This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/HzjQFrZCnhGhLnKmBXlnQVhxUtU.roa File: HzjQFrZCnhGhLnKmBXlnQVhxUtU.roa (raw, json) Hash identifier: YMFJR5OkS2UcMlluKk7Z+uTNCIlENUc6IFX/DXl3feA= Subject key identifier: 1F:38:D0:16:B6:42:9E:11:A1:2E:72:A6:05:79:67:41:58:71:52:D5 Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346 Certificate serial: 019B939ED60B03C8AB3B689CDA240FB66F2D Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/HzjQFrZCnhGhLnKmBXlnQVhxUtU.roa Signing time: Tue 06 Jan 2026 14:03:38 +0000 ROA not before: Tue 06 Jan 2026 14:03:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3319 IP address blocks: 77.47.142.0/24 maxlen: 24 77.47.210.0/24 maxlen: 24 77.47.211.0/24 maxlen: 24 185.143.57.0/24 maxlen: 24 195.178.128.0/22 maxlen: 24 195.178.132.0/24 maxlen: 24 195.178.133.0/24 maxlen: 24 195.178.134.0/24 maxlen: 24 195.178.135.0/24 maxlen: 24 195.178.144.0/23 maxlen: 23 195.178.147.0/24 maxlen: 24 212.111.207.0/24 maxlen: 24 212.111.216.0/24 maxlen: 24 212.111.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:93:9e:d6:0b:03:c8:ab:3b:68:9c:da:24:0f:b6:6f:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19426325acb8ce609a686fa655b058968809b346 Validity Not Before: Jan 6 14:03:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f38d016b6429e11a12e72a605796741587152d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:06:49:ae:44:92:5e:0a:61:44:c5:b2:69:5b: a1:e0:59:79:ea:f0:7e:79:32:de:6b:87:07:57:38: b0:5d:82:9f:58:20:7a:d3:ae:4d:4d:32:45:c5:4e: a0:4c:f9:a1:45:4e:33:08:73:67:e0:b1:5e:21:3d: ab:92:5e:4d:f6:90:3d:d9:88:11:3d:c3:97:f9:6e: cb:7b:8f:f4:71:a8:cb:e5:8e:59:ef:84:ce:03:19: 2f:0f:8d:f1:8e:49:ce:35:cc:fe:e7:4e:97:7b:d8: 6a:ff:0d:52:02:2a:7f:c2:60:c1:1f:f1:6b:0a:ca: a7:ef:96:60:38:cb:0a:72:0c:10:1e:ce:0e:8c:1c: a0:99:3a:79:53:3f:ad:af:33:fd:bc:55:46:78:f9: 63:8a:f2:0a:7c:08:53:ff:64:ae:bf:89:08:09:48: 49:66:74:d1:c4:67:71:49:a5:ef:4d:2c:99:6f:a3: 2c:08:04:29:83:6d:e9:b7:6e:a6:cd:52:e6:88:c9: d0:62:cf:c3:d0:54:dd:92:a9:60:e6:99:28:e4:72: 46:bf:1c:2e:f9:75:74:ef:6e:98:bc:24:a6:46:5b: 49:a5:ae:ae:0a:fa:19:a3:3c:eb:83:29:65:f5:43: c9:ff:f0:e3:63:75:17:3b:da:2c:d0:8e:f4:7f:fe: b4:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:38:D0:16:B6:42:9E:11:A1:2E:72:A6:05:79:67:41:58:71:52:D5 X509v3 Authority Key Identifier: keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/HzjQFrZCnhGhLnKmBXlnQVhxUtU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.47.142.0/24 