This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/Hhg2o2GVX0gA-YzFOIiXn-kbVdU.roa File: Hhg2o2GVX0gA-YzFOIiXn-kbVdU.roa (raw, json) Hash identifier: f3O43dRoTvsqvqAJ2oSJqSH8kS/z2CiiKFA5+7PRbFg= Subject key identifier: 1E:18:36:A3:61:95:5F:48:00:F9:8C:C5:38:88:97:9F:E9:1B:55:D5 Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b Certificate serial: 019B7CED7F6B819992617A50C641299A58A1 Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/Hhg2o2GVX0gA-YzFOIiXn-kbVdU.roa Signing time: Fri 02 Jan 2026 04:18:18 +0000 ROA not before: Fri 02 Jan 2026 04:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39013 IP address blocks: 77.78.157.0/24 maxlen: 24 77.78.158.0/24 maxlen: 24 85.187.184.0/23 maxlen: 23 85.187.184.0/24 maxlen: 24 85.187.185.0/24 maxlen: 24 85.187.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:7f:6b:81:99:92:61:7a:50:c6:41:29:9a:58:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b Validity Not Before: Jan 2 04:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1e1836a361955f4800f98cc53888979fe91b55d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1f:10:71:1b:a9:d4:9c:9b:22:8b:67:b7:d4: 9d:7f:1e:ed:2a:b3:33:45:0d:ac:da:ec:ed:6a:9a: 34:e6:06:d6:81:ca:36:ca:97:53:ac:db:9e:97:07: 14:03:29:bc:d9:73:6c:b5:b4:2c:8d:b6:46:c6:f6: 7c:38:38:dc:8d:29:6c:9b:50:5d:68:8a:29:2f:e3: 5a:50:68:20:90:05:68:55:72:6e:b8:d1:64:83:b5: 21:66:40:ac:97:4e:b5:1f:66:fa:26:62:cc:46:18: 91:29:ca:99:77:a3:f7:ad:4e:fd:40:6d:a9:d5:d0: ab:ab:18:c1:99:62:73:5a:b4:5d:1e:48:16:c1:6a: 32:b9:0c:32:ca:4a:a2:a2:cd:4f:1c:5e:29:25:02: 8e:72:e7:23:fd:63:72:89:d4:51:52:fa:b6:87:18: bf:d2:9d:06:df:1c:85:db:39:b7:b6:8d:99:2d:73: 5d:f2:50:aa:c7:bd:64:99:fe:35:6a:e4:27:e1:ca: 22:29:4b:38:29:ee:ec:9a:7e:f5:7b:71:b2:50:d6: 51:ef:8b:0d:59:00:c8:2c:f3:42:9e:27:af:8f:de: c2:cd:d0:a3:34:8a:7d:0a:3a:e5:ed:40:dc:89:59: b4:59:4e:ba:9c:1e:d3:48:43:a9:e4:e2:93:34:be: 31:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:18:36:A3:61:95:5F:48:00:F9:8C:C5:38:88:97:9F:E9:1B:55:D5 X509v3 Authority Key Identifier: keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/Hhg2o2GVX0gA-YzFOIiXn-kbVdU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.78.157.0-77.78.158.255 85.187.184.0-85.187.186.255 Signature Algorithm: sha256WithRSAEncryption 2f:4f:d9:e4:36:05:d1:ec:12:06:d5:4b:9f:5b:53:a8:2b:dd: 52:02:50:04:a1:ab:27:88:1b:b4:a3:50:44:ba:da:04:ae:10: 6f:34:21:54:e2:f5:aa:cc:aa:df:c3:5c:23:0a:0b:e7:27:0d: 24:32:5e:dc:5a:b7:40:ae:dc:fa:ca:6f:ad:91:4f:6c:e9:7d: 3d:69:fd:df:90:79:93:10:3c:78:9e:80:67:63:3c:c9:1b:64: ba:fc:53:0d:11:4b:e4:63:b4:40:59:7a:2a:3f:dc:e5:5e:51: 0b:e4:63:5c:6c:5e:9f:46:2e:f5:65:cf:31:99:58:04:a9:b7: f1:60:a3:9e:73:8b:db:11:90:bf:e2:0a:26:ce:e0:be:73:61: 39:d8:25:ba:62:38:74:aa:db:5c:c2:a7:36:70:ad:69:52:3b: 92:51:bc:1d:af:6b:9b:70:dd:4d:4e:34:7e:0c:e6:b0:10:83: 79:12:fe:d3:1e:81:54:f1:a2:26:90:87:df:86:a6:f6:82:0b: 10:f7:0c:8d:c2:96:bf:3d:9e:f6:7f:1e:a9:ee:11:b7:2d:a0: a7:ba:13:87:0b:5e:73:7d:6d:b8:69:cb:3f:c7:ce:99:3c:3a: a0:c8:30:cf:b4:20:61:ce:a6:51:39:c3:18:41:fe:02:f5:79: c9:cd:a3:39 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt87X9rgZmSYXpQxkEpmlihMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlYmYzMDIwMWYxMmEwNDBkMzg2ZDJiNGVlZDQ0ODQ2MjNl NGQxMWIwHhcNMjYwMTAyMDQxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZTE4MzZhMzYxOTU1ZjQ4MDBmOThjYzUzODg4OTc5ZmU5MWI1NWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuB8QcRup1JybIotnt9Sdfx7tKrMz RQ2s2uztapo05gbWgco2ypdTrNuelwcUAym82XNstbQsjbZGxvZ8ODjcjSlsm1Bd aIopL+NaUGggkAVoVXJuuNFkg7UhZkCsl061H2b6JmLMRhiRKcqZd6P3rU79QG2p 1dCrqxjBmWJzWrRdHkgWwWoyuQwyykqios1PHF4pJQKOcucj/WNyidRRUvq2hxi/ 0p0G3xyF2zm3to2ZLXNd8lCqx71kmf41auQn4coiKUs4Ke7smn71e3GyUNZR74sN WQDILPNCnievj97CzdCjNIp9Cjrl7UDciVm0WU66nB7TSEOp5OKTNL4xYwIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFB4YNqNhlV9IAPmMxTiIl5/pG1XVMB8GA1UdIwQY MBaAFP6/MCAfEqBA04bStO7USEYj5NEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUt YTk3YzBkYzBhNzQ5LzEvSGhnMm8yR1ZYMGdBLVl6Rk9JaVhuLWtiVmRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUtYTk3YzBkYzBhNzQ5 LzEvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBABNTp0D BABNTp4wDAMEA1W7uAMEAFW7ujANBgkqhkiG9w0BAQsFAAOCAQEAL0/Z5DYF0ewS BtVLn1tTqCvdUgJQBKGrJ4gbtKNQRLraBK4QbzQhVOL1qsyq38NcIwoL5ycNJDJe 3Fq3QK7c+spvrZFPbOl9PWn935B5kxA8eJ6AZ2M8yRtkuvxTDRFL5GO0QFl6Kj/c 5V5RC+RjXGxen0Yu9WXPMZlYBKm38WCjnnOL2xGQv+IKJs7gvnNhOdglumI4dKrb XMKnNnCtaVI7klG8Ha9rm3DdTU40fgzmsBCDeRL+0x6BVPGiJpCH34am9oILEPcM jcKWvz2e9n8eqe4Rty2gp7oThwtec31tuGnLP8fOmTw6oMgwz7QgYc6mUTnDGEH+ AvV5yc2jOQ== -----END CERTIFICATE-----Generated at Mon Jan 26 05:31:41 2026 by rpki-client