This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/0_HobXUa4pAKJChtg_d9Je0IViU.roa File: 0_HobXUa4pAKJChtg_d9Je0IViU.roa (raw, json) Hash identifier: E6uDWpA1xFmKVRgmZURz9q/C8oteX3c+p3Gi6l03nt0= Subject key identifier: D3:F1:E8:6D:75:1A:E2:90:0A:24:28:6D:83:F7:7D:25:ED:08:56:25 Certificate issuer: /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318 Certificate serial: 019B7C135B34986F6FE4246B5378DA726700 Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/0_HobXUa4pAKJChtg_d9Je0IViU.roa Signing time: Fri 02 Jan 2026 00:20:01 +0000 ROA not before: Fri 02 Jan 2026 00:20:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39855 IP address blocks: 45.11.53.0/24 maxlen: 24 45.11.54.0/23 maxlen: 24 45.11.177.0/24 maxlen: 24 45.11.178.0/23 maxlen: 24 45.13.108.0/24 maxlen: 24 45.13.109.0/24 maxlen: 24 45.13.110.0/23 maxlen: 24 45.14.217.0/24 maxlen: 24 45.14.218.0/23 maxlen: 24 45.91.117.0/24 maxlen: 24 45.133.140.0/24 maxlen: 24 45.133.142.0/24 maxlen: 24 91.212.20.0/24 maxlen: 24 91.212.27.0/24 maxlen: 24 193.39.246.0/24 maxlen: 24 195.80.230.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:5b:34:98:6f:6f:e4:24:6b:53:78:da:72:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318 Validity Not Before: Jan 2 00:20:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d3f1e86d751ae2900a24286d83f77d25ed085625 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:3f:36:8a:e8:c9:fc:1f:26:21:ff:84:60:95: 74:65:c4:51:b7:7c:3a:5c:d1:12:5d:73:15:c4:df: c5:40:0d:01:34:f6:23:8e:9a:d6:4b:08:65:4e:1a: 69:d6:22:aa:94:76:53:9f:94:f9:70:dc:03:7e:ed: 65:74:10:5f:aa:da:49:ea:ed:38:19:98:b6:cd:62: 1f:09:dc:e7:52:aa:81:57:4f:56:89:e6:7a:a5:ee: a2:92:2c:38:bd:f2:4d:91:43:dd:fa:0a:ac:d5:13: 31:7d:cc:b9:7d:e0:39:80:5d:ec:a1:f9:3b:88:2d: d5:bb:a0:b2:cb:4b:38:c5:fa:f4:ab:ed:8d:9e:57: 96:44:e4:94:51:0c:9f:be:b2:ae:51:8b:42:f7:82: f3:08:ed:2f:ba:01:02:fc:72:5c:a8:15:5e:c6:d5: 10:24:9a:17:db:47:5f:f4:e3:72:3e:89:62:f2:23: 07:69:f3:2b:9e:c8:f7:64:20:a6:6a:36:1b:89:2a: 1c:c4:34:01:19:46:02:ea:4b:ce:cf:0d:0f:85:dc: 9b:98:4d:be:7f:99:76:66:11:78:65:3e:84:d7:09: 3f:f7:fc:10:a7:e6:98:b4:a6:1c:b3:9a:dd:20:f4: 53:98:bb:46:50:f3:9a:e4:71:c7:4b:06:23:98:64: d2:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:F1:E8:6D:75:1A:E2:90:0A:24:28:6D:83:F7:7D:25:ED:08:56:25 X509v3 Authority Key Identifier: keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/0_HobXUa4pAKJChtg_d9Je0IViU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.11.53.0-45.11.55.255 45.11.177.0-45.11.179.255 45.13.108.0/22 45.14.217.0-45.14.219.255 45.91.117.0/24 45.133.140.0/24 45.133.142.0/24 91.212.20.0/24 91.212.27.0/24 193.39.246.0/24 195.80.230.0/23 Signature