This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/hgcz_S5xSTbLKn2JgFiffzoE0Lc.roa File: hgcz_S5xSTbLKn2JgFiffzoE0Lc.roa (raw, json) Hash identifier: DEovq/0Otm5xzo+ikKL6F1zlfXWLyId8aTGFI9Mt6iE= Subject key identifier: 86:07:33:FD:2E:71:49:36:CB:2A:7D:89:80:58:9F:7F:3A:04:D0:B7 Certificate issuer: /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f Certificate serial: 019B77C76B028B8C22CEAB19FD9941BDE57A Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/hgcz_S5xSTbLKn2JgFiffzoE0Lc.roa Signing time: Thu 01 Jan 2026 04:18:36 +0000 ROA not before: Thu 01 Jan 2026 04:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209641 IP address blocks: 2a0e:4585::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:6b:02:8b:8c:22:ce:ab:19:fd:99:41:bd:e5:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f Validity Not Before: Jan 1 04:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=860733fd2e714936cb2a7d8980589f7f3a04d0b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:4c:d8:4e:5e:3b:90:45:29:fc:f5:8a:d6:f2: 26:c9:56:da:de:fd:25:21:92:5b:4b:cf:8f:a3:f4: d6:5f:e4:fd:00:7e:d6:27:05:55:90:a7:77:50:42: f8:64:4f:a8:d7:39:5b:60:76:ca:3a:a3:03:98:25: 1a:07:b2:21:2b:c7:89:2c:a3:f8:87:1b:ed:b0:63: 05:a0:c1:54:3b:ef:57:6f:aa:4f:2e:f3:c6:f8:45: 96:6f:1e:f3:57:c9:e2:73:4f:ee:4e:29:27:51:90: eb:85:03:f2:9a:6b:c8:9f:ed:79:82:cb:a3:cd:f8: a0:e8:7a:0c:0b:4a:4d:68:3f:3d:f8:80:14:2a:80: 11:b1:41:f7:18:df:d4:13:e0:d6:9c:ca:db:67:f6: 18:4b:ba:f6:b4:44:13:ad:08:74:33:a7:78:6b:00: 6d:82:9a:33:4b:9c:76:ff:5d:09:b8:20:79:34:9e: 4a:3d:fb:a7:4c:1b:a4:2e:81:0c:fa:85:da:55:da: 61:2c:42:fb:ee:33:da:ea:51:ef:3b:35:f0:ed:11: dd:03:e8:4e:11:86:51:b6:2e:45:0a:02:0b:d4:7a: 0c:b8:f4:c7:a4:54:e8:12:6f:ed:1f:a3:d2:38:5d: 7c:4f:97:08:db:8a:35:e3:e5:c9:69:a3:41:78:49: 38:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:07:33:FD:2E:71:49:36:CB:2A:7D:89:80:58:9F:7F:3A:04:D0:B7 X509v3 Authority Key Identifier: keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/hgcz_S5xSTbLKn2JgFiffzoE0Lc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:4585::/32 Signature Algorithm: sha256WithRSAEncryption 85:66:59:7b:f5:fc:e4:92:e0:f3:d8:e2:23:27:3d:6a:8c:e9: 40:83:49:1f:68:6a:50:51:f1:e0:7a:2d:68:5a:e9:87:98:93: 82:b4:c5:9e:ea:14:d9:67:83:1b:b0:1a:39:11:18:bf:17:c3: 9f:04:fc:4b:45:02:9b:75:be:75:c7:a4:9b:d3:45:62:da:85: a5:d7:67:9c:cb:b4:aa:b2:1e:65:18:45:0a:f9:1c:92:73:3d: 34:e1:16:05:0b:60:68:79:77:5f:b3:29:9f:76:95:1a:6c:e9: db:67:ae:d8:68:51:04:85:65:21:38:10:48:85:bd:e2:69:54: c2:74:76:25:34:0c:be:15:12:56:a6:ca:6e:fa:3e:07:30:e1: a1:8e:3c:3e:5e:d8:2d:f6:80:49:0b:02:f4:74:6d:6d:8b:ef: 7e:b1:a1:bf:f2:fa:f3:d9:6f:c8:35:3e:ab:be:cd:ac:36:6a: 32:cc:da:93:f4:b0:7a:ac:c9:fe:f9:86:d1:1b:4b:f1:d4:bf: e5:24:9e:9c:b5:eb:0d:92:5c:61:6e:cc:ab:0d:aa:3b:81:2c: a8:47:42:a2:da:5e:b0:a5:54:80:45:08:2a:be:01:4a:b5:6c: 30:06:3d:11:17:8e:93:35:44:04:d6:92:f6:01:89:2f:0b:9c: a4:60:81:a1 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt3x2sCi4wizqsZ/ZlBveV6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiOTQ0N2ZlOWE0YWNjN2Q2ZmY3MmQ2Yzc5OGQ0M2Q2NmNk NTBjM2YwHhcNMjYwMTAxMDQxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NjA3MzNmZDJlNzE0OTM2Y2IyYTdkODk4MDU4OWY3ZjNhMDRkMGI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUzYTl47kEUp/PWK1vImyVba3v0l IZJbS8+Po/TWX+T9AH7WJwVVkKd3UEL4ZE+o1zlbYHbKOqMDmCUaB7IhK8eJLKP4 hxvtsGMFoMFUO+9Xb6pPLvPG+EWWbx7zV8nic0/uTiknUZDrhQPymmvIn+15gsuj zfig6HoMC0pNaD89+IAUKoARsUH3GN/UE+DWnMrbZ/YYS7r2tEQTrQh0M6d4awBt gpozS5x2/10JuCB5NJ5KPfunTBukLoEM+oXaVdphLEL77jPa6lHvOzXw7RHdA+hO EYZRti5FCgIL1HoMuPTHpFToEm/tH6PSOF18T5cI24o14+XJaaNBeEk45wIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFIYHM/0ucUk2yyp9iYBYn386BNC3MB8GA1UdIwQY MBaAFHuUR/6aSsx9b/ctbHmNQ9Zs1Qw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUt OWZjZWI0NWQ2ZmRiLzEvaGdjel9TNXhTVGJMS24ySmdGaWZmem9FMExjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUtOWZjZWI0NWQ2ZmRi LzEvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKg5FhTAN BgkqhkiG9w0BAQsFAAOCAQEAhWZZe/X85JLg89jiIyc9aozpQINJH2hqUFHx4Hot aFrph5iTgrTFnuoU2WeDG7AaOREYvxfDnwT8S0UCm3W+dcekm9NFYtqFpddnnMu0 qrIeZRhFCvkcknM9NOEWBQtgaHl3X7Mpn3aVGmzp22eu2GhRBIVlITgQSIW94mlU wnR2JTQMvhUSVqbKbvo+BzDhoY48Pl7YLfaASQsC9HRtbYvvfrGhv/L689lvyDU+ q77NrDZqMszak/SweqzJ/vmG0RtL8dS/5SSenLXrDZJcYW7Mqw2qO4EsqEdCotpe sKVUgEUIKr4BSrVsMAY9EReOkzVEBNaS9gGJLwucpGCBoQ== -----END CERTIFICATE-----Generated at Wed Jan 21 23:10:45 2026 by rpki-client