This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/_HACinjTIxRkle58_-0RVGUxyaY.roa File: _HACinjTIxRkle58_-0RVGUxyaY.roa (raw, json) Hash identifier: 56U7Y5xzPXcpazN7C00qDGlRUzZsBIL1ftiv8gKYYpU= Subject key identifier: FC:70:02:8A:78:D3:23:14:64:95:EE:7C:FF:ED:11:54:65:31:C9:A6 Certificate issuer: /CN=e479af1716dc461e5bb3f876215bcb94e8808ba0 Certificate serial: 019B7F14D0E31DD3DC5441374F67973FB2CF Authority key identifier: E4:79:AF:17:16:DC:46:1E:5B:B3:F8:76:21:5B:CB:94:E8:80:8B:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5HmvFxbcRh5bs_h2IVvLlOiAi6A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/_HACinjTIxRkle58_-0RVGUxyaY.roa Signing time: Fri 02 Jan 2026 14:20:29 +0000 ROA not before: Fri 02 Jan 2026 14:20:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8218 IP address blocks: 46.255.176.0/21 maxlen: 21 83.167.32.0/19 maxlen: 19 91.194.208.0/23 maxlen: 24 94.103.128.0/20 maxlen: 20 141.255.136.0/21 maxlen: 21 158.255.96.0/19 maxlen: 19 158.255.106.0/24 maxlen: 24 185.110.192.0/22 maxlen: 22 193.34.130.0/23 maxlen: 24 193.227.248.0/23 maxlen: 24 195.216.192.0/23 maxlen: 24 212.69.160.0/19 maxlen: 19 213.152.0.0/19 maxlen: 19 213.179.76.0/22 maxlen: 22 2001:1b48::/32 maxlen: 32 2a00:1f60::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.mft rsync://rpki.ripe.net/repository/DEFAULT/5HmvFxbcRh5bs_h2IVvLlOiAi6A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:d0:e3:1d:d3:dc:54:41:37:4f:67:97:3f:b2:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e479af1716dc461e5bb3f876215bcb94e8808ba0 Validity Not Before: Jan 2 14:20:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fc70028a78d323146495ee7cffed11546531c9a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:46:94:23:69:fc:c5:61:96:40:df:da:e2:9d: 81:1e:16:7d:02:2f:b8:70:ab:4d:1d:d1:69:c5:54: 16:8f:94:ce:c3:42:77:10:51:8d:59:46:49:92:e5: 4f:05:20:a9:d5:6b:a1:8e:b3:d4:02:6b:7b:10:d9: 8d:ce:7a:06:5e:5e:7c:fd:7d:b2:26:e3:5f:7d:a4: 02:bb:98:ee:58:bb:a1:64:86:eb:fa:d6:29:75:3a: a5:78:26:8b:c1:f2:08:46:b3:6c:ef:68:c9:77:89: ee:0d:32:c3:e6:78:8f:27:3f:3e:d5:e5:ff:75:44: 77:2a:f6:f2:96:45:38:a0:9e:62:3d:69:bd:07:0e: 7c:07:1c:68:05:9f:29:23:97:82:f8:a6:a7:42:6f: f4:87:c8:40:c9:6f:4d:0c:c5:8d:31:90:f2:af:7c: b6:a7:50:2b:e8:d4:e7:f7:87:17:b5:71:35:90:c5: ed:47:c6:60:47:60:19:50:94:3a:2c:8f:18:bd:e0: c9:de:f3:e3:a7:11:90:b1:4e:8b:32:24:14:76:7a: 2e:10:03:02:aa:b3:4a:85:ed:01:87:b8:9c:3c:e9: 0c:6c:e3:37:a8:7c:24:21:1b:74:98:19:30:a0:02: 63:17:46:5a:92:22:6f:42:90:eb:75:3b:ac:4f:1f: 75:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:70:02:8A:78:D3:23:14:64:95:EE:7C:FF:ED:11:54:65:31:C9:A6 X509v3 Authority Key Identifier: keyid:E4:79:AF:17:16:DC:46:1E:5B:B3:F8:76:21:5B:CB:94:E8:80:8B:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HmvFxbcRh5bs_h2IVvLlOiAi6A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/_HACinjTIxRkle58_-0RVGUxyaY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.255.176.0/21 