This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/HgbYfqgWEgBTtHpfnCWuHLmWfdc.roa File: HgbYfqgWEgBTtHpfnCWuHLmWfdc.roa (raw, json) Hash identifier: HMoC4HbqEHwkb4dO3/C2FUOmIHSy3Jpy2ww8Kfj1GLQ= Subject key identifier: 1E:06:D8:7E:A8:16:12:00:53:B4:7A:5F:9C:25:AE:1C:B9:96:7D:D7 Certificate issuer: /CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1 Certificate serial: 019B797EA559C8589F5FD706400BAB00750D Authority key identifier: 0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/HgbYfqgWEgBTtHpfnCWuHLmWfdc.roa Signing time: Thu 01 Jan 2026 12:18:21 +0000 ROA not before: Thu 01 Jan 2026 12:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211846 IP address blocks: 159.151.255.0/24 maxlen: 24 192.109.142.0/24 maxlen: 24 2a07:8147:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.crl rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:a5:59:c8:58:9f:5f:d7:06:40:0b:ab:00:75:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1 Validity Not Before: Jan 1 12:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1e06d87ea816120053b47a5f9c25ae1cb9967dd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:11:aa:c6:89:e6:47:7b:27:a8:d7:3d:e9:85: 2c:46:c5:d5:13:f0:0f:38:ac:44:af:51:39:3a:12: c7:ea:b1:31:e7:98:15:39:77:48:69:8c:ab:ee:bc: 61:ca:4a:f4:d0:77:ed:de:1d:47:d9:10:0e:80:bb: 1a:43:f5:8c:81:43:9e:61:9e:f1:38:54:4b:4f:9b: 5b:14:17:67:10:26:de:68:5b:23:8f:69:7a:e4:e1: 22:a3:da:96:28:2a:e4:10:7b:d8:27:68:83:e6:11: 3a:8e:fa:1e:ed:3e:c1:e9:c2:91:6a:08:6d:cc:c2: 2a:b1:c5:fc:8d:0b:20:36:12:fd:94:94:81:84:30: 58:fd:89:39:c8:32:2c:00:7d:c4:75:33:32:f4:1e: 35:c5:57:2a:05:ad:32:af:98:d7:31:20:e4:c6:28: b1:b6:72:5f:4d:f2:e7:ca:71:81:a4:c3:6b:b9:23: 08:8a:07:07:86:e1:52:a5:9a:c9:88:66:c1:70:d6: 0d:1a:0e:5c:00:77:d4:d6:f5:de:84:68:2e:98:de: 10:80:55:45:0a:16:18:b4:78:13:a8:af:71:22:1a: 49:9b:34:01:7e:03:ed:65:47:e7:5e:f3:c1:77:80: 0c:04:b5:24:38:1a:81:e7:b0:cc:08:64:6b:6b:39: f2:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:06:D8:7E:A8:16:12:00:53:B4:7A:5F:9C:25:AE:1C:B9:96:7D:D7 X509v3 Authority Key Identifier: keyid:0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/HgbYfqgWEgBTtHpfnCWuHLmWfdc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.151.255.0/24 192.109.142.0/24 IPv6: 2a07:8147:ffff::/48 Signature Algorithm: sha256WithRSAEncryption 10:0b:5f:02:22:ae:47:de:8c:15:46:f0:ac:89:e8:58:fb:3c: 5e:14:f6:ab:60:10:58:94:27:ce:90:09:41:5d:2c:d0:67:d8: 