This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/HkRun1Fyi4rM2qkhp2kYWGuhm00.roa File: HkRun1Fyi4rM2qkhp2kYWGuhm00.roa (raw, json) Hash identifier: TZ+pQeLYBh1f+g+zp4v1d+Z1gw/f7Uac8Jtw7S2NB+s= Subject key identifier: 1E:44:6E:9F:51:72:8B:8A:CC:DA:A9:21:A7:69:18:58:6B:A1:9B:4D Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A33CA21738F354CA8EF73EAA8D2164 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/HkRun1Fyi4rM2qkhp2kYWGuhm00.roa Signing time: Thu 01 Jan 2026 08:18:42 +0000 ROA not before: Thu 01 Jan 2026 08:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211439 IP address blocks: 45.8.94.0/24 maxlen: 24 212.87.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:3c:a2:17:38:f3:54:ca:8e:f7:3e:aa:8d:21:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1e446e9f51728b8accdaa921a76918586ba19b4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:64:41:2a:ea:33:1f:78:44:12:fc:23:1e:bd: ba:1f:00:44:93:00:a9:ce:f2:b5:96:00:f0:f9:7c: 08:e0:41:a8:ed:af:0b:82:78:69:a7:52:74:8d:86: f4:a7:4b:d6:51:b5:05:a6:a5:40:32:9a:59:05:87: 5c:d1:a5:1f:10:08:d2:12:7a:aa:24:6a:29:b6:b3: 36:74:72:ea:9c:ec:ac:2b:ec:ca:a1:aa:da:3f:3e: 45:e8:f7:bb:b0:2f:aa:01:12:a6:05:9c:62:bd:a8: b6:dc:94:59:d2:af:14:99:86:62:bd:6e:c7:0e:f8: 79:a8:e6:ba:03:cf:67:00:33:7f:6a:09:4c:74:4f: 7e:94:56:3e:af:83:0a:38:86:c4:bb:13:13:e6:32: 01:24:f8:7e:60:02:28:9a:13:5e:a9:f7:9e:b3:c3: 88:16:71:23:40:83:71:c7:d2:40:1a:e0:86:df:5f: 1a:31:f6:cd:65:fb:6b:48:f4:23:01:61:8f:17:6f: 97:d5:62:56:39:0a:ee:d4:55:c7:cf:c0:ca:c8:ba: 51:6d:a2:d2:de:26:43:4d:c1:ff:ea:a9:34:e7:61: d9:33:02:c2:9c:25:f6:46:c8:ae:a5:57:36:16:8b: 44:af:df:20:b3:bf:67:0c:78:25:25:0b:ba:61:94: 7f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:44:6E:9F:51:72:8B:8A:CC:DA:A9:21:A7:69:18:58:6B:A1:9B:4D X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/HkRun1Fyi4rM2qkhp2kYWGuhm00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.8.94.0/24 212.87.205.0/24 Signature Algorithm: sha256WithRSAEncryption 16:02:23:01:f7:02:34:e3:ec:ca:a1:d6:9c:cf:62:5a:9b:18: be:7a:3d:4f:24:f8:c1:6b:6f:6c:f9:05:07:09:14:a5:a0:05: 99:70:e8:b4:98:7e:db:ae:fd:2f:36:a7:85:1e:2f:f5:c3:b8: d0:ab:52:0a:7a:18:b3:52:ce:ab:7b:4e:04:27:d4:8b:fa:ed: 96:6a:8b:b4:e8:c8:95:6d:c2:de:4e:0e:e9:27:e2:b1:a2:13: ed:8a:b6:22:69:a7:1b:5d:f1:cb:c5:63:20:fd:76:49:ef:6e: b0:a2:49:90:70:58:85:0c:26:bd:f6:a5:cb:ea:08:8e:3f:85: a4:4a:4e:71:9b:d3:68:c5:fd:a9:a6:4b:6b:de:5f:96:7a:61: 12:5e:85:91:0f:b4:0e:fe:c4:60:d9:fe:50:1c:04:63:f3:68: 50:6b:f4:63:dc:7c:b3:cb:cb:c2:84:85:b1:7d:10:2c:6d:ab: 29:89:8f:4f:b8:87:5e:7b:ad:79:95:1e:f2:58:17:95:af:61: 51:1b:cd:4f:07:b3:25:c2:46:8d:f1:0c:0b:92:e4:8b:b9:ff: 32:50:a3:08:ff:fc:62:70:af:7d:88:1a:27:5d:c8:0a:8b:67: 57:48:57:da:c4:f1:9c:9a:34:72:f9:e5:66:ae:c3:7b:9b:dd: 9b:88:06:b8 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4ozyiFzjzVMqO9z6qjSFkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZTQ0NmU5ZjUxNzI4YjhhY2NkYWE5MjFhNzY5MTg1ODZiYTE5YjRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGRBKuozH3hEEvwjHr26HwBEkwCp zvK1lgDw+XwI4EGo7a8Lgnhpp1J0jYb0p0vWUbUFpqVAMppZBYdc0aUfEAjSEnqq JGoptrM2dHLqnOysK+zKoaraPz5F6Pe7sC+qARKmBZxivai23JRZ0q8UmYZivW7H Dvh5qOa6A89nADN/aglMdE9+lFY+r4MKOIbEuxMT5jIBJPh+YAIomhNeqfees8OI FnEjQINxx9JAGuCG318aMfbNZftrSPQjAWGPF2+X1WJWOQru1FXHz8DKyLpRbaLS 3iZDTcH/6qk052HZMwLCnCX2RsiupVc2FotEr98gs79nDHglJQu6YZR/zQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFB5Ebp9RcouKzNqpIadpGFhroZtNMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvSGtSdW4xRnlpNHJNMnFraHAya1lXR3VobTAwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALQheAwQA 1FfNMA0GCSqGSIb3DQEBCwUAA4IBAQAWAiMB9wI04+zKodacz2Jamxi+ej1PJPjB a29s+QUHCRSloAWZcOi0mH7brv0vNqeFHi/1w7jQq1IKehizUs6re04EJ9SL+u2W aou06MiVbcLeTg7pJ+KxohPtirYiaacbXfHLxWMg/XZJ726wokmQcFiFDCa99qXL 6giOP4WkSk5xm9Noxf2ppktr3l+WemESXoWRD7QO/sRg2f5QHARj82hQa/Rj3Hyz y8vChIWxfRAsbaspiY9PuIdee615lR7yWBeVr2FRG81PB7MlwkaN8QwLkuSLuf8y UKMI//xicK99iBonXcgKi2dXSFfaxPGcmjRy+eVmrsN7m92biAa4 -----END CERTIFICATE-----Generated at Fri Jan 2 12:02:58 2026 by rpki-client