This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/HfBO79GeVdJ037N4_cPcGAlHt4E.roa File: HfBO79GeVdJ037N4_cPcGAlHt4E.roa (raw, json) Hash identifier: MEZ2oSCi5A0IStiIu52bXTcfcdZXAHYXi84lcyM9rSw= Subject key identifier: 1D:F0:4E:EF:D1:9E:55:D2:74:DF:B3:78:FD:C3:DC:18:09:47:B7:81 Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Certificate serial: 019B7D5D440EB2837EF7A77D4F511CBA62E8 Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/HfBO79GeVdJ037N4_cPcGAlHt4E.roa Signing time: Fri 02 Jan 2026 06:20:22 +0000 ROA not before: Fri 02 Jan 2026 06:20:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 55410 IP address blocks: 45.156.159.0/24 maxlen: 24 185.112.64.0/22 maxlen: 24 185.255.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 11:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:44:0e:b2:83:7e:f7:a7:7d:4f:51:1c:ba:62:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Validity Not Before: Jan 2 06:20:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1df04eefd19e55d274dfb378fdc3dc180947b781 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:91:43:cd:a2:35:51:2b:3d:1a:af:c7:76:f3: 23:42:a0:58:05:c8:d5:b1:e1:2a:92:04:67:77:ac: 28:28:58:cd:81:b7:62:7c:6e:9e:d0:8d:c0:aa:3d: 7f:9e:39:25:76:3e:a7:ed:fa:25:d6:c0:22:fc:40: 1b:2f:1f:19:8a:ba:22:f6:51:3d:c5:85:ff:9c:15: 63:1a:92:7d:29:3a:41:a5:36:72:69:35:76:ef:90: 02:cb:3e:03:f5:4e:da:f4:83:18:3e:bf:f9:a0:2e: 85:d7:cd:1f:9f:e0:a5:58:88:b6:0e:a4:ae:f4:fb: 34:91:3c:99:ce:c7:98:d7:43:96:38:a0:66:33:78: 5b:bf:bf:56:73:05:e8:80:a9:d6:f6:e1:6b:77:99: 69:0e:42:db:4f:f8:7b:46:a8:12:f3:bb:ec:64:46: aa:76:99:3c:e7:81:8e:27:bc:a3:9c:30:47:0e:08: ce:c5:d0:c3:05:3b:da:e3:b9:52:de:af:8b:7a:60: cb:d6:67:26:a9:d6:71:66:33:52:2f:a1:5f:69:c3: 5f:0d:c9:05:c4:b0:77:e2:d1:94:58:5b:2c:d3:b0: fe:ac:20:cb:ba:0a:54:57:30:ca:5a:e4:ac:35:a1: fe:7c:ab:ae:55:b5:ea:02:b1:41:1c:af:33:b1:18: ad:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:F0:4E:EF:D1:9E:55:D2:74:DF:B3:78:FD:C3:DC:18:09:47:B7:81 X509v3 Authority Key Identifier: keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/HfBO79GeVdJ037N4_cPcGAlHt4E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.156.159.0/24 185.112.64.0/22 185.255.168.0/22 Signature Algorithm: sha256WithRSAEncryption 6e:b5:a2:b9:1d:06:b0:84:d9:0f:c5:76:14:bb:86:f5:92:a8: 68:37:15:90:f0:ee:1d:63:f3:48:fc:4e:ff:7b:f9:4f:af:4b: e2:c3:49:e9:50:8f:43:95:e6:22:71:1d:56:98:c5:eb:f6:c7: ee:98:a6:29:8e:01:e8:29:97:d9:bd:c1:ea:03:a8:06:56:bc: 74:27:e8:8a:de:33:1a:24:0d:d8:86:d8:68:28:7f:2e:21:b7: 7e:19:54:e2:a4:86:a0:49:50:80:3f:d2:15:50:ac:67:25:30: f7:2a:58:17:ae:17:94:3d:43:80:8e:a4:f7:cb:ee:29:39:32: 18:88:81:da:ef:63:d4:f1:39:a1:23:db:95:6b:68:1b:2b:83: bc:06:f2:39:b9:a6:9b:d7:96:36:45:d2:05:12:f3:07:d0:6e: 45:d5:b7:a8:12:71:ef:ea:66:0a:c7:ec:23:d9:fd:db:91:33: 5c:d4:27:53:4f:43:70:ed:05:ab:c9:65:2f:fd:c7:04:ed:7f: e5:21:4a:83:53:ef:1e:16:61:00:56:0a:06:d2:ac:6c:5e:e7: f6:eb:77:f7:63:a3:d1:8c:83:9e:b8:3f:00:f5:5f:95:f8:2d: cc:c1:fa:89:bb:69:42:94:af:1a:77:f7:9b:5e:c5:38:ab:90: 71:de:92:23 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9XUQOsoN+96d9T1EcumLoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw NWIwZTIwHhcNMjYwMTAyMDYyMDIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZGYwNGVlZmQxOWU1NWQyNzRkZmIzNzhmZGMzZGMxODA5NDdiNzgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05FDzaI1USs9Gq/HdvMjQqBYBcjV seEqkgRnd6woKFjNgbdifG6e0I3Aqj1/njkldj6n7fol1sAi/EAbLx8Ziroi9lE9 xYX/nBVjGpJ9KTpBpTZyaTV275ACyz4D9U7a9IMYPr/5oC6F180fn+ClWIi2DqSu 9Ps0kTyZzseY10OWOKBmM3hbv79WcwXogKnW9uFrd5lpDkLbT/h7RqgS87vsZEaq dpk854GOJ7yjnDBHDgjOxdDDBTva47lS3q+LemDL1mcmqdZxZjNSL6FfacNfDckF xLB34tGUWFss07D+rCDLugpUVzDKWuSsNaH+fKuuVbXqArFBHK8zsRitiQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFB3wTu/RnlXSdN+zeP3D3BgJR7eBMB8GA1UdIwQY MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt MmNjZWRiOTY2YTU4LzEvSGZCTzc5R2VWZEowMzdONF9jUGNHQWxIdDRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4 LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALZyfAwQC uXBAAwQCuf+oMA0GCSqGSIb3DQEBCwUAA4IBAQButaK5HQawhNkPxXYUu4b1kqho NxWQ8O4dY/NI/E7/e/lPr0viw0npUI9DleYicR1WmMXr9sfumKYpjgHoKZfZvcHq A6gGVrx0J+iK3jMaJA3YhthoKH8uIbd+GVTipIagSVCAP9IVUKxnJTD3KlgXrheU PUOAjqT3y+4pOTIYiIHa72PU8TmhI9uVa2gbK4O8BvI5uaab15Y2RdIFEvMH0G5F 1beoEnHv6mYKx+wj2f3bkTNc1CdTT0Nw7QWryWUv/ccE7X/lIUqDU+8eFmEAVgoG 0qxsXuf263f3Y6PRjIOeuD8A9V+V+C3MwfqJu2lClK8ad/ebXsU4q5Bx3pIj -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:26 2026 by rpki-client