This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/Hn_LCCRDmjyNueRI3elE9laK5xI.roa File: Hn_LCCRDmjyNueRI3elE9laK5xI.roa (raw, json) Hash identifier: zx3FAqcnGLkSrVH13HOmt2qFoY0EISrhfmg+joIi6tM= Subject key identifier: 1E:7F:CB:08:24:43:9A:3C:8D:B9:E4:48:DD:E9:44:F6:56:8A:E7:12 Certificate issuer: /CN=d959676fe138d4eb2aae19bb6731fee6292d793d Certificate serial: 019B7DCAEC2266A9F8DAAB6E67453856D346 Authority key identifier: D9:59:67:6F:E1:38:D4:EB:2A:AE:19:BB:67:31:FE:E6:29:2D:79:3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Vlnb-E41Osqrhm7ZzH-5ikteT0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/Hn_LCCRDmjyNueRI3elE9laK5xI.roa Signing time: Fri 02 Jan 2026 08:20:09 +0000 ROA not before: Fri 02 Jan 2026 08:20:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28931 IP address blocks: 185.103.188.0/22 maxlen: 23 2a00:f400::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.crl rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft rsync://rpki.ripe.net/repository/DEFAULT/2Vlnb-E41Osqrhm7ZzH-5ikteT0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 02:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:ec:22:66:a9:f8:da:ab:6e:67:45:38:56:d3:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d959676fe138d4eb2aae19bb6731fee6292d793d Validity Not Before: Jan 2 08:20:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1e7fcb0824439a3c8db9e448dde944f6568ae712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:58:82:32:f7:38:c5:80:8b:20:3f:ca:56:11: d0:8c:51:93:47:24:9e:cc:ec:5c:11:0f:ca:63:84: d3:81:0b:b7:6f:26:93:52:8f:10:10:d8:34:39:3b: 3b:5a:59:21:45:88:f3:43:ed:4d:74:e9:ee:cd:f6: 70:e3:19:42:d4:39:a7:c9:5f:ff:69:52:ba:60:46: 8d:2e:6f:ee:2b:c4:e2:3c:86:24:2c:c2:76:4f:9e: e6:c9:9b:c5:55:a9:ea:f7:76:8c:6a:4f:4c:50:14: e4:45:80:16:5b:86:d6:fa:85:98:6d:28:bb:bc:8b: 92:ea:ba:93:ff:79:14:ff:11:e5:2d:cd:3d:8a:42: 43:83:c7:6b:f5:c0:23:0a:f4:dd:c0:f4:4f:c2:ca: 74:50:f1:7a:59:ae:6c:77:2f:98:68:45:ba:c5:92: ae:7e:98:71:c3:b8:af:44:80:d1:76:a0:4d:e4:67: 62:6a:17:87:ec:5a:cc:95:26:dd:94:cb:ed:a6:cb: e7:ff:44:34:43:5e:43:ed:d5:cf:44:27:f7:60:78: 8e:93:da:0f:a9:5d:7a:27:9c:72:b5:d7:88:99:eb: 23:bc:fa:9c:b7:bf:32:31:13:ef:17:3d:fd:26:08: cb:20:cc:a0:f1:8a:c8:df:68:5c:6d:35:9e:2f:1c: f1:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:7F:CB:08:24:43:9A:3C:8D:B9:E4:48:DD:E9:44:F6:56:8A:E7:12 X509v3 Authority Key Identifier: keyid:D9:59:67:6F:E1:38:D4:EB:2A:AE:19:BB:67:31:FE:E6:29:2D:79:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Vlnb-E41Osqrhm7ZzH-5ikteT0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/Hn_LCCRDmjyNueRI3elE9laK5xI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.103.188.0/22 