This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/HgtAfa941f3bckSRgbU4fMeEo5g.roa File: HgtAfa941f3bckSRgbU4fMeEo5g.roa (raw, json) Hash identifier: kWggJ4X+k4Y6XIDogFJ1/rEJSs0Fcx5pxefMoAv/zCs= Subject key identifier: 1E:0B:40:7D:AF:78:D5:FD:DB:72:44:91:81:B5:38:7C:C7:84:A3:98 Certificate issuer: /CN=06cbc7614b49878bf37fde0c18d7c851c2d07e6f Certificate serial: 019BE01598D7747EC956666AB5DB21540488 Authority key identifier: 06:CB:C7:61:4B:49:87:8B:F3:7F:DE:0C:18:D7:C8:51:C2:D0:7E:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsvHYUtJh4vzf94MGNfIUcLQfm8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/HgtAfa941f3bckSRgbU4fMeEo5g.roa Signing time: Wed 21 Jan 2026 10:24:30 +0000 ROA not before: Wed 21 Jan 2026 10:24:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8412 IP address blocks: 46.124.0.0/15 maxlen: 16 46.124.132.0/22 maxlen: 22 46.124.136.0/21 maxlen: 22 46.124.144.0/20 maxlen: 22 46.124.160.0/21 maxlen: 22 46.124.192.0/21 maxlen: 22 46.124.204.0/23 maxlen: 23 62.140.32.0/19 maxlen: 20 78.132.0.0/17 maxlen: 18 185.99.72.0/22 maxlen: 23 212.67.224.0/19 maxlen: 20 212.95.0.0/19 maxlen: 24 213.142.96.0/19 maxlen: 23 213.162.64.0/19 maxlen: 23 213.162.84.0/22 maxlen: 22 213.162.92.0/22 maxlen: 22 2001:4bc8::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/BsvHYUtJh4vzf94MGNfIUcLQfm8.crl rsync://rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/BsvHYUtJh4vzf94MGNfIUcLQfm8.mft rsync://rpki.ripe.net/repository/DEFAULT/BsvHYUtJh4vzf94MGNfIUcLQfm8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e0:15:98:d7:74:7e:c9:56:66:6a:b5:db:21:54:04:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06cbc7614b49878bf37fde0c18d7c851c2d07e6f Validity Not Before: Jan 21 10:24:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1e0b407daf78d5fddb72449181b5387cc784a398 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:08:57:15:ef:49:cc:4d:41:be:20:bc:cf:e5: c5:ec:e2:94:6e:13:5b:c2:00:80:57:70:57:7d:75: 59:e9:9c:a3:20:51:e1:9f:c1:9b:22:9c:de:3c:47: d6:8a:90:97:95:8f:7d:74:62:b1:73:7d:61:5d:3e: 4b:31:0a:5c:04:56:bd:75:bc:5d:53:6f:bd:46:e7: 10:82:f1:f1:64:a0:a6:4d:6b:b3:aa:a3:67:3d:cd: 0b:96:eb:12:3b:0a:a5:43:52:2e:1c:61:16:1f:32: f7:7d:fd:d1:e1:ab:cd:59:64:3e:0a:3a:6d:52:6b: 81:ea:fb:6a:5c:3d:bf:86:c3:c5:ff:5f:80:a1:4b: d2:7f:e2:c3:0b:71:90:57:da:89:2b:ac:52:d3:5d: 46:18:b4:93:2f:86:5d:41:e2:11:34:9d:59:e4:2d: e1:0c:57:ab:b9:ec:d3:91:f1:5a:f2:01:96:36:b2: f3:c3:5d:94:ac:e1:e3:91:e7:c3:ed:45:2b:7a:f0: 25:b9:ba:b9:24:6a:4a:96:27:54:33:48:17:40:72: 8c:0f:cc:3b:cb:94:af:d8:d2:e6:07:af:d6:2e:c7: 2d:5b:9d:ab:c7:1c:d2:bb:bd:ab:74:32:ad:45:14: d3:be:0c:c6:1e:ab:05:91:fe:40:f2:d6:d1:59:ae: d8:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:0B:40:7D:AF:78:D5:FD:DB:72:44:91:81:B5:38:7C:C7:84:A3:98 X509v3 Authority Key Identifier: