This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/d3dba0-d715-495f-9178-393a4080c747/1/hHUeXEtpbVkoe8mRwdFZ7Npu46s.roa File: hHUeXEtpbVkoe8mRwdFZ7Npu46s.roa (raw, json) Hash identifier: miQnkWv8mirrfM7hx7qM+NHg3ouKJ2L8VE2wiL5w/Vg= Subject key identifier: 84:75:1E:5C:4B:69:6D:59:28:7B:C9:91:C1:D1:59:EC:DA:6E:E3:AB Certificate issuer: /CN=e7fec2833d3c8e232903cdd3afc03ecdbe83b085 Certificate serial: 019B7AC88DB17B0E8EF694900F5C786DCC01 Authority key identifier: E7:FE:C2:83:3D:3C:8E:23:29:03:CD:D3:AF:C0:3E:CD:BE:83:B0:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_7Cgz08jiMpA83Tr8A-zb6DsIU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/d3dba0-d715-495f-9178-393a4080c747/1/hHUeXEtpbVkoe8mRwdFZ7Npu46s.roa Signing time: Thu 01 Jan 2026 18:18:42 +0000 ROA not before: Thu 01 Jan 2026 18:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56403 IP address blocks: 46.235.16.0/22 maxlen: 22 46.235.20.0/23 maxlen: 23 46.235.22.0/24 maxlen: 24 46.235.23.0/24 maxlen: 24 185.194.128.0/22 maxlen: 22 185.194.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/d3dba0-d715-495f-9178-393a4080c747/1/5_7Cgz08jiMpA83Tr8A-zb6DsIU.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/d3dba0-d715-495f-9178-393a4080c747/1/5_7Cgz08jiMpA83Tr8A-zb6DsIU.mft rsync://rpki.ripe.net/repository/DEFAULT/5_7Cgz08jiMpA83Tr8A-zb6DsIU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:8d:b1:7b:0e:8e:f6:94:90:0f:5c:78:6d:cc:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7fec2833d3c8e232903cdd3afc03ecdbe83b085 Validity Not Before: Jan 1 18:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=84751e5c4b696d59287bc991c1d159ecda6ee3ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:16:8a:ce:4f:5b:c7:f4:30:14:49:8a:71:fe: ce:23:f0:1d:c4:bb:41:a8:e4:d1:3b:bc:32:ea:d1: 95:9e:62:9c:82:9d:90:3a:7a:ca:fd:65:ba:e5:66: 2a:90:11:66:72:10:01:43:3f:2d:7b:7c:2f:8c:ca: 03:56:d8:37:9a:48:f7:f4:3b:50:08:3f:bc:27:8b: f8:24:67:60:3c:51:40:53:73:19:42:8d:00:db:ee: 09:7e:72:93:c1:1e:a9:1b:99:7b:7d:7c:29:19:db: 3e:f6:55:aa:6f:90:0d:53:de:60:08:7c:f2:17:65: de:ad:32:37:21:7c:6a:56:a5:d7:50:5b:2b:7b:21: 94:cd:38:54:95:7a:3f:ad:47:f4:0c:ba:6b:72:5d: d6:26:42:b9:6f:a2:e9:3c:6d:eb:43:4f:a3:e4:21: d1:c4:24:9d:ae:3f:ce:90:d4:5c:3e:5a:55:e9:e6: 22:b4:86:03:72:04:35:6a:54:ef:7d:93:b5:d1:ad: 27:ce:f3:fb:a1:8a:1b:1f:44:8f:6d:0d:c8:01:54: 44:c9:e4:d9:d3:0c:0a:82:80:dc:33:26:e4:52:5e: 3d:20:9e:30:1c:66:6c:c6:eb:df:74:7c:b4:c7:9f: 5d:2b:26:8e:d4:59:bd:be:5d:79:08:c6:75:49:9b: 86:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:75:1E:5C:4B:69:6D:59:28:7B:C9:91:C1:D1:59:EC:DA:6E:E3:AB X509v3 Authority Key Identifier: