This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/b4HgcSuFF78g3KojbGnfcJ_HWow.roa File: b4HgcSuFF78g3KojbGnfcJ_HWow.roa (raw, json) Hash identifier: T5A48IHIu6Siqa4yHRK+sf9a+qlYjIQQwfP6VgKo5VA= Subject key identifier: 6F:81:E0:71:2B:85:17:BF:20:DC:AA:23:6C:69:DF:70:9F:C7:5A:8C Certificate issuer: /CN=2457027e3a087b65f968b535e415f67432695876 Certificate serial: 019B7BA4C78B056F87E9ABA34B434204A60D Authority key identifier: 24:57:02:7E:3A:08:7B:65:F9:68:B5:35:E4:15:F6:74:32:69:58:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/b4HgcSuFF78g3KojbGnfcJ_HWow.roa Signing time: Thu 01 Jan 2026 22:19:15 +0000 ROA not before: Thu 01 Jan 2026 22:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20546 IP address blocks: 213.216.11.0/24 maxlen: 24 213.216.13.0/24 maxlen: 24 213.216.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:c7:8b:05:6f:87:e9:ab:a3:4b:43:42:04:a6:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2457027e3a087b65f968b535e415f67432695876 Validity Not Before: Jan 1 22:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f81e0712b8517bf20dcaa236c69df709fc75a8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d0:9b:ec:f0:c0:8f:b9:e4:36:09:ba:41:e9: f5:40:75:29:8c:91:f6:4d:00:53:15:48:b1:1f:6d: d8:d5:a4:34:39:81:8a:69:f8:2f:cf:29:76:aa:f8: e7:ce:31:bb:00:d1:5a:63:d9:ee:58:89:2c:14:53: 59:ae:86:7c:91:b8:9b:04:b5:2a:fb:59:63:20:0c: 49:86:99:35:d2:24:d8:d5:a8:3d:b4:13:88:8e:1a: 98:d7:52:f5:20:22:62:0e:a6:16:8c:ed:ce:c2:42: 86:64:f7:04:d0:ec:8b:80:ee:df:84:21:e5:94:c5: f1:c9:3a:59:07:b6:bf:9e:84:88:32:98:8c:81:18: 90:4e:8a:06:25:a7:37:6b:a3:8a:ec:5c:d6:8a:a9: cd:e9:17:f8:87:aa:e3:58:30:36:6f:47:e2:de:6e: be:00:c6:d8:04:35:d6:aa:6d:fd:e4:7f:67:51:b0: 0f:fd:86:27:e9:44:79:ce:30:7b:64:41:d7:7a:b1: 36:6d:0d:81:e4:4d:c8:35:4e:09:73:65:41:31:3d: 9f:23:c7:46:ba:7b:81:29:69:f0:43:92:2b:47:04: 3a:82:8d:ba:af:9f:7c:16:f6:99:9e:fd:65:45:e2: 79:27:72:e5:b4:c5:e2:b2:4c:f8:63:eb:83:69:60: 07:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:81:E0:71:2B:85:17:BF:20:DC:AA:23:6C:69:DF:70:9F:C7:5A:8C X509v3 Authority Key Identifier: keyid:24:57:02:7E:3A:08:7B:65:F9:68:B5:35:E4:15:F6:74:32:69:58:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/b4HgcSuFF78g3KojbGnfcJ_HWow.