IPv6: 2a00:f400::/32 Signature Algorithm: sha256WithRSAEncryption 7a:35:13:47:2c:ad:63:34:83:b3:71:ab:6e:dd:47:40:31:00: 00:ae:6d:1c:e6:db:e6:74:4f:1c:d5:d0:a8:17:40:e1:8e:45: cd:e7:c2:94:e8:5a:53:a8:29:7b:d1:56:93:ca:d4:42:21:57: f7:4f:3b:12:55:fd:7d:9a:4d:ee:4b:8c:73:b7:ed:29:33:df: b7:c0:62:e9:c3:77:3e:55:0c:58:cd:64:16:85:62:67:e7:b1: 01:93:7c:e6:3e:a2:e7:94:14:03:b1:22:58:51:55:52:8d:bf: a9:05:7e:dc:86:2c:0e:ad:34:31:c7:39:49:16:2e:18:01:95: 78:de:53:54:38:85:e2:6b:ff:3c:b5:37:cc:4e:f3:e1:47:05: 59:cb:a9:76:02:1f:36:9f:30:bf:29:a3:a2:7a:f2:50:4e:9a: e1:64:29:3e:8a:4e:01:9e:2d:0a:ac:24:cd:16:5a:df:c0:07: 94:e7:eb:22:60:fe:ee:2b:dc:d0:95:6c:c0:0f:8e:4f:af:80: 60:84:4f:71:60:d5:cd:ce:f0:91:8c:56:60:67:20:cd:1e:ee: 24:4e:cc:3a:d1:ee:7c:92:ed:43:64:67:99:5a:06:00:14:f4: 19:18:27:63:69:c6:04:90:ae:8c:d0:25:5a:58:9a:14:5e:75: 82:54:52:e8 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9yuwiZqn42qtuZ0U4VtNGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5NTk2NzZmZTEzOGQ0ZWIyYWFlMTliYjY3MzFmZWU2Mjky ZDc5M2QwHhcNMjYwMTAyMDgyMDA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZTdmY2IwODI0NDM5YTNjOGRiOWU0NDhkZGU5NDRmNjU2OGFlNzEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmliCMvc4xYCLID/KVhHQjFGTRySe zOxcEQ/KY4TTgQu3byaTUo8QENg0OTs7WlkhRYjzQ+1NdOnuzfZw4xlC1DmnyV// aVK6YEaNLm/uK8TiPIYkLMJ2T57myZvFVanq93aMak9MUBTkRYAWW4bW+oWYbSi7 vIuS6rqT/3kU/xHlLc09ikJDg8dr9cAjCvTdwPRPwsp0UPF6Wa5sdy+YaEW6xZKu fphxw7ivRIDRdqBN5GdiaheH7FrMlSbdlMvtpsvn/0Q0Q15D7dXPRCf3YHiOk9oP qV16J5xytdeImesjvPqct78yMRPvFz39JgjLIMyg8YrI32hcbTWeLxzxvwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFB5/ywgkQ5o8jbnkSN3pRPZWiucSMB8GA1UdIwQY MBaAFNlZZ2/hONTrKq4Zu2cx/uYpLXk9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlZsbmItRTQxT3NxcmhtN1p6SC01aWt0ZVQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9jZjAyOGUtNzU3ZS00ODQzLWExZWEt NGM3NGQzMzJlYTU4LzEvSG5fTENDUkRtanlOdWVSSTNlbEU5bGFLNXhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9jZjAyOGUtNzU3ZS00ODQzLWExZWEtNGM3NGQzMzJlYTU4 LzEvMlZsbmItRTQxT3NxcmhtN1p6SC01aWt0ZVQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuWe8MA0E AgACMAcDBQAqAPQAMA0GCSqGSIb3DQEBCwUAA4IBAQB6NRNHLK1jNIOzcatu3UdA MQAArm0c5tvmdE8c1dCoF0DhjkXN58KU6FpTqCl70VaTytRCIVf3TzsSVf19mk3u S4xzt+0pM9+3wGLpw3c+VQxYzWQWhWJn57EBk3zmPqLnlBQDsSJYUVVSjb+pBX7c hiwOrTQxxzlJFi4YAZV43lNUOIXia/88tTfMTvPhRwVZy6l2Ah82nzC/KaOievJQ TprhZCk+ik4Bni0KrCTNFlrfwAeU5+siYP7uK9zQlWzAD45Pr4BghE9xYNXNzvCR jFZgZyDNHu4kTsw60e58ku1DZGeZWgYAFPQZGCdjacYEkK6M0CVaWJoUXnWCVFLo -----END CERTIFICATE-----Generated at Wed Jan 21 10:28:43 2026 by rpki-client