This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/HLNsB1T0fEp8sE8QkmRnuIqq2P0.roa File: HLNsB1T0fEp8sE8QkmRnuIqq2P0.roa (raw, json) Hash identifier: ntuGjaonHQJAiUd1pWH+WmzWne76FiBOK2IOI8INZRA= Subject key identifier: 1C:B3:6C:07:54:F4:7C:4A:7C:B0:4F:10:92:64:67:B8:8A:AA:D8:FD Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7 Certificate serial: 019B7CEDE3E56661C9FAD92AE556862D58D0 Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/HLNsB1T0fEp8sE8QkmRnuIqq2P0.roa Signing time: Fri 02 Jan 2026 04:18:43 +0000 ROA not before: Fri 02 Jan 2026 04:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64267 IP address blocks: 62.72.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:e3:e5:66:61:c9:fa:d9:2a:e5:56:86:2d:58:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7 Validity Not Before: Jan 2 04:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1cb36c0754f47c4a7cb04f10926467b88aaad8fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c1:ad:74:7f:86:4d:0f:e1:4c:82:1f:f9:8d: 7c:4d:1f:55:4f:0f:f2:94:46:e4:b7:37:2f:95:49: f0:cb:3a:d6:29:89:53:2c:23:18:6c:ef:10:6e:f1: 71:4d:a3:0a:06:bc:03:5b:f0:58:3a:bb:df:eb:98: 52:17:91:6e:a7:6e:47:35:e5:60:16:73:4e:87:06: 70:10:a8:91:2f:9e:23:8a:91:cc:10:97:c4:51:26: 3c:53:85:df:a4:30:8d:53:f6:ae:80:85:9c:1b:95: 93:22:f7:37:20:80:1e:cb:23:30:6b:07:3d:38:a4: a1:11:f5:54:06:86:fe:b0:54:4c:96:4b:1b:c7:70: bb:da:ed:e5:f6:b7:6a:19:a0:b0:ee:c0:a9:bf:01: 22:8f:0a:9e:66:12:fd:80:9b:94:ed:83:b0:3c:4c: 8b:63:b5:bc:ba:c5:81:04:57:50:f9:ba:8b:d8:82: 1e:ee:30:45:eb:75:8c:c1:d1:ac:79:a6:c7:e0:7f: b4:1b:bf:e3:e2:06:36:ab:73:89:83:70:fe:40:9c: c8:24:e5:f4:f5:98:55:aa:c2:29:a7:e4:a8:a1:b8: 09:ce:01:f3:dc:21:5a:8c:4b:35:a2:a2:76:01:88: 73:65:7a:59:5e:97:8e:b9:a4:9d:51:51:8b:20:d9: 87:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:B3:6C:07:54:F4:7C:4A:7C:B0:4F:10:92:64:67:B8:8A:AA:D8:FD X509v3 Authority Key Identifier: keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/HLNsB1T0fEp8sE8QkmRnuIqq2P0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.72.175.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:f1:a0:10:66:ab:12:92:6a:c8:b4:8e:ba:6d:1f:6d:17:81: 07:1b:e8:a5:d6:e9:04:67:f1:de:a2:ac:6b:20:93:52:ff:83: b9:6d:a7:37:6b:5c:2a:15:04:fa:c7:aa:35:3a:bd:c1:44:3f: 00:a1:28:39:9b:f3:e2:46:41:b7:16:bc:c8:ec:37:7b:bc:0a: 4f:5b:8d:fd:08:6f:89:26:f2:a3:1f:31:5d:61:40:92:61:3d: 82:18:5a:f4:60:96:c8:19:41:ec:2c:66:88:52:68:eb:36:e6: 54:fe:61:bb:55:61:54:a1:a7:aa:16:2f:24:9f:24:62:14:31: 96:0a:f5:52:1b:b0:a9:f4:bf:a4:15:51:c2:58:3e:e4:ee:89: 20:ae:6a:4e:b4:c6:e4:81:5a:bd:e7:9d:fb:cf:89:49:39:82: 3c:d5:f9:a1:14:a2:be:3e:d1:27:70:1b:de:db:ad:c7:bd:28: c2:a5:23:ab:d4:90:ea:3b:7e:49:05:41:1d:f1:36:b6:0d:57: bd:1c:ac:dc:11:04:f4:02:77:82:b6:2e:d9:3d:55:4e:a9:25: 83:ea:53:e7:80:87:07:01:0f:df:cb:cb:ef:1d:8a:5c:ed:17: e5:02:7b:4c:22:85:d1:fb:22:f1:f1:56:77:25:ab:f7:17:35: 3d:6f:00:6e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87ePlZmHJ+tkq5VaGLVjQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl ZTQ2ZDcwHhcNMjYwMTAyMDQxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxY2IzNmMwNzU0ZjQ3YzRhN2NiMDRmMTA5MjY0NjdiODhhYWFkOGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosGtdH+GTQ/hTIIf+Y18TR9VTw/y lEbktzcvlUnwyzrWKYlTLCMYbO8QbvFxTaMKBrwDW/BYOrvf65hSF5Fup25HNeVg FnNOhwZwEKiRL54jipHMEJfEUSY8U4XfpDCNU/augIWcG5WTIvc3IIAeyyMwawc9 OKShEfVUBob+sFRMlksbx3C72u3l9rdqGaCw7sCpvwEijwqeZhL9gJuU7YOwPEyL Y7W8usWBBFdQ+bqL2IIe7jBF63WMwdGseabH4H+0G7/j4gY2q3OJg3D+QJzIJOX0 9ZhVqsIpp+SoobgJzgHz3CFajEs1oqJ2AYhzZXpZXpeOuaSdUVGLINmHEwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFByzbAdU9HxKfLBPEJJkZ7iKqtj9MB8GA1UdIwQY MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt NTYyNDRmNDMwZGNjLzEvSExOc0IxVDBmRXA4c0U4UWttUm51SXFxMlAwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPkivMA0G CSqGSIb3DQEBCwUAA4IBAQBr8aAQZqsSkmrItI66bR9tF4EHG+il1ukEZ/Heoqxr IJNS/4O5bac3a1wqFQT6x6o1Or3BRD8AoSg5m/PiRkG3FrzI7Dd7vApPW439CG+J JvKjHzFdYUCSYT2CGFr0YJbIGUHsLGaIUmjrNuZU/mG7VWFUoaeqFi8knyRiFDGW CvVSG7Cp9L+kFVHCWD7k7okgrmpOtMbkgVq95537z4lJOYI81fmhFKK+PtEncBve 263HvSjCpSOr1JDqO35JBUEd8Ta2DVe9HKzcEQT0AneCti7ZPVVOqSWD6lPngIcH AQ/fy8vvHYpc7RflAntMIoXR+yLx8VZ3Jav3FzU9bwBu -----END CERTIFICATE-----Generated at Fri Jan 2 17:51:38 2026 by rpki-client