Algorithm: sha256WithRSAEncryption 26:12:9d:df:8f:87:03:ae:ae:40:b4:a8:47:04:fc:a2:2d:4a: ab:bb:95:b5:31:f6:50:4f:50:13:f1:aa:5a:1a:b3:f4:e3:4b: 64:dc:67:19:0a:8a:bf:29:88:7d:06:a1:15:94:1a:9b:d9:a4: a9:94:8a:30:78:40:a9:6a:f5:85:55:ad:54:0c:ba:40:4a:79: 9c:bb:33:e0:4b:77:ab:e3:f2:d3:99:74:75:38:4d:27:f3:84: 76:84:12:86:c7:73:26:8c:77:29:87:7b:5c:3c:b0:4a:41:59: b1:e6:b7:5d:8d:59:2a:02:e9:4f:0d:16:29:56:75:5a:89:da: 31:e5:44:cd:a0:94:c5:f2:ea:ed:4b:f6:ce:cd:9d:b0:cc:d2: f8:ad:e6:f5:75:79:33:57:ad:42:5f:92:e9:73:41:b9:b9:67: 12:e4:c1:aa:aa:d4:e1:3f:b6:e6:32:17:e6:3d:7e:0e:f9:89: 21:fb:d5:1d:64:c6:b2:10:26:87:85:f5:72:4c:a3:e1:65:f9: b1:27:a2:7b:fc:9f:a4:7d:2f:83:f0:f7:df:5a:d8:96:22:b4: 19:7b:b6:6e:1a:3b:b4:da:19:cc:c7:85:34:2a:61:10:f2:85: 75:60:24:18:40:91:d3:93:90:34:13:f8:39:17:1d:ee:b3:7e: 17:c6:79:f6 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgISAZt8E1s0mG9v5CRrU3jacmcAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlMWMxMTY1OGQyMDQxZWFmMjUwMmZlNTQwOGVkNDkzYmJk NGYzMTgwHhcNMjYwMTAyMDAyMDAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkM2YxZTg2ZDc1MWFlMjkwMGEyNDI4NmQ4M2Y3N2QyNWVkMDg1NjI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6D82iujJ/B8mIf+EYJV0ZcRRt3w6 XNESXXMVxN/FQA0BNPYjjprWSwhlThpp1iKqlHZTn5T5cNwDfu1ldBBfqtpJ6u04 GZi2zWIfCdznUqqBV09WieZ6pe6ikiw4vfJNkUPd+gqs1RMxfcy5feA5gF3sofk7 iC3Vu6Cyy0s4xfr0q+2NnleWROSUUQyfvrKuUYtC94LzCO0vugEC/HJcqBVextUQ JJoX20df9ONyPoli8iMHafMrnsj3ZCCmajYbiSocxDQBGUYC6kvOzw0PhdybmE2+ f5l2ZhF4ZT6E1wk/9/wQp+aYtKYcs5rdIPRTmLtGUPOa5HHHSwYjmGTSYQIDAQAB o4ICXTCCAlkwHQYDVR0OBBYEFNPx6G11GuKQCiQobYP3fSXtCFYlMB8GA1UdIwQY MBaAFI4cEWWNIEHq8lAv5UCO1JO71PMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamh3UlpZMGdRZXJ5VUNfbFFJN1VrN3ZVOHhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi83MGJmOGItZDhjNC00MGMzLTkwMjIt NjMzNDhjZGJmMDI0LzEvMF9Ib2JYVWE0cEFLSkNodGdfZDlKZTBJVmlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi83MGJmOGItZDhjNC00MGMzLTkwMjItNjMzNDhjZGJmMDI0 LzEvamh3UlpZMGdRZXJ5VUNfbFFJN1VrN3ZVOHhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHMGCCsGAQUFBwEHAQH/BGQwYjBgBAIAATBaMAwDBAAtCzUD BAMtCzAwDAMEAC0LsQMEAi0LsAMEAi0NbDAMAwQALQ7ZAwQCLQ7YAwQALVt1AwQA LYWMAwQALYWOAwQAW9QUAwQAW9QbAwQAwSf2AwQBw1DmMA0GCSqGSIb3DQEBCwUA A4IBAQAmEp3fj4cDrq5AtKhHBPyiLUqru5W1MfZQT1AT8apaGrP040tk3GcZCoq/ KYh9BqEVlBqb2aSplIoweECpavWFVa1UDLpASnmcuzPgS3er4/LTmXR1OE0n84R2 hBKGx3MmjHcph3tcPLBKQVmx5rddjVkqAulPDRYpVnVaidox5UTNoJTF8urtS/bO zZ2wzNL4reb1dXkzV61CX5Lpc0G5uWcS5MGqqtThP7bmMhfmPX4O+Ykh+9UdZMay ECaHhfVyTKPhZfmxJ6J7/J+kfS+D8PffWtiWIrQZe7ZuGju02hnMx4U0KmEQ8oV1 YCQYQJHTk5A0E/g5Fx3us34Xxnn2 -----END CERTIFICATE-----Generated at Tue Jan 20 00:55:59 2026 by rpki-client