This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/HpnTbfS7S6BAaVqaUfZX-c0MU08.roa File: HpnTbfS7S6BAaVqaUfZX-c0MU08.roa (raw, json) Hash identifier: W27m8UR8xxwgjtT+uRjFRwsVQNdm+D+G6MLGi6nWkCc= Subject key identifier: 1E:99:D3:6D:F4:BB:4B:A0:40:69:5A:9A:51:F6:57:F9:CD:0C:53:4F Certificate issuer: /CN=b13099c38b6477a68c98019ff6e0040808078b90 Certificate serial: 019B7EA58A9CC96DC2794C8CAB6BE174797F Authority key identifier: B1:30:99:C3:8B:64:77:A6:8C:98:01:9F:F6:E0:04:08:08:07:8B:90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sTCZw4tkd6aMmAGf9uAECAgHi5A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/HpnTbfS7S6BAaVqaUfZX-c0MU08.roa Signing time: Fri 02 Jan 2026 12:18:56 +0000 ROA not before: Fri 02 Jan 2026 12:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206347 IP address blocks: 37.48.225.0/24 maxlen: 24 37.48.226.0/23 maxlen: 23 37.48.228.0/24 maxlen: 24 37.48.231.0/24 maxlen: 24 138.124.160.0/20 maxlen: 24 138.124.175.0/24 maxlen: 24 185.32.92.0/22 maxlen: 24 185.67.232.0/22 maxlen: 22 185.102.132.0/22 maxlen: 24 185.193.168.0/22 maxlen: 24 2a0b:de40::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.crl rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.mft rsync://rpki.ripe.net/repository/DEFAULT/sTCZw4tkd6aMmAGf9uAECAgHi5A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:8a:9c:c9:6d:c2:79:4c:8c:ab:6b:e1:74:79:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b13099c38b6477a68c98019ff6e0040808078b90 Validity Not Before: Jan 2 12:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1e99d36df4bb4ba040695a9a51f657f9cd0c534f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:81:83:aa:f2:48:32:41:38:b5:e2:6e:1c:ba: 0d:e2:10:50:b7:09:39:9c:36:98:01:35:be:23:27: 5e:97:34:b5:b9:df:ad:57:7e:39:df:b3:38:1d:30: a8:e6:3f:48:f2:2a:48:f9:a8:f3:e6:37:90:47:fd: d9:69:ec:45:4e:cf:c7:22:23:2d:28:b1:79:ea:32: 28:4f:ca:94:74:4b:72:d4:dd:23:85:b2:75:62:b2: a0:77:fa:40:c9:21:06:09:77:78:2f:a0:ad:60:2d: 1f:ca:a0:80:d8:6e:ef:4f:e0:b4:a8:0f:14:d0:dd: a8:b2:b3:15:6b:b6:dc:53:ee:83:eb:c2:f2:46:de: 6b:16:ea:cc:b9:b0:19:2d:44:22:3f:97:20:7a:bd: 73:33:a9:84:dd:6e:0b:d7:5e:07:cb:3a:1e:87:ab: 22:3b:dc:a3:e2:59:b4:81:8e:ed:2d:16:d9:02:23: ad:a7:d4:ed:c3:25:ca:5f:4f:08:34:08:79:ba:9c: ed:ac:74:69:7f:a2:47:5e:5f:dc:2f:85:ba:62:06: 37:48:a3:38:47:ce:e0:75:2b:08:91:1a:50:9b:26: 56:01:25:db:05:68:a9:28:04:dd:46:47:f8:4f:c9: a9:7a:82:18:8b:f9:5d:73:51:d7:72:44:cd:84:e5: 45:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:99:D3:6D:F4:BB:4B:A0:40:69:5A:9A:51:F6:57:F9:CD:0C:53:4F X509v3 Authority Key Identifier: keyid:B1:30:99:C3:8B:64:77:A6:8C:98:01:9F:F6:E0:04:08:08:07:8B:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTCZw4tkd6aMmAGf9uAECAgHi5A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/HpnTbfS7S6BAaVqaUfZX-c0MU08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.48.225.0-37.48.228.255 37.48.231.0/24 138.124.160.0/20 185.32.92.0/22 185.67.232.0/22 185.102.132.0/22 185.193.168.0/22 IPv6: 2a0b:de40::/29 Signature Algorithm: sha256WithRSAEncryption 5f:40:13:8a:cc:b7:7a:7f:e0:8e:6c:ad:46:da:69:1b:06:1d: fd:0b:b7:22:2d:7f:86:2a:1c:2c:1c:2c:ca:f0:d1:44:d9:68: 69:43:a6:24:aa:5b:7e:06:ef:0f:c5:d5:65:4c:fa:91:92:0b: a3:2e:dc:41:c1:15:c2:5c:1b:d3:43:01:dd:9a:b7:3d:2a:aa: b8:a4:d9:75:78:88:45:a0:7e:4c:b3:72:ce:c1:b7:a8:2e:b0: cf:6d:b0:0f:1a:91:5f:e8:44:27:a8:b4:43:4e:98:78:d2:b6: b3:a0:7a:0e:54:24:e6:6a:f7:e1:c3:dd:f3:ff:8b:e4:48:e0: e5:2e:73:e4:9a:56:7d:f3:c7:64:a3:86:55:55:30:40:5a:d3: 7e:24:83:c4:6c:fa:c7:e5:ef:93:89:62:a3:54:30:5a:f9:2d: be:21:32:77:05:f5:f4:ea:f2:ea:c1:a3:46:b6:9b:8f:14:13: 81:0d:2e:99:45:4b:ce:9b:cd:1a:64:a8:e1:4b:c7:ca:87:36: 66:66:eb:da:07:37:a0:ed:e3:11:e1:ab:91:e2:24:61:f5:25: 78:45:b6:86:c7:f3:fa:5a:9c:53:b9:9b:69:30:d5:a5:71:aa: ec:47:12:26:ac:d6:82:1a:97:33:0f:1b:60:e9:1d:66:c7:3c: 57:61:78:df -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgISAZt+pYqcyW3CeUyMq2vhdHl/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxMzA5OWMzOGI2NDc3YTY4Yzk4MDE5ZmY2ZTAwNDA4MDgw NzhiOTAwHhcNMjYwMTAyMTIxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZTk5ZDM2ZGY0YmI0YmEwNDA2OTVhOWE1MWY2NTdmOWNkMGM1MzRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7IGDqvJIMkE4teJuHLoN4hBQtwk5 nDaYATW+IydelzS1ud+tV34537M4HTCo5j9I8ipI+ajz5jeQR/3ZaexFTs/HIiMt KLF56jIoT8qUdEty1N0jhbJ1YrKgd/pAySEGCXd4L6CtYC0fyqCA2G7vT+C0qA8U 0N2osrMVa7bcU+6D68LyRt5rFurMubAZLUQiP5cger1zM6mE3W4L114Hyzoeh6si O9yj4lm0gY7tLRbZAiOtp9TtwyXKX08INAh5upztrHRpf6JHXl/cL4W6YgY3SKM4 R87gdSsIkRpQmyZWASXbBWipKATdRkf4T8mpeoIYi/ldc1HXckTNhOVF7QIDAQAB o4ICRDCCAkAwHQYDVR0OBBYEFB6Z0230u0ugQGlamlH2V/nNDFNPMB8GA1UdIwQY MBaAFLEwmcOLZHemjJgBn/bgBAgIB4uQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1RDWnc0dGtkNmFNbUFHZjl1QUVDQWdIaTVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy81OTJjZjAtMDNkZi00ODg2LWIwNjEt Mjg0ZjdjOTYyMmI1LzEvSHBuVGJmUzdTNkJBYVZxYVVmWlgtYzBNVTA4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy81OTJjZjAtMDNkZi00ODg2LWIwNjEtMjg0ZjdjOTYyMmI1 LzEvc1RDWnc0dGtkNmFNbUFHZjl1QUVDQWdIaTVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFoGCCsGAQUFBwEHAQH/BEswSTA4BAIAATAyMAwDBAAlMOED BAAlMOQDBAAlMOcDBASKfKADBAK5IFwDBAK5Q+gDBAK5ZoQDBAK5wagwDQQCAAIw BwMFAyoL3kAwDQYJKoZIhvcNAQELBQADggEBAF9AE4rMt3p/4I5srUbaaRsGHf0L tyItf4YqHCwcLMrw0UTZaGlDpiSqW34G7w/F1WVM+pGSC6Mu3EHBFcJcG9NDAd2a tz0qqrik2XV4iEWgfkyzcs7Bt6gusM9tsA8akV/oRCeotENOmHjStrOgeg5UJOZq 9+HD3fP/i+RI4OUuc+SaVn3zx2SjhlVVMEBa034kg8Rs+sfl75OJYqNUMFr5Lb4h MncF9fTq8urBo0a2m48UE4ENLplFS86bzRpkqOFLx8qHNmZm69oHN6Dt4xHhq5Hi JGH1JXhFtobH8/panFO5m2kw1aVxquxHEias1oIalzMPG2DpHWbHPFdheN8= -----END CERTIFICATE-----Generated at Mon Feb 9 23:41:43 2026 by rpki-client