This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/h9b4JeNT7A8pWHM8uaXkZ3HWW2c.roa File: h9b4JeNT7A8pWHM8uaXkZ3HWW2c.roa (raw, json) Hash identifier: 8n1s/5mgSp5GN9ljUgJO+fSaluuMo/7ZenBSfeNwrrA= Subject key identifier: 87:D6:F8:25:E3:53:EC:0F:29:58:73:3C:B9:A5:E4:67:71:D6:5B:67 Certificate issuer: /CN=4a04bcc2fee1c3a2e04388260e10644b65e701f3 Certificate serial: 019B791014F299EB97C3A89E160DBCB1E269 Authority key identifier: 4A:04:BC:C2:FE:E1:C3:A2:E0:43:88:26:0E:10:64:4B:65:E7:01:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/h9b4JeNT7A8pWHM8uaXkZ3HWW2c.roa Signing time: Thu 01 Jan 2026 10:17:35 +0000 ROA not before: Thu 01 Jan 2026 10:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214659 IP address blocks: 46.148.112.0/24 maxlen: 24 193.143.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.mft rsync://rpki.ripe.net/repository/DEFAULT/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:14:f2:99:eb:97:c3:a8:9e:16:0d:bc:b1:e2:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a04bcc2fee1c3a2e04388260e10644b65e701f3 Validity Not Before: Jan 1 10:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=87d6f825e353ec0f2958733cb9a5e46771d65b67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5f:8b:fe:34:22:5e:3e:37:b2:f2:15:a4:0c: c0:1b:4c:c6:79:cd:0a:90:ab:c5:bd:dd:a2:c3:d6: f5:47:6d:d2:48:ee:f9:fe:94:91:37:b1:3e:f9:83: b1:7d:32:fd:97:4c:a3:d1:fa:c2:a1:8e:d2:2a:82: 11:c2:f6:40:4f:a7:41:a6:b1:05:55:74:82:80:1b: 5d:7a:90:82:1c:c3:c4:f4:8f:cc:92:8e:42:39:0b: 92:e5:82:da:7c:aa:8c:4f:0f:69:3e:cd:52:30:82: 0d:52:67:d3:be:37:4c:c9:09:d3:e4:f8:c5:0b:be: f7:b1:a1:5d:6c:b7:ad:53:72:96:a6:48:d1:52:da: 89:31:dc:29:7c:13:80:fc:b6:5b:ff:b6:c4:4c:12: 68:9a:2f:7d:69:6d:47:ed:01:2e:f7:14:75:77:ae: d2:83:a3:73:b9:a2:10:a0:4d:78:1f:82:20:16:13: 7b:82:d6:3e:02:44:1f:f0:31:b4:34:98:4d:49:d8: dc:27:39:76:cb:23:3a:5e:67:97:22:ee:f5:05:59: 0d:e7:df:64:68:b6:28:33:e8:bd:77:93:6e:e7:bc: 00:34:e4:27:61:31:b1:28:04:50:1c:d4:fc:35:f3: 05:1c:ac:45:be:cc:86:34:03:5e:95:db:ae:1b:51: 2b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:D6:F8:25:E3:53:EC:0F:29:58:73:3C:B9:A5:E4:67:71:D6:5B:67 X509v3 Authority Key Identifier: keyid:4A:04:BC:C2:FE:E1:C3:A2:E0:43:88:26:0E:10:64:4B:65:E7:01:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/h9b4JeNT7A8pWHM8uaXkZ3HWW2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.148.112.0/24 193.143.123.0/24 Signature Algorithm: sha256WithRSAEncryption 99:f4:05:b3:cc:70:94:af:ae:27:5b:ac:53:c0:4f:00:02:51: 86:d2:00:8f:cf:1e:5f:67:e0:19:3f:b6:9a:82:eb:4f:1d:2f: c6:e7:40:89:a2:56:07:9f:f9:a6:09:cc:42:30:68:f5:04:99: 80:a4:e6:fb:1b:86:1a:e1:e2:77:13:14:58:99:b1:da:93:bc: 15:02:93:e0:16:c8:c8:14:58:16:7a:13:d2:66:24:9a:47:b8: e4:4d:5e:04:18:7d:1d:d4:c6:53:9e:8c:7b:e9:f3:34:47:d6: c9:b8:7f:55:9d:88:8a:45:77:60:6f:7f:09:b4:cb:45:c2:3e: ff:ad:18:c9:82:29:ef:92:f2:1b:a1:6d:57:13:dc:f2:51:fa: 09:d4:23:70:f1:fa:ff:04:7d:80:ad:05:a0:1a:10:65:88:2e: 6d:33:74:cd:ee:a4:56:f0:a0:0f:c9:f1:ef:5f:34:7c:83:8d: 5c:bb:a6:48:c1:21:17:81:11:2b:59:2b:e8:9d:d1:8f:78:e5: 6a:b5:69:c2:cc:1c:b7:d3:1a:d2:7d:15:34:b4:e8:ff:a9:c8: 9d:34:af:22:52:11:4f:d4:94:c1:8c:67:93:32:ba:35:07:65: 09:0a:a2:c2:65:ba:ad:72:cb:a1:0e:3c:c1:69:99:06:0b:6d: 3a:f4:aa:cb -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5EBTymeuXw6ieFg28seJpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhMDRiY2MyZmVlMWMzYTJlMDQzODgