This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/hpFPFF4swm17BfKeLPrET14DerI.roa File: hpFPFF4swm17BfKeLPrET14DerI.roa (raw, json) Hash identifier: /w3PMxP9jyIQ4EgZwsRkLDa6435IO8C6U7QCr8ty+WM= Subject key identifier: 86:91:4F:14:5E:2C:C2:6D:7B:05:F2:9E:2C:FA:C4:4F:5E:03:7A:B2 Certificate issuer: /CN=69b01927a1a177d4261221d94628514a525a96e0 Certificate serial: 019B7F83F38FFC852BF9801D7DFEFF6CEC55 Authority key identifier: 69:B0:19:27:A1:A1:77:D4:26:12:21:D9:46:28:51:4A:52:5A:96:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/hpFPFF4swm17BfKeLPrET14DerI.roa Signing time: Fri 02 Jan 2026 16:21:52 +0000 ROA not before: Fri 02 Jan 2026 16:21:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6730 IP address blocks: 213.146.0.0/24 maxlen: 24 213.146.6.0/24 maxlen: 24 213.146.8.0/24 maxlen: 24 213.146.9.0/24 maxlen: 24 213.146.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 10:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:f3:8f:fc:85:2b:f9:80:1d:7d:fe:ff:6c:ec:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69b01927a1a177d4261221d94628514a525a96e0 Validity Not Before: Jan 2 16:21:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=86914f145e2cc26d7b05f29e2cfac44f5e037ab2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c0:32:56:14:ea:80:1f:bd:e0:b8:94:a9:7e: d9:dd:60:d3:f5:7e:31:d1:d4:1d:59:dc:0b:2b:a2: dc:e1:48:1f:cb:c3:16:2b:97:b8:20:2e:af:bb:4b: f5:9f:1c:f3:04:f6:44:af:11:9c:18:73:e6:e6:c2: 3b:4d:86:36:c4:44:b3:d9:5a:21:05:51:fe:d4:dd: e7:88:c2:38:ba:bc:d8:32:dc:8f:c3:37:73:44:bf: 98:0b:e6:f1:1c:97:ef:e8:b3:82:bd:e1:e6:cc:97: 2a:c2:75:9f:27:61:3e:8a:94:18:7a:7d:46:bb:13: 0d:b1:b5:b4:d2:d5:ff:37:55:c9:25:34:23:d0:48: 84:12:8c:4b:b0:fe:c3:2e:38:84:c4:0d:39:a4:4d: 6b:70:4d:5a:43:82:4a:a2:48:3e:47:eb:8a:c2:c4: 8f:0f:15:7e:ab:2d:10:14:2c:28:ae:3c:c5:6a:82: 59:25:17:aa:1f:f5:89:41:b7:e5:fd:c7:a7:7c:cd: 56:53:64:a5:74:45:2b:4b:bd:4d:b4:f0:8c:90:05: 8f:92:0c:ff:fa:74:ad:02:59:bc:5d:0d:31:73:cf: 32:bd:00:aa:ec:cf:ab:e3:c3:c0:3f:f1:c4:a3:d2: 99:b8:ba:92:b0:bf:7a:3b:d7:c9:66:5d:c9:07:30: b8:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:91:4F:14:5E:2C:C2:6D:7B:05:F2:9E:2C:FA:C4:4F:5E:03:7A:B2 X509v3 Authority Key Identifier: keyid:69:B0:19:27:A1:A1:77:D4:26:12:21:D9:46:28:51:4A:52:5A:96:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/hpFPFF4swm17BfKeLPrET14DerI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.146.0.0/24 213.146.6.0/24 213.146.8.0/23 213.146.11.0/24 Signature Algorithm: sha256WithRSAEncryption 