This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/Hbn8x0ebxYPZ2S4cZB-DuECWRIY.roa File: Hbn8x0ebxYPZ2S4cZB-DuECWRIY.roa (raw, json) Hash identifier: vgpms375ZNHUjcZk9fgkMXFPfvTYsPPbiXsTHzCrq6o= Subject key identifier: 1D:B9:FC:C7:47:9B:C5:83:D9:D9:2E:1C:64:1F:83:B8:40:96:44:86 Certificate issuer: /CN=21fc142f7d75a714b9acc653d0b5ced337ca4495 Certificate serial: 019B797E615FEEAC2F3B302E1B2BC1BACCD1 Authority key identifier: 21:FC:14:2F:7D:75:A7:14:B9:AC:C6:53:D0:B5:CE:D3:37:CA:44:95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IfwUL311pxS5rMZT0LXO0zfKRJU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/Hbn8x0ebxYPZ2S4cZB-DuECWRIY.roa Signing time: Thu 01 Jan 2026 12:18:04 +0000 ROA not before: Thu 01 Jan 2026 12:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199278 IP address blocks: 185.17.76.0/22 maxlen: 22 185.17.76.0/24 maxlen: 24 185.17.77.0/24 maxlen: 24 185.17.77.0/28 maxlen: 28 185.17.78.0/24 maxlen: 24 185.17.79.0/24 maxlen: 24 185.17.79.0/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.mft rsync://rpki.ripe.net/repository/DEFAULT/IfwUL311pxS5rMZT0LXO0zfKRJU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:61:5f:ee:ac:2f:3b:30:2e:1b:2b:c1:ba:cc:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21fc142f7d75a714b9acc653d0b5ced337ca4495 Validity Not Before: Jan 1 12:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1db9fcc7479bc583d9d92e1c641f83b840964486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:60:b3:13:f5:3d:79:61:45:63:42:25:40:c6: 98:65:f0:f9:1f:98:46:d8:da:cf:92:4f:d6:7e:ad: a9:a6:6e:6c:2f:e2:4a:b2:7d:ee:e2:32:1d:88:04: 9b:47:70:0c:31:d1:3d:20:fb:bc:3a:29:0f:48:3b: 25:4c:e0:44:6c:62:89:43:06:71:d7:b8:8a:65:6c: 1a:80:50:7f:d3:46:02:8f:c9:23:ed:e4:46:cb:04: ed:44:5a:b7:2b:57:fb:e3:c1:8c:b7:69:b1:c4:b9: 03:3b:01:6a:d2:59:78:b8:29:a8:69:a2:41:06:87: bb:41:d9:b9:53:60:43:8c:59:6b:cb:a0:63:dc:37: 39:26:89:15:ea:e0:50:20:cc:d1:ca:37:e1:dd:8b: c2:b5:5a:27:3f:bb:08:cd:8f:ca:f1:55:ee:ae:2f: 50:53:51:25:6d:f2:99:4a:c3:cb:d3:44:fe:11:96: 78:5e:77:6a:b0:7b:58:24:54:8c:4c:12:76:f6:d3: 2e:8a:ae:1d:b1:bf:e2:8a:81:74:19:fb:e5:4d:32: 48:bf:a8:47:3e:c4:16:22:fb:15:d0:89:c0:59:b2: 94:0a:a9:f3:88:67:7c:94:46:75:6e:ee:1f:ce:0d: 40:85:a0:1a:be:3f:fe:a5:ff:6b:3e:55:80:fd:b8: 89:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:B9:FC:C7:47:9B:C5:83:D9:D9:2E:1C:64:1F:83:B8:40:96:44:86 X509v3 Authority Key Identifier: keyid:21:FC:14:2F:7D:75:A7:14:B9:AC:C6:53:D0:B5:CE:D3:37:CA:44:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IfwUL311pxS5rMZT0LXO0zfKRJU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/Hbn8x0ebxYPZ2S4cZB-DuECWRIY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.17.76.0/22 