keyid:E7:FE:C2:83:3D:3C:8E:23:29:03:CD:D3:AF:C0:3E:CD:BE:83:B0:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_7Cgz08jiMpA83Tr8A-zb6DsIU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d3dba0-d715-495f-9178-393a4080c747/1/hHUeXEtpbVkoe8mRwdFZ7Npu46s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d3dba0-d715-495f-9178-393a4080c747/1/5_7Cgz08jiMpA83Tr8A-zb6DsIU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.235.16.0/21 185.194.128.0/22 Signature Algorithm: sha256WithRSAEncryption 4f:ed:47:74:ff:10:cb:95:9e:1c:00:fc:09:e5:db:b4:3c:d9: a1:be:b9:c4:0b:e5:21:1d:28:73:ed:98:52:75:b0:4e:8f:0d: bd:ab:24:51:ea:63:ec:51:3b:6b:1a:b1:05:52:92:41:e3:0c: cb:bf:71:87:91:b2:f9:c8:5a:42:93:53:f3:ae:b2:b7:26:3d: 0a:9c:bc:da:72:52:d7:30:a8:db:e4:e9:7b:ba:1e:33:b0:83: ae:29:1c:47:bb:3b:56:1b:b5:bb:58:f3:46:bf:0b:8f:90:f1: 68:49:e8:98:f0:14:b9:48:bb:d8:68:6a:92:80:55:b3:b5:d0: 68:a4:76:10:53:98:f3:7e:78:b8:11:69:da:93:fc:78:83:d3: 8d:a1:e8:0d:6f:f2:be:8f:dc:f3:01:4b:a5:40:35:32:a9:e0: 7c:d4:4d:e7:e5:df:22:d5:f1:74:8d:fd:b8:42:7f:03:57:6a: b5:b3:fd:e5:e9:c0:e6:e8:8b:4c:6b:f2:46:fe:e1:26:7e:15: 09:a5:c3:bd:a8:89:ad:7f:6d:da:16:72:bb:51:e2:09:4f:a8: ed:de:80:a3:e1:91:16:45:21:0e:1d:00:50:88:f3:e8:87:6c: 36:94:5d:fe:ce:37:94:b5:85:85:5a:a6:d3:2b:8b:74:0c:0b: d8:78:31:d0 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6yI2xew6O9pSQD1x4bcwBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3ZmVjMjgzM2QzYzhlMjMyOTAzY2RkM2FmYzAzZWNkYmU4 M2IwODUwHhcNMjYwMTAxMTgxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDc1MWU1YzRiNjk2ZDU5Mjg3YmM5OTFjMWQxNTllY2RhNmVlM2FiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhaKzk9bx/QwFEmKcf7OI/AdxLtB qOTRO7wy6tGVnmKcgp2QOnrK/WW65WYqkBFmchABQz8te3wvjMoDVtg3mkj39DtQ CD+8J4v4JGdgPFFAU3MZQo0A2+4JfnKTwR6pG5l7fXwpGds+9lWqb5ANU95gCHzy F2XerTI3IXxqVqXXUFsreyGUzThUlXo/rUf0DLprcl3WJkK5b6LpPG3rQ0+j5CHR xCSdrj/OkNRcPlpV6eYitIYDcgQ1alTvfZO10a0nzvP7oYobH0SPbQ3IAVREyeTZ 0wwKgoDcMybkUl49IJ4wHGZsxuvfdHy0x59dKyaO1Fm9vl15CMZ1SZuGPwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIR1HlxLaW1ZKHvJkcHRWezabuOrMB8GA1UdIwQY MBaAFOf+woM9PI4jKQPN06/APs2+g7CFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNV83Q2d6MDhqaU1wQTgzVHI4QS16YjZEc0lVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9kM2RiYTAtZDcxNS00OTVmLTkxNzgt MzkzYTQwODBjNzQ3LzEvaEhVZVhFdHBiVmtvZThtUndkRlo3TnB1NDZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9kM2RiYTAtZDcxNS00OTVmLTkxNzgtMzkzYTQwODBjNzQ3 LzEvNV83Q2d6MDhqaU1wQTgzVHI4QS16YjZEc0lVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDLusQAwQC ucKAMA0GCSqGSIb3DQEBCwUAA4IBAQBP7Ud0/xDLlZ4cAPwJ5du0PNmhvrnEC+Uh HShz7ZhSdbBOjw29qyRR6mPsUTtrGrEFUpJB4wzLv3GHkbL5yFpCk1PzrrK3Jj0K nLzaclLXMKjb5Ol7uh4zsIOuKRxHuztWG7W7WPNGvwuPkPFoSeiY8BS5SLvYaGqS gFWztdBopHYQU5jzfni4EWnak/x4g9ONoegNb/K+j9zzAUulQDUyqeB81E3n5d8i 1fF0jf24Qn8DV2q1s/3l6cDm6ItMa/JG/uEmfhUJpcO9qImtf23aFnK7UeIJT6jt 3oCj4ZEWRSEOHQBQiPPoh2w2lF3+zjeUtYWFWqbTK4t0DAvYeDHQ -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:25 2026 by rpki-client