77.47.210.0/23 185.143.57.0/24 195.178.128.0/21 195.178.144.0/23 195.178.147.0/24 212.111.207.0/24 212.111.216.0/23 Signature Algorithm: sha256WithRSAEncryption 87:69:85:86:af:8c:48:f4:f3:57:7c:fa:68:9d:ee:33:d0:dc: ff:8e:1c:d0:ff:22:ea:70:de:30:48:23:01:ce:a3:86:70:94: 45:a5:9f:bd:44:a7:7a:16:20:d3:47:ee:eb:e2:7f:0f:5d:c3: ce:df:45:47:17:2b:ed:1f:9b:f4:53:65:0a:a4:25:f1:fe:72: 94:4a:a3:4c:9d:c8:3d:b5:56:9c:4d:6e:2c:c0:0d:d8:fc:a6: ea:4e:70:b2:9d:7d:69:41:77:62:0d:fb:64:19:fa:a3:8e:ae: f2:ea:20:d7:ff:06:da:e5:46:33:aa:f9:fc:6c:42:03:cb:1e: 84:03:a8:b6:1f:80:31:dd:5b:1a:1f:62:4e:1e:87:ea:47:e3: c3:98:24:37:63:63:34:a5:d6:96:35:85:14:4f:7e:fc:52:57: 60:e6:51:d4:12:6c:d3:d4:9b:07:00:c0:4f:86:9f:99:66:40: e9:0b:ff:d2:ce:b5:cc:2d:f2:e0:51:5f:af:7c:f6:39:8a:e6: 05:9c:0a:63:dc:29:11:d9:96:d7:59:09:ac:79:22:5a:c6:0b: 77:a1:af:41:b2:df:ae:db:05:90:77:32:37:29:b6:fd:74:02: 1e:e0:b0:b3:95:48:84:6b:d6:ea:80:bf:ba:c3:c8:87:94:3e: 82:84:7f:a1 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZuTntYLA8irO2ic2iQPtm8tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw OWIzNDYwHhcNMjYwMTA2MTQwMzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjM4ZDAxNmI2NDI5ZTExYTEyZTcyYTYwNTc5Njc0MTU4NzE1MmQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QZJrkSSXgphRMWyaVuh4Fl56vB+ eTLea4cHVziwXYKfWCB6065NTTJFxU6gTPmhRU4zCHNn4LFeIT2rkl5N9pA92YgR PcOX+W7Le4/0cajL5Y5Z74TOAxkvD43xjknONcz+506Xe9hq/w1SAip/wmDBH/Fr Csqn75ZgOMsKcgwQHs4OjBygmTp5Uz+trzP9vFVGePljivIKfAhT/2Suv4kICUhJ ZnTRxGdxSaXvTSyZb6MsCAQpg23pt26mzVLmiMnQYs/D0FTdkqlg5pko5HJGvxwu +XV0726YvCSmRltJpa6uCvoZozzrgyll9UPJ//DjY3UXO9os0I70f/60LQIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFB840Ba2Qp4RoS5ypgV5Z0FYcVLVMB8GA1UdIwQY MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt MDNmNGM3MTEzYzM0LzEvSHpqUUZyWkNuaEdoTG5LbUJYbG5RVmh4VXRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0 LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQATS+OAwQB TS/SAwQAuY85AwQDw7KAAwQBw7KQAwQAw7KTAwQA1G/PAwQB1G/YMA0GCSqGSIb3 DQEBCwUAA4IBAQCHaYWGr4xI9PNXfPpone4z0Nz/jhzQ/yLqcN4wSCMBzqOGcJRF pZ+9RKd6FiDTR+7r4n8PXcPO30VHFyvtH5v0U2UKpCXx/nKUSqNMncg9tVacTW4s wA3Y/KbqTnCynX1pQXdiDftkGfqjjq7y6iDX/wba5UYzqvn8bEIDyx6EA6i2H4Ax 3VsaH2JOHofqR+PDmCQ3Y2M0pdaWNYUUT378Uldg5lHUEmzT1JsHAMBPhp+ZZkDp C//SzrXMLfLgUV+vfPY5iuYFnApj3CkR2ZbXWQmseSJaxgt3oa9Bst+u2wWQdzI3 Kbb9dAIe4LCzlUiEa9bqgL+6w8iHlD6ChH+h -----END CERTIFICATE-----Generated at Sat Jan 10 04:58:27 2026 by rpki-client