Signature Algorithm: sha256WithRSAEncryption 13:a0:34:f9:d0:96:4a:ca:3b:6c:0c:54:b7:6e:39:01:62:94: 9d:cc:8b:08:b0:e4:92:4c:b4:02:d1:ae:12:95:24:de:27:e2: a6:dc:ba:2e:29:46:49:93:c7:8d:16:30:5e:85:7b:8a:6f:b6: a7:aa:64:bd:fb:27:41:85:fd:5c:e4:dd:ac:8f:02:c1:3f:c9: a2:08:aa:20:bb:4c:5a:c5:3c:c2:f7:38:db:b8:f9:2e:03:49: c9:26:7e:4f:26:03:81:16:1b:04:4b:f4:77:cf:00:1d:94:7c: a0:b3:d1:b3:46:df:5f:9e:33:a8:6c:b1:0f:f0:28:1c:c0:a6: fc:f1:74:14:30:0e:73:f5:11:0e:7a:d6:9a:89:d3:30:53:ac: dd:fe:23:44:be:dd:e1:b3:e2:8d:6e:dc:e4:a1:fb:b6:06:bf: 27:24:71:f4:d4:c2:39:cd:98:16:e9:01:07:fe:3b:50:31:a7: 4d:d0:39:11:c1:ee:dc:2e:ec:da:45:d4:42:54:ee:3d:b5:2d: f8:30:7c:ad:97:8c:58:5b:a4:50:08:a1:4b:7f:a6:03:5e:65: 7f:8e:22:00:8e:07:f8:e3:0a:6d:99:36:0f:0e:5d:0f:df:b1: 85:8b:b8:d0:e6:07:b4:53:71:00:61:74:4b:a7:ef:b7:8c:05: 02:e2:7a:64 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fmFf7qwvOzAuGyvBuszRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxZmMxNDJmN2Q3NWE3MTRiOWFjYzY1M2QwYjVjZWQzMzdj YTQ0OTUwHhcNMjYwMTAxMTIxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZGI5ZmNjNzQ3OWJjNTgzZDlkOTJlMWM2NDFmODNiODQwOTY0NDg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32CzE/U9eWFFY0IlQMaYZfD5H5hG 2NrPkk/Wfq2ppm5sL+JKsn3u4jIdiASbR3AMMdE9IPu8OikPSDslTOBEbGKJQwZx 17iKZWwagFB/00YCj8kj7eRGywTtRFq3K1f748GMt2mxxLkDOwFq0ll4uCmoaaJB Boe7Qdm5U2BDjFlry6Bj3Dc5JokV6uBQIMzRyjfh3YvCtVonP7sIzY/K8VXuri9Q U1ElbfKZSsPL00T+EZZ4XndqsHtYJFSMTBJ29tMuiq4dsb/iioF0GfvlTTJIv6hH PsQWIvsV0InAWbKUCqnziGd8lEZ1bu4fzg1AhaAavj/+pf9rPlWA/biJXwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB25/MdHm8WD2dkuHGQfg7hAlkSGMB8GA1UdIwQY MBaAFCH8FC99dacUuazGU9C1ztM3ykSVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWZ3VUwzMTFweFM1ck1aVDBMWE8wemZLUkpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC80OTBjNTAtNmMwNy00NjQ2LTliZDIt OGNmMTE1YWEyY2MzLzEvSGJuOHgwZWJ4WVBaMlM0Y1pCLUR1RUNXUklZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC80OTBjNTAtNmMwNy00NjQ2LTliZDItOGNmMTE1YWEyY2Mz LzEvSWZ3VUwzMTFweFM1ck1aVDBMWE8wemZLUkpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuRFMMA0G CSqGSIb3DQEBCwUAA4IBAQAToDT50JZKyjtsDFS3bjkBYpSdzIsIsOSSTLQC0a4S lSTeJ+Km3LouKUZJk8eNFjBehXuKb7anqmS9+ydBhf1c5N2sjwLBP8miCKogu0xa xTzC9zjbuPkuA0nJJn5PJgOBFhsES/R3zwAdlHygs9GzRt9fnjOobLEP8CgcwKb8 8XQUMA5z9REOetaaidMwU6zd/iNEvt3hs+KNbtzkofu2Br8nJHH01MI5zZgW6QEH /jtQMadN0DkRwe7cLuzaRdRCVO49tS34MHytl4xYW6RQCKFLf6YDXmV/jiIAjgf4 4wptmTYPDl0P37GFi7jQ5ge0U3EAYXRLp++3jAUC4npk -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:34 2026 by rpki-client