This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/hKf_RdYBNL00n5n-6RG-3ope_pY.roa File: hKf_RdYBNL00n5n-6RG-3ope_pY.roa (raw, json) Hash identifier: i1hoGLnlnqGNDkEnX87y4lBEOlUW/mrfMdJ23VxMPJA= Subject key identifier: 84:A7:FF:45:D6:01:34:BD:34:9F:99:FE:E9:11:BE:DE:8A:5E:FE:96 Certificate issuer: /CN=c557c15bdeece7b0a1b477e1e0ee8bff53fafe0c Certificate serial: 019B77C76B002C2B40F6178C0038B065C193 Authority key identifier: C5:57:C1:5B:DE:EC:E7:B0:A1:B4:77:E1:E0:EE:8B:FF:53:FA:FE:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVfBW97s57ChtHfh4O6L_1P6_gw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/hKf_RdYBNL00n5n-6RG-3ope_pY.roa Signing time: Thu 01 Jan 2026 04:18:36 +0000 ROA not before: Thu 01 Jan 2026 04:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213576 IP address blocks: 91.213.28.0/24 maxlen: 24 2001:678:104c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft rsync://rpki.ripe.net/repository/DEFAULT/xVfBW97s57ChtHfh4O6L_1P6_gw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:6b:00:2c:2b:40:f6:17:8c:00:38:b0:65:c1:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c557c15bdeece7b0a1b477e1e0ee8bff53fafe0c Validity Not Before: Jan 1 04:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=84a7ff45d60134bd349f99fee911bede8a5efe96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:64:c7:0f:f8:bb:66:08:3e:40:ee:84:3a:13: a9:bd:72:a7:4c:0d:1f:92:d4:cf:c6:a2:e8:d2:1b: c3:4b:9d:38:5f:ef:29:0a:07:69:8e:ca:d5:6e:d9: 04:33:cb:63:a3:00:ca:c6:8a:e3:ac:93:e9:20:20: ef:d1:4e:f4:07:c4:97:46:b8:a5:2e:e2:5d:94:e7: b6:ce:96:83:7f:2e:f9:4a:b7:22:79:c5:d1:6c:25: 9b:b2:a0:53:a2:19:e7:a5:ad:46:b6:92:6e:cc:c7: 50:04:ef:da:9f:81:5c:75:cc:ce:36:12:0c:21:3c: 4a:d7:94:e2:e2:57:70:78:cb:17:79:10:05:aa:87: 0d:df:ba:19:fb:fd:45:78:bd:e7:f7:06:33:89:6e: 2c:c9:b4:44:20:a6:ff:a8:b1:02:c8:11:c5:21:7f: 30:42:89:54:05:5d:82:1d:b1:39:5f:65:8f:4f:3a: 7b:7f:72:29:f7:d8:05:03:54:ed:a9:8b:09:88:00: 54:2e:d1:6d:82:63:b7:52:8d:bc:11:b3:82:9d:5f: ea:c6:a3:60:d3:59:f1:7c:c3:70:76:74:09:e3:12: 9c:76:a3:90:a9:84:44:52:35:b2:d6:ef:48:0b:f3: 25:88:f3:fa:c6:c2:4b:7d:5d:45:ab:62:99:ea:44: e3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:A7:FF:45:D6:01:34:BD:34:9F:99:FE:E9:11:BE:DE:8A:5E:FE:96 X509v3 Authority Key Identifier: keyid:C5:57:C1:5B:DE:EC:E7:B0:A1:B4:77:E1:E0:EE:8B:FF:53:FA:FE:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVfBW97s57ChtHfh4O6L_1P6_gw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/hKf_RdYBNL00n5n-6RG-3ope_pY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.213.28.0/24 IPv6: 