This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/d9e16d-7e8c-43ec-99f7-e296cfd97209/1/RHa6C-9jNNLaQ89byBphWXQhs0Y.roa File: RHa6C-9jNNLaQ89byBphWXQhs0Y.roa (raw, json) Hash identifier: MC7bJV6p4PnQ8SBWeR6fNqikexZCV82B1zCu9BiJXRA= Subject key identifier: 44:76:BA:0B:EF:63:34:D2:DA:43:CF:5B:C8:1A:61:59:74:21:B3:46 Certificate issuer: /CN=e566e0e51628554cd92634b711ab758f8467c485 Certificate serial: 019B7C7F3D47CA3A64A6B80993A49DC924D5 Authority key identifier: E5:66:E0:E5:16:28:55:4C:D9:26:34:B7:11:AB:75:8F:84:67:C4:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/d9e16d-7e8c-43ec-99f7-e296cfd97209/1/RHa6C-9jNNLaQ89byBphWXQhs0Y.roa Signing time: Fri 02 Jan 2026 02:17:52 +0000 ROA not before: Fri 02 Jan 2026 02:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56837 IP address blocks: 31.22.16.0/24 maxlen: 24 31.22.20.0/22 maxlen: 22 86.39.64.0/20 maxlen: 20 2a00:6ec0:100::/40 maxlen: 40 2a00:6ec0:300::/40 maxlen: 40 2a00:6ec0:400::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/d9e16d-7e8c-43ec-99f7-e296cfd97209/1/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.crl rsync://rpki.ripe.net/repository/DEFAULT/15/d9e16d-7e8c-43ec-99f7-e296cfd97209/1/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.mft rsync://rpki.ripe.net/repository/DEFAULT/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:3d:47:ca:3a:64:a6:b8:09:93:a4:9d:c9:24:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e566e0e51628554cd92634b711ab758f8467c485 Validity Not Before: Jan 2 02:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4476ba0bef6334d2da43cf5bc81a61597421b346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:76:14:2b:0b:d3:c1:c0:f0:ec:51:ad:3b:14: 85:0e:54:7e:39:d1:27:38:4e:9a:5b:c8:79:7e:5b: 18:e3:ea:a1:14:f7:05:c9:75:08:bc:fb:cd:e0:1f: 21:a2:23:8d:80:e4:58:e3:45:65:0d:a3:df:5c:90: 00:6b:62:e0:61:f7:89:7c:60:ca:1a:55:1b:46:a1: 73:1a:61:57:c4:f0:e3:c1:82:91:3e:9b:47:db:7d: e0:a8:54:49:38:3f:93:92:2b:45:d6:bd:be:9e:3d: 0a:60:4f:a9:b5:76:42:23:2e:a7:0c:15:32:66:67: 5f:e8:63:79:db:9a:d9:e3:88:09:e0:38:86:44:e1: 2c:87:31:e3:2d:89:cc:5c:d3:b2:95:63:fc:4d:3d: cb:3b:fd:5d:51:2f:25:64:7c:b9:57:5a:7f:02:95: fd:da:7a:f4:ae:5f:9e:0c:d4:7d:57:37:ee:cc:46: 84:49:ec:55:1d:53:07:e2:82:14:da:d3:cc:c9:76: 43:05:94:18:a5:37:2c:35:2f:96:2d:04:d1:b0:5d: 1d:cc:89:77:a2:7a:46:1d:42:e0:08:71:09:6a:e3: 4f:e5:5c:a9:cd:4c:cc:b1:e9:64:8a:75:89:0a:2b: f4:99:56:72:05:08:05:62:ea:07:4f:5f:da:4d:ed: d8:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:76:BA:0B:EF:63:34:D2:DA:43:CF:5B:C8:1A:61:59:74:21:B3:46 X509v3 Authority Key Identifier: keyid:E5:66:E0:E5:16:28:55:4C:D9:26:34:B7:11:AB:75:8F:84:67:C4:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d9e16d-7e8c-43ec-99f7-e296cfd97209/1/RHa6C-9jNNLaQ89byBphWXQhs0Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d9e16d-7e8c-43ec-99f7-e296cfd97209/1/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.22.16.0/24 