This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Hkf4IBeefJ3WFnWb30XehmD25OE.roa File: Hkf4IBeefJ3WFnWb30XehmD25OE.roa (raw, json) Hash identifier: Oj0P39X473wo+hnI1hHeiB3vRQJ2JcjLEPzDv0T0r/c= Subject key identifier: 1E:47:F8:20:17:9E:7C:9D:D6:16:75:9B:DF:45:DE:86:60:F6:E4:E1 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5AE634AF05790AAEEEB70283C13A7E Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Hkf4IBeefJ3WFnWb30XehmD25OE.roa Signing time: Thu 01 Jan 2026 16:18:56 +0000 ROA not before: Thu 01 Jan 2026 16:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216183 IP address blocks: 109.176.245.0/24 maxlen: 24 213.218.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:e6:34:af:05:79:0a:ae:ee:b7:02:83:c1:3a:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1e47f820179e7c9dd616759bdf45de8660f6e4e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3b:91:e9:2d:cb:85:72:99:6f:57:65:4c:a7: 76:e9:13:32:c0:36:bd:0e:aa:8b:84:a8:2f:c4:ff: ea:88:43:f2:3e:76:28:b6:88:07:2d:d2:d4:c4:5f: 07:42:85:e4:0e:41:10:83:64:f5:b2:06:1d:d7:f0: 0a:ad:e2:9d:f6:89:65:25:7c:a3:91:2d:43:eb:ca: 36:f3:2a:3f:5d:47:90:29:88:8d:df:34:f8:63:a5: 39:73:c4:dc:c5:10:c5:48:6f:59:0f:31:d3:55:0f: d7:4f:4a:b7:a3:37:dd:17:74:bf:a8:ce:2b:c9:bc: 46:cc:e7:af:4a:11:ea:54:09:06:59:8c:e1:59:8c: 16:58:e7:e5:b4:99:d0:f6:e1:2d:5b:0a:1c:13:97: 39:4f:0f:de:a3:90:f3:f0:57:20:32:60:eb:59:0c: 1b:72:d3:79:8b:87:d9:97:45:e3:ca:ba:15:88:97: 10:eb:ba:46:9e:1c:bd:99:ca:22:2e:32:9f:c8:08: 3e:f9:c8:a6:ea:3f:7b:c7:55:41:9e:b7:b9:7d:ca: 25:d2:29:e7:a5:49:91:3e:be:a4:f0:33:f4:10:35: 70:64:82:c2:7e:7e:d7:46:5b:03:3b:47:78:75:d2: 63:c3:47:e6:f5:1d:66:e6:c0:0a:67:83:f5:59:03: 1b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:47:F8:20:17:9E:7C:9D:D6:16:75:9B:DF:45:DE:86:60:F6:E4:E1 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Hkf4IBeefJ3WFnWb30XehmD25OE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.176.245.0/24 213.218.250.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:ef:44:1f:ca:aa:3c:6d:71:ff:0a:11:95:ee:13:6c:e3:3c: 14:d9:a1:fa:9f:20:68:5f:6a:74:ed:c1:18:eb:07:71:b3:ee: 94:42:df:a1:d8:ba:84:2e:f4:b2:47:7c:bf:d8:be:b0:fd:40: 70:39:a0:08:ba:aa:84:dd:47:ec:13:9c:8c:67:5f:04:6d:17: 82:2b:22:28:3d:65:8e:2c:70:c6:cf:61:7c:2f:5b:21:e1:2d: d9:85:07:07:24:a7:99:de:7a:a3:4d:db:a1:21:94:e0:9d:d2: a1:46:88:21:87:65:5d:1b:a1:7c:5f:fe:69:7c:fe:e2:e5:32: af:af:21:6d:24:06:41:b2:37:ee:80:bb:6f:ec:7b:64:a6:d2: a6:9f:76:73:fc:87:3c:d0:4b:42:5b:8a:14:38:b9:1f:45:30: ff:93:46:2d:4a:02:53:d7:e5:28:51:1a:05:f7:65:f3:34:9e: 00:55:fe:0b:bd:ec:76:51:83:67:c2:a9:23:11:04:f6:ff:76: 33:7f:df:1e:6e:ab:49:cb:bf:68:7d:99:c2:1e:60:05:9f:cb: 1d:ae:8a:cb:43:fb:9c:d3:99:61:e4:5a:7d:0b:4b:84:f2:a0: ea:f9:71:b4:46:fe:ac:de:e1:29:b2:e6:02:c7:1d:b8:72:ed: e9:4b:04:f6 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6WuY0rwV5Cq7utwKDwTp+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZTQ3ZjgyMDE3OWU3YzlkZDYxNjc1OWJkZjQ1ZGU4NjYwZjZlNGUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDuR6S3LhXKZb1dlTKd26RMywDa9 DqqLhKgvxP/qiEPyPnYotogHLdLUxF8HQoXkDkEQg2T1sgYd1/AKreKd9ollJXyj kS1D68o28yo/XUeQKYiN3zT4Y6U5c8TcxRDFSG9ZDzHTVQ/XT0q3ozfdF3S/qM4r ybxGzOevShHqVAkGWYzhWYwWWOfltJnQ9uEtWwocE5c5Tw/eo5Dz8FcgMmDrWQwb ctN5i4fZl0XjyroViJcQ67pGnhy9mcoiLjKfyAg++cim6j97x1VBnre5fcol0inn pUmRPr6k8DP0EDVwZILCfn7XRlsDO0d4ddJjw0fm9R1m5sAKZ4P1WQMbxQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFB5H+CAXnnyd1hZ1m99F3oZg9uThMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvSGtmNElCZWVmSjNXRm5XYjMwWGVobUQyNU9FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAbbD1AwQA 1dr6MA0GCSqGSIb3DQEBCwUAA4IBAQB/70Qfyqo8bXH/ChGV7hNs4zwU2aH6nyBo X2p07cEY6wdxs+6UQt+h2LqELvSyR3y/2L6w/UBwOaAIuqqE3UfsE5yMZ18EbReC KyIoPWWOLHDGz2F8L1sh4S3ZhQcHJKeZ3nqjTduhIZTgndKhRoghh2VdG6F8X/5p fP7i5TKvryFtJAZBsjfugLtv7HtkptKmn3Zz/Ic80EtCW4oUOLkfRTD/k0YtSgJT 1+UoURoF92XzNJ4AVf4Lvex2UYNnwqkjEQT2/3Yzf98ebqtJy79ofZnCHmAFn8sd rorLQ/uc05lh5Fp9C0uE8qDq+XG0Rv6s3uEpsuYCxx24cu3pSwT2 -----END CERTIFICATE-----Generated at Sun Jan 25 08:47:31 2026 by rpki-client