This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/huv9WhyaqZeUQAlkGFyBGax7NRw.roa File: huv9WhyaqZeUQAlkGFyBGax7NRw.roa (raw, json) Hash identifier: xK7tAye7RT8Cz9Vgf/cvRwfWlm4XDwHcOS6GluJ83BY= Subject key identifier: 86:EB:FD:5A:1C:9A:A9:97:94:40:09:64:18:5C:81:19:AC:7B:35:1C Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071 Certificate serial: 019A34CF7828795CEEA8E08DFE8F0683D6B1 Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/huv9WhyaqZeUQAlkGFyBGax7NRw.roa Signing time: Thu 30 Oct 2025 11:10:03 +0000 ROA not before: Thu 30 Oct 2025 11:10:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 48558 IP address blocks: 46.161.1.0/24 maxlen: 24 46.161.26.0/24 maxlen: 24 46.161.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 17:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:34:cf:78:28:79:5c:ee:a8:e0:8d:fe:8f:06:83:d6:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071 Validity Not Before: Oct 30 11:10:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=86ebfd5a1c9aa99794400964185c8119ac7b351c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:8f:35:3f:ae:b8:4b:fb:04:6d:83:c1:4f:83: ea:da:f1:5c:3e:09:ba:35:26:6e:48:3f:27:a2:c1: 44:b7:94:e1:bf:43:0d:1a:09:93:31:fd:a8:d6:9a: 52:be:74:a4:5d:64:6b:98:14:42:22:ff:07:27:35: 5a:25:18:ca:f1:46:8f:0d:4a:2e:24:12:0c:08:d9: 36:2a:e8:eb:04:b3:c3:61:61:c6:1e:69:f0:65:c9: 7f:0f:24:7d:03:72:de:c1:b5:ed:9f:d2:ca:11:f5: 08:6e:90:d4:0c:f0:06:3c:11:74:03:11:40:96:48: 89:4f:a6:11:50:cf:31:42:26:6d:f7:19:cb:0d:a7: fa:5b:de:85:37:f0:cc:5f:78:3d:f3:5a:83:fb:bc: 0f:a3:75:b4:50:04:14:2b:af:67:8f:59:21:89:8a: b3:65:8d:e2:1f:f5:f3:87:20:d6:93:1f:24:c9:f4: 78:81:f6:82:d2:04:9a:24:8e:c5:7e:0e:94:4f:09: 76:bf:c4:16:fa:6c:98:67:ad:78:4c:06:57:c1:08: 5a:32:37:be:3d:1d:73:8a:f9:6a:57:79:73:40:19: 1d:b1:5b:29:df:b6:86:23:e9:7f:6d:66:78:37:12: d9:b7:95:fa:25:5d:b9:5f:b2:e9:28:aa:9a:b5:90: f2:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:EB:FD:5A:1C:9A:A9:97:94:40:09:64:18:5C:81:19:AC:7B:35:1C X509v3 Authority Key Identifier: keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/huv9WhyaqZeUQAlkGFyBGax7NRw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.161.1.0/24 46.161.26.0/24 46.161.41.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:b4:a5:dd:82:0f:24:2f:64:1c:b5:df:88:29:c2:8d:e5:05: 80:01:b7:1d:8d:b1:a8:1a:5f:1c:61:51:01:97:c9:6f:ab:76: 5d:46:e2:9f:6b:02:2b:c4:33:54:36:ee:ef:bd:75:74:9c:83: ed:f4:18:6d:0c:5d:da:67:2b:32:73:a4:bb:55:8f:c2:dc:4d: 58:22:76:75:89:37:1d:6f:3a:69:f5:a1:90:cd:43:c0:9e:29: 0a:32:98:3a:56:45:f1:86:b8:11:b5:a9:d8:9e:c2:a9:6f:16: e4:f6:a0:99:04:bb:89:f3:17:1d:8e:47:f9:10:7e:80:e4:ec: 87:78:ef:65:66:10:0d:23:85:79:74:49:fc:f0:a8:a5:ae:30: 15:71:ea:08:86:ef:e7:e6:d2:40:7f:7a:61:27:f6:de:27:34: a8:8f:7c:91:e4:91:4a:47:07:a2:9b:2f:5f:2e:61:04:16:fe: e0:3f:20:dc:c6:0d:bf:f0:1b:53:16:b4:82:01:fd:d6:c9:49: 77:06:8d:bb:6a:8b:b4:0b:85:87:fc:72:a0:67:8b:40:b5:6f: 14:18:84:2e:b7:7f:55:73:e7:a0:b3:38:25:bc:97:1e:7d:dd: 0e:d8:49:8d:b2:7d:24:39:7b:34:d9:b8:97:a4:d5:c0:56:8b: f4:48:2d:71 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZo0z3goeVzuqOCN/o8Gg9axMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl Y2EwNzEwHhcNMjUxMDMwMTExMDAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NmViZmQ1YTFjOWFhOTk3OTQ0MDA5NjQxODVjODExOWFjN2IzNTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn481P664S/sEbYPBT4Pq2vFcPgm6 NSZuSD8nosFEt5Thv0MNGgmTMf2o1ppSvnSkXWRrmBRCIv8HJzVaJRjK8UaPDUou JBIMCNk2KujrBLPDYWHGHmnwZcl/DyR9A3LewbXtn9LKEfUIbpDUDPAGPBF0AxFA lkiJT6YRUM8xQiZt9xnLDaf6W96FN/DMX3g981qD+7wPo3W0UAQUK69nj1khiYqz ZY3iH/XzhyDWkx8kyfR4gfaC0gSaJI7Ffg6UTwl2v8QW+myYZ614TAZXwQhaMje+ PR1zivlqV3lzQBkdsVsp37aGI+l/bWZ4NxLZt5X6JV25X7LpKKqatZDywQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFIbr/VocmqmXlEAJZBhcgRmsezUcMB8GA1UdIwQY MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt ODlkMDkyNDBjNDNiLzEvaHV2OVdoeWFxWmVVUUFsa0dGeUJHYXg3TlJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALqEBAwQA LqEaAwQALqEpMA0GCSqGSIb3DQEBCwUAA4IBAQAvtKXdgg8kL2Qctd+IKcKN5QWA AbcdjbGoGl8cYVEBl8lvq3ZdRuKfawIrxDNUNu7vvXV0nIPt9BhtDF3aZysyc6S7 VY/C3E1YInZ1iTcdbzpp9aGQzUPAnikKMpg6VkXxhrgRtanYnsKpbxbk9qCZBLuJ 8xcdjkf5EH6A5OyHeO9lZhANI4V5dEn88KilrjAVceoIhu/n5tJAf3phJ/beJzSo j3yR5JFKRweimy9fLmEEFv7gPyDcxg2/8BtTFrSCAf3WyUl3Bo27aou0C4WH/HKg Z4tAtW8UGIQut39Vc+egszglvJcefd0O2EmNsn0kOXs02biXpNXAVov0SC1x -----END CERTIFICATE-----Generated at Sat Dec 6 01:12:08 2025 by rpki-client