This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/HRNjMQScROeFTp_2rmfTV1Pqr40.roa File: HRNjMQScROeFTp_2rmfTV1Pqr40.roa (raw, json) Hash identifier: 66mHtRw/URStOe2xC3SxpwCWQ3KY1R/KgZMB+PrJKAM= Subject key identifier: 1D:13:63:31:04:9C:44:E7:85:4E:9F:F6:AE:67:D3:57:53:EA:AF:8D Certificate issuer: /CN=ecdf3a4a05f37050f7c0379d34f4f4814bd209df Certificate serial: 019B7CEDE336E965E1343B46EE7E635E8C8C Authority key identifier: EC:DF:3A:4A:05:F3:70:50:F7:C0:37:9D:34:F4:F4:81:4B:D2:09:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7N86SgXzcFD3wDedNPT0gUvSCd8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/HRNjMQScROeFTp_2rmfTV1Pqr40.roa Signing time: Fri 02 Jan 2026 04:18:43 +0000 ROA not before: Fri 02 Jan 2026 04:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216399 IP address blocks: 178.210.224.0/22 maxlen: 22 178.210.224.0/24 maxlen: 24 178.210.225.0/24 maxlen: 24 178.210.226.0/24 maxlen: 24 178.210.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.mft rsync://rpki.ripe.net/repository/DEFAULT/7N86SgXzcFD3wDedNPT0gUvSCd8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:e3:36:e9:65:e1:34:3b:46:ee:7e:63:5e:8c:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecdf3a4a05f37050f7c0379d34f4f4814bd209df Validity Not Before: Jan 2 04:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1d136331049c44e7854e9ff6ae67d35753eaaf8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fe:85:3c:50:73:ea:d3:6a:b3:1b:11:1c:23: 58:78:2e:e3:ed:48:99:af:bd:09:73:02:ce:be:8c: 3d:1a:75:ac:12:16:ba:f3:16:7a:11:c8:aa:d7:1e: 31:ee:b7:6d:5e:3f:78:67:f7:e3:c8:01:b0:0a:2e: 18:58:19:47:31:45:82:5e:e5:b5:33:e6:89:90:c1: 84:7b:01:4d:d4:66:54:29:03:8e:8e:c4:7a:60:f7: 97:1f:ee:89:1d:1a:75:6c:9d:e1:06:0a:11:08:d3: 69:a9:b6:0e:81:08:b0:98:3e:b2:c2:d5:72:fd:f0: ff:2b:c6:a2:8c:5b:95:ca:64:54:cd:f3:a9:b4:7f: 29:ad:6a:5e:02:79:9e:f9:08:1c:2c:40:33:1b:6e: 71:3a:3e:35:41:9b:57:58:d9:d5:79:fb:05:0f:23: 0c:0c:e4:d0:46:29:47:0f:61:9c:08:13:a6:da:e2: bb:b7:6b:bb:5f:3f:98:26:aa:51:ba:d6:2e:f1:75: c8:eb:7d:74:2a:9a:66:01:14:fc:27:c9:19:9e:e6: ca:c5:5d:91:73:8c:8a:89:55:dd:61:3d:22:68:18: a5:33:8e:19:e1:24:78:d0:2c:13:34:5f:23:6a:e5: 41:64:04:c4:6d:3a:42:94:44:41:db:b7:3b:0a:bb: 35:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:13:63:31:04:9C:44:E7:85:4E:9F:F6:AE:67:D3:57:53:EA:AF:8D X509v3 Authority Key Identifier: keyid:EC:DF:3A:4A:05:F3:70:50:F7:C0:37:9D:34:F4:F4:81:4B:D2:09:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7N86SgXzcFD3wDedNPT0gUvSCd8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/HRNjMQScROeFTp_2rmfTV1Pqr40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.210.224.0/22 