2001:678:104c::/48 Signature Algorithm: sha256WithRSAEncryption 66:ea:6d:c6:89:a1:79:59:fc:1e:89:0f:ad:68:0d:c6:47:55: ff:c9:9c:1a:ea:6f:12:a8:48:a9:fa:08:04:6b:f0:c3:57:be: fb:62:d0:06:f3:0c:8c:5c:a7:c2:a4:91:62:b8:b3:18:8c:cd: a5:0c:ec:10:5c:6d:19:d7:76:82:ed:5a:e1:1c:77:1e:07:e5: 3d:3d:2b:11:91:3d:a1:fc:b2:38:44:de:be:92:68:85:97:35: bf:3d:93:b5:cb:44:a4:2c:ed:48:74:ca:18:1c:20:b8:49:a5: 61:a6:c7:27:80:4d:8f:e4:af:04:45:5f:ab:ca:69:87:79:ec: a3:28:e4:aa:df:37:d9:ab:75:94:5f:a7:be:38:1c:8c:6a:d9: c1:45:32:98:b4:df:1f:58:31:9b:01:99:28:42:6d:04:b6:e2: dd:e2:01:c5:dd:01:b7:d5:0c:bc:15:8a:9b:1c:a6:c4:e5:c2: f6:26:9d:52:0d:d2:20:6e:94:8e:6c:a7:16:41:2f:71:5f:06: 06:a5:b3:a7:44:e6:89:a7:e9:c5:3c:86:a7:25:a2:53:ba:14: 18:3f:2c:7e:b9:5d:22:c6:5f:5d:d2:e9:3b:c3:b2:68:11:78: 05:c7:ef:22:4a:f8:fa:a8:50:74:9d:53:a2:28:c1:2f:91:84: 0f:fa:e1:0d -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt3x2sALCtA9heMADiwZcGTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1NTdjMTViZGVlY2U3YjBhMWI0NzdlMWUwZWU4YmZmNTNm YWZlMGMwHhcNMjYwMTAxMDQxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NGE3ZmY0NWQ2MDEzNGJkMzQ5Zjk5ZmVlOTExYmVkZThhNWVmZTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2THD/i7Zgg+QO6EOhOpvXKnTA0f ktTPxqLo0hvDS504X+8pCgdpjsrVbtkEM8tjowDKxorjrJPpICDv0U70B8SXRril LuJdlOe2zpaDfy75SrciecXRbCWbsqBTohnnpa1GtpJuzMdQBO/an4FcdczONhIM ITxK15Ti4ldweMsXeRAFqocN37oZ+/1FeL3n9wYziW4sybREIKb/qLECyBHFIX8w QolUBV2CHbE5X2WPTzp7f3Ip99gFA1TtqYsJiABULtFtgmO3Uo28EbOCnV/qxqNg 01nxfMNwdnQJ4xKcdqOQqYREUjWy1u9IC/MliPP6xsJLfV1Fq2KZ6kTj2QIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFISn/0XWATS9NJ+Z/ukRvt6KXv6WMB8GA1UdIwQY MBaAFMVXwVve7OewobR34eDui/9T+v4MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFZmQlc5N3M1N0NodEhmaDRPNkxfMVA2X2d3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8zMmE4ZGQtMzliMy00NzkxLWE1ZTQt ZGJkYmUxOTNjOTc0LzEvaEtmX1JkWUJOTDAwbjVuLTZSRy0zb3BlX3BZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS8zMmE4ZGQtMzliMy00NzkxLWE1ZTQtZGJkYmUxOTNjOTc0 LzEveFZmQlc5N3M1N0NodEhmaDRPNkxfMVA2X2d3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAW9UcMA8E AgACMAkDBwAgAQZ4EEwwDQYJKoZIhvcNAQELBQADggEBAGbqbcaJoXlZ/B6JD61o DcZHVf/JnBrqbxKoSKn6CARr8MNXvvti0AbzDIxcp8KkkWK4sxiMzaUM7BBcbRnX doLtWuEcdx4H5T09KxGRPaH8sjhE3r6SaIWXNb89k7XLRKQs7Uh0yhgcILhJpWGm xyeATY/krwRFX6vKaYd57KMo5KrfN9mrdZRfp744HIxq2cFFMpi03x9YMZsBmShC bQS24t3iAcXdAbfVDLwVipscpsTlwvYmnVIN0iBulI5spxZBL3FfBgals6dE5omn 6cU8hqclolO6FBg/LH65XSLGX13S6TvDsmgReAXH7yJK+PqoUHSdU6IowS+RhA/6 4Q0= -----END CERTIFICATE-----Generated at Sun Jan 25 11:41:52 2026 by rpki-client