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.216.11.0/24 213.216.13.0/24 213.216.17.0/24 Signature Algorithm: sha256WithRSAEncryption 55:53:12:e4:ee:6b:6d:f0:27:90:1e:7f:b5:a6:07:9b:56:4e: f2:16:2c:a4:1d:68:9b:4d:06:b9:3a:78:6b:74:aa:e2:16:c0: 2b:f1:6c:a2:98:ac:1f:b4:d0:c1:25:6a:5d:dd:4c:bd:c0:87: a2:91:6f:31:f0:31:e3:f6:6c:49:ce:72:b3:d0:62:36:44:c7: 9f:50:06:6f:c3:29:40:a2:f0:b3:4d:10:a9:9f:0e:f2:62:6e: 47:fa:62:a9:03:3e:92:c2:c2:18:9b:7e:ea:ac:3b:ea:19:44: 96:61:b9:5d:02:31:17:22:d1:e1:fe:bf:c7:56:ee:24:d0:79: d7:22:8d:f7:5b:24:4c:35:28:71:46:f5:35:53:c2:b2:9b:46: 08:0e:fc:d4:c8:8d:b1:28:90:70:8e:ca:50:6b:b6:25:1d:5c: be:58:f3:73:85:33:5a:e6:1f:e4:ab:50:a2:c6:e8:68:97:84: 2a:b7:a6:ad:ad:56:d0:ad:d3:eb:a4:85:ba:6a:bd:8f:49:5a: 24:f7:7c:5c:87:72:ff:1d:9e:0b:1b:7e:45:b7:82:ed:a1:06: dd:0c:75:35:79:71:f1:95:b5:f1:ad:da:82:8e:6d:6d:34:9b: 32:ec:46:f8:18:6a:20:f0:56:f5:3d:6b:07:f7:4d:a4:14:17: d1:1d:35:63 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7pMeLBW+H6aujS0NCBKYNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0NTcwMjdlM2EwODdiNjVmOTY4YjUzNWU0MTVmNjc0MzI2 OTU4NzYwHhcNMjYwMTAxMjIxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjgxZTA3MTJiODUxN2JmMjBkY2FhMjM2YzY5ZGY3MDlmYzc1YThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtCb7PDAj7nkNgm6Qen1QHUpjJH2 TQBTFUixH23Y1aQ0OYGKafgvzyl2qvjnzjG7ANFaY9nuWIksFFNZroZ8kbibBLUq +1ljIAxJhpk10iTY1ag9tBOIjhqY11L1ICJiDqYWjO3OwkKGZPcE0OyLgO7fhCHl lMXxyTpZB7a/noSIMpiMgRiQTooGJac3a6OK7FzWiqnN6Rf4h6rjWDA2b0fi3m6+ AMbYBDXWqm395H9nUbAP/YYn6UR5zjB7ZEHXerE2bQ2B5E3INU4Jc2VBMT2fI8dG unuBKWnwQ5IrRwQ6go26r598FvaZnv1lReJ5J3LltMXiskz4Y+uDaWAHIwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFG+B4HErhRe/INyqI2xp33Cfx1qMMB8GA1UdIwQY MBaAFCRXAn46CHtl+Wi1NeQV9nQyaVh2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkZjQ2Zqb0llMlg1YUxVMTVCWDJkREpwV0hZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy85NWYzMjAtYzdkMy00MWRkLWIxMjUt Yjc5ZDA4ZmExNzQ3LzEvYjRIZ2NTdUZGNzhnM0tvamJHbmZjSl9IV293LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy85NWYzMjAtYzdkMy00MWRkLWIxMjUtYjc5ZDA4ZmExNzQ3 LzEvSkZjQ2Zqb0llMlg1YUxVMTVCWDJkREpwV0hZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQA1dgLAwQA 1dgNAwQA1dgRMA0GCSqGSIb3DQEBCwUAA4IBAQBVUxLk7mtt8CeQHn+1pgebVk7y FiykHWibTQa5OnhrdKriFsAr8WyimKwftNDBJWpd3Uy9wIeikW8x8DHj9mxJznKz 0GI2RMefUAZvwylAovCzTRCpnw7yYm5H+mKpAz6SwsIYm37qrDvqGUSWYbldAjEX ItHh/r/HVu4k0HnXIo33WyRMNShxRvU1U8Kym0YIDvzUyI2xKJBwjspQa7YlHVy+ WPNzhTNa5h/kq1Cixuhol4Qqt6atrVbQrdPrpIW6ar2PSVok93xch3L/HZ4LG35F t4LtoQbdDHU1eXHxlbXxrdqCjm1tNJsy7Eb4GGog8Fb1PWsH902kFBfRHTVj -----END CERTIFICATE-----Generated at Sun Jan 25 17:45:22 2026 by rpki-client