This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/a43c6e-349c-4914-8da3-6c32a6ab1ef2/1/HBGL46_doz-wohdECWTO1mZxDbQ.roa File: HBGL46_doz-wohdECWTO1mZxDbQ.roa (raw, json) Hash identifier: p+by3qHF6OWygN9hgqr8TykJ/6VhOJ91GwBp8RHDRS8= Subject key identifier: 1C:11:8B:E3:AF:DD:A3:3F:B0:A2:17:44:09:64:CE:D6:66:71:0D:B4 Certificate issuer: /CN=c1eb076d16702c7dbea972e2972ef576a1f2c873 Certificate serial: 019B7D5C61D2DDDF0AC5517BD014E98AD601 Authority key identifier: C1:EB:07:6D:16:70:2C:7D:BE:A9:72:E2:97:2E:F5:76:A1:F2:C8:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wesHbRZwLH2-qXLily71dqHyyHM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/a43c6e-349c-4914-8da3-6c32a6ab1ef2/1/HBGL46_doz-wohdECWTO1mZxDbQ.roa Signing time: Fri 02 Jan 2026 06:19:24 +0000 ROA not before: Fri 02 Jan 2026 06:19:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61236 IP address blocks: 91.238.72.0/23 maxlen: 24 185.14.104.0/22 maxlen: 24 2a03:acc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/a43c6e-349c-4914-8da3-6c32a6ab1ef2/1/wesHbRZwLH2-qXLily71dqHyyHM.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/a43c6e-349c-4914-8da3-6c32a6ab1ef2/1/wesHbRZwLH2-qXLily71dqHyyHM.mft rsync://rpki.ripe.net/repository/DEFAULT/wesHbRZwLH2-qXLily71dqHyyHM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:61:d2:dd:df:0a:c5:51:7b:d0:14:e9:8a:d6:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1eb076d16702c7dbea972e2972ef576a1f2c873 Validity Not Before: Jan 2 06:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1c118be3afdda33fb0a217440964ced666710db4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8f:ed:7d:97:57:a1:aa:a9:85:72:5b:ef:41: d2:d5:1b:8b:0f:0f:99:ab:82:76:31:8f:eb:2f:8a: cb:14:43:8a:f5:91:b3:96:41:9e:68:73:f9:5a:a4: 3c:9c:76:a2:dd:08:ce:26:ae:46:5f:ec:4f:3f:54: 75:e2:80:00:c6:05:8e:82:4d:ea:7e:9f:86:7c:ad: b3:bf:a1:c4:4a:8b:d5:d4:6e:67:1c:f3:bf:48:16: 34:1a:62:64:de:7d:84:3f:24:a1:3e:1f:6c:7a:c3: 4e:a2:56:54:ea:ce:e8:9f:cf:55:4e:1e:1c:55:eb: d0:ef:4a:d8:da:b2:d1:76:fe:c8:9a:54:ce:45:3e: 31:f2:99:1b:32:22:76:01:3f:4b:c6:fc:06:64:e9: 44:8d:41:d6:76:36:81:37:aa:7c:06:a5:56:23:5c: 2f:29:bd:b9:a2:f5:ea:55:ef:52:fb:fd:56:a9:5f: ec:cf:86:cd:96:2f:49:39:09:50:88:e8:af:75:3c: d9:7e:e2:e2:ed:40:66:45:05:cc:d8:2b:b8:9f:b0: 89:f5:0c:46:40:c0:50:af:b2:f2:20:e1:68:68:81: 3e:cb:07:49:f0:71:2c:fc:59:75:2e:9e:9b:13:f3: 1d:62:42:fd:9c:02:41:89:5b:5f:2d:7d:b9:9f:9b: c0:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:11:8B:E3:AF:DD:A3:3F:B0:A2:17:44:09:64:CE:D6:66:71:0D:B4 X509v3 Authority Key Identifier: keyid:C1:EB:07:6D:16:70:2C:7D:BE:A9:72:E2:97:2E:F5:76:A1:F2:C8:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wesHbRZwLH2-qXLily71dqHyyHM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a43c6e-349c-4914-8da3-6c32a6ab1ef2/1/HBGL46_doz-wohdECWTO1mZxDbQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a43c6e-349c-4914-8da3-6c32a6ab1ef2/1/wesHbRZwLH2-qXLily71dqHyyHM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.238.72.0/23 185.14.104.0/22 IPv6: 2a03:acc0::/32 Signature Algorithm: sha256WithRSAEncryption 3c:3b:4a:0b:5a:6b:27:f4:54:d8:81:05:36:a3:07:c4:26:e1: 03:69:df:e6:ec:32:bb:3b:c3:fe:66:26:be:2e:cb:52:c2:6b: 47:16:02:51:17:43:20:72:f7:46:8f:4f:94:e1:45:b9:21:ca: 80:55:c3:35:67:3a:c3:50:91:e5:ee:51:ea:fe:3b:6a:e0:5c: 67:72:c7:71:12:30:f7:c6:e3:6f:7b:2d:74:6b:d5:77:ee:d8: 0c:fd:1e:44:f9:6e:47:f2:a9:98:4d:02:6b:ee:5a:ef:b4:ca: b3:06:7a:9f:65:de:ad:ff:7d:77:9b:e1:4d:22:7f:79:40:f4: 27:04:22:bd:9a:60:88:05:61:8c:58:b9:81:b7:bf:74:53:d8: 9f:68:03:27:22:98:cb:c1:a6:ea:49:e8:e6:5f:31:0b:a9:22: 2f:ba:ea:33:ef:1e:42:5f:0d:b2:5e:b9:d7:6a:c1:0a:85:63: c3:2c:33:a8:93:de:d3:5e:c3:be:59:4c:ad:27:25:ce:1e:cc: 87:68:25:4a:06:95:d9:d0:de:62:d5:bf:aa:5e:08:a8:52:29: c7:e9:d1:10:b9:b2:15:86:df:b1:dc:91:73:6b:06:49:af:77: 30:21:1d:e7:71:9e:75:64:62:9e:c7:57:6f:48:11:42:90:8d: d4:f9:04:16 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt9XGHS3d8KxVF70BTpitYBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxZWIwNzZkMTY3MDJjN2RiZWE5NzJlMjk3MmVmNTc2YTFm MmM4NzMwHhcNMjYwMTAyMDYxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzExOGJlM2FmZGRhMzNmYjBhMjE3NDQwOTY0Y2VkNjY2NzEwZGI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqY/tfZdXoaqphXJb70HS1RuLDw+Z q4J2MY/rL4rLFEOK9ZGzlkGeaHP5WqQ8nHai3QjOJq5GX+xPP1R14oAAxgWOgk3q fp+GfK2zv6HESovV1G5nHPO/SBY0GmJk3n2EPyShPh9sesNOolZU6s7on89VTh4c VevQ70rY2rLRdv7ImlTORT4x8pkbMiJ2AT9LxvwGZOlEjUHWdjaBN6p8BqVWI1wv Kb25ovXqVe9S+/1WqV/sz4bNli9JOQlQiOivdTzZfuLi7UBmRQXM2Cu4n7CJ9QxG QMBQr7LyIOFoaIE+ywdJ8HEs/Fl1Lp6bE/MdYkL9nAJBiVtfLX25n5vAMwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFBwRi+Ov3aM/sKIXRAlkztZmcQ20MB8GA1UdIwQY MBaAFMHrB20WcCx9vqly4pcu9Xah8shzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2VzSGJSWndMSDItcVhMaWx5NzFkcUh5eUhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9hNDNjNmUtMzQ5Yy00OTE0LThkYTMt NmMzMmE2YWIxZWYyLzEvSEJHTDQ2X2Rvei13b2hkRUNXVE8xbVp4RGJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9hNDNjNmUtMzQ5Yy00OTE0LThkYTMtNmMzMmE2YWIxZWYy LzEvd2VzSGJSWndMSDItcVhMaWx5NzFkcUh5eUhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBW+5IAwQC uQ5oMA0EAgACMAcDBQAqA6zAMA0GCSqGSIb3DQEBCwUAA4IBAQA8O0oLWmsn9FTY gQU2owfEJuEDad/m7DK7O8P+Zia+LstSwmtHFgJRF0MgcvdGj0+U4UW5IcqAVcM1 ZzrDUJHl7lHq/jtq4FxncsdxEjD3xuNvey10a9V37tgM/R5E+W5H8qmYTQJr7lrv tMqzBnqfZd6t/313m+FNIn95QPQnBCK9mmCIBWGMWLmBt790U9ifaAMnIpjLwabq SejmXzELqSIvuuoz7x5CXw2yXrnXasEKhWPDLDOok97TXsO+WUytJyXOHsyHaCVK BpXZ0N5i1b+qXgioUinH6dEQubIVht+x3JFzawZJr3cwIR3ncZ51ZGKex1dvSBFC kI3U+QQW -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:26 2026 by rpki-client