This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/HKW_JvuPX0mHM7lazYSgyR0g0uM.roa File: HKW_JvuPX0mHM7lazYSgyR0g0uM.roa (raw, json) Hash identifier: Jh1Szq0fa2LL5rNZCDMcjRVX03Rzj5K0HXlv8wVQfI0= Subject key identifier: 1C:A5:BF:26:FB:8F:5F:49:87:33:B9:5A:CD:84:A0:C9:1D:20:D2:E3 Certificate issuer: /CN=c36806ea062f6053841288b446e2e0ded5b2f2e7 Certificate serial: 019B79EC77A01A50A0F499478DFBD9A24669 Authority key identifier: C3:68:06:EA:06:2F:60:53:84:12:88:B4:46:E2:E0:DE:D5:B2:F2:E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w2gG6gYvYFOEEoi0RuLg3tWy8uc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/HKW_JvuPX0mHM7lazYSgyR0g0uM.roa Signing time: Thu 01 Jan 2026 14:18:18 +0000 ROA not before: Thu 01 Jan 2026 14:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16019 IP address blocks: 178.211.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.crl rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.mft rsync://rpki.ripe.net/repository/DEFAULT/w2gG6gYvYFOEEoi0RuLg3tWy8uc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:77:a0:1a:50:a0:f4:99:47:8d:fb:d9:a2:46:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c36806ea062f6053841288b446e2e0ded5b2f2e7 Validity Not Before: Jan 1 14:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1ca5bf26fb8f5f498733b95acd84a0c91d20d2e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:01:bc:94:98:97:08:19:36:a5:6e:34:14:dc: df:c2:ec:a4:f2:ed:6a:38:1f:83:67:b9:74:35:ff: 94:70:00:e4:41:1d:1a:03:8e:6f:58:e6:58:d7:11: 74:64:70:1f:2e:f9:43:e9:03:fd:94:98:b1:89:ec: 13:c0:65:16:8d:c8:12:9c:6e:7c:26:04:7d:52:36: 66:5f:72:0d:40:a3:9b:ad:0b:c9:f0:bc:c6:fd:3b: d8:13:bd:6d:9f:c4:e1:52:ad:96:80:08:65:fb:01: 05:5e:33:91:c4:87:a0:44:55:d8:98:cf:48:77:98: b5:2b:d8:46:ae:a3:e9:4e:96:ea:99:77:c9:8a:04: 5e:ee:31:31:ce:0b:0d:65:ff:bc:e4:eb:f7:c8:c8: e4:8c:b9:47:d2:3f:17:64:02:89:21:3a:d4:eb:5c: 73:1d:98:92:13:dc:fd:56:c5:5b:db:76:d2:c8:d5: 39:28:48:69:77:03:60:29:77:f4:75:cf:79:a2:07: 24:9d:16:20:8a:7e:35:f8:51:db:84:18:77:d6:4a: 50:1f:f5:c5:b9:6b:66:f4:7f:b8:a5:c6:97:f4:2a: f1:98:44:9f:a5:f6:ee:84:a8:f1:e7:93:71:7f:52: c7:8c:55:a3:4f:df:52:76:00:87:9e:c7:56:59:68: 14:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:A5:BF:26:FB:8F:5F:49:87:33:B9:5A:CD:84:A0:C9:1D:20:D2:E3 X509v3 Authority Key Identifier: keyid:C3:68:06:EA:06:2F:60:53:84:12:88:B4:46:E2:E0:DE:D5:B2:F2:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w2gG6gYvYFOEEoi0RuLg3tWy8uc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/HKW_JvuPX0mHM7lazYSgyR0g0uM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.211.147.