This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/Hp-l-QCypDPxGAlYXKDCKIDV8b0.roa File: Hp-l-QCypDPxGAlYXKDCKIDV8b0.roa (raw, json) Hash identifier: 5BTj8NBQJZuTgfnofdntPmd8NUBWuOYk2ttRiYNiVbM= Subject key identifier: 1E:9F:A5:F9:00:B2:A4:33:F1:18:09:58:5C:A0:C2:28:80:D5:F1:BD Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f Certificate serial: 019B7A5A9E79FD0B75047BCF937C4A0324AD Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/Hp-l-QCypDPxGAlYXKDCKIDV8b0.roa Signing time: Thu 01 Jan 2026 16:18:37 +0000 ROA not before: Thu 01 Jan 2026 16:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25487 IP address blocks: 217.13.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 11:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:9e:79:fd:0b:75:04:7b:cf:93:7c:4a:03:24:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f Validity Not Before: Jan 1 16:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1e9fa5f900b2a433f11809585ca0c22880d5f1bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9e:2d:76:da:a4:38:41:db:ea:e9:d8:ee:01: d8:e8:27:60:7d:8d:85:82:76:d9:75:dd:77:85:6c: e5:d8:63:7f:bb:7a:96:19:07:7d:28:7b:7c:8e:12: d0:bc:21:0a:77:02:42:c4:e0:3e:d3:dc:9b:1d:e6: 7e:64:fc:76:94:64:20:00:1c:fa:cb:a2:b3:25:e1: 6c:34:19:08:a3:ba:b1:ce:dc:5c:49:f6:fd:63:2a: 38:2d:14:b2:a0:d5:90:ab:44:50:38:d7:03:51:04: 76:ca:db:8e:29:6f:72:95:fd:56:9c:14:cb:85:74: 83:d3:15:e3:81:5c:9d:d9:4e:9c:62:b8:db:ee:45: ff:40:22:18:43:9d:bf:ff:76:2b:92:a4:3e:97:9f: 59:40:2b:da:d6:cb:a5:90:22:62:d7:74:f4:34:44: 11:22:ab:10:b1:5f:66:49:d7:b6:9b:e9:e6:d4:d0: b4:f6:bb:cd:29:f0:f7:66:1e:cc:ee:7b:34:4a:f7: 01:5b:04:ff:2a:f4:9a:9f:ce:3d:03:d2:56:61:27: b4:c2:ef:a5:fd:64:1f:12:53:c2:86:37:d6:9c:62: c6:cf:3c:d8:9b:33:8c:a3:fe:bd:b1:1c:a9:39:16: 0e:6a:44:1f:cf:fb:3e:4d:41:cf:5c:7b:7d:07:6e: d6:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:9F:A5:F9:00:B2:A4:33:F1:18:09:58:5C:A0:C2:28:80:D5:F1:BD X509v3 Authority Key Identifier: keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/Hp-l-QCypDPxGAlYXKDCKIDV8b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.13.80.0/20 Signature Algorithm: sha256WithRSAEncryption 51:a8:95:b5:ba:91:4c:c6:74:9c:20:75:26:b5:d0:12:ae:30: 0d:dd:74:e1:19:59:74:8a:6f:88:c1:d5:19:b1:de:64:50:ed: 65:73:e6:49:ae:c3:2e:0a:14:5d:d5:e9:72:ee:03:c5:5e:c3: 16:3e:72:8e:87:48:53:92:ed:0a:f8:11:b1:5e:d4:98:13:97: 67:9c:03:9b:8d:2f:0d:7a:0e:28:1a:c4:50:16:ef:04:8f:13: 76:95:10:13:ab:be:3b:82:03:4d:c7:e2:67:02:b1:af:64:c0: 12:41:7f:7b:5f:f4:a8:23:ed:4f:d1:35:16:3f:c8:a3:c4:8d: 32:d4:80:46:5c:eb:07:24:55:91:6e:0d:cb:dc:fe:62:bf:18: 49:a2:54:81:29:eb:72:92:49:a2:29:6e:a5:af:2d:a6:8e:38: 7a:e5:7a:37:45:f8:dd:84:a2:28:49:9d:c2:39:97:4b:a3:b5: 68:33:a8:27:1c:98:19:e8:0e:a7:fb:15:09:ee:dc:93:04:a3: 8a:1b:70:ef:26:95:89:33:13:20:4b:ec:ef:8b:64:5f:e9:0a: 1d:ec:2d:34:cc:ec:d4:ab:a6:7d:ec:a8:c0:c8:e2:a9:b9:17: db:ea:aa:28:9b:3c:df:a3:05:b7:05:55:89:ea:34:10:0f:0f: 6b:09:22:7c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wp55/Qt1BHvPk3xKAyStMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxOTNmZmU5ZGIzNzYyNmIxM2Y4NWQ3Y2M0NTdhYWQ1YzFm MzBjOWYwHhcNMjYwMTAxMTYxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZTlmYTVmOTAwYjJhNDMzZjExODA5NTg1Y2EwYzIyODgwZDVmMWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJ4tdtqkOEHb6unY7gHY6CdgfY2F gnbZdd13hWzl2GN/u3qWGQd9KHt8jhLQvCEKdwJCxOA+09ybHeZ+ZPx2lGQgABz6 y6KzJeFsNBkIo7qxztxcSfb9Yyo4LRSyoNWQq0RQONcDUQR2ytuOKW9ylf1WnBTL hXSD0xXjgVyd2U6cYrjb7kX/QCIYQ52//3YrkqQ+l59ZQCva1sulkCJi13T0NEQR IqsQsV9mSde2m+nm1NC09rvNKfD3Zh7M7ns0SvcBWwT/KvSan849A9JWYSe0wu+l /WQfElPChjfWnGLGzzzYmzOMo/69sRypORYOakQfz/s+TUHPXHt9B27WbQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB6fpfkAsqQz8RgJWFygwiiA1fG9MB8GA1UdIwQY MBaAFIGT/+nbN2JrE/hdfMRXqtXB8wyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODkt MDhkMTI3MGMyZTcxLzEvSHAtbC1RQ3lwRFB4R0FsWVhLRENLSURWOGIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODktMDhkMTI3MGMyZTcx LzEvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2Q1QMA0G CSqGSIb3DQEBCwUAA4IBAQBRqJW1upFMxnScIHUmtdASrjAN3XThGVl0im+IwdUZ sd5kUO1lc+ZJrsMuChRd1ely7gPFXsMWPnKOh0hTku0K+BGxXtSYE5dnnAObjS8N eg4oGsRQFu8EjxN2lRATq747ggNNx+JnArGvZMASQX97X/SoI+1P0TUWP8ijxI0y 1IBGXOsHJFWRbg3L3P5ivxhJolSBKetykkmiKW6lry2mjjh65Xo3RfjdhKIoSZ3C OZdLo7VoM6gnHJgZ6A6n+xUJ7tyTBKOKG3DvJpWJMxMgS+zvi2Rf6Qod7C00zOzU q6Z97KjAyOKpuRfb6qoomzzfowW3BVWJ6jQQDw9rCSJ8 -----END CERTIFICATE-----Generated at Wed Jan 21 18:20:22 2026 by rpki-client