This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/HRFCRunnn9wNoyI6JOFSdOd10yI.roa File: HRFCRunnn9wNoyI6JOFSdOd10yI.roa (raw, json) Hash identifier: yo5Bt9GIUkYOumvikP4co3jOtmyICwQImhbhqVKdEUY= Subject key identifier: 1D:11:42:46:E9:E7:9F:DC:0D:A3:22:3A:24:E1:52:74:E7:75:D3:22 Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e Certificate serial: 019B7AC8E534036234414B4EF832F8B10A6A Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/HRFCRunnn9wNoyI6JOFSdOd10yI.roa Signing time: Thu 01 Jan 2026 18:19:04 +0000 ROA not before: Thu 01 Jan 2026 18:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43763 IP address blocks: 79.132.32.0/19 maxlen: 19 95.171.128.0/19 maxlen: 19 213.176.192.0/19 maxlen: 19 2a00:ba80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:e5:34:03:62:34:41:4b:4e:f8:32:f8:b1:0a:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e Validity Not Before: Jan 1 18:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1d114246e9e79fdc0da3223a24e15274e775d322 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:88:b7:43:4b:1b:6c:54:22:e1:27:e3:f8:ad: 4e:55:16:82:0b:ac:56:45:88:50:81:ca:4e:72:a6: a0:40:ee:52:64:c0:69:b7:d9:c5:09:65:7e:34:21: 92:ab:1e:98:6a:1c:f4:ba:b4:24:89:fc:5e:3e:bd: 31:fa:e2:78:ee:d4:dc:62:7d:48:a2:2f:1c:bb:69: ae:90:77:24:97:3c:94:c3:4f:4f:1a:00:eb:ae:66: 39:3e:8d:33:2f:d5:ad:45:f0:e0:ec:f5:e7:36:1d: 60:f6:12:9c:f2:69:26:be:f0:64:4f:1c:4f:97:1b: 1e:39:0a:e7:8a:35:bc:ad:96:30:fc:26:1e:b2:aa: ee:e5:f3:ac:76:f1:36:ec:aa:98:8d:69:9a:39:d7: 27:e2:34:80:ae:29:28:2f:e2:f0:e8:0c:7c:3d:e5: d8:ad:48:69:0f:4d:28:51:30:b9:65:ff:eb:d9:07: 85:df:4b:48:56:a7:cf:de:97:91:e6:2a:12:04:e0: 2e:20:d5:a4:bb:ae:33:3c:8f:4f:87:08:34:42:15: 65:70:8d:55:6b:c3:36:62:79:93:20:81:a3:eb:31: 43:91:96:82:ee:77:d0:91:04:85:cb:e4:cb:8c:56: dd:52:3f:88:6d:a5:9d:b3:23:f5:8b:e6:38:69:dc: 3a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:11:42:46:E9:E7:9F:DC:0D:A3:22:3A:24:E1:52:74:E7:75:D3:22 X509v3 Authority Key Identifier: keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/HRFCRunnn9wNoyI6JOFSdOd10yI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.132.32.0/19 95.171.128.0/19 213.176.192.0/19 IPv6: 2a00:ba80::/32 Signature Algorithm: sha256WithRSAEncryption 11:a6:ed:50:b4:5c:12:cc:b2:31:f5:7a:2b:b0:10:ad:75:ef: 45:a1:d3:bf:63:23:93:0e:90:41:46:57:7d:64:95:66:05:ba: 47:85:6c:d1:d4:f4:ca:56:13:15:0a:b7:9c:6e:e1:34:53:66: a0:79:9f:b4:83:6d:da:9c:22:7f:b8:9d:25:ba:af:52:50:86: 0c:4b:88:99:4b:79:74:79:73:65:d0:56:85:53:fd:ce:02:1f: aa:33:d5:18:a3:94:d0:a5:bc:5b:05:b2:4e:d5:ff:68:9c:91: a6:0b:ff:95:3e:b4:51:7e:a7:a5:d8:93:e1:5e:07:b0:47:9c: 6c:f9:84:24:81:d2:00:47:e7:2a:48:ba:24:13:38:7d:22:c5: f5:23:e6:5a:4f:4f:a8:83:6c:06:b1:28:f9:bb:b0:fe:ec:23: 15:9b:9c:61:b4:ef:14:68:c7:68:ee:f9:6a:95:dc:e7:7c:51: 35:fc:c6:a7:df:aa:ff:d7:82:10:88:2e:fb:2d:15:60:a7:d0: d5:dd:0a:56:24:b4:a4:22:6c:7c:29:87:f1:32:ce:06:ff:f6: 9b:a2:3a:fb:5b:51:84:90:7d:97:2d:3a:03:ee:2b:42:be:0c: 0b:c7:a0:79:7d:e3:a3:7e:d2:f9:26:5f:d5:84:68:12:dc:54: c0:3a:85:07 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt6yOU0A2I0QUtO+DL4sQpqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwZWY1ZmJiZmNhN2E5M2NmZWU5NjVlZWI2YmRlZTZmYjQz YzQwM2UwHhcNMjYwMTAxMTgxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZDExNDI0NmU5ZTc5ZmRjMGRhMzIyM2EyNGUxNTI3NGU3NzVkMzIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1oi3Q0sbbFQi4Sfj+K1OVRaCC6xW RYhQgcpOcqagQO5SZMBpt9nFCWV+NCGSqx6Yahz0urQkifxePr0x+uJ47tTcYn1I oi8cu2mukHcklzyUw09PGgDrrmY5Po0zL9WtRfDg7PXnNh1g9hKc8mkmvvBkTxxP lxseOQrnijW8rZYw/CYesqru5fOsdvE27KqYjWmaOdcn4jSArikoL+Lw6Ax8PeXY rUhpD00oUTC5Zf/r2QeF30tIVqfP3peR5ioSBOAuINWku64zPI9Phwg0QhVlcI1V a8M2YnmTIIGj6zFDkZaC7nfQkQSFy+TLjFbdUj+IbaWdsyP1i+Y4adw6swIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFB0RQkbp55/cDaMiOiThUnTnddMiMB8GA1UdIwQY MBaAFKDvX7v8p6k8/ull7ra97m+0PEA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2Mt MDI5MmIwMjAxNTBhLzEvSFJGQ1J1bm5uOXdOb3lJNkpPRlNkT2QxMHlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2MtMDI5MmIwMjAxNTBh LzEvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQFT4QgAwQF X6uAAwQF1bDAMA0EAgACMAcDBQAqALqAMA0GCSqGSIb3DQEBCwUAA4IBAQARpu1Q tFwSzLIx9XorsBCtde9FodO/YyOTDpBBRld9ZJVmBbpHhWzR1PTKVhMVCrecbuE0 U2ageZ+0g23anCJ/uJ0luq9SUIYMS4iZS3l0eXNl0FaFU/3OAh+qM9UYo5TQpbxb BbJO1f9onJGmC/+VPrRRfqel2JPhXgewR5xs+YQkgdIAR+cqSLokEzh9IsX1I+Za T0+og2wGsSj5u7D+7CMVm5xhtO8UaMdo7vlqldznfFE1/Man36r/14IQiC77LRVg p9DV3QpWJLSkImx8KYfxMs4G//abojr7W1GEkH2XLToD7itCvgwLx6B5feOjftL5 Jl/VhGgS3FTAOoUH -----END CERTIFICATE-----Generated at Mon Jan 26 20:58:14 2026 by rpki-client