This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/hG3KpN-cvfJ9mSWPhtQPeu1ItUs.roa File: hG3KpN-cvfJ9mSWPhtQPeu1ItUs.roa (raw, json) Hash identifier: /bY2rtzWMB1/BM4P1MtY/wIJQHWSb2VyMeLJaYe4zIY= Subject key identifier: 84:6D:CA:A4:DF:9C:BD:F2:7D:99:25:8F:86:D4:0F:7A:ED:48:B5:4B Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0 Certificate serial: 019B7C128C1D5DA7B2F79011E4DEFD71EDCB Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/hG3KpN-cvfJ9mSWPhtQPeu1ItUs.roa Signing time: Fri 02 Jan 2026 00:19:08 +0000 ROA not before: Fri 02 Jan 2026 00:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213010 IP address blocks: 80.66.76.0/24 maxlen: 24 80.66.88.0/24 maxlen: 24 87.251.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:8c:1d:5d:a7:b2:f7:90:11:e4:de:fd:71:ed:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0 Validity Not Before: Jan 2 00:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=846dcaa4df9cbdf27d99258f86d40f7aed48b54b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:03:e5:4e:13:86:e2:af:88:c8:4d:3b:40:43: a7:ef:8f:03:a5:b1:ef:43:99:80:b4:0d:3b:6f:85: 66:e3:7a:37:08:a9:b3:71:70:10:b7:67:9b:6b:91: 7e:e0:9c:4e:4c:f9:23:69:09:b1:6a:3f:49:8b:1d: 39:9a:76:53:23:a4:0a:f5:3b:e9:fc:1c:58:36:2c: 3c:0e:cd:21:a9:3f:94:89:21:18:bc:e9:a2:f3:60: 71:97:7a:49:9c:47:ea:d3:4e:d0:79:6e:66:d9:bb: 3a:8d:f5:c2:29:04:f5:53:20:6b:6d:61:1e:9d:ba: 76:8a:b5:d3:b5:88:d1:5d:9f:27:1f:83:33:2a:71: 87:18:d6:de:31:60:14:8e:65:0c:50:bd:0d:45:fb: c4:9d:2f:18:91:90:3c:89:43:57:c7:45:20:25:7e: 88:8c:79:12:dd:c8:39:69:03:4c:d2:ca:3b:06:f6: 15:6d:8c:fe:65:74:44:8f:2b:6f:9c:bb:fd:85:a6: 20:73:9c:e6:22:5c:cf:3c:68:2c:a0:35:c3:59:a1: 92:fb:93:79:d4:46:21:13:5c:b4:0e:f3:1c:b8:38: d5:9c:fa:8d:cd:0d:10:8b:36:7b:21:76:10:60:e5: ba:ab:88:e3:7a:f4:7c:32:46:b4:36:bd:bc:ed:18: e9:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:6D:CA:A4:DF:9C:BD:F2:7D:99:25:8F:86:D4:0F:7A:ED:48:B5:4B X509v3 Authority Key Identifier: keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/hG3KpN-cvfJ9mSWPhtQPeu1ItUs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.66.76.0/24 80.66.88.0/24 87.251.75.0/24 Signature Algorithm: sha256WithRSAEncryption 58:61:21:40:cd:e9:bf:9a:5a:77:12:fe:0e:b6:df:2c:a9:c4: 1d:5f:ba:80:f8:6e:d4:6a:5c:90:c1:15:28:24:3c:39:4e:cb: 01:e0:21:ab:5d:f6:49:5f:af:0f:ad:33:f5:77:74:25:ae:c2: 55:79:97:75:3b:8b:b0:7c:cf:45:cc:12:a7:e7:be:2c:a7:7e: 45:82:d3:95:a7:a0:77:aa:d5:bc:53:e5:09:48:18:7d:f6:7f: 88:45:cb:48:f8:ba:22:af:7e:7c:ed:4f:82:6a:26:b5:39:69: 32:26:24:a8:e3:76:19:31:a6:d0:af:e4:a1:68:56:4b:46:62: a1:af:ab:f7:d9:86:0f:01:97:8d:89:75:6b:0e:42:f1:84:6a: ca:94:1d:46:0a:24:97:4d:6e:ca:c0:61:72:56:fa:9f:ce:f4: 5a:e5:b5:9d:c3:20:dd:97:b8:d4:57:fa:a2:3b:c4:90:76:9d: 82:e9:a9:9a:8a:be:5d:3e:e6:26:93:33:29:15:29:bc:6f:99: 2b:e1:bb:7a:8b:40:b6:b2:7f:7d:98:c9:c6:c6:c3:f4:80:ab: 9d:bf:78:a3:42:81:c0:69:9d:5f:d0:47:9b:eb:d3:d9:ed:d1: 9e:fc:fd:3c:b0:b5:3e:ae:f4:91:20:4a:7e:16:c4:1f:d2:cd: ea:46:5f:9f -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8EowdXaey95AR5N79ce3LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3M2I0YzEyNDhjNGJjZjIyYjA1NzdkZmNhOWIxNGQ5MDYz YzI4YzAwHhcNMjYwMTAyMDAxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDZkY2FhNGRmOWNiZGYyN2Q5OTI1OGY4NmQ0MGY3YWVkNDhiNTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQPlThOG4q+IyE07QEOn748DpbHv Q5mAtA07b4Vm43o3CKmzcXAQt2eba5F+4JxOTPkjaQmxaj9Jix05mnZTI6QK9Tvp /BxYNiw8Ds0hqT+UiSEYvOmi82Bxl3pJnEfq007QeW5m2bs6jfXCKQT1UyBrbWEe nbp2irXTtYjRXZ8nH4MzKnGHGNbeMWAUjmUMUL0NRfvEnS8YkZA8iUNXx0UgJX6I jHkS3cg5aQNM0so7BvYVbYz+ZXREjytvnLv9haYgc5zmIlzPPGgsoDXDWaGS+5N5 1EYhE1y0DvMcuDjVnPqNzQ0QizZ7IXYQYOW6q4jjevR8Mka0Nr287RjpVQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFIRtyqTfnL3yfZklj4bUD3rtSLVLMB8GA1UdIwQY MBaAFAc7TBJIxLzyKwV338qbFNkGPCjAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQt YThkMzYxY2U2NGFhLzEvaEczS3BOLWN2Zko5bVNXUGh0UVBldTFJdFVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQtYThkMzYxY2U2NGFh LzEvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAUEJMAwQA UEJYAwQAV/tLMA0GCSqGSIb3DQEBCwUAA4IBAQBYYSFAzem/mlp3Ev4Ott8sqcQd X7qA+G7UalyQwRUoJDw5TssB4CGrXfZJX68PrTP1d3QlrsJVeZd1O4uwfM9FzBKn 574sp35FgtOVp6B3qtW8U+UJSBh99n+IRctI+Loir3587U+Caia1OWkyJiSo43YZ MabQr+ShaFZLRmKhr6v32YYPAZeNiXVrDkLxhGrKlB1GCiSXTW7KwGFyVvqfzvRa 5bWdwyDdl7jUV/qiO8SQdp2C6amair5dPuYmkzMpFSm8b5kr4bt6i0C2sn99mMnG xsP0gKudv3ijQoHAaZ1f0Eeb69PZ7dGe/P08sLU+rvSRIEp+FsQf0s3qRl+f -----END CERTIFICATE-----Generated at Sun Jan 25 22:12:50 2026 by rpki-client