This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/HMUv5O_IloNPK-xnYoboUUQaw9I.roa File: HMUv5O_IloNPK-xnYoboUUQaw9I.roa (raw, json) Hash identifier: pWKPihhcLAd/kMZDUiPWP3Bf2PaOFgTs9krixFbyXKg= Subject key identifier: 1C:C5:2F:E4:EF:C8:96:83:4F:2B:EC:67:62:86:E8:51:44:1A:C3:D2 Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f Certificate serial: 019B77C6C93264B8341AC82D7694F3B47F2D Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/HMUv5O_IloNPK-xnYoboUUQaw9I.roa Signing time: Thu 01 Jan 2026 04:17:54 +0000 ROA not before: Thu 01 Jan 2026 04:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61302 IP address blocks: 5.178.3.0/24 maxlen: 24 46.23.96.0/24 maxlen: 24 46.23.98.0/24 maxlen: 24 109.205.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 06:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:c9:32:64:b8:34:1a:c8:2d:76:94:f3:b4:7f:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f Validity Not Before: Jan 1 04:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1cc52fe4efc896834f2bec676286e851441ac3d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ce:21:ac:2a:ba:49:96:fb:a5:40:ee:ee:f4: 75:6f:08:8e:4e:54:bc:17:c0:63:61:fb:15:3e:f5: 9e:f8:ae:ff:f5:22:68:fd:70:12:7d:f4:cb:a5:31: ba:f7:eb:80:15:28:de:0b:d9:6f:83:f3:35:da:a8: b6:ff:8c:3a:44:87:02:e7:be:d4:81:84:22:50:ed: 75:cb:a7:76:27:a9:05:a0:68:cd:c8:fd:52:73:ad: 83:03:c5:73:36:d1:0e:fe:00:08:82:fe:cd:e1:ca: 20:3d:ba:43:d7:cd:f4:11:c7:8c:27:82:70:68:a6: ae:c8:8c:8c:d8:48:c4:94:98:9a:99:72:4c:35:a1: 36:d0:bb:a6:d6:a0:b9:3a:93:42:1e:96:0b:f3:60: 0d:b9:24:d2:7d:00:51:e2:f8:84:8c:bb:9c:ff:e2: 78:8d:35:e9:99:fc:c0:40:4e:b5:6e:46:db:e8:60: 90:f3:03:5e:12:d9:35:2b:de:73:d3:0f:a4:84:7a: 62:1a:8e:c8:9c:6b:88:ab:55:54:d7:1a:14:27:1c: c0:8d:bc:1b:3e:b4:6e:58:80:12:6e:b8:43:6e:04: 2a:f0:61:b1:8d:b1:05:69:de:e2:5f:68:d6:48:9a: d0:3b:c4:1e:c3:ef:c3:57:d8:4b:4f:c7:fb:e1:59: 29:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:C5:2F:E4:EF:C8:96:83:4F:2B:EC:67:62:86:E8:51:44:1A:C3:D2 X509v3 Authority Key Identifier: keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/HMUv5O_IloNPK-xnYoboUUQaw9I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.178.3.0/24 46.23.96.0/24 46.23.98.0/24 109.205.212.0/24 Signature Algorithm: sha256WithRSAEncryption cb:9e:c3:48:69:d9:5a:63:34:fb:38:84:76:fa:c1:84:37:d2: ea:26:c9:79:c8:3d:bb:c1:bf:bf:37:86:61:ef:5b:8d:8c:1e: eb:09:d1:9a:71:e4:f1:39:de:36:62:4d:7f:eb:8a:d6:dd:b7: 89:d1:3d:77:ae:e5:ca:44:d2:09:86:5e:5d:bd:f1:99:3e:5b: b8:20:61:f4:79:9e:2c:22:fd:07:be:c7:e3:f8:a7:f5:ef:21: f3:ab:7f:17:ae:5b:a2:94:d4:8c:31:d9:f8:f5:26:e5:b4:f0: ef:c3:4d:c2:c4:35:f6:ef:8f:97:9e:d5:65:5f:17:5f:7e:97: 47:95:10:bb:e9:c4:79:47:42:2f:fb:98:89:b7:a4:9b:6d:9f: d9:6a:5b:84:fc:59:ec:95:6d:a2:51:22:af:8a:b3:13:e1:7f: e7:b0:b2:d7:89:49:72:86:c9:e6:6a:a6:1b:d4:c6:c0:8e:55: 8b:14:29:f9:a8:bd:71:5e:25:ed:62:2d:fa:8f:75:ab:a9:ad: c8:af:33:5b:fd:2d:cb:00:70:7c:a4:e9:49:37:86:07:78:c5: 3f:c2:d5:7e:d4:33:9a:33:69:35:de:1d:48:0b:96:da:5e:67: f1:73:23:76:81:fa:50:d7:67:9b:48:7b:5f:3a:87:65:30:dc: e6:c5:1e:08 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt3xskyZLg0GsgtdpTztH8tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDZhNDJiYjI0NDZlNTFmMTkyZWEzNzViZGY3ZWVjNWE1 MWM3N2YwHhcNMjYwMTAxMDQxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxY2M1MmZlNGVmYzg5NjgzNGYyYmVjNjc2Mjg2ZTg1MTQ0MWFjM2QyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwM4hrCq6SZb7pUDu7vR1bwiOTlS8 F8BjYfsVPvWe+K7/9SJo/XASffTLpTG69+uAFSjeC9lvg/M12qi2/4w6RIcC577U gYQiUO11y6d2J6kFoGjNyP1Sc62DA8VzNtEO/gAIgv7N4cogPbpD1830EceMJ4Jw aKauyIyM2EjElJiamXJMNaE20Lum1qC5OpNCHpYL82ANuSTSfQBR4viEjLuc/+J4 jTXpmfzAQE61bkbb6GCQ8wNeEtk1K95z0w+khHpiGo7InGuIq1VU1xoUJxzAjbwb PrRuWIASbrhDbgQq8GGxjbEFad7iX2jWSJrQO8Qew+/DV9hLT8f74VkpmQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFBzFL+TvyJaDTyvsZ2KG6FFEGsPSMB8GA1UdIwQY MBaAFH0GpCuyRG5R8ZLqN1vffuxaUcd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUt MmNmODA2YjJkMGYyLzEvSE1VdjVPX0lsb05QSy14bllvYm9VVVFhdzlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUtMmNmODA2YjJkMGYy LzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQABbIDAwQA LhdgAwQALhdiAwQAbc3UMA0GCSqGSIb3DQEBCwUAA4IBAQDLnsNIadlaYzT7OIR2 +sGEN9LqJsl5yD27wb+/N4Zh71uNjB7rCdGaceTxOd42Yk1/64rW3beJ0T13ruXK RNIJhl5dvfGZPlu4IGH0eZ4sIv0Hvsfj+Kf17yHzq38XrluilNSMMdn49SbltPDv w03CxDX274+XntVlXxdffpdHlRC76cR5R0Iv+5iJt6SbbZ/ZaluE/FnslW2iUSKv irMT4X/nsLLXiUlyhsnmaqYb1MbAjlWLFCn5qL1xXiXtYi36j3Wrqa3IrzNb/S3L AHB8pOlJN4YHeMU/wtV+1DOaM2k13h1IC5baXmfxcyN2gfpQ12ebSHtfOodlMNzm xR4I -----END CERTIFICATE-----Generated at Wed Jan 21 12:19:14 2026 by rpki-client