83.167.32.0/19 91.194.208.0/23 94.103.128.0/20 141.255.136.0/21 158.255.96.0/19 185.110.192.0/22 193.34.130.0/23 193.227.248.0/23 195.216.192.0/23 212.69.160.0/19 213.152.0.0/19 213.179.76.0/22 IPv6: 2001:1b48::/32 2a00:1f60::/32 Signature Algorithm: sha256WithRSAEncryption 08:c0:9c:33:9a:2f:03:55:d2:29:37:54:53:4c:ed:84:9e:f0: 2a:d3:41:65:7d:2b:34:bc:2d:92:5f:e5:08:54:e0:eb:a0:15: ae:63:f9:40:a3:e0:61:a2:d8:5d:41:48:e7:8d:39:88:fe:2f: 5c:39:24:14:24:5e:8e:10:d5:5c:0b:08:00:d2:1e:5c:03:0a: 58:22:bf:98:b3:5b:96:c6:e6:62:47:c8:9c:fb:8f:f9:23:bf: 71:50:8f:7d:1b:86:7c:33:74:9b:c5:3b:0a:9f:b7:99:18:ce: 1b:73:9a:13:83:f0:23:62:ec:1d:6c:4f:35:f7:d6:21:c9:b4: a6:69:8b:23:4b:84:64:d1:54:1e:2b:04:51:15:48:85:43:cf: 9f:8d:b7:4d:e1:5c:1e:26:1e:3d:53:b4:03:e6:92:d8:ca:64: 0f:94:44:92:fc:fa:a7:98:56:04:44:9b:4f:3d:ab:ad:43:e1: 3d:0e:7d:be:eb:d0:40:0c:22:df:6a:81:e6:7d:8c:e5:b5:d3: fc:80:fa:61:70:3b:89:86:b2:4a:3d:74:82:d4:19:a7:36:9a: c6:78:42:e8:b0:2d:51:7d:19:93:93:16:ad:28:6c:7c:b6:3b: 5c:fd:4b:b8:f8:00:fc:9a:f6:d3:79:f3:66:74:ad:77:4c:aa: 4e:81:79:7d -----BEGIN CERTIFICATE----- MIIFWzCCBEOgAwIBAgISAZt/FNDjHdPcVEE3T2eXP7LPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0NzlhZjE3MTZkYzQ2MWU1YmIzZjg3NjIxNWJjYjk0ZTg4 MDhiYTAwHhcNMjYwMTAyMTQyMDI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYzcwMDI4YTc4ZDMyMzE0NjQ5NWVlN2NmZmVkMTE1NDY1MzFjOWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukaUI2n8xWGWQN/a4p2BHhZ9Ai+4 cKtNHdFpxVQWj5TOw0J3EFGNWUZJkuVPBSCp1WuhjrPUAmt7ENmNznoGXl58/X2y JuNffaQCu5juWLuhZIbr+tYpdTqleCaLwfIIRrNs72jJd4nuDTLD5niPJz8+1eX/ dUR3KvbylkU4oJ5iPWm9Bw58BxxoBZ8pI5eC+KanQm/0h8hAyW9NDMWNMZDyr3y2 p1Ar6NTn94cXtXE1kMXtR8ZgR2AZUJQ6LI8YveDJ3vPjpxGQsU6LMiQUdnouEAMC qrNKhe0Bh7icPOkMbOM3qHwkIRt0mBkwoAJjF0ZakiJvQpDrdTusTx91UwIDAQAB o4ICZzCCAmMwHQYDVR0OBBYEFPxwAop40yMUZJXufP/tEVRlMcmmMB8GA1UdIwQY MBaAFOR5rxcW3EYeW7P4diFby5TogIugMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUhtdkZ4YmNSaDVic19oMklWdkxsT2lBaTZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS82MzI5OWEtODZiMi00OWZmLWI2ZTIt MjQxZWFiNjE0ODNmLzEvX0hBQ2lualRJeFJrbGU1OF8tMFJWR1V4eWFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS82MzI5OWEtODZiMi00OWZmLWI2ZTItMjQxZWFiNjE0ODNm LzEvNUhtdkZ4YmNSaDVic19oMklWdkxsT2lBaTZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMH0GCCsGAQUFBwEHAQH/BG4wbDBUBAIAATBOAwQDLv+wAwQF U6cgAwQBW8LQAwQEXmeAAwQDjf+IAwQFnv9gAwQCuW7AAwQBwSKCAwQBweP4AwQB w9jAAwQF1EWgAwQF1ZgAAwQC1bNMMBQEAgACMA4DBQAgARtIAwUAKgAfYDANBgkq hkiG9w0BAQsFAAOCAQEACMCcM5ovA1XSKTdUU0zthJ7wKtNBZX0rNLwtkl/lCFTg 66AVrmP5QKPgYaLYXUFI5405iP4vXDkkFCRejhDVXAsIANIeXAMKWCK/mLNblsbm YkfInPuP+SO/cVCPfRuGfDN0m8U7Cp+3mRjOG3OaE4PwI2LsHWxPNffWIcm0pmmL I0uEZNFUHisEURVIhUPPn423TeFcHiYePVO0A+aS2MpkD5REkvz6p5hWBESbTz2r rUPhPQ59vuvQQAwi32qB5n2M5bXT/ID6YXA7iYaySj10gtQZpzaaxnhC6LAtUX0Z k5MWrShsfLY7XP1LuPgA/Jr203nzZnStd0yqToF5fQ== -----END CERTIFICATE-----Generated at Sun Jan 25 22:32:04 2026 by rpki-client