31.22.20.0/22 86.39.64.0/20 IPv6: 2a00:6ec0:100::/40 2a00:6ec0:300::-2a00:6ec0:4ff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 16:5d:bf:f4:e2:a2:77:b0:ba:e5:81:4e:fa:a6:9e:72:62:7a: 0c:f2:c5:0f:a1:32:df:1a:ce:10:25:c0:da:87:ed:0a:78:ff: 44:35:53:dd:d1:2a:52:2b:07:87:57:0f:15:2c:2f:4a:8b:f9: c0:88:da:44:f7:e5:4a:90:51:6f:e8:79:f1:2c:9c:b1:2b:60: a4:a0:c2:a5:c0:88:a3:7d:ee:e0:5b:bd:2f:8e:fe:80:66:4a: 4e:11:d8:0f:bb:ce:ad:87:48:62:ce:42:cb:b4:46:3b:72:39: 74:99:65:23:8d:91:ee:fb:4a:2d:f1:48:15:67:64:88:0e:84: c5:5a:b9:cd:d4:f7:a9:1b:4e:7c:c9:c5:34:86:11:50:42:d8: c7:f5:4d:e5:1d:03:7f:cf:33:ff:5d:f6:64:49:cf:98:80:04: 9f:e0:95:25:7d:1e:7f:00:c7:4d:19:c2:f5:09:6a:c5:c4:b8: 20:42:b8:d8:cb:5a:78:ef:8d:1e:ca:8f:9c:c2:2a:4b:2b:d8: 4b:7f:7b:1c:77:99:9f:c7:10:74:c8:1f:f6:c3:f4:61:44:f4: 60:46:0c:b9:0c:4b:bd:b9:9d:dd:60:bb:b0:f5:f6:a8:b7:2b: 77:84:fd:36:82:80:e9:40:ad:fd:2e:29:5d:9a:0b:ad:90:11: 4f:a6:ee:2c -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgISAZt8fz1HyjpkprgJk6SdySTVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1NjZlMGU1MTYyODU1NGNkOTI2MzRiNzExYWI3NThmODQ2 N2M0ODUwHhcNMjYwMTAyMDIxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NDc2YmEwYmVmNjMzNGQyZGE0M2NmNWJjODFhNjE1OTc0MjFiMzQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHYUKwvTwcDw7FGtOxSFDlR+OdEn OE6aW8h5flsY4+qhFPcFyXUIvPvN4B8hoiONgORY40VlDaPfXJAAa2LgYfeJfGDK GlUbRqFzGmFXxPDjwYKRPptH233gqFRJOD+TkitF1r2+nj0KYE+ptXZCIy6nDBUy Zmdf6GN525rZ44gJ4DiGROEshzHjLYnMXNOylWP8TT3LO/1dUS8lZHy5V1p/ApX9 2nr0rl+eDNR9VzfuzEaESexVHVMH4oIU2tPMyXZDBZQYpTcsNS+WLQTRsF0dzIl3 onpGHULgCHEJauNP5VypzUzMselkinWJCiv0mVZyBQgFYuoHT1/aTe3YMwIDAQAB o4ICNzCCAjMwHQYDVR0OBBYEFER2ugvvYzTS2kPPW8gaYVl0IbNGMB8GA1UdIwQY MBaAFOVm4OUWKFVM2SY0txGrdY+EZ8SFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVdiZzVSWW9WVXpaSmpTM0VhdDFqNFJueElVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9kOWUxNmQtN2U4Yy00M2VjLTk5Zjct ZTI5NmNmZDk3MjA5LzEvUkhhNkMtOWpOTkxhUTg5YnlCcGhXWFFoczBZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9kOWUxNmQtN2U4Yy00M2VjLTk5ZjctZTI5NmNmZDk3MjA5 LzEvNVdiZzVSWW9WVXpaSmpTM0VhdDFqNFJueElVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDAYBAIAATASAwQAHxYQAwQC HxYUAwQEVidAMCAEAgACMBoDBgAqAG7AATAQAwYAKgBuwAMDBgAqAG7ABDANBgkq hkiG9w0BAQsFAAOCAQEAFl2/9OKid7C65YFO+qaecmJ6DPLFD6Ey3xrOECXA2oft Cnj/RDVT3dEqUisHh1cPFSwvSov5wIjaRPflSpBRb+h58SycsStgpKDCpcCIo33u 4Fu9L47+gGZKThHYD7vOrYdIYs5Cy7RGO3I5dJllI42R7vtKLfFIFWdkiA6ExVq5 zdT3qRtOfMnFNIYRUELYx/VN5R0Df88z/132ZEnPmIAEn+CVJX0efwDHTRnC9Qlq xcS4IEK42MtaeO+NHsqPnMIqSyvYS397HHeZn8cQdMgf9sP0YUT0YEYMuQxLvbmd 3WC7sPX2qLcrd4T9NoKA6UCt/S4pXZoLrZART6buLA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:07 2026 by rpki-client