V/zunBLYXKN8/E7or vQ3/H32mdVKzbJy06lvpfjNuVUS32bhtpwrMyL2nYqa9EsIBEabQLYvQ3NWLDeIQ GzndcL9APMr2Y4FJCgLxXqdqF7JLQ3+XRIjYESDYdTh+NF0GMoDfbOhoVIerujqX Dc1/P6adnWpRZGdBSyfBk03LP3uIRwoIf0bVqzGfUAkqre3vZwmrneZgZB5UM0DL J8ODKpjFZtBioGdnt0Z7snXGBwWR+VcDPkil7UJiU16tz8c+iGb4AL0vhaLke41R uUx7hT5rBjzy+6B0Xe2XTkLJ7/Zeuz4Z -----END CERTIFICATE-----Generated at Sun Jan 25 10:20:36 2026 by rpki-client