This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/HgxRtI8mHBIWNfue_bJ47nUYGP0.roa File: HgxRtI8mHBIWNfue_bJ47nUYGP0.roa (raw, json) Hash identifier: bgpVojxuZ6rTw2rXwp7zmtHnPtbsDYtb7lQYehRuEhE= Subject key identifier: 1E:0C:51:B4:8F:26:1C:12:16:35:FB:9E:FD:B2:78:EE:75:18:18:FD Certificate issuer: /CN=767c1766fbbdcff68bbc34a3c6be69a0c8a03ab9 Certificate serial: 019B7D5C08D9400D426E6BAAA1109ADE7866 Authority key identifier: 76:7C:17:66:FB:BD:CF:F6:8B:BC:34:A3:C6:BE:69:A0:C8:A0:3A:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dnwXZvu9z_aLvDSjxr5poMigOrk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/HgxRtI8mHBIWNfue_bJ47nUYGP0.roa Signing time: Fri 02 Jan 2026 06:19:02 +0000 ROA not before: Fri 02 Jan 2026 06:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49110 IP address blocks: 185.143.40.0/24 maxlen: 24 185.143.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.crl rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft rsync://rpki.ripe.net/repository/DEFAULT/dnwXZvu9z_aLvDSjxr5poMigOrk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:08:d9:40:0d:42:6e:6b:aa:a1:10:9a:de:78:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767c1766fbbdcff68bbc34a3c6be69a0c8a03ab9 Validity Not Before: Jan 2 06:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1e0c51b48f261c121635fb9efdb278ee751818fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5b:11:b2:2d:bc:c2:ab:a8:bc:9b:10:99:a2: 06:4b:1e:6a:45:cd:2b:c3:a3:a2:5a:f0:9b:91:cb: 04:c4:e8:8e:32:f9:a7:06:f7:8a:07:0d:26:12:1a: fe:bc:99:95:8b:33:81:5b:69:8c:da:17:11:fc:a7: eb:d0:ba:57:b3:a3:17:3e:96:ae:aa:bb:6c:79:2b: 61:c1:d0:a7:1d:a8:08:ed:9f:a8:86:01:60:4e:a1: 3c:f7:b7:c3:03:9e:50:f6:ad:83:6c:23:a2:eb:bb: a7:b3:1e:99:73:02:86:d6:82:87:af:1f:00:1b:cc: 26:bb:80:c3:99:29:5d:1c:6f:bf:26:7d:ef:2d:a6: 43:28:92:ae:88:6d:83:38:e9:8b:db:93:18:5d:64: 2d:bd:9e:92:5e:a4:42:ec:77:71:7c:fe:8b:b6:f7: 32:a5:f2:27:0a:ff:f0:78:15:96:ba:b2:d5:5f:fc: ef:96:61:b3:98:f4:6d:8b:3c:69:40:35:37:36:9b: 63:e9:da:b7:89:cf:96:29:53:dc:08:d1:e8:35:70: 59:04:55:92:29:f1:f2:7d:fe:18:8c:09:f9:ea:66: 4c:ed:a4:5a:21:83:43:bb:62:79:60:1e:39:5b:3f: 7a:bf:23:91:72:f4:9f:ee:ad:fc:c6:8c:43:dd:ee: 5b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:0C:51:B4:8F:26:1C:12:16:35:FB:9E:FD:B2:78:EE:75:18:18:FD X509v3 Authority Key Identifier: keyid:76:7C:17:66:FB:BD:CF:F6:8B:BC:34:A3:C6:BE:69:A0:C8:A0:3A:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dnwXZvu9z_aLvDSjxr5poMigOrk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/HgxRtI8mHBIWNfue_bJ47nUYGP0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.143.40.0/23 Signature Algorithm: sha256WithRSAEncryption 25:a7:a2:69:e3:5d:92:1e:77:bf:c6:6a:f7:7c:fb:86:6b:6f: 13:09:5e:21:a1:9b:f5:25:a8:a7:ba:a5:12:36:21:a4:9b:84: bd:ce:d8:98:72:fa:d5:ef:a3:67:91:9b:44:0a:15:d4:54:1b: 4a:ef:f4:1f:2e:1e:78:8a:81:50:6f:56:4f:7b:07:d4:7c:a7: 83:6d:04:14:34:7b:0e:71:e5:5f:be:62:73:76:5f:e9:03:f5: 4b:9e:f5:0f:9f:02:88:6f:a1:0d:02:f7:c4:2e:62:9a:12:4f: ba:bf:e4:52:3d:e9:80:5a:57:73:58:70:7f:6a:56:9d:f4:9b: 47:7e:95:de:ed:60:bf:84:2e:28:30:ae:cb:19:6a:f9:de:0e: 9c:3d:d6:78:3b:42:8f:70:80:1c:dd:4b:40:fe:5f:c2:4b:b1: e4:05:db:1c:fc:f4:63:6d:f5:ee:bb:fe:9e:19:e6:b2:a9:a4: e0:4e:c0:46:91:72:4a:7b:d1:24:65:f2:90:1c:d3:d9:9f:80: 90:8f:fc:99:f1:2a:0b:c9:ed:ce:a5:79:e7:93:6c:94:15:8d: 9c:34:45:cf:52:90:84:08:b4:bb:f9:93:18:24:2f:7d:a5:16: 83:4a:90:c0:65:0c:05:b4:78:92:14:e0:fc:41:81:28:be:90: c9:43:66:1d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XAjZQA1CbmuqoRCa3nhmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2N2MxNzY2ZmJiZGNmZjY4YmJjMzRhM2M2YmU2OWEwYzhh MDNhYjkwHhcNMjYwMTAyMDYxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZTBjNTFiNDhmMjYxYzEyMTYzNWZiOWVmZGIyNzhlZTc1MTgxOGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1sRsi28wquovJsQmaIGSx5qRc0r w6OiWvCbkcsExOiOMvmnBveKBw0mEhr+vJmVizOBW2mM2hcR/Kfr0LpXs6MXPpau qrtseSthwdCnHagI7Z+ohgFgTqE897fDA55Q9q2DbCOi67unsx6ZcwKG1oKHrx8A G8wmu4DDmSldHG+/Jn3vLaZDKJKuiG2DOOmL25MYXWQtvZ6SXqRC7HdxfP6Ltvcy pfInCv/weBWWurLVX/zvlmGzmPRtizxpQDU3Nptj6dq3ic+WKVPcCNHoNXBZBFWS KfHyff4YjAn56mZM7aRaIYNDu2J5YB45Wz96vyORcvSf7q38xoxD3e5bkwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB4MUbSPJhwSFjX7nv2yeO51GBj9MB8GA1UdIwQY MBaAFHZ8F2b7vc/2i7w0o8a+aaDIoDq5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG53WFp2dTl6X2FMdkRTanhyNXBvTWlnT3JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS84ODQzNTYtN2UyYS00YzJhLThmZjQt MzU2OGUxZDI5ZDRhLzEvSGd4UnRJOG1IQklXTmZ1ZV9iSjQ3blVZR1AwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS84ODQzNTYtN2UyYS00YzJhLThmZjQtMzU2OGUxZDI5ZDRh LzEvZG53WFp2dTl6X2FMdkRTanhyNXBvTWlnT3JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuY8oMA0G CSqGSIb3DQEBCwUAA4IBAQAlp6Jp412SHne/xmr3fPuGa28TCV4hoZv1JainuqUS NiGkm4S9ztiYcvrV76NnkZtEChXUVBtK7/QfLh54ioFQb1ZPewfUfKeDbQQUNHsO ceVfvmJzdl/pA/VLnvUPnwKIb6ENAvfELmKaEk+6v+RSPemAWldzWHB/alad9JtH fpXe7WC/hC4oMK7LGWr53g6cPdZ4O0KPcIAc3UtA/l/CS7HkBdsc/PRjbfXuu/6e GeayqaTgTsBGkXJKe9EkZfKQHNPZn4CQj/yZ8SoLye3OpXnnk2yUFY2cNEXPUpCE CLS7+ZMYJC99pRaDSpDAZQwFtHiSFOD8QYEovpDJQ2Yd -----END CERTIFICATE-----Generated at Sun Jan 25 23:03:47 2026 by rpki-client