This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/HPV5KNreTn-ndPi-edo2rCVgVI8.roa File: HPV5KNreTn-ndPi-edo2rCVgVI8.roa (raw, json) Hash identifier: HVrf5RXGNU0t+fwJz4v7TgL4S/YJVRHGz93MDCDoTdU= Subject key identifier: 1C:F5:79:28:DA:DE:4E:7F:A7:74:F8:BE:79:DA:36:AC:25:60:54:8F Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7 Certificate serial: 019B7CEDE35DEED4AB241F5DAE3E7AD963D7 Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/HPV5KNreTn-ndPi-edo2rCVgVI8.roa Signing time: Fri 02 Jan 2026 04:18:43 +0000 ROA not before: Fri 02 Jan 2026 04:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 63199 IP address blocks: 81.21.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:e3:5d:ee:d4:ab:24:1f:5d:ae:3e:7a:d9:63:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7 Validity Not Before: Jan 2 04:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1cf57928dade4e7fa774f8be79da36ac2560548f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ec:f6:2d:47:63:99:ed:0e:15:02:94:c8:0d: 3b:ee:47:25:c2:64:75:74:51:5a:2b:12:37:05:bb: 95:2d:0b:4a:7b:ef:2f:09:6b:73:7f:97:70:0e:ee: 32:e2:8b:e2:81:e6:4f:1f:ac:db:c2:7f:43:38:f1: 61:57:06:3d:6a:8e:85:7f:81:92:7a:1d:4a:85:92: 2a:5c:d5:d6:7f:06:2d:32:4d:e0:b8:66:44:0e:c5: 64:53:bd:3f:7c:b6:71:dd:43:96:ae:6c:a1:87:f0: 84:ed:82:20:ce:d3:fb:28:25:4e:c3:00:ba:e4:23: c2:60:6c:58:ce:48:d3:56:aa:75:f4:3c:bc:8d:57: fb:ca:e6:eb:89:4d:cd:c5:d5:c7:d9:77:bf:26:95: 8f:0a:b1:55:9f:dc:d1:0a:8f:73:0b:df:be:ab:0c: d6:ff:ea:c7:05:d8:ad:d9:c1:b5:68:a9:13:1c:40: 16:46:07:9d:65:53:d9:ac:39:a3:02:58:4a:42:c0: 87:04:71:85:d1:66:b6:8c:d2:96:e1:6b:f0:42:03: 67:24:e6:68:a3:0b:5e:5b:a6:e8:3c:4e:a1:a4:42: 0e:95:f8:71:0d:ff:fc:8d:36:df:80:3b:48:ee:f2: 0f:24:f7:fe:03:32:dc:43:e2:e1:0c:8a:a8:fa:95: 46:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:F5:79:28:DA:DE:4E:7F:A7:74:F8:BE:79:DA:36:AC:25:60:54:8F X509v3 Authority Key Identifier: keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/HPV5KNreTn-ndPi-edo2rCVgVI8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.21.7.0/24 Signature Algorithm: sha256WithRSAEncryption a4:8e:1c:c2:51:c0:ad:6a:ba:86:1b:45:ec:ae:8e:be:7e:ea: bc:c5:ae:a6:fc:49:10:fa:e4:a9:33:f6:19:67:79:a1:58:0b: 3d:dc:7e:64:c5:ea:f4:9d:5d:53:c1:f9:bd:d8:27:4b:de:80: 3f:f1:bf:32:8e:78:a0:b7:c1:d7:15:45:cb:37:4b:d1:98:11: 2d:a8:a1:f6:b6:f1:51:a1:3b:46:e6:38:af:9b:b6:51:28:61: ec:2d:d2:e9:aa:2f:34:10:85:2b:0a:99:a5:7d:78:98:82:a8: 09:00:4b:b0:c4:ad:ac:ba:da:43:af:46:90:2f:8c:ea:5f:41: fe:d9:1c:2b:ed:7b:a1:09:4a:ef:05:c5:76:e0:34:d5:73:16: 69:aa:50:f9:3d:14:ba:05:f8:ad:f8:2f:a1:86:fa:71:17:0f: 3d:20:a6:f2:a3:18:37:67:a9:d8:79:ec:66:d1:fa:0a:24:72: 8c:be:15:a4:09:4a:67:14:01:41:f9:84:bb:ca:64:90:3f:da: 91:6d:ee:bd:75:cf:92:47:aa:d8:30:12:db:d6:8c:fa:97:dc: 06:41:45:0f:d2:78:70:46:6b:51:c1:f3:de:5d:18:de:63:ac: ee:3f:9e:c5:ca:94:99:ed:de:76:e4:35:a2:63:ca:25:27:8a: 32:ba:d3:28 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87eNd7tSrJB9drj562WPXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl ZTQ2ZDcwHhcNMjYwMTAyMDQxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxY2Y1NzkyOGRhZGU0ZTdmYTc3NGY4YmU3OWRhMzZhYzI1NjA1NDhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuez2LUdjme0OFQKUyA077kclwmR1 dFFaKxI3BbuVLQtKe+8vCWtzf5dwDu4y4ovigeZPH6zbwn9DOPFhVwY9ao6Ff4GS eh1KhZIqXNXWfwYtMk3guGZEDsVkU70/fLZx3UOWrmyhh/CE7YIgztP7KCVOwwC6 5CPCYGxYzkjTVqp19Dy8jVf7yubriU3NxdXH2Xe/JpWPCrFVn9zRCo9zC9++qwzW /+rHBdit2cG1aKkTHEAWRgedZVPZrDmjAlhKQsCHBHGF0Wa2jNKW4WvwQgNnJOZo owteW6boPE6hpEIOlfhxDf/8jTbfgDtI7vIPJPf+AzLcQ+LhDIqo+pVGpwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBz1eSja3k5/p3T4vnnaNqwlYFSPMB8GA1UdIwQY MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt NTYyNDRmNDMwZGNjLzEvSFBWNUtOcmVUbi1uZFBpLWVkbzJyQ1ZnVkk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAURUHMA0G CSqGSIb3DQEBCwUAA4IBAQCkjhzCUcCtarqGG0Xsro6+fuq8xa6m/EkQ+uSpM/YZ Z3mhWAs93H5kxer0nV1Twfm92CdL3oA/8b8yjnigt8HXFUXLN0vRmBEtqKH2tvFR oTtG5jivm7ZRKGHsLdLpqi80EIUrCpmlfXiYgqgJAEuwxK2sutpDr0aQL4zqX0H+ 2Rwr7XuhCUrvBcV24DTVcxZpqlD5PRS6Bfit+C+hhvpxFw89IKbyoxg3Z6nYeexm 0foKJHKMvhWkCUpnFAFB+YS7ymSQP9qRbe69dc+SR6rYMBLb1oz6l9wGQUUP0nhw RmtRwfPeXRjeY6zuP57FypSZ7d525DWiY8olJ4oyutMo -----END CERTIFICATE-----Generated at Fri Jan 2 17:50:40 2026 by rpki-client