This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/HMrz0ooKEJFXKSO4vlLH3tqjuoY.roa File: HMrz0ooKEJFXKSO4vlLH3tqjuoY.roa (raw, json) Hash identifier: Q44eqltej8ZT7IIY9L9uJnTiWZ7q0wvG++yznZV8P2Y= Subject key identifier: 1C:CA:F3:D2:8A:0A:10:91:57:29:23:B8:BE:52:C7:DE:DA:A3:BA:86 Certificate issuer: /CN=71d83fd8dabfe14b174cccd35b35b80713334ba5 Certificate serial: 019B7F1580EEBE1D2BBB0BE3BCBA4074402D Authority key identifier: 71:D8:3F:D8:DA:BF:E1:4B:17:4C:CC:D3:5B:35:B8:07:13:33:4B:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/HMrz0ooKEJFXKSO4vlLH3tqjuoY.roa Signing time: Fri 02 Jan 2026 14:21:14 +0000 ROA not before: Fri 02 Jan 2026 14:21:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47164 IP address blocks: 78.41.59.0/24 maxlen: 24 103.152.1.0/24 maxlen: 24 2a14:4580::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.crl rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft rsync://rpki.ripe.net/repository/DEFAULT/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:80:ee:be:1d:2b:bb:0b:e3:bc:ba:40:74:40:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71d83fd8dabfe14b174cccd35b35b80713334ba5 Validity Not Before: Jan 2 14:21:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1ccaf3d28a0a1091572923b8be52c7dedaa3ba86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d9:a1:27:71:ff:98:7b:29:0d:02:d2:29:d3: 36:be:2a:89:08:30:37:39:45:40:3f:84:66:54:95: 75:d2:57:bf:bf:2e:93:5c:8d:57:3b:f0:b6:9a:8a: 59:6d:c4:0a:7c:d3:33:03:6d:1f:3e:9d:d3:30:fd: d8:eb:ad:21:ee:2f:bb:cf:f5:22:e4:14:42:57:aa: c7:29:52:6a:40:77:d6:1b:b3:e0:83:85:e5:31:f4: ca:74:f8:2d:b5:e6:f5:57:07:24:15:cf:e0:c5:86: b6:61:24:30:5c:89:c8:15:4b:ee:77:42:ed:c6:23: 5e:1b:ba:a3:82:76:02:ab:d8:2f:7b:43:fb:bb:9b: e6:3e:19:2a:8b:36:36:e2:e5:5f:e3:f9:9f:98:67: e0:3a:92:94:97:51:86:49:98:cc:91:7b:ce:4b:79: d9:16:e1:03:89:ae:45:7e:29:bf:01:a4:2c:48:65: 54:f1:1d:5d:12:a4:e0:a8:6d:38:3f:5c:f8:b3:c1: 08:74:e9:44:6a:e4:65:66:11:55:e1:15:9b:56:2c: c5:54:94:a7:bb:1d:ab:46:a6:8b:b8:96:48:2a:4e: 21:91:fe:d3:c2:1b:e3:22:21:39:14:89:10:fa:75: 95:f4:47:4f:51:51:3f:0f:db:07:b3:e3:3c:0c:11: ac:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:CA:F3:D2:8A:0A:10:91:57:29:23:B8:BE:52:C7:DE:DA:A3:BA:86 X509v3 Authority Key Identifier: keyid:71:D8:3F:D8:DA:BF:E1:4B:17:4C:CC:D3:5B:35:B8:07:13:33:4B:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/HMrz0ooKEJFXKSO4vlLH3tqjuoY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.41.59.0/24 103.152.1.0/24 IPv6: 2a14:4580::/29 Signature Algorithm: sha256WithRSAEncryption 