This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/hCl-0r0u30gY3X_QTYVrlxuoF0A.roa File: hCl-0r0u30gY3X_QTYVrlxuoF0A.roa (raw, json) Hash identifier: 7PsKvjXxiXeu119UcG4oPYszfeXApUMOiVMhsPclDPA= Subject key identifier: 84:29:7E:D2:BD:2E:DF:48:18:DD:7F:D0:4D:85:6B:97:1B:A8:17:40 Certificate issuer: /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e Certificate serial: 019B7BA32255B20522BB748916AF6A98519F Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/hCl-0r0u30gY3X_QTYVrlxuoF0A.roa Signing time: Thu 01 Jan 2026 22:17:27 +0000 ROA not before: Thu 01 Jan 2026 22:17:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 401838 IP address blocks: 62.112.206.0/24 maxlen: 24 62.112.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:22:55:b2:05:22:bb:74:89:16:af:6a:98:51:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e Validity Not Before: Jan 1 22:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=84297ed2bd2edf4818dd7fd04d856b971ba81740 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e2:32:77:07:ad:3a:8e:c0:59:e8:e0:2b:d8: c4:0c:a9:cc:fe:74:f7:41:66:b9:26:26:d7:21:ba: db:c0:36:ec:8d:3d:99:ed:d4:55:47:37:4b:d6:69: 00:13:bb:65:a6:40:05:e4:f6:ba:03:49:e3:6f:2c: 91:3c:f9:60:3a:b0:c9:fc:c7:62:fd:c8:d8:a5:40: f1:c8:d9:18:08:69:d2:bb:cc:8f:c5:1d:94:9e:1a: fc:1e:a4:f5:2c:3a:fe:11:6f:a3:73:31:33:40:2e: 94:4d:34:7c:d5:29:59:c0:bd:0e:9f:25:b0:bc:af: fb:ae:04:af:3a:bb:99:b8:19:fa:1d:d6:9b:0f:c6: 22:28:37:9a:1d:f6:01:34:26:9f:5a:db:05:3a:3f: 35:2a:38:7b:d5:87:74:18:c5:98:01:a6:38:09:e2: 64:8a:87:7c:39:dc:dc:0a:94:5c:e2:25:5d:63:4d: 28:f4:e7:d6:d4:8a:96:6a:80:c2:58:0f:68:63:67: 5a:67:b9:bd:54:ad:7c:c2:d0:a8:ca:bf:eb:9f:53: f6:4f:80:5f:6b:df:d1:80:b2:79:aa:45:5e:29:b7: f0:93:8a:82:e8:5a:34:4c:3a:b6:42:e5:a9:1f:03: 88:b8:ac:23:06:ab:0e:40:5f:75:aa:cb:c6:4a:87: 57:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:29:7E:D2:BD:2E:DF:48:18:DD:7F:D0:4D:85:6B:97:1B:A8:17:40 X509v3 Authority Key Identifier: keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/hCl-0r0u30gY3X_QTYVrlxuoF0A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.112.206.0/23 Signature Algorithm: sha256WithRSAEncryption b2:ee:de:a3:c7:e1:4c:b4:27:f4:17:b8:3f:e9:03:24:fb:ce: 04:19:b8:e8:96:b6:e2:e1:ab:2e:58:6f:e7:8f:da:40:75:c2: 81:12:23:00:6f:6b:ed:f5:10:f7:d5:f8:98:c8:ae:5e:e1:3d: 9d:52:11:a0:5d:19:e6:36:22:b8:73:f9:42:5e:1b:cb:f1:98: 48:26:d4:cf:85:80:8b:62:c2:97:2b:ce:44:b9:ad:b1:70:23: 18:42:6f:51:66:21:26:c5:9a:a3:5a:b5:c1:b1:cf:72:50:12: 56:c4:71:5d:88:41:86:ce:04:b5:df:cb:03:c1:25:24:4b:de: 16:6a:13:d9:75:ec:68:40:2c:25:2d:e7:a8:24:47:d7:14:1c: 1f:ff:1c:4b:0b:11:5e:32:1d:15:c3:05:88:b0:17:4d:1a:d5: 02:fd:da:31:c0:84:66:45:1b:eb:8b:94:2e:43:3b:86:09:6f: b1:6b:64:bf:f9:c1:5d:df:ba:f8:ae:77:c9:49:1a:aa:cb:02: ff:83:de:7e:a9:6b:77:17:ee:ff:20:dc:fe:4a:d8:56:31:7e: d9:f6:a6:de:d9:a6:90:51:7f:c6:11:a0:44:13:b7:f3:05:5c: 5a:81:5b:ea:61:a0:3d:1a:16:df:8e:c8:5d:b1:68:2d:92:83: 66:4f:5e:4c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7oyJVsgUiu3SJFq9qmFGfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2NmFmYzUxYzkyMmZkODQyZmVjNWIwY2JiZDI2ZWJkYmQx YTE2MWUwHhcNMjYwMTAxMjIxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDI5N2VkMmJkMmVkZjQ4MThkZDdmZDA0ZDg1NmI5NzFiYTgxNzQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveIydwetOo7AWejgK9jEDKnM/nT3 QWa5JibXIbrbwDbsjT2Z7dRVRzdL1mkAE7tlpkAF5Pa6A0njbyyRPPlgOrDJ/Mdi /cjYpUDxyNkYCGnSu8yPxR2Unhr8HqT1LDr+EW+jczEzQC6UTTR81SlZwL0OnyWw vK/7rgSvOruZuBn6HdabD8YiKDeaHfYBNCafWtsFOj81Kjh71Yd0GMWYAaY4CeJk iod8OdzcCpRc4iVdY00o9OfW1IqWaoDCWA9oY2daZ7m9VK18wtCoyr/rn1P2T4Bf a9/RgLJ5qkVeKbfwk4qC6Fo0TDq2QuWpHwOIuKwjBqsOQF91qsvGSodXQwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIQpftK9Lt9IGN1/0E2Fa5cbqBdAMB8GA1UdIwQY MBaAFBZq/FHJIv2EL+xbDLvSbr29GhYeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEt MTNiOTExMGNlMjBjLzEvaENsLTByMHUzMGdZM1hfUVRZVnJseHVvRjBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEtMTNiOTExMGNlMjBj LzEvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBPnDOMA0G CSqGSIb3DQEBCwUAA4IBAQCy7t6jx+FMtCf0F7g/6QMk+84EGbjolrbi4asuWG/n j9pAdcKBEiMAb2vt9RD31fiYyK5e4T2dUhGgXRnmNiK4c/lCXhvL8ZhIJtTPhYCL YsKXK85Eua2xcCMYQm9RZiEmxZqjWrXBsc9yUBJWxHFdiEGGzgS138sDwSUkS94W ahPZdexoQCwlLeeoJEfXFBwf/xxLCxFeMh0VwwWIsBdNGtUC/doxwIRmRRvri5Qu QzuGCW+xa2S/+cFd37r4rnfJSRqqywL/g95+qWt3F+7/INz+SthWMX7Z9qbe2aaQ UX/GEaBEE7fzBVxagVvqYaA9GhbfjshdsWgtkoNmT15M -----END CERTIFICATE-----Generated at Fri Jan 9 21:27:44 2026 by rpki-client