8c:29:85:49:da:67:15:ac:41:b3:cc:c6:07:27:bb:07:41:85: 33:8f:15:0a:e4:92:2b:6e:d1:e3:c4:fd:e5:ef:4b:63:f8:81: 5f:e5:99:9d:ad:15:8e:19:75:a3:67:94:2a:43:02:14:16:24: ce:35:62:29:19:89:ff:ba:28:21:15:25:0b:6f:cf:47:ba:6a: 0b:78:d3:5e:1d:5a:0b:35:f9:f7:1b:fc:d7:35:cb:34:4f:10: 10:f7:7c:49:0f:4a:a6:c9:b7:4c:4b:b2:b2:ab:fc:64:11:2a: e0:fc:9e:de:5b:d6:22:21:5c:6f:1b:69:78:45:bd:a2:37:3d: c6:a6:2e:68:4c:2b:49:72:96:d0:54:42:dd:ac:0f:ec:5c:ca: ee:03:6d:20:59:55:5b:a9:65:08:58:17:62:7e:d6:65:2c:cd: c2:6d:02:e2:a6:d1:64:74:eb:6a:c8:a6:f0:1d:2a:c4:61:03: e9:a8:76:67:64:f4:a0:cc:51:32:14:b6:ba:eb:d2:8e:97:ec: 93:51:e8:18:dc:9f:f5:c3:ae:54:3b:c8:73:65:84:90:11:7f: 5e:48:70:1c -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt5fqVZyFifX9cGQAurAHUNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMzdkODA3ZDRmN2NkZDNlMGFmZTRhYmM4ZWU1YTg4MGM2 MDkwZjEwHhcNMjYwMTAxMTIxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZTA2ZDg3ZWE4MTYxMjAwNTNiNDdhNWY5YzI1YWUxY2I5OTY3ZGQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBGqxonmR3snqNc96YUsRsXVE/AP OKxEr1E5OhLH6rEx55gVOXdIaYyr7rxhykr00Hft3h1H2RAOgLsaQ/WMgUOeYZ7x OFRLT5tbFBdnECbeaFsjj2l65OEio9qWKCrkEHvYJ2iD5hE6jvoe7T7B6cKRaght zMIqscX8jQsgNhL9lJSBhDBY/Yk5yDIsAH3EdTMy9B41xVcqBa0yr5jXMSDkxiix tnJfTfLnynGBpMNruSMIigcHhuFSpZrJiGbBcNYNGg5cAHfU1vXehGgumN4QgFVF ChYYtHgTqK9xIhpJmzQBfgPtZUfnXvPBd4AMBLUkOBqB57DMCGRrazny7wIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFB4G2H6oFhIAU7R6X5wlrhy5ln3XMB8GA1UdIwQY MBaAFAo32AfU983T4K/kq8juWogMYJDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2pmWUI5VDN6ZFBnci1TcnlPNWFpQXhna1BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9iYzI2OGQtNjFmMC00NzFmLWFhYjkt ODAwZWRhMmNmYjM2LzEvSGdiWWZxZ1dFZ0JUdEhwZm5DV3VITG1XZmRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9iYzI2OGQtNjFmMC00NzFmLWFhYjktODAwZWRhMmNmYjM2 LzEvQ2pmWUI5VDN6ZFBnci1TcnlPNWFpQXhna1BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAn5f/AwQA wG2OMA8EAgACMAkDBwAqB4FH//8wDQYJKoZIhvcNAQELBQADggEBABALXwIirkfe jBVG8KyJ6Fj7PF4U9qtgEFiUJ86QCUFdLNBn2IwphUnaZxWsQbPMxgcnuwdBhTOP FQrkkitu0ePE/eXvS2P4gV/lmZ2tFY4ZdaNnlCpDAhQWJM41YikZif+6KCEVJQtv z0e6agt4014dWgs1+fcb/Nc1yzRPEBD3fEkPSqbJt0xLsrKr/GQRKuD8nt5b1iIh XG8baXhFvaI3PcamLmhMK0lyltBUQt2sD+xcyu4DbSBZVVupZQhYF2J+1mUszcJt AuKm0WR062rIpvAdKsRhA+modmdk9KDMUTIUtrrr0o6X7JNR6Bjcn/XDrlQ7yHNl hJARf15IcBw= -----END CERTIFICATE-----Generated at Sun Jan 25 23:32:33 2026 by rpki-client