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:78:6c:b3:36:b1:56:29:92:6e:57:ed:18:ba:ef:28:64:09: 9f:f0:3e:7a:ef:72:25:05:68:1a:01:ea:88:df:9b:7a:44:5e: 02:30:6e:7f:91:3e:a0:89:36:e6:44:36:19:72:c1:b8:12:b9: 55:51:9c:2b:2a:5d:e1:16:f8:f6:b4:80:28:8b:6c:97:5c:d2: 98:31:02:29:c6:a3:f0:08:da:83:7a:15:19:ac:27:18:7e:61: 78:38:04:d5:07:42:33:7b:2c:ef:3e:93:c3:c8:81:a5:3c:81: 53:95:78:1b:78:7b:67:32:73:03:da:fa:c2:07:c0:1a:4e:07: 7a:e0:a8:99:14:b5:c2:de:3a:73:19:ae:69:95:84:58:62:3b: d5:fd:6e:2f:34:bf:5d:aa:ad:47:db:0d:11:f5:56:42:a4:cc: 2f:4d:9b:26:95:d4:dd:da:74:c6:e9:5d:e6:6f:be:88:29:98: 2c:b5:b2:af:7f:2d:f9:8d:eb:60:00:5e:6e:15:bc:75:0a:0b: 82:eb:c5:75:d3:4a:ec:ee:a8:de:ad:7e:de:45:d8:c2:35:d2: 5e:08:e9:bd:40:18:bb:73:c5:70:54:58:b6:88:c5:5a:34:15: 4c:46:62:86:8a:cb:0a:76:d8:25:11:b1:0a:68:94:03:50:df: ba:0d:51:c7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57HegGlCg9JlHjfvZokZpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNjgwNmVhMDYyZjYwNTM4NDEyODhiNDQ2ZTJlMGRlZDVi MmYyZTcwHhcNMjYwMTAxMTQxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxY2E1YmYyNmZiOGY1ZjQ5ODczM2I5NWFjZDg0YTBjOTFkMjBkMmUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwG8lJiXCBk2pW40FNzfwuyk8u1q OB+DZ7l0Nf+UcADkQR0aA45vWOZY1xF0ZHAfLvlD6QP9lJixiewTwGUWjcgSnG58 JgR9UjZmX3INQKObrQvJ8LzG/TvYE71tn8ThUq2WgAhl+wEFXjORxIegRFXYmM9I d5i1K9hGrqPpTpbqmXfJigRe7jExzgsNZf+85Ov3yMjkjLlH0j8XZAKJITrU61xz HZiSE9z9VsVb23bSyNU5KEhpdwNgKXf0dc95ogcknRYgin41+FHbhBh31kpQH/XF uWtm9H+4pcaX9CrxmESfpfbuhKjx55Nxf1LHjFWjT99SdgCHnsdWWWgUgwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBylvyb7j19JhzO5Ws2EoMkdINLjMB8GA1UdIwQY MBaAFMNoBuoGL2BThBKItEbi4N7VsvLnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzJnRzZnWXZZRk9FRW9pMFJ1TGczdFd5OHVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8zNjNiYTctODllMy00OTVmLWFhMmUt YzFlYjczZmZkNDE2LzEvSEtXX0p2dVBYMG1ITTdsYXpZU2d5UjBnMHVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi8zNjNiYTctODllMy00OTVmLWFhMmUtYzFlYjczZmZkNDE2 LzEvdzJnRzZnWXZZRk9FRW9pMFJ1TGczdFd5OHVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAstOTMA0G CSqGSIb3DQEBCwUAA4IBAQANeGyzNrFWKZJuV+0Yuu8oZAmf8D5673IlBWgaAeqI 35t6RF4CMG5/kT6giTbmRDYZcsG4ErlVUZwrKl3hFvj2tIAoi2yXXNKYMQIpxqPw CNqDehUZrCcYfmF4OATVB0IzeyzvPpPDyIGlPIFTlXgbeHtnMnMD2vrCB8AaTgd6 4KiZFLXC3jpzGa5plYRYYjvV/W4vNL9dqq1H2w0R9VZCpMwvTZsmldTd2nTG6V3m b76IKZgstbKvfy35jetgAF5uFbx1CguC68V100rs7qjerX7eRdjCNdJeCOm9QBi7 c8VwVFi2iMVaNBVMRmKGissKdtglEbEKaJQDUN+6DVHH -----END CERTIFICATE-----Generated at Sun Jan 25 21:04:57 2026 by rpki-client