Signature Algorithm: sha256WithRSAEncryption 9a:aa:be:d5:9a:5b:ed:81:98:70:14:46:75:2e:69:ac:ad:81: 02:4d:1c:96:7b:bf:98:84:0f:51:8d:c7:82:c0:de:62:13:d4: ad:7f:2a:45:4c:32:d4:6b:76:70:a3:50:90:fd:52:fb:ba:42: f3:03:70:30:58:22:b4:07:69:c5:57:7f:38:4f:ec:f0:b4:1d: bf:e4:da:da:1d:cd:16:72:cf:55:30:10:37:82:8c:fb:98:83: 1f:68:90:80:a3:92:b9:ea:cd:0c:10:a6:a3:b3:73:b3:e4:f8: c4:99:0a:a9:45:56:66:d9:7c:47:bb:ff:6b:3f:c2:55:42:dd: fd:94:ec:98:ce:2a:3a:b6:aa:0d:e6:00:7e:8b:ab:e4:70:b3: dd:ca:e9:18:e3:cd:14:48:1a:f3:a5:cd:43:db:27:35:23:04: 14:59:66:92:1b:fa:97:dc:63:dc:91:d8:68:ff:fd:ef:7c:60: f2:16:be:0c:3e:d5:c4:d0:62:bc:cd:7f:9f:26:83:21:40:3c: d8:b5:96:03:d9:5c:2e:0a:53:90:c8:c1:ad:84:2c:81:32:95: c4:f0:52:b8:10:15:5b:05:cc:0d:af:86:a3:d0:7a:80:06:01: 7b:0e:5b:88:ad:18:9c:85:d3:a7:fd:68:1b:de:10:cb:96:75: b4:9f:67:21 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87eM26WXhNDtG7n5jXoyMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjZGYzYTRhMDVmMzcwNTBmN2MwMzc5ZDM0ZjRmNDgxNGJk MjA5ZGYwHhcNMjYwMTAyMDQxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZDEzNjMzMTA0OWM0NGU3ODU0ZTlmZjZhZTY3ZDM1NzUzZWFhZjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvv6FPFBz6tNqsxsRHCNYeC7j7UiZ r70JcwLOvow9GnWsEha68xZ6Eciq1x4x7rdtXj94Z/fjyAGwCi4YWBlHMUWCXuW1 M+aJkMGEewFN1GZUKQOOjsR6YPeXH+6JHRp1bJ3hBgoRCNNpqbYOgQiwmD6ywtVy /fD/K8aijFuVymRUzfOptH8prWpeAnme+QgcLEAzG25xOj41QZtXWNnVefsFDyMM DOTQRilHD2GcCBOm2uK7t2u7Xz+YJqpRutYu8XXI6310KppmART8J8kZnubKxV2R c4yKiVXdYT0iaBilM44Z4SR40CwTNF8jauVBZATEbTpClERB27c7Crs1yQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB0TYzEEnETnhU6f9q5n01dT6q+NMB8GA1UdIwQY MBaAFOzfOkoF83BQ98A3nTT09IFL0gnfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN044NlNnWHpjRkQzd0RlZE5QVDBnVXZTQ2Q4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9mZjA5YzEtN2Y0NS00MDBmLWJkMTkt ZWY4NzQwNWY5YTExLzEvSFJOak1RU2NST2VGVHBfMnJtZlRWMVBxcjQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9mZjA5YzEtN2Y0NS00MDBmLWJkMTktZWY4NzQwNWY5YTEx LzEvN044NlNnWHpjRkQzd0RlZE5QVDBnVXZTQ2Q4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCstLgMA0G CSqGSIb3DQEBCwUAA4IBAQCaqr7VmlvtgZhwFEZ1LmmsrYECTRyWe7+YhA9RjceC wN5iE9StfypFTDLUa3Zwo1CQ/VL7ukLzA3AwWCK0B2nFV384T+zwtB2/5NraHc0W cs9VMBA3goz7mIMfaJCAo5K56s0MEKajs3Oz5PjEmQqpRVZm2XxHu/9rP8JVQt39 lOyYzio6tqoN5gB+i6vkcLPdyukY480USBrzpc1D2yc1IwQUWWaSG/qX3GPckdho //3vfGDyFr4MPtXE0GK8zX+fJoMhQDzYtZYD2VwuClOQyMGthCyBMpXE8FK4EBVb BcwNr4aj0HqABgF7DluIrRichdOn/Wgb3hDLlnW0n2ch -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:20 2026 by rpki-client