This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/hciHi1rbAPXC_QOxKxCBhhQcO_o.roa File: hciHi1rbAPXC_QOxKxCBhhQcO_o.roa (raw, json) Hash identifier: gpGy+g3ryjDdMYoZqZQTJLY4xwgqtQLamwKVVCAZNpQ= Subject key identifier: 85:C8:87:8B:5A:DB:00:F5:C2:FD:03:B1:2B:10:81:86:14:1C:3B:FA Certificate issuer: /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318 Certificate serial: 019B7C135920B1A5E58A6BD7187C2C05DFBF Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/hciHi1rbAPXC_QOxKxCBhhQcO_o.roa Signing time: Fri 02 Jan 2026 00:20:01 +0000 ROA not before: Fri 02 Jan 2026 00:20:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5511 IP address blocks: 45.11.52.0/24 maxlen: 24 45.11.176.0/24 maxlen: 24 45.133.141.0/24 maxlen: 24 45.133.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 01:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:59:20:b1:a5:e5:8a:6b:d7:18:7c:2c:05:df:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318 Validity Not Before: Jan 2 00:20:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=85c8878b5adb00f5c2fd03b12b108186141c3bfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f3:7c:d0:15:d2:0c:b6:4d:b0:23:7d:90:26: 67:c0:2e:e9:6a:f8:3f:3e:33:3b:7b:ff:7c:94:7a: c9:2c:41:43:03:8e:e6:41:38:6b:69:87:b5:94:67: 05:13:3f:f1:f7:af:d8:36:46:45:19:b0:35:9b:01: 4f:cc:8b:a3:38:53:7e:ea:fb:ae:f3:ea:8a:17:90: be:22:df:17:1a:3f:ea:5e:95:01:72:4c:49:c0:4b: 22:f7:f3:21:71:26:89:81:e9:f7:61:13:fe:52:54: 47:a5:23:25:67:57:e1:6a:ff:38:b9:40:66:d0:df: 56:83:91:27:61:13:64:84:71:83:4c:a1:b9:83:81: 3a:94:76:35:79:51:59:32:2c:f3:98:2c:03:73:44: 62:4a:1e:ef:f5:a1:0c:39:52:2d:93:12:f8:90:6f: c0:b0:23:6d:5c:8d:01:0c:4c:33:cd:fd:c3:43:7a: 4c:4f:46:d3:24:c4:ea:a8:e5:d4:8d:82:06:91:ef: 49:b5:c2:e7:7a:c6:af:e8:94:75:be:09:98:8d:39: b6:f1:3c:51:f4:9a:18:6d:2b:a6:6c:b2:24:eb:27: 4e:62:bb:86:c9:ae:ab:5f:3e:1e:03:55:c0:e8:36: 32:fd:ef:b0:08:b4:d0:33:4c:f8:a2:3d:71:f3:bb: 79:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:C8:87:8B:5A:DB:00:F5:C2:FD:03:B1:2B:10:81:86:14:1C:3B:FA X509v3 Authority Key Identifier: keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/hciHi1rbAPXC_QOxKxCBhhQcO_o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.11.52.0/24 45.11.176.0/24 45.133.141.0/24 45.133.143.