This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/HfFxGJLVfgStnjkbuHPm0NlbD20.roa File: HfFxGJLVfgStnjkbuHPm0NlbD20.roa (raw, json) Hash identifier: OTTBrtAbVcSgQpN0MQDDsHGVJuiE+QV/cGYKWbjIEu4= Subject key identifier: 1D:F1:71:18:92:D5:7E:04:AD:9E:39:1B:B8:73:E6:D0:D9:5B:0F:6D Certificate issuer: /CN=706d3abbb478b74ef2adef9bb7c4336e34111d51 Certificate serial: 019B7F8434A547AD5BA5D3C1CD861CDA24B1 Authority key identifier: 70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/HfFxGJLVfgStnjkbuHPm0NlbD20.roa Signing time: Fri 02 Jan 2026 16:22:09 +0000 ROA not before: Fri 02 Jan 2026 16:22:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5511 IP address blocks: 46.175.129.0/24 maxlen: 24 109.234.76.0/24 maxlen: 24 194.26.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 01:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:34:a5:47:ad:5b:a5:d3:c1:cd:86:1c:da:24:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=706d3abbb478b74ef2adef9bb7c4336e34111d51 Validity Not Before: Jan 2 16:22:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1df1711892d57e04ad9e391bb873e6d0d95b0f6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:27:c0:f1:6e:f9:f1:49:4f:c4:b0:bc:62:a1: b0:f9:c3:18:57:7e:1f:64:68:2d:dd:3d:38:76:e8: e4:7d:4b:5c:60:e2:30:d5:7c:0a:2f:0a:c7:2a:9c: a4:dc:3f:80:cb:d9:8d:2d:bd:2d:cf:6d:b5:de:f9: 15:ca:25:ec:1d:74:d8:ef:e5:6f:89:66:90:54:28: 33:fd:d9:43:66:f6:ba:21:36:58:87:87:96:6e:b1: 42:68:23:64:8f:63:b3:bf:0e:e3:41:1f:2c:3f:4e: 95:68:80:b7:e3:27:d0:38:30:34:19:69:16:34:3d: fa:bc:62:6e:c5:2d:8c:3d:77:08:87:ee:77:9e:55: b2:29:b3:32:8e:d4:e1:cf:6c:f0:47:b5:ad:12:29: 96:db:a8:e4:4d:f5:3a:3a:34:2c:74:85:4f:b0:0b: 51:91:29:24:29:27:4f:02:05:b1:f4:16:27:8c:80: 92:40:af:9f:cc:b2:8f:f6:fd:37:9c:40:13:8b:33: d4:00:e4:d2:d9:a0:79:41:0d:64:5c:ca:4f:86:7f: 2c:ad:59:38:91:54:fb:10:e8:d0:9f:53:fd:45:52: 88:7d:bb:f4:57:67:47:40:6a:55:6c:c7:a6:a7:8c: db:0b:8e:18:03:b3:e8:67:88:9c:d6:d9:08:94:b2: b5:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:F1:71:18:92:D5:7E:04:AD:9E:39:1B:B8:73:E6:D0:D9:5B:0F:6D X509v3 Authority Key Identifier: keyid:70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/HfFxGJLVfgStnjkbuHPm0NlbD20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.175.129.0/24 109.234.76.0/24 194.26.119.0/24 Signature Algorithm: sha256WithRSAEncryption b7:e7:6e:7b:c2:71:44:67:a2:1d:a9:2a:34:74:44:ab:90:27: 85:c7:32:46:df:4d:07:93:1a:0f:77:1d:22:56:ed:c2:c7:e1: 