52:e9:c9:aa:dd:9a:7f:4c:d8:70:0c:41:de:c3:d1:9c:3e:0a: 66:e3:9b:11:8e:fb:16:30:cd:93:e6:c2:28:09:4a:d5:e7:b2: 10:46:cc:5e:5d:53:87:f1:cb:3d:63:ba:01:59:1e:4a:46:88: bc:a0:17:b1:83:d5:85:4a:f7:24:4c:47:7d:28:36:5c:55:c9: 7d:18:dc:d3:5c:9a:f6:52:7d:a8:7e:53:9b:a3:58:10:e8:1a: eb:16:b2:b0:62:a0:c1:d3:c2:58:ef:c0:26:96:6a:6d:da:b5: f7:37:0b:4f:21:d8:7b:f6:d4:fd:62:5b:fd:b7:34:e1:92:51: ef:8b:df:13:b8:64:38:54:d1:12:d5:2e:ed:ac:37:cc:88:b3: dd:c0:93:2b:54:fe:92:ef:04:c0:69:da:ee:d9:79:3f:ad:6b: a4:78:0d:15:8f:21:bf:b5:d4:75:1d:6b:5a:4e:3b:f2:79:38: 37:2b:b0:37:fb:d6:78:bb:86:b0:27:b8:80:d2:5d:6a:83:26: 9a:dd:f0:01:7a:ff:dc:c0:d0:d3:73:df:b9:40:19:64:d0:d9: 35:66:f2:90:c7:1a:6e:89:f6:b7:8e:45:f7:2d:eb:0f:6f:20: 64:d0:15:6c:9a:4b:4c:ea:f8:76:25:03:42:8a:75:dd:be:b3: b0:cf:71:ae -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt/g/OP/IUr+YAdff7/bOxVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5YjAxOTI3YTFhMTc3ZDQyNjEyMjFkOTQ2Mjg1MTRhNTI1 YTk2ZTAwHhcNMjYwMTAyMTYyMTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NjkxNGYxNDVlMmNjMjZkN2IwNWYyOWUyY2ZhYzQ0ZjVlMDM3YWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsAyVhTqgB+94LiUqX7Z3WDT9X4x 0dQdWdwLK6Lc4Ugfy8MWK5e4IC6vu0v1nxzzBPZErxGcGHPm5sI7TYY2xESz2Voh BVH+1N3niMI4urzYMtyPwzdzRL+YC+bxHJfv6LOCveHmzJcqwnWfJ2E+ipQYen1G uxMNsbW00tX/N1XJJTQj0EiEEoxLsP7DLjiExA05pE1rcE1aQ4JKokg+R+uKwsSP DxV+qy0QFCworjzFaoJZJReqH/WJQbfl/cenfM1WU2SldEUrS71NtPCMkAWPkgz/ +nStAlm8XQ0xc88yvQCq7M+r48PAP/HEo9KZuLqSsL96O9fJZl3JBzC4XQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFIaRTxReLMJtewXyniz6xE9eA3qyMB8GA1UdIwQY MBaAFGmwGSehoXfUJhIh2UYoUUpSWpbgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWJBWko2R2hkOVFtRWlIWlJpaFJTbEphbHVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8zMjhlYjMtNTYwMy00OTU1LWFhOTIt MjI1MmJjY2ZkYmY5LzEvaHBGUEZGNHN3bTE3QmZLZUxQckVUMTREZXJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy8zMjhlYjMtNTYwMy00OTU1LWFhOTItMjI1MmJjY2ZkYmY5 LzEvYWJBWko2R2hkOVFtRWlIWlJpaFJTbEphbHVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQA1ZIAAwQA 1ZIGAwQB1ZIIAwQA1ZILMA0GCSqGSIb3DQEBCwUAA4IBAQBS6cmq3Zp/TNhwDEHe w9GcPgpm45sRjvsWMM2T5sIoCUrV57IQRsxeXVOH8cs9Y7oBWR5KRoi8oBexg9WF SvckTEd9KDZcVcl9GNzTXJr2Un2oflObo1gQ6BrrFrKwYqDB08JY78Amlmpt2rX3 NwtPIdh79tT9Ylv9tzThklHvi98TuGQ4VNES1S7trDfMiLPdwJMrVP6S7wTAadru 2Xk/rWukeA0VjyG/tdR1HWtaTjvyeTg3K7A3+9Z4u4awJ7iA0l1qgyaa3fABev/c wNDTc9+5QBlk0Nk1ZvKQxxpuifa3jkX3LesPbyBk0BVsmktM6vh2JQNCinXdvrOw z3Gu -----END CERTIFICATE-----Generated at Fri Jan 9 16:31:03 2026 by rpki-client