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:67:66:cb:fe:2d:69:46:ac:11:2d:99:55:43:18:16:df:e4: af:46:88:f4:14:de:6e:7e:26:6a:4d:ec:ff:c5:14:60:be:a6: 1e:58:8d:f3:21:d6:4f:b3:34:1e:1f:bb:a9:82:49:e5:a1:cb: 1a:5c:c5:3d:3d:a7:ea:fb:5d:e9:1a:e3:88:78:56:25:01:7c: 05:f2:e5:66:46:ca:82:f6:51:82:e4:6a:80:d6:12:82:09:92: 64:08:d1:6c:16:35:62:ce:91:c4:3e:96:57:e3:b8:b7:9f:87: 49:31:3d:43:0d:59:e8:5a:a6:1d:fb:fc:94:08:d7:e8:df:9b: f8:55:e9:5e:37:95:b1:d2:01:63:c8:6f:94:c0:2c:74:62:a9: e8:7b:90:d9:1f:b8:e5:b5:8a:b2:a9:36:5d:db:4d:99:bc:9f: 3e:35:db:7c:e5:e0:08:02:cd:0d:ff:54:a1:77:e4:a5:cd:52: e5:a9:0d:e6:47:81:47:ab:c3:55:c5:0d:ac:d9:b3:b6:6a:3d: f9:d9:5b:b2:45:01:cc:6a:eb:31:25:9e:00:83:5c:dc:bd:12: a8:f4:cd:79:bb:5c:09:fb:9c:3e:6f:84:3c:23:a9:77:eb:9e: d3:c0:96:ce:dd:b5:0e:31:39:79:c7:c6:e9:27:ce:c2:3a:7b: d3:6a:25:3a -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt8E1kgsaXlimvXGHwsBd+/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlMWMxMTY1OGQyMDQxZWFmMjUwMmZlNTQwOGVkNDkzYmJk NGYzMTgwHhcNMjYwMTAyMDAyMDAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NWM4ODc4YjVhZGIwMGY1YzJmZDAzYjEyYjEwODE4NjE0MWMzYmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPN80BXSDLZNsCN9kCZnwC7pavg/ PjM7e/98lHrJLEFDA47mQThraYe1lGcFEz/x96/YNkZFGbA1mwFPzIujOFN+6vuu 8+qKF5C+It8XGj/qXpUBckxJwEsi9/MhcSaJgen3YRP+UlRHpSMlZ1fhav84uUBm 0N9Wg5EnYRNkhHGDTKG5g4E6lHY1eVFZMizzmCwDc0RiSh7v9aEMOVItkxL4kG/A sCNtXI0BDEwzzf3DQ3pMT0bTJMTqqOXUjYIGke9JtcLnesav6JR1vgmYjTm28TxR 9JoYbSumbLIk6ydOYruGya6rXz4eA1XA6DYy/e+wCLTQM0z4oj1x87t5iQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFIXIh4ta2wD1wv0DsSsQgYYUHDv6MB8GA1UdIwQY MBaAFI4cEWWNIEHq8lAv5UCO1JO71PMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamh3UlpZMGdRZXJ5VUNfbFFJN1VrN3ZVOHhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi83MGJmOGItZDhjNC00MGMzLTkwMjIt NjMzNDhjZGJmMDI0LzEvaGNpSGkxcmJBUFhDX1FPeEt4Q0JoaFFjT19vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi83MGJmOGItZDhjNC00MGMzLTkwMjItNjMzNDhjZGJmMDI0 LzEvamh3UlpZMGdRZXJ5VUNfbFFJN1VrN3ZVOHhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALQs0AwQA LQuwAwQALYWNAwQALYWPMA0GCSqGSIb3DQEBCwUAA4IBAQCdZ2bL/i1pRqwRLZlV QxgW3+SvRoj0FN5ufiZqTez/xRRgvqYeWI3zIdZPszQeH7upgknlocsaXMU9Pafq +13pGuOIeFYlAXwF8uVmRsqC9lGC5GqA1hKCCZJkCNFsFjVizpHEPpZX47i3n4dJ MT1DDVnoWqYd+/yUCNfo35v4VeleN5Wx0gFjyG+UwCx0Yqnoe5DZH7jltYqyqTZd 202ZvJ8+Ndt85eAIAs0N/1Shd+SlzVLlqQ3mR4FHq8NVxQ2s2bO2aj352VuyRQHM ausxJZ4Ag1zcvRKo9M15u1wJ+5w+b4Q8I6l3657TwJbO3bUOMTl5x8bpJ87COnvT aiU6 -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:02 2026 by rpki-client