This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/_hpclHlIZte0xX5RgcOAkIxFwGw.roa File: _hpclHlIZte0xX5RgcOAkIxFwGw.roa (raw, json) Hash identifier: sNFcWtzwZnA1Mazxf67L1KSXu+ewQXDcyZBDKQGfWuw= Subject key identifier: FE:1A:5C:94:79:48:66:D7:B4:C5:7E:51:81:C3:80:90:8C:45:C0:6C Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9 Certificate serial: 019B7F846E3C1B327054003EDB89D7135C2D Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/_hpclHlIZte0xX5RgcOAkIxFwGw.roa Signing time: Fri 02 Jan 2026 16:22:23 +0000 ROA not before: Fri 02 Jan 2026 16:22:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201364 IP address blocks: 213.74.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:6e:3c:1b:32:70:54:00:3e:db:89:d7:13:5c:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9 Validity Not Before: Jan 2 16:22:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fe1a5c94794866d7b4c57e5181c380908c45c06c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:2e:6c:28:40:42:3b:51:4d:5e:b1:ef:d7:85: bc:68:fc:4c:7b:42:39:7c:96:e6:79:77:26:3d:69: 98:07:d2:35:ba:4a:4e:ac:6c:32:77:31:9d:20:68: e9:9b:ca:01:f5:c1:0e:42:e7:74:69:26:a8:6c:b4: 90:4f:07:e4:b1:8d:9f:aa:ab:e0:ae:f9:9d:3e:12: 15:24:12:f7:a2:d0:7b:94:70:ae:a5:cb:0e:86:42: ca:c2:f5:af:5b:e0:a1:a2:9e:e7:e3:81:80:6b:2a: 93:cd:58:3d:33:62:5f:6a:21:0b:85:2a:0b:b0:b7: b9:7e:33:bc:21:59:2a:1d:44:10:43:8d:6c:50:e8: 98:67:73:ca:99:e2:ce:9e:aa:e7:40:06:a9:1e:76: 61:4a:d3:e3:27:69:68:79:5e:30:42:ba:bc:ec:6e: 9d:e7:b4:70:c8:d9:c5:cc:de:52:af:0e:e3:85:05: 6a:08:b2:ce:19:ec:91:d5:b2:4b:48:29:02:9d:2b: 0f:21:c4:84:b2:83:87:82:b6:b8:1b:b1:a6:f4:37: 0f:23:b9:9e:e9:f9:5b:3b:c4:b1:4c:5b:24:92:4c: 52:fd:f7:bb:63:6c:ab:ab:76:16:61:01:ea:ac:6f: a1:6e:14:6a:ee:66:ac:4f:66:0b:a2:23:f1:71:06: 2b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:1A:5C:94:79:48:66:D7:B4:C5:7E:51:81:C3:80:90:8C:45:C0:6C X509v3 Authority Key Identifier: keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/_hpclHlIZte0xX5RgcOAkIxFwGw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.74.40.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:15:99:c6:98:0e:6a:bf:31:2c:b3:b2:87:a1:41:ba:59:aa: 0d:aa:8f:76:6a:aa:5c:f2:21:28:35:eb:dc:76:43:a7:77:c7: fc:e9:61:d6:c2:93:88:7b:e0:f3:01:e3:f6:50:11:c8:9f:c7: 6e:b7:93:59:2e:93:da:ed:0d:6e:31:99:b8:c5:cf:22:c3:70: 9b:fe:2f:49:38:fa:31:d9:27:b3:1b:8f:d6:72:0c:91:5e:db: b0:b0:d4:e7:fd:3f:37:4c:e7:11:0e:9e:3d:17:33:65:6c:ec: b6:8b:97:49:df:70:af:9f:db:6d:96:3d:ad:21:a6:cc:40:93: 33:bb:ee:57:c5:6c:f7:91:1e:49:ac:52:d6:bf:1f:e2:0a:1e: ec:c6:68:87:eb:82:3e:7c:68:4f:2c:01:ea:b7:bf:02:8f:14: 94:94:9e:69:df:89:7e:a6:31:d5:ad:55:9a:e2:69:91:84:b7: 68:ed:f8:f6:c1:57:5a:9a:d6:21:ee:fa:cb:19:61:de:72:92: 24:ff:c8:26:94:9e:d5:5b:e4:d7:03:56:1b:4e:c3:93:8b:0e: 1b:d1:32:8c:b4:cf:19:f7:29:de:2a:81:d8:43:4b:6a:15:5f: 36:c0:22:53:1e:b5:cf:88:77:12:f6:79:64:75:d5:34:9d:27: 33:4a:6f:af -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hG48GzJwVAA+24nXE1wtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkNTljNDMyM2Y3NjdjZTRmZmM4NWRhYWQyMDhiOTBjMDRm YmQzZTkwHhcNMjYwMTAyMTYyMjIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZTFhNWM5NDc5NDg2NmQ3YjRjNTdlNTE4MWMzODA5MDhjNDVjMDZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4y5sKEBCO1FNXrHv14W8aPxMe0I5 fJbmeXcmPWmYB9I1ukpOrGwydzGdIGjpm8oB9cEOQud0aSaobLSQTwfksY2fqqvg rvmdPhIVJBL3otB7lHCupcsOhkLKwvWvW+Chop7n44GAayqTzVg9M2JfaiELhSoL sLe5fjO8IVkqHUQQQ41sUOiYZ3PKmeLOnqrnQAapHnZhStPjJ2loeV4wQrq87G6d 57RwyNnFzN5Srw7jhQVqCLLOGeyR1bJLSCkCnSsPIcSEsoOHgra4G7Gm9DcPI7me 6flbO8SxTFskkkxS/fe7Y2yrq3YWYQHqrG+hbhRq7masT2YLoiPxcQYrcQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP4aXJR5SGbXtMV+UYHDgJCMRcBsMB8GA1UdIwQY MBaAFI1ZxDI/dnzk/8hdqtIIuQwE+9PpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUt ZjJiZTlmNmM2NjRjLzEvX2hwY2xIbEladGUweFg1UmdjT0FrSXhGd0d3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUtZjJiZTlmNmM2NjRj LzEvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1UooMA0G CSqGSIb3DQEBCwUAA4IBAQBdFZnGmA5qvzEss7KHoUG6WaoNqo92aqpc8iEoNevc dkOnd8f86WHWwpOIe+DzAeP2UBHIn8dut5NZLpPa7Q1uMZm4xc8iw3Cb/i9JOPox 2SezG4/WcgyRXtuwsNTn/T83TOcRDp49FzNlbOy2i5dJ33Cvn9ttlj2tIabMQJMz u+5XxWz3kR5JrFLWvx/iCh7sxmiH64I+fGhPLAHqt78CjxSUlJ5p34l+pjHVrVWa 4mmRhLdo7fj2wVdamtYh7vrLGWHecpIk/8gmlJ7VW+TXA1YbTsOTiw4b0TKMtM8Z 9yneKoHYQ0tqFV82wCJTHrXPiHcS9nlkddU0nSczSm+v -----END CERTIFICATE-----Generated at Mon Jan 26 08:38:52 2026 by rpki-client