This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/HVCa9r5thWjsE4kAoaBRSlvTvK4.roa File: HVCa9r5thWjsE4kAoaBRSlvTvK4.roa (raw, json) Hash identifier: QayBo0rlXlFxr86ACWyOG/yDe9UFq1WxBL/y2YeNVL4= Subject key identifier: 1D:50:9A:F6:BE:6D:85:68:EC:13:89:00:A1:A0:51:4A:5B:D3:BC:AE Certificate issuer: /CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212 Certificate serial: 019B7AC934F8E0D609AFEF699FBC6F4B14F2 Authority key identifier: A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/HVCa9r5thWjsE4kAoaBRSlvTvK4.roa Signing time: Thu 01 Jan 2026 18:19:25 +0000 ROA not before: Thu 01 Jan 2026 18:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57900 IP address blocks: 212.24.246.0/24 maxlen: 24 212.24.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:34:f8:e0:d6:09:af:ef:69:9f:bc:6f:4b:14:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212 Validity Not Before: Jan 1 18:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1d509af6be6d8568ec138900a1a0514a5bd3bcae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:cb:92:56:4a:2e:40:43:37:c6:be:40:db:9b: 72:35:e7:e2:90:cb:78:7c:4d:6a:14:a2:55:57:2d: e0:f9:79:fd:41:c2:84:81:07:5b:47:a3:c9:5a:01: ed:1a:20:27:df:a6:aa:86:d6:ab:5a:17:c5:ed:9c: 00:aa:58:ee:f8:f5:c3:57:4a:24:ed:44:12:5d:2c: 2d:22:b6:6f:f1:a8:03:64:8a:9f:79:85:75:e8:cf: 48:7e:47:d0:43:5b:e2:71:0c:64:1d:f3:d7:85:58: 81:c9:7a:27:18:31:4d:52:9c:37:92:9d:01:b6:74: 91:e1:04:11:08:cf:99:34:d4:fd:ce:49:cc:f0:a7: 3b:03:cd:3e:e2:c4:2e:cc:e6:dd:64:9a:09:b4:b1: 5a:e6:50:02:9b:d1:a4:5e:83:ce:a6:0b:ae:6a:ca: 20:29:44:dd:97:79:d1:22:73:03:07:60:79:41:53: 73:80:65:14:83:a8:82:5e:37:a6:5b:8e:79:2b:ef: 51:da:11:4e:3d:db:a9:24:36:ce:fc:19:91:21:af: 2b:12:c6:65:0a:6c:5b:ab:e4:5f:5b:0e:63:43:e9: a0:9a:03:40:31:fd:01:0b:a9:22:c0:be:9c:3d:b7: ae:71:0a:39:61:22:e5:2a:be:18:8d:99:79:04:5d: a1:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:50:9A:F6:BE:6D:85:68:EC:13:89:00:A1:A0:51:4A:5B:D3:BC:AE X509v3 Authority Key Identifier: keyid:A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/HVCa9r5thWjsE4kAoaBRSlvTvK4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.24.246.0/23 Signature Algorithm: sha256WithRSAEncryption 2e:03:4b:ca:5d:99:29:4c:ec:f9:88:d9:4e:d6:26:7a:12:f8: ef:79:10:79:b9:d9:cf:08:3d:6c:a3:89:e7:2f:86:6f:f3:be: 3b:03:2c:e9:0d:c8:4e:ee:89:67:45:26:56:ce:ce:2e:b8:1a: 68:aa:91:1b:c3:00:b4:2c:68:cb:9d:d1:c4:26:91:98:73:0e: 84:98:1c:a2:fe:50:a6:07:19:de:88:b7:d8:76:a2:1f:e1:d4: 44:62:1a:e9:7b:ed:e3:a8:b4:7e:5a:ee:ce:e1:d3:ac:40:d0: ff:02:d6:52:33:5b:12:f6:da:9d:c8:8a:43:3b:ff:76:4c:ab: 85:bd:94:19:54:ed:35:7f:09:aa:fe:86:e2:4f:a4:72:35:12: 42:f3:91:bc:b7:17:a8:f6:3a:c0:d8:8e:d1:4b:bf:4a:c3:a9: 4a:d6:8b:f7:85:5b:75:a2:4c:31:8e:7a:7b:35:0a:5c:68:33: 0a:31:04:5e:29:d0:39:f9:ae:ea:a5:85:79:02:63:c8:ec:66: 50:2c:8c:e5:f0:2e:2d:75:36:fe:c9:b9:97:d3:be:ba:ad:c6: eb:16:d5:ba:47:61:a6:06:0f:6b:9d:dd:e6:f1:4d:39:03:ae: 1d:85:36:4e:0c:f0:42:8f:13:1f:94:7c:e6:be:0d:d6:38:c7: 1c:72:16:7f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yTT44NYJr+9pn7xvSxTyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2M2JjYzZkMjVmNzQ3NmZiYjNlYzMzZjZkYmMzZTllZWFk OTIyMTIwHhcNMjYwMTAxMTgxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZDUwOWFmNmJlNmQ4NTY4ZWMxMzg5MDBhMWEwNTE0YTViZDNiY2FlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6MuSVkouQEM3xr5A25tyNefikMt4 fE1qFKJVVy3g+Xn9QcKEgQdbR6PJWgHtGiAn36aqhtarWhfF7ZwAqlju+PXDV0ok 7UQSXSwtIrZv8agDZIqfeYV16M9IfkfQQ1vicQxkHfPXhViByXonGDFNUpw3kp0B tnSR4QQRCM+ZNNT9zknM8Kc7A80+4sQuzObdZJoJtLFa5lACm9GkXoPOpguuasog KUTdl3nRInMDB2B5QVNzgGUUg6iCXjemW455K+9R2hFOPdupJDbO/BmRIa8rEsZl Cmxbq+RfWw5jQ+mgmgNAMf0BC6kiwL6cPbeucQo5YSLlKr4YjZl5BF2hjQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB1Qmva+bYVo7BOJAKGgUUpb07yuMB8GA1UdIwQY MBaAFKY7zG0l90dvuz7DP228Pp7q2SISMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS83NjhmZGItZDFiNS00YmVmLWJjYmQt NDkyNGZhMDAwYjdjLzEvSFZDYTlyNXRoV2pzRTRrQW9hQlJTbHZUdks0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS83NjhmZGItZDFiNS00YmVmLWJjYmQtNDkyNGZhMDAwYjdj LzEvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1Bj2MA0G CSqGSIb3DQEBCwUAA4IBAQAuA0vKXZkpTOz5iNlO1iZ6EvjveRB5udnPCD1so4nn L4Zv8747AyzpDchO7olnRSZWzs4uuBpoqpEbwwC0LGjLndHEJpGYcw6EmByi/lCm BxneiLfYdqIf4dREYhrpe+3jqLR+Wu7O4dOsQND/AtZSM1sS9tqdyIpDO/92TKuF vZQZVO01fwmq/obiT6RyNRJC85G8txeo9jrA2I7RS79Kw6lK1ov3hVt1okwxjnp7 NQpcaDMKMQReKdA5+a7qpYV5AmPI7GZQLIzl8C4tdTb+ybmX0766rcbrFtW6R2Gm Bg9rnd3m8U05A64dhTZODPBCjxMflHzmvg3WOMccchZ/ -----END CERTIFICATE-----Generated at Sun Jan 25 12:18:24 2026 by rpki-client