keyid:06:CB:C7:61:4B:49:87:8B:F3:7F:DE:0C:18:D7:C8:51:C2:D0:7E:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsvHYUtJh4vzf94MGNfIUcLQfm8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/HgtAfa941f3bckSRgbU4fMeEo5g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/BsvHYUtJh4vzf94MGNfIUcLQfm8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.124.0.0/15 62.140.32.0/19 78.132.0.0/17 185.99.72.0/22 212.67.224.0/19 212.95.0.0/19 213.142.96.0/19 213.162.64.0/19 IPv6: 2001:4bc8::/29 Signature Algorithm: sha256WithRSAEncryption 48:20:fe:49:83:f5:e5:37:0a:c3:3d:8a:15:f7:e7:14:31:d1: 78:f2:00:50:42:4d:30:7f:0b:b0:ec:21:5c:e1:2a:20:75:a8: 75:1e:bf:f3:cf:c6:8b:5a:1b:95:96:93:50:24:b8:8d:c0:07: 88:9e:62:b6:c2:22:29:37:8d:d5:cb:f5:3f:e3:c0:32:a3:8e: 59:03:ce:85:c7:a7:cb:4e:37:1b:8d:b1:3d:5f:85:aa:8d:af: 95:63:52:dc:1e:cd:e4:7f:fd:c3:86:96:e7:54:0e:76:5d:26: 31:9b:30:24:11:25:7c:ca:18:ba:27:72:80:7d:df:bb:a3:df: 78:bf:89:5b:14:98:da:31:e8:5e:a5:ab:37:02:ae:ae:97:bc: 98:3c:47:d9:bb:f7:70:5c:14:11:34:db:a1:f3:67:61:11:97: f9:41:a3:c3:50:cb:fc:fe:ec:fd:7f:ba:13:53:ff:09:55:e7: ca:97:fa:bf:8b:0b:d3:c0:33:a4:59:9e:93:12:11:20:2f:55: 15:83:74:1f:4f:b0:cd:76:ed:93:ea:a7:dd:8b:ce:8e:f4:1f: ed:f4:3d:5d:2c:05:91:17:06:bf:a8:1d:63:1d:b1:38:6b:dc: a4:0f:6a:6a:be:a6:af:5a:a8:1e:89:57:bc:91:05:69:04:8a: 67:38:ff:62 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgISAZvgFZjXdH7JVmZqtdshVASIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2Y2JjNzYxNGI0OTg3OGJmMzdmZGUwYzE4ZDdjODUxYzJk MDdlNmYwHhcNMjYwMTIxMTAyNDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZTBiNDA3ZGFmNzhkNWZkZGI3MjQ0OTE4MWI1Mzg3Y2M3ODRhMzk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoghXFe9JzE1BviC8z+XF7OKUbhNb wgCAV3BXfXVZ6ZyjIFHhn8GbIpzePEfWipCXlY99dGKxc31hXT5LMQpcBFa9dbxd U2+9RucQgvHxZKCmTWuzqqNnPc0LlusSOwqlQ1IuHGEWHzL3ff3R4avNWWQ+Cjpt UmuB6vtqXD2/hsPF/1+AoUvSf+LDC3GQV9qJK6xS011GGLSTL4ZdQeIRNJ1Z5C3h DFeruezTkfFa8gGWNrLzw12UrOHjkefD7UUrevAlubq5JGpKlidUM0gXQHKMD8w7 y5Sv2NLmB6/WLsctW52rxxzSu72rdDKtRRTTvgzGHqsFkf5A8tbRWa7YpwIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFB4LQH2veNX923JEkYG1OHzHhKOYMB8GA1UdIwQY MBaAFAbLx2FLSYeL83/eDBjXyFHC0H5vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnN2SFlVdEpoNHZ6Zjk0TUdOZklVY0xRZm04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My84NzdmOTktN2FjYy00ZDMwLTgzYzgt NTc1YTYwZGU2NmE0LzEvSGd0QWZhOTQxZjNiY2tTUmdiVTRmTWVFbzVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My84NzdmOTktN2FjYy00ZDMwLTgzYzgtNTc1YTYwZGU2NmE0 LzEvQnN2SFlVdEpoNHZ6Zjk0TUdOZklVY0xRZm04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjA1BAIAATAvAwMBLnwDBAU+ jCADBAdOhAADBAK5Y0gDBAXUQ+ADBAXUXwADBAXVjmADBAXVokAwDQQCAAIwBwMF AyABS8gwDQYJKoZIhvcNAQELBQADggEBAEgg/kmD9eU3CsM9ihX35xQx0XjyAFBC TTB/C7DsIVzhKiB1qHUev/PPxotaG5WWk1AkuI3AB4ieYrbCIik3jdXL9T/jwDKj jlkDzoXHp8tONxuNsT1fhaqNr5VjUtwezeR//cOGludUDnZdJjGbMCQRJXzKGLon coB937uj33i/iVsUmNox6F6lqzcCrq6XvJg8R9m793BcFBE026HzZ2ERl/lBo8NQ y/z+7P1/uhNT/wlV58qX+r+LC9PAM6RZnpMSESAvVRWDdB9PsM127ZPqp92Lzo70 H+30PV0sBZEXBr+oHWMdsThr3KQPamq+pq9aqB6JV7yRBWkEimc4/2I= -----END CERTIFICATE-----Generated at Mon Jan 26 10:52:56 2026 by rpki-client