This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/994b56-2f0c-4908-be47-81f7f7b93300/1/HCc-JQq_ncyyMZgwbPkScWYwYoA.roa
File: HCc-JQq_ncyyMZgwbPkScWYwYoA.roa (raw, json)
Hash identifier: tO96nEVj3QmKqJSTcBkgQB4nSdHREh8qiZML40xBMz0=
Subject key identifier: 1C:27:3E:25:0A:BF:9D:CC:B2:31:98:30:6C:F9:12:71:66:30:62:80
Certificate issuer: /CN=078e463f36c47f76ab7c196a7f5edd4f1beda642
Certificate serial: 019B783469F938E0D84CE747349D3A9D6A25
Authority key identifier: 07:8E:46:3F:36:C4:7F:76:AB:7C:19:6A:7F:5E:DD:4F:1B:ED:A6:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B45GPzbEf3arfBlqf17dTxvtpkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/994b56-2f0c-4908-be47-81f7f7b93300/1/HCc-JQq_ncyyMZgwbPkScWYwYoA.roa
Signing time: Thu 01 Jan 2026 06:17:39 +0000
ROA not before: Thu 01 Jan 2026 06:17:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215075
IP address blocks: 45.139.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/994b56-2f0c-4908-be47-81f7f7b93300/1/B45GPzbEf3arfBlqf17dTxvtpkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/994b56-2f0c-4908-be47-81f7f7b93300/1/B45GPzbEf3arfBlqf17dTxvtpkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/B45GPzbEf3arfBlqf17dTxvtpkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:34:69:f9:38:e0:d8:4c:e7:47:34:9d:3a:9d:6a:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=078e463f36c47f76ab7c196a7f5edd4f1beda642
Validity
Not Before: Jan 1 06:17:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1c273e250abf9dccb23198306cf9127166306280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3e:91:d0:a6:5f:7f:9e:91:95:80:88:8e:e6:
46:9e:ab:3a:bd:98:60:66:e6:62:b6:68:02:84:2a:
00:36:bd:75:a2:9c:3b:ac:70:04:13:f2:c7:a8:5d:
51:4e:e8:ab:94:fa:e8:fd:81:6a:56:6c:db:2c:f1:
ab:9c:07:0f:3b:86:8e:b1:7b:7c:95:25:64:9d:28:
25:7e:20:70:77:01:d0:57:16:9e:4c:37:d9:42:77:
92:3d:ac:2b:99:54:df:b0:af:db:f6:46:88:e4:b1:
3f:6f:f2:9c:54:e7:6a:dd:41:7b:95:bb:4b:c4:ca:
a6:82:53:3d:0e:84:25:c8:6b:40:f5:7d:70:69:f2:
0e:b6:4e:0e:af:ad:f5:59:1b:ec:47:2d:a9:ac:a8:
d1:5a:34:82:fa:b7:6c:a9:71:eb:fb:7d:e6:ef:79:
e2:7f:98:d5:bd:65:6f:1e:ef:d3:08:19:6c:04:e7:
aa:e5:3f:2e:80:95:80:78:3a:cd:8e:85:e0:cf:f0:
25:34:a4:55:ea:ab:3e:f9:28:05:77:47:14:f7:0b:
fe:99:53:02:27:56:c2:39:e7:aa:46:43:8e:20:35:
db:a1:f2:29:78:0e:a9:30:bd:2f:22:b0:c8:ea:c0:
67:cf:cc:3a:f0:fb:cd:7e:6c:f2:99:24:8a:65:07:
b0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:27:3E:25:0A:BF:9D:CC:B2:31:98:30:6C:F9:12:71:66:30:62:80
X509v3 Authority Key Identifier:
keyid:07:8E:46:3F:36:C4:7F:76:AB:7C:19:6A:7F:5E:DD:4F:1B:ED:A6:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B45GPzbEf3arfBlqf17dTxvtpkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/994b56-2f0c-4908-be47-81f7f7b93300/1/HCc-JQq_ncyyMZgwbPkScWYwYoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/994b56-2f0c-4908-be47-81f7f7b93300/1/B45GPzbEf3arfBlqf17dTxvtpkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.106.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:0b:e1:8a:3a:ce:a8:61:78:89:07:29:26:cb:5d:e0:e0:fc:
a5:cb:d9:44:e9:dd:e9:3e:ce:e8:00:36:25:5d:af:50:c3:70:
ba:15:95:fb:1b:93:67:00:44:bf:92:b9:89:fa:ef:10:da:79:
91:4f:ae:55:69:3f:a4:6b:94:c1:97:b8:cd:a0:c7:40:dd:87:
54:6e:e7:fe:00:17:00:92:2e:8e:4d:74:32:7f:8e:0a:43:a5:
c2:dc:f4:2e:87:e2:1b:8f:11:b3:66:d6:9c:f8:b5:c2:d9:6b:
77:bf:eb:46:44:4f:2b:fa:11:31:d0:01:8c:0d:5a:25:b3:c8:
03:09:22:13:4b:21:a7:a2:9c:0a:c3:ad:d7:4a:cb:11:25:57:
c2:f9:d2:4f:1c:b5:6b:5b:9b:1f:f9:3e:b5:30:64:f3:ad:98:
7a:71:ec:f0:12:bd:51:6d:fa:85:84:16:47:50:6c:b4:c7:7d:
67:0e:29:a4:d5:da:94:03:e8:d7:57:d2:a2:91:6e:ef:69:66:
73:a5:c6:1d:c8:4a:61:43:5a:31:2e:6b:84:1a:7e:af:a4:38:
d5:68:d5:26:24:2d:52:cf:7a:72:fe:da:64:15:77:9b:26:22:
da:c1:b4:69:8a:25:00:6b:09:a1:43:c7:ec:48:d7:52:42:cc:
95:f4:de:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:07:21 2026 by rpki-client