This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/HCGfFsFzdEdOgL94q44-LrKFOk4.roa File: HCGfFsFzdEdOgL94q44-LrKFOk4.roa (raw, json) Hash identifier: z2rwFnfOIUrAmdSR0Bpv+q/6wHr2zoObtpToXBsamGU= Subject key identifier: 1C:21:9F:16:C1:73:74:47:4E:80:BF:78:AB:8E:3E:2E:B2:85:3A:4E Certificate issuer: /CN=4f99e4eae48a01c781faad11f6d81a91ea33bdff Certificate serial: 019B7BA528B9C0057F6BAE86CF6AE67A79E9 Authority key identifier: 4F:99:E4:EA:E4:8A:01:C7:81:FA:AD:11:F6:D8:1A:91:EA:33:BD:FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5nk6uSKAceB-q0R9tgakeozvf8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/HCGfFsFzdEdOgL94q44-LrKFOk4.roa Signing time: Thu 01 Jan 2026 22:19:39 +0000 ROA not before: Thu 01 Jan 2026 22:19:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198034 IP address blocks: 45.10.44.0/24 maxlen: 24 91.230.169.0/24 maxlen: 24 185.153.28.0/23 maxlen: 23 185.153.30.0/23 maxlen: 23 2a12:9240::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.mft rsync://rpki.ripe.net/repository/DEFAULT/T5nk6uSKAceB-q0R9tgakeozvf8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:28:b9:c0:05:7f:6b:ae:86:cf:6a:e6:7a:79:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f99e4eae48a01c781faad11f6d81a91ea33bdff Validity Not Before: Jan 1 22:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1c219f16c17374474e80bf78ab8e3e2eb2853a4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:81:40:bb:17:73:a7:b0:97:de:0e:67:38:7c: 01:73:b1:93:28:da:5c:e1:6a:44:26:ac:d6:c9:97: ea:a1:7b:5f:38:e3:af:b3:52:a4:66:53:25:d1:aa: c4:26:4b:f6:1b:e6:be:ce:c0:74:0a:9c:fd:9d:a1: 02:fa:01:2b:5d:f8:3f:86:69:c8:12:bb:21:0a:a1: 23:b4:db:0d:87:34:8e:d4:d5:65:6b:6c:e8:86:86: 9f:64:d4:8a:41:65:12:bc:05:e6:25:58:fa:c2:cf: 8e:2a:dd:66:51:57:be:d5:b2:ae:07:b0:89:49:0d: 3c:07:60:93:84:fe:de:78:2c:92:86:0e:90:b3:69: 77:8d:2e:64:bb:0d:5a:5d:30:98:1f:53:08:fb:b0: 9a:7e:8f:b6:ab:24:7d:52:d3:3c:94:e4:e0:0c:e2: 09:5d:93:17:55:e9:c8:22:e9:c4:9b:97:7f:64:47: 60:76:5a:ad:4a:d7:d7:21:95:3a:c7:02:c7:bf:ae: e0:fe:0c:01:10:4e:18:8d:f0:6b:ac:2d:0f:e0:a2: ed:9f:8a:ba:37:4d:2a:37:f0:34:d8:21:00:93:c4: d4:b2:f2:94:64:ff:67:26:35:f4:fd:68:8f:53:7c: 8b:4d:6e:c1:9e:fb:6b:76:75:af:f5:f3:d2:15:c0: 56:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:21:9F:16:C1:73:74:47:4E:80:BF:78:AB:8E:3E:2E:B2:85:3A:4E X509v3 Authority Key Identifier: keyid:4F:99:E4:EA:E4:8A:01:C7:81:FA:AD:11:F6:D8:1A:91:EA:33:BD:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5nk6uSKAceB-q0R9tgakeozvf8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/HCGfFsFzdEdOgL94q44-LrKFOk4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.10.44.0/24 