75:10:88:d8:e2:79:df:02:8f:5a:16:b4:cf:64:d4:f0:fd:00: 5e:b0:89:59:b7:8b:b0:fc:a5:47:26:e6:77:a9:b9:07:4c:39: e9:5a:3d:a0:1c:7b:80:f0:8c:d9:a6:c2:25:8e:3d:d5:9f:c0: eb:00:ea:4b:43:d4:e0:a6:1f:4d:09:2c:ea:a0:81:e0:e5:0d: ea:a4:57:ad:2f:4e:9a:63:b2:02:f0:5f:9e:ba:17:e8:2a:f4: 4c:1f:5e:97:ff:71:5f:9a:12:d1:8e:ff:4f:df:68:1d:b9:45: 31:69:50:3d:48:73:2a:33:ce:a0:38:8d:e7:71:75:7e:34:06: 49:a6:e3:50:45:0e:4e:b8:0c:d4:c5:ad:5f:1f:74:a4:5c:d2: b7:99:8c:4d:32:ec:4c:1a:04:f0:b4:be:0b:c7:43:7b:98:92: 3b:62:39:9f:82:c8:ba:ba:92:7d:a1:73:82:2e:b9:11:c0:f2: 03:2a:5d:25:27:6b:7e:07:a6:53:a0:44:ee:28:30:a7:42:a9: ed:ac:bb:8d:51:95:bd:78:0c:c3:66:ec:6f:16:6a:d4:d5:4a: 96:1e:13:c7 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/hDSlR61bpdPBzYYc2iSxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNmQzYWJiYjQ3OGI3NGVmMmFkZWY5YmI3YzQzMzZlMzQx MTFkNTEwHhcNMjYwMTAyMTYyMjA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZGYxNzExODkyZDU3ZTA0YWQ5ZTM5MWJiODczZTZkMGQ5NWIwZjZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCfA8W758UlPxLC8YqGw+cMYV34f ZGgt3T04dujkfUtcYOIw1XwKLwrHKpyk3D+Ay9mNLb0tz2213vkVyiXsHXTY7+Vv iWaQVCgz/dlDZva6ITZYh4eWbrFCaCNkj2Ozvw7jQR8sP06VaIC34yfQODA0GWkW ND36vGJuxS2MPXcIh+53nlWyKbMyjtThz2zwR7WtEimW26jkTfU6OjQsdIVPsAtR kSkkKSdPAgWx9BYnjICSQK+fzLKP9v03nEATizPUAOTS2aB5QQ1kXMpPhn8srVk4 kVT7EOjQn1P9RVKIfbv0V2dHQGpVbMemp4zbC44YA7PoZ4ic1tkIlLK1RwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFB3xcRiS1X4ErZ45G7hz5tDZWw9tMB8GA1UdIwQY MBaAFHBtOru0eLdO8q3vm7fEM240ER1RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0cwNnU3UjR0MDd5cmUtYnQ4UXpialFSSFZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wYzZmNDctNDcxMy00NDcxLWIwOGYt YTQyMTNjOTNmMWY3LzEvSGZGeEdKTFZmZ1N0bmprYnVIUG0wTmxiRDIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy8wYzZmNDctNDcxMy00NDcxLWIwOGYtYTQyMTNjOTNmMWY3 LzEvY0cwNnU3UjR0MDd5cmUtYnQ4UXpialFSSFZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALq+BAwQA bepMAwQAwhp3MA0GCSqGSIb3DQEBCwUAA4IBAQC35257wnFEZ6IdqSo0dESrkCeF xzJG300HkxoPdx0iVu3Cx+F1EIjY4nnfAo9aFrTPZNTw/QBesIlZt4uw/KVHJuZ3 qbkHTDnpWj2gHHuA8IzZpsIljj3Vn8DrAOpLQ9Tgph9NCSzqoIHg5Q3qpFetL06a Y7IC8F+euhfoKvRMH16X/3FfmhLRjv9P32gduUUxaVA9SHMqM86gOI3ncXV+NAZJ puNQRQ5OuAzUxa1fH3SkXNK3mYxNMuxMGgTwtL4Lx0N7mJI7Yjmfgsi6upJ9oXOC LrkRwPIDKl0lJ2t+B6ZToETuKDCnQqntrLuNUZW9eAzDZuxvFmrU1UqWHhPH -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:21 2026 by rpki-client