This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/hm_BsJzB0AR6SdenHtvz-Cegi4c.roa File: hm_BsJzB0AR6SdenHtvz-Cegi4c.roa (raw, json) Hash identifier: gM+Jf85Sje+vulSZO7OAAXwSQcvD0036g6WsBfGoNeo= Subject key identifier: 86:6F:C1:B0:9C:C1:D0:04:7A:49:D7:A7:1E:DB:F3:F8:27:A0:8B:87 Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Certificate serial: 019BD70C3E55F8E982B79B50F0A292D40CE9 Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/hm_BsJzB0AR6SdenHtvz-Cegi4c.roa Signing time: Mon 19 Jan 2026 16:17:42 +0000 ROA not before: Mon 19 Jan 2026 16:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9304 IP address blocks: 45.155.240.0/24 maxlen: 24 213.220.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d7:0c:3e:55:f8:e9:82:b7:9b:50:f0:a2:92:d4:0c:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Validity Not Before: Jan 19 16:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=866fc1b09cc1d0047a49d7a71edbf3f827a08b87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:79:ff:fc:0d:89:9d:df:f6:f2:7c:71:ef:25: 14:25:e8:f7:5c:9c:76:fa:13:3c:99:61:0f:82:31: a6:e3:3d:e6:87:17:09:ef:19:12:10:b0:19:c0:6e: 54:3a:25:54:f5:02:62:33:15:ff:ac:01:6c:99:8a: 21:84:f3:9b:d6:48:1c:ef:2c:ea:bb:1f:3e:e0:67: ee:74:d5:88:b3:fe:5c:3e:36:36:2e:d1:5c:fe:1d: 65:ec:a7:ee:3f:43:b1:b2:0d:0a:f5:c7:e4:8b:ed: 5b:a6:62:0b:ee:72:44:e2:52:49:eb:38:08:08:73: f8:bd:1b:b5:81:5c:86:df:85:c7:c3:a0:33:ce:ac: 4c:83:65:4c:1d:af:64:09:7e:bc:bc:1d:c2:57:56: b1:31:20:b1:98:b2:ab:00:c1:98:64:2c:1b:03:40: 49:a4:37:13:be:84:60:a1:f3:83:44:e5:17:6a:78: e2:3a:b9:a4:65:b4:9b:63:4d:39:27:9a:e2:e1:1b: a7:3a:95:22:e3:ff:ae:f3:6d:a8:59:f7:94:63:75: b4:32:d7:b3:36:04:5a:29:ee:f0:8d:a5:f7:ac:ff: fc:da:cf:96:f9:e2:81:52:f8:ff:c0:bf:c9:0e:cd: 67:2b:f2:33:ba:2d:12:f8:ac:46:ab:fa:51:99:6f: 33:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:6F:C1:B0:9C:C1:D0:04:7A:49:D7:A7:1E:DB:F3:F8:27:A0:8B:87 X509v3 Authority Key Identifier: keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/hm_BsJzB0AR6SdenHtvz-Cegi4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.155.240.0/24 213.220.41.0/24 Signature Algorithm: sha256WithRSAEncryption 49:2a:ad:4d:ff:d4:72:60:85:f2:80:84:c6:99:a2:af:6d:ee: 74:f9:f7:dc:d4:3b:3f:c6:5f:38:74:8a:88:7a:da:37:97:18: f7:8f:06:ff:3f:39:5a:f1:ca:5a:b6:63:eb:68:25:59:e2:a7: 29:f8:41:7b:81:ec:27:b4:6a:d5:67:01:83:9b:89:b1:af:c2: 7f:e9:42:58:e5:28:e1:98:22:a5:ad:83:c7:5e:c2:4c:dd:5a: d6:fb:c6:a2:44:ab:cd:03:6b:ae:34:cb:4d:d5:23:8e:0c:3e: cd:c1:40:cd:ca:c7:73:df:b0:18:9e:61:9f:a0:47:0e:c4:a4: 2b:e7:8d:fc:fd:78:d4:ba:bd:67:f5:00:cf:7a:ba:0e:0e:6a: b2:69:45:81:5c:ea:ca:8f:d7:9f:aa:db:65:f0:35:47:9c:58: 62:d0:4a:cc:06:bc:d2:d5:d0:5c:87:1c:0b:d1:9d:e9:ec:a2: 56:e8:f5:6f:39:bb:38:6b:63:f3:78:82:ad:5e:e8:1a:f4:83: d1:b9:e4:79:36:7d:57:6a:c0:b3:ba:9b:3f:71:ec:ff:18:3c: 87:15:9f:35:05:13:b3:62:4a:31:17:c0:71:06:19:b2:2d:08: e9:3f:99:25:08:6c:5b:70:47:43:79:d5:78:0d:df:36:80:d4: 43:91:a5:05 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZvXDD5V+OmCt5tQ8KKS1AzpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NzFkY2M3YTlhYzczNTFjNzFlMGJjMjI3OGNmNDVmZDAy MGFlMmUwHhcNMjYwMTE5MTYxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NjZmYzFiMDljYzFkMDA0N2E0OWQ3YTcxZWRiZjNmODI3YTA4Yjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXn//A2Jnd/28nxx7yUUJej3XJx2 +hM8mWEPgjGm4z3mhxcJ7xkSELAZwG5UOiVU9QJiMxX/rAFsmYohhPOb1kgc7yzq ux8+4GfudNWIs/5cPjY2LtFc/h1l7KfuP0Oxsg0K9cfki+1bpmIL7nJE4lJJ6zgI CHP4vRu1gVyG34XHw6AzzqxMg2VMHa9kCX68vB3CV1axMSCxmLKrAMGYZCwbA0BJ pDcTvoRgofODROUXanjiOrmkZbSbY005J5ri4RunOpUi4/+u822oWfeUY3W0Mtez NgRaKe7wjaX3rP/82s+W+eKBUvj/wL/JDs1nK/Izui0S+KxGq/pRmW8zHQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIZvwbCcwdAEeknXpx7b8/gnoIuHMB8GA1UdIwQY MBaAFAZx3MeprHNRxx4LwieM9F/QIK4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt MWRkZWM0Y2NlMjRjLzEvaG1fQnNKekIwQVI2U2Rlbkh0dnotQ2VnaTRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj LzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZvwAwQA 1dwpMA0GCSqGSIb3DQEBCwUAA4IBAQBJKq1N/9RyYIXygITGmaKvbe50+ffc1Ds/ xl84dIqIeto3lxj3jwb/Pzla8cpatmPraCVZ4qcp+EF7gewntGrVZwGDm4mxr8J/ 6UJY5SjhmCKlrYPHXsJM3VrW+8aiRKvNA2uuNMtN1SOODD7NwUDNysdz37AYnmGf oEcOxKQr5438/XjUur1n9QDPeroODmqyaUWBXOrKj9efqttl8DVHnFhi0ErMBrzS 1dBchxwL0Z3p7KJW6PVvObs4a2PzeIKtXuga9IPRueR5Nn1XasCzups/cez/GDyH FZ81BROzYkoxF8BxBhmyLQjpP5klCGxbcEdDedV4Dd82gNRDkaUF -----END CERTIFICATE-----Generated at Tue Jan 20 02:48:01 2026 by rpki-client