This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/HC-zt-3R2ovtCh9-he6cDkJTokY.roa File: HC-zt-3R2ovtCh9-he6cDkJTokY.roa (raw, json) Hash identifier: 0wUArtr6TmfrN+q05ef0lSXzqlLLLREXy+DFbni0GoE= Subject key identifier: 1C:2F:B3:B7:ED:D1:DA:8B:ED:0A:1F:7E:85:EE:9C:0E:42:53:A2:46 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB0B6E0953D0F87D39109155D4D70B Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/HC-zt-3R2ovtCh9-he6cDkJTokY.roa Signing time: Fri 02 Jan 2026 08:20:17 +0000 ROA not before: Fri 02 Jan 2026 08:20:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7029 IP address blocks: 151.243.64.0/20 maxlen: 24 151.243.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:0b:6e:09:53:d0:f8:7d:39:10:91:55:d4:d7:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1c2fb3b7edd1da8bed0a1f7e85ee9c0e4253a246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8b:e1:4d:64:c1:aa:8e:bf:9d:73:4a:fc:33: ac:b2:d0:f5:f3:7c:dd:fd:dc:5f:ba:82:82:5d:3c: 74:56:c8:81:3c:78:21:9c:a3:c4:c6:29:0f:ad:b9: 2e:a6:4f:45:58:44:55:b9:40:fc:e4:cc:67:e8:39: b6:ca:bc:01:3c:b1:a0:ae:8f:0e:e0:5b:c0:5d:13: 03:2a:7f:31:0e:03:2e:30:02:27:52:06:79:4e:29: d4:26:9c:e1:94:52:c5:59:ff:0c:04:af:e4:57:cc: 80:42:f6:b0:f2:b9:05:8d:93:c9:c5:3e:d7:46:e3: 69:52:11:7c:48:f7:5c:1b:d1:83:98:23:2d:21:91: 87:a9:c9:68:76:e8:20:82:fe:a5:73:4c:ab:e2:aa: ed:13:e4:03:f5:57:7c:1f:01:08:16:ff:99:a7:c1: 46:6c:4a:f7:88:54:fd:e2:e2:44:b7:d8:b8:08:14: 36:12:51:ec:a4:45:7e:9f:d8:15:5e:75:0b:f9:af: 08:c6:ca:ed:d2:8a:87:b8:c2:b1:e7:a8:92:d6:e7: 29:62:13:8d:19:53:58:80:ec:cf:02:ed:ba:e9:fe: d6:07:a5:60:a4:ec:a4:ca:82:75:45:4b:91:3f:e7: f0:a1:50:39:8a:82:e0:a8:38:76:0a:dd:0c:6e:3e: e5:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:2F:B3:B7:ED:D1:DA:8B:ED:0A:1F:7E:85:EE:9C:0E:42:53:A2:46 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/HC-zt-3R2ovtCh9-he6cDkJTokY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.243.64.0/20 151.243.97.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:a9:06:0b:3a:66:1e:97:46:f9:42:04:16:88:8f:4e:25:e4: 98:82:6f:ec:dc:e9:c3:53:39:11:8b:1b:86:3f:ac:7a:08:48: f2:90:0b:b9:e0:40:0d:d5:09:a7:e8:3b:aa:63:9b:e9:02:06: 5c:4d:f2:6f:9d:70:58:bf:80:4f:57:e5:2c:65:72:45:0d:b7: 90:60:08:6c:96:3f:b4:9c:57:fc:f1:27:d8:a4:17:e1:79:07: 45:87:a0:28:fb:1f:88:ff:47:3b:a6:26:cc:c3:4c:5f:f8:a9: e1:f8:f9:7b:49:a2:dc:0c:46:0f:24:c8:1c:79:2c:f8:cd:e4: 88:62:87:c6:07:ab:95:41:90:dc:29:71:b2:fe:0c:6f:68:a4: a2:35:b4:ae:d4:a2:3b:e7:28:6a:b3:99:12:c7:a6:55:b2:4b: a8:16:62:02:c5:eb:86:9a:b8:dc:26:26:fb:c0:53:45:92:e1: 27:ff:81:69:b1:0e:05:67:c0:03:fc:6c:1b:ce:6c:e5:bb:70: 82:89:05:d1:2a:d7:b5:5b:2e:cd:bf:59:f8:77:d9:4b:4b:09: 0c:16:8a:34:ce:ef:23:3a:3e:92:32:33:d1:24:e2:23:88:e1: 2d:13:32:e9:ba:74:a0:b3:de:84:83:c4:1b:aa:1c:15:55:df: f0:11:7f:bf -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9ywtuCVPQ+H05EJFV1NcLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzJmYjNiN2VkZDFkYThiZWQwYTFmN2U4NWVlOWMwZTQyNTNhMjQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsovhTWTBqo6/nXNK/DOsstD183zd /dxfuoKCXTx0VsiBPHghnKPExikPrbkupk9FWERVuUD85Mxn6Dm2yrwBPLGgro8O 4FvAXRMDKn8xDgMuMAInUgZ5TinUJpzhlFLFWf8MBK/kV8yAQvaw8rkFjZPJxT7X RuNpUhF8SPdcG9GDmCMtIZGHqclodugggv6lc0yr4qrtE+QD9Vd8HwEIFv+Zp8FG bEr3iFT94uJEt9i4CBQ2ElHspEV+n9gVXnUL+a8Ixsrt0oqHuMKx56iS1ucpYhON GVNYgOzPAu266f7WB6VgpOykyoJ1RUuRP+fwoVA5ioLgqDh2Ct0Mbj7lvQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBwvs7ft0dqL7QoffoXunA5CU6JGMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvSEMtenQtM1Iyb3Z0Q2g5LWhlNmNEa0pUb2tZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEl/NAAwQA l/NhMA0GCSqGSIb3DQEBCwUAA4IBAQA6qQYLOmYel0b5QgQWiI9OJeSYgm/s3OnD UzkRixuGP6x6CEjykAu54EAN1Qmn6DuqY5vpAgZcTfJvnXBYv4BPV+UsZXJFDbeQ YAhslj+0nFf88SfYpBfheQdFh6Ao+x+I/0c7pibMw0xf+Knh+Pl7SaLcDEYPJMgc eSz4zeSIYofGB6uVQZDcKXGy/gxvaKSiNbSu1KI75yhqs5kSx6ZVskuoFmICxeuG mrjcJib7wFNFkuEn/4FpsQ4FZ8AD/Gwbzmzlu3CCiQXRKte1Wy7Nv1n4d9lLSwkM Foo0zu8jOj6SMjPRJOIjiOEtEzLpunSgs96Eg8QbqhwVVd/wEX+/ -----END CERTIFICATE-----Generated at Sun Jan 18 06:30:51 2026 by rpki-client