This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/HktbNW43fd7Vb_ZaaGeNajH2WG8.roa File: HktbNW43fd7Vb_ZaaGeNajH2WG8.roa (raw, json) Hash identifier: 79snjSjI8SfzcKH7jhMDnbs8i4IW+WhI3UKxVBjwHBI= Subject key identifier: 1E:4B:5B:35:6E:37:7D:DE:D5:6F:F6:5A:68:67:8D:6A:31:F6:58:6F Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3 Certificate serial: 019B974A2C043A80FB68BBAC57CC478C78A0 Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/HktbNW43fd7Vb_ZaaGeNajH2WG8.roa Signing time: Wed 07 Jan 2026 07:09:39 +0000 ROA not before: Wed 07 Jan 2026 07:09:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7018 IP address blocks: 77.111.117.0/24 maxlen: 24 77.111.123.0/24 maxlen: 24 91.190.187.0/24 maxlen: 24 92.61.103.0/24 maxlen: 24 92.61.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:97:4a:2c:04:3a:80:fb:68:bb:ac:57:cc:47:8c:78:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3 Validity Not Before: Jan 7 07:09:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1e4b5b356e377dded56ff65a68678d6a31f6586f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7b:e2:b4:08:b8:0d:da:27:41:a4:ee:6b:39: 8a:33:8a:aa:53:3d:ce:5e:1b:45:7d:ae:57:9a:f2: a8:bb:48:c7:a2:07:6a:03:d6:b9:7b:b5:5d:39:fb: 60:65:e8:38:e5:72:3d:3c:65:cd:12:f1:97:52:0c: b2:2c:32:92:16:88:c1:19:bb:c2:c7:c0:38:ff:c2: 97:c1:b6:02:1f:54:1f:f2:04:7c:f1:cc:b7:89:bd: c8:98:34:a7:27:80:15:c7:72:8d:b8:ab:c6:b1:ab: fc:a4:0d:27:1e:5a:5e:57:f7:6b:4b:e3:a3:2b:b1: 1e:66:b1:5b:31:a0:bf:f3:e3:f1:35:4f:a1:41:e8: 12:79:05:ed:0a:2c:f2:fe:f8:e2:67:86:8a:fa:7a: 81:7e:47:2a:ef:3b:cd:3d:ad:e3:32:39:11:cd:87: 1f:b0:be:5a:0b:8b:83:f6:f1:3c:eb:6d:af:3b:62: f2:11:f7:b7:da:4b:11:a5:c0:19:aa:90:3a:47:ba: 87:2a:b0:7e:e0:0f:b3:07:ef:bf:18:a2:a0:77:69: 5f:a0:e9:6c:e2:f4:ba:4c:63:af:6d:b3:2a:fe:b6: 7b:fb:2e:81:f8:c7:c3:6a:b8:8b:0d:27:19:e2:a1: 7e:94:f7:17:ee:be:ad:fc:d3:78:54:53:c9:10:94: ef:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:4B:5B:35:6E:37:7D:DE:D5:6F:F6:5A:68:67:8D:6A:31:F6:58:6F X509v3 Authority Key Identifier: keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/HktbNW43fd7Vb_ZaaGeNajH2WG8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.111.117.0/24 77.111.123.0/24 91.190.187.0/24 92.61.103.0/24 92.61.109.0/24 Signature Algorithm: sha256WithRSAEncryption 17:9d:28:5a:18:0b:84:d7:ab:8f:73:29:6a:a1:72:cd:a9:d3: eb:19:b2:cb:82:68:1e:9b:e5:a4:fd:49:0c:82:14:d9:4f:9d: dc:fb:12:85:cd:1f:92:17:20:4f:f1:c3:ec:99:61:3b:75:a6: 94:ae:50:bc:40:63:cd:9f:85:e2:6a:2c:73:4b:13:06:81:2a: 19:6d:e8:53:2f:e3:a5:58:1f:3a:4e:b0:9c:f2:13:db:ca:94: d2:f8:a8:3c:e3:16:d7:20:a5:bb:53:29:6c:62:68:c4:74:94: 5f:0e:63:31:4c:9d:04:74:0f:19:1b:7f:19:a9:79:ac:ab:9d: ac:5d:7e:bf:a0:65:b4:79:84:1d:ab:7a:14:8e:76:7c:ab:f2: 75:f1:2f:fd:94:ec:81:40:4e:38:aa:25:23:70:8c:b5:0a:41: c4:47:dd:e0:e4:ec:42:af:3a:8c:44:f1:ce:b8:5b:e1:1c:66: 80:98:95:60:cf:84:fb:31:f5:79:42:4c:5b:a0:1f:3d:fa:a5: 66:ef:b7:0c:2f:a5:d0:63:7e:d1:61:ba:4f:bd:20:5b:85:eb: eb:9c:2d:fd:f4:0b:47:fa:81:b4:07:23:f6:75:63:0f:0b:99: d4:97:d7:5d:a6:77:ad:2a:76:ee:39:b9:90:12:62:49:6b:4c: 8e:e9:e4:0f -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZuXSiwEOoD7aLusV8xHjHigMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0MTk3NTU4M2IyNTAzNjJjODE1MGY2M2FkYjMwYTBmNmEw YzZmYzMwHhcNMjYwMTA3MDcwOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZTRiNWIzNTZlMzc3ZGRlZDU2ZmY2NWE2ODY3OGQ2YTMxZjY1ODZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXvitAi4DdonQaTuazmKM4qqUz3O XhtFfa5XmvKou0jHogdqA9a5e7VdOftgZeg45XI9PGXNEvGXUgyyLDKSFojBGbvC x8A4/8KXwbYCH1Qf8gR88cy3ib3ImDSnJ4AVx3KNuKvGsav8pA0nHlpeV/drS+Oj K7EeZrFbMaC/8+PxNU+hQegSeQXtCizy/vjiZ4aK+nqBfkcq7zvNPa3jMjkRzYcf sL5aC4uD9vE8622vO2LyEfe32ksRpcAZqpA6R7qHKrB+4A+zB++/GKKgd2lfoOls 4vS6TGOvbbMq/rZ7+y6B+MfDariLDScZ4qF+lPcX7r6t/NN4VFPJEJTvAQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFB5LWzVuN33e1W/2WmhnjWox9lhvMB8GA1UdIwQY MBaAFGQZdVg7JQNiyBUPY62zCg9qDG/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQt ZjFjMzNhYTJmZDUwLzEvSGt0Yk5XNDNmZDdWYl9aYWFHZU5hakgyV0c4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQtZjFjMzNhYTJmZDUw LzEvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQATW91AwQA TW97AwQAW767AwQAXD1nAwQAXD1tMA0GCSqGSIb3DQEBCwUAA4IBAQAXnShaGAuE 16uPcylqoXLNqdPrGbLLgmgem+Wk/UkMghTZT53c+xKFzR+SFyBP8cPsmWE7daaU rlC8QGPNn4XiaixzSxMGgSoZbehTL+OlWB86TrCc8hPbypTS+Kg84xbXIKW7Uyls YmjEdJRfDmMxTJ0EdA8ZG38ZqXmsq52sXX6/oGW0eYQdq3oUjnZ8q/J18S/9lOyB QE44qiUjcIy1CkHER93g5OxCrzqMRPHOuFvhHGaAmJVgz4T7MfV5QkxboB89+qVm 77cML6XQY37RYbpPvSBbhevrnC399AtH+oG0ByP2dWMPC5nUl9ddpnetKnbuObmQ EmJJa0yO6eQP -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:08 2026 by rpki-client