90:9b:f7:bf:92:e5:78:59:67:01:23:4e:59:76:8a:0d:14:b2: 4d:c8:5e:1c:c3:a9:02:67:31:c9:ba:98:53:8a:18:1c:2a:ff: 1a:c8:75:95:30:d7:0a:7f:de:e3:b9:fd:34:7f:bd:bb:8d:19: 94:03:c6:fe:b6:7b:31:c1:aa:c5:ac:14:d4:47:ab:9b:06:b9: f1:93:5f:a8:ac:35:03:7b:28:76:d5:9d:65:19:ec:b0:00:01: 35:54:1b:5a:13:55:95:d5:16:3d:c2:39:ec:42:aa:4b:94:78: c9:44:17:68:45:8d:05:7a:42:80:fb:f5:14:dd:98:70:55:b0: 56:c9:0b:53:5c:08:89:02:5e:ae:35:8b:e9:cb:5d:11:99:3d: 29:25:bb:3c:a9:e7:1c:59:0d:2f:64:61:9b:0f:88:55:a0:6b: 39:9a:cb:c7:d7:47:c3:68:95:e0:89:7b:f8:97:77:da:81:0b: f3:d2:00:ef:7f:25:82:6a:69:2a:14:cc:21:c3:91:11:46:0a: 06:9b:81:1d:3c:09:0e:29:43:70:90:24:bb:65:ba:42:59:3e: 21:5a:4e:28:90:1c:17:6a:99:17:6a:6a:b1:26:63:14:7e:7f: b9:99:75:f2:2c:63:61:1c:c2:d5:6c:cb:27:61:a4:a4:31:b0: 6e:c5:f5:7e -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt/FYDuvh0ruwvjvLpAdEAtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxZDgzZmQ4ZGFiZmUxNGIxNzRjY2NkMzViMzViODA3MTMz MzRiYTUwHhcNMjYwMTAyMTQyMTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxY2NhZjNkMjhhMGExMDkxNTcyOTIzYjhiZTUyYzdkZWRhYTNiYTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9mhJ3H/mHspDQLSKdM2viqJCDA3 OUVAP4RmVJV10le/vy6TXI1XO/C2mopZbcQKfNMzA20fPp3TMP3Y660h7i+7z/Ui 5BRCV6rHKVJqQHfWG7Pgg4XlMfTKdPgtteb1VwckFc/gxYa2YSQwXInIFUvud0Lt xiNeG7qjgnYCq9gve0P7u5vmPhkqizY24uVf4/mfmGfgOpKUl1GGSZjMkXvOS3nZ FuEDia5Ffim/AaQsSGVU8R1dEqTgqG04P1z4s8EIdOlEauRlZhFV4RWbVizFVJSn ux2rRqaLuJZIKk4hkf7TwhvjIiE5FIkQ+nWV9EdPUVE/D9sHs+M8DBGs7wIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFBzK89KKChCRVykjuL5Sx97ao7qGMB8GA1UdIwQY MBaAFHHYP9jav+FLF0zM01s1uAcTM0ulMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2RnXzJOcV80VXNYVE16VFd6VzRCeE16UzZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny82ZDdlY2YtNGI2Mi00MzY3LTliNTAt MDY0ZDdhZGY0YmUzLzEvSE1yejBvb0tFSkZYS1NPNHZsTEgzdHFqdW9ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny82ZDdlY2YtNGI2Mi00MzY3LTliNTAtMDY0ZDdhZGY0YmUz LzEvY2RnXzJOcV80VXNYVE16VFd6VzRCeE16UzZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQATik7AwQA Z5gBMA0EAgACMAcDBQMqFEWAMA0GCSqGSIb3DQEBCwUAA4IBAQCQm/e/kuV4WWcB I05ZdooNFLJNyF4cw6kCZzHJuphTihgcKv8ayHWVMNcKf97juf00f727jRmUA8b+ tnsxwarFrBTUR6ubBrnxk1+orDUDeyh21Z1lGeywAAE1VBtaE1WV1RY9wjnsQqpL lHjJRBdoRY0FekKA+/UU3ZhwVbBWyQtTXAiJAl6uNYvpy10RmT0pJbs8qeccWQ0v ZGGbD4hVoGs5msvH10fDaJXgiXv4l3fagQvz0gDvfyWCamkqFMwhw5ERRgoGm4Ed PAkOKUNwkCS7ZbpCWT4hWk4okBwXapkXamqxJmMUfn+5mXXyLGNhHMLVbMsnYaSk MbBuxfV+ -----END CERTIFICATE-----Generated at Sun Jan 25 21:58:35 2026 by rpki-client