91.230.169.0/24 185.153.28.0/22 IPv6: 2a12:9240::/32 Signature Algorithm: sha256WithRSAEncryption 5f:01:70:0e:fd:55:4a:ab:7a:43:bb:ac:f2:83:0a:b7:17:df: ab:21:34:54:18:cd:4c:9a:59:4c:27:09:a1:01:88:56:7a:cd: d5:ef:de:77:bc:ac:62:1f:fd:10:95:8e:7d:46:ca:ca:dd:2f: 11:72:a9:38:38:27:01:7c:1f:7e:8b:30:53:c5:93:3b:35:e5: a5:26:10:5b:0c:81:61:a1:84:1e:68:cc:c7:bd:bc:ed:19:48: 3f:35:af:79:1b:8e:51:ea:7c:b8:79:cc:e7:50:b5:7b:0b:10: fd:6b:dc:5c:db:85:ad:92:8f:8f:1f:3a:ba:d7:71:82:d9:f2: 3a:31:73:4b:f6:b4:80:a8:70:27:5c:17:36:f7:1c:9c:f3:1b: 51:2a:33:2e:9f:d8:1f:88:a7:4d:2e:31:20:0b:ff:13:7a:dc: 3a:36:71:34:37:45:17:24:66:9b:75:3d:c8:1d:da:56:bb:d7: 9e:cc:18:df:f5:5a:06:87:1c:64:21:3c:c9:a0:91:1b:e5:67: b8:40:05:b8:a6:92:c2:cb:f5:bb:98:b3:11:33:c5:4f:21:b3: 82:54:14:f0:fe:ae:45:96:fd:87:ea:6b:95:92:5b:4f:ea:5d: 32:66:27:85:ad:15:96:2f:f1:82:ce:98:a7:e4:16:55:0d:92: a4:d4:75:8d -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt7pSi5wAV/a66Gz2rmennpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmOTllNGVhZTQ4YTAxYzc4MWZhYWQxMWY2ZDgxYTkxZWEz M2JkZmYwHhcNMjYwMTAxMjIxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzIxOWYxNmMxNzM3NDQ3NGU4MGJmNzhhYjhlM2UyZWIyODUzYTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4IFAuxdzp7CX3g5nOHwBc7GTKNpc 4WpEJqzWyZfqoXtfOOOvs1KkZlMl0arEJkv2G+a+zsB0Cpz9naEC+gErXfg/hmnI ErshCqEjtNsNhzSO1NVla2zohoafZNSKQWUSvAXmJVj6ws+OKt1mUVe+1bKuB7CJ SQ08B2CThP7eeCyShg6Qs2l3jS5kuw1aXTCYH1MI+7Cafo+2qyR9UtM8lOTgDOIJ XZMXVenIIunEm5d/ZEdgdlqtStfXIZU6xwLHv67g/gwBEE4YjfBrrC0P4KLtn4q6 N00qN/A02CEAk8TUsvKUZP9nJjX0/WiPU3yLTW7BnvtrdnWv9fPSFcBW8QIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFBwhnxbBc3RHToC/eKuOPi6yhTpOMB8GA1UdIwQY MBaAFE+Z5OrkigHHgfqtEfbYGpHqM73/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDVuazZ1U0tBY2VCLXEwUjl0Z2FrZW96dmY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8xOWQzMTMtNzc3Yi00MDQ0LWEyMzgt OGI4ZjNmOGQ3MzAzLzEvSENHZkZzRnpkRWRPZ0w5NHE0NC1McktGT2s0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8xOWQzMTMtNzc3Yi00MDQ0LWEyMzgtOGI4ZjNmOGQ3MzAz LzEvVDVuazZ1U0tBY2VCLXEwUjl0Z2FrZW96dmY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQALQosAwQA W+apAwQCuZkcMA0EAgACMAcDBQAqEpJAMA0GCSqGSIb3DQEBCwUAA4IBAQBfAXAO /VVKq3pDu6zygwq3F9+rITRUGM1MmllMJwmhAYhWes3V7953vKxiH/0QlY59RsrK 3S8Rcqk4OCcBfB9+izBTxZM7NeWlJhBbDIFhoYQeaMzHvbztGUg/Na95G45R6ny4 ecznULV7CxD9a9xc24Wtko+PHzq613GC2fI6MXNL9rSAqHAnXBc29xyc8xtRKjMu n9gfiKdNLjEgC/8Tetw6NnE0N0UXJGabdT3IHdpWu9eezBjf9VoGhxxkITzJoJEb 5We4QAW4ppLCy/W7mLMRM8VPIbOCVBTw/q5Flv2H6muVkltP6l0yZieFrRWWL/GC zpin5BZVDZKk1HWN -----END CERTIFICATE-----Generated at Tue Jan 27 08:34:24 2026 by rpki-client