This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/HkF0C-x9FMK19vCsp7DBtOxfnKM.roa File: HkF0C-x9FMK19vCsp7DBtOxfnKM.roa (raw, json) Hash identifier: rixr924OZAH7rMu2uMb36drj0+mxSpiVEHjsLYl8gBg= Subject key identifier: 1E:41:74:0B:EC:7D:14:C2:B5:F6:F0:AC:A7:B0:C1:B4:EC:5F:9C:A3 Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Certificate serial: 019B7B360DE9A2AFEC20634635E0A6331AA1 Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/HkF0C-x9FMK19vCsp7DBtOxfnKM.roa Signing time: Thu 01 Jan 2026 20:18:18 +0000 ROA not before: Thu 01 Jan 2026 20:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62103 IP address blocks: 45.11.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 04:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:0d:e9:a2:af:ec:20:63:46:35:e0:a6:33:1a:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Validity Not Before: Jan 1 20:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1e41740bec7d14c2b5f6f0aca7b0c1b4ec5f9ca3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b0:38:c6:c9:55:ac:ee:1a:6c:58:29:cf:1d: 91:48:85:e4:79:86:03:18:6a:19:f4:d2:49:64:d9: ca:3e:1e:2f:f3:26:b4:df:d3:19:53:55:e3:99:5b: 2b:e1:c7:15:f2:07:f1:1f:ce:a0:c5:b1:cc:e6:2c: a6:ae:b2:56:8e:e3:bf:e6:1d:a0:15:ee:c2:5b:e7: a2:3c:99:d3:6d:11:62:0e:06:bb:d0:bb:dc:9d:2a: 92:0e:a1:dc:8f:4f:6a:9b:79:c5:58:5d:5a:3d:1b: 8a:0d:16:4d:f8:22:a4:4b:08:da:24:ac:83:a8:54: 05:25:69:8e:f7:53:f4:52:77:0a:95:bf:b8:ab:7e: f9:78:f4:08:e4:2f:93:be:73:37:ce:b2:65:47:53: d3:f7:d9:68:26:8a:f1:4a:3a:68:57:86:55:7e:3c: e8:02:79:d9:db:18:a4:4f:44:2e:b4:4d:97:31:0b: 5d:79:91:38:86:50:e4:e9:0e:a1:05:9f:e9:83:3e: 65:da:ca:46:4c:70:58:b4:bc:24:5a:d7:cd:e8:51: 77:8b:2d:9f:be:1a:31:82:1a:2b:c9:5d:59:ea:6d: 2c:e6:a2:20:20:cd:b0:83:ee:57:03:4e:28:cd:83: 68:df:d2:cd:ce:69:1b:6c:04:6b:44:c4:30:07:a3: 44:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:41:74:0B:EC:7D:14:C2:B5:F6:F0:AC:A7:B0:C1:B4:EC:5F:9C:A3 X509v3 Authority Key Identifier: keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/HkF0C-x9FMK19vCsp7DBtOxfnKM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.11.23.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:04:17:3b:09:93:95:b7:3c:9e:6b:ba:e0:ef:c6:ff:8d:36: 4c:09:6c:22:75:66:c7:8b:c1:f1:b3:83:06:1c:bf:80:6a:07: 21:4d:c4:63:1a:14:12:20:6f:4f:ec:f4:14:f7:4d:8c:38:66: 00:dc:a9:d5:00:3d:6e:af:78:12:01:9d:28:50:57:47:fd:6b: 8d:9c:97:df:e4:e7:2c:da:0d:76:ce:74:90:ca:dc:a6:a8:05: e6:83:02:75:bf:27:2e:2c:af:6c:9f:cf:68:34:67:59:11:9f: 02:60:c8:17:6b:6e:09:eb:86:6f:d2:81:61:ff:1f:16:89:db: e9:44:d7:96:59:d7:e0:ca:5c:29:17:2a:4f:2c:95:10:93:2f: ee:9b:b1:8f:9c:da:b7:80:22:da:e2:b6:15:8f:1a:ea:68:a5: 1a:2a:d6:e2:c8:c6:ba:d0:25:ee:1e:bc:fd:36:c5:d4:91:e8: 00:76:97:7c:03:28:4b:1a:76:bd:a4:b7:a4:8c:23:4b:86:4e: 89:2f:a2:93:dd:84:67:4a:3f:ec:01:08:98:f1:e9:fc:ed:44: ae:d4:37:03:d3:5e:ec:23:60:dc:5b:1a:3b:30:a5:0b:74:5e: 4d:3f:57:72:e7:92:39:b3:71:86:d2:fb:ef:c0:33:c3:27:e4: 0e:b4:e6:29 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Ng3poq/sIGNGNeCmMxqhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw N2VlNTYwHhcNMjYwMTAxMjAxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZTQxNzQwYmVjN2QxNGMyYjVmNmYwYWNhN2IwYzFiNGVjNWY5Y2EzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7A4xslVrO4abFgpzx2RSIXkeYYD GGoZ9NJJZNnKPh4v8ya039MZU1XjmVsr4ccV8gfxH86gxbHM5iymrrJWjuO/5h2g Fe7CW+eiPJnTbRFiDga70LvcnSqSDqHcj09qm3nFWF1aPRuKDRZN+CKkSwjaJKyD qFQFJWmO91P0UncKlb+4q375ePQI5C+TvnM3zrJlR1PT99loJorxSjpoV4ZVfjzo AnnZ2xikT0QutE2XMQtdeZE4hlDk6Q6hBZ/pgz5l2spGTHBYtLwkWtfN6FF3iy2f vhoxghoryV1Z6m0s5qIgIM2wg+5XA04ozYNo39LNzmkbbARrRMQwB6NEYwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB5BdAvsfRTCtfbwrKewwbTsX5yjMB8GA1UdIwQY MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt OGJmYmRkNDVjYjYyLzEvSGtGMEMteDlGTUsxOXZDc3A3REJ0T3hmbktNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQsXMA0G CSqGSIb3DQEBCwUAA4IBAQAMBBc7CZOVtzyea7rg78b/jTZMCWwidWbHi8Hxs4MG HL+AagchTcRjGhQSIG9P7PQU902MOGYA3KnVAD1ur3gSAZ0oUFdH/WuNnJff5Ocs 2g12znSQytymqAXmgwJ1vycuLK9sn89oNGdZEZ8CYMgXa24J64Zv0oFh/x8Widvp RNeWWdfgylwpFypPLJUQky/um7GPnNq3gCLa4rYVjxrqaKUaKtbiyMa60CXuHrz9 NsXUkegAdpd8AyhLGna9pLekjCNLhk6JL6KT3YRnSj/sAQiY8en87USu1DcD017s I2DcWxo7MKULdF5NP1dy55I5s3GG0vvvwDPDJ+QOtOYp -----END CERTIFICATE-----Generated at Thu Jan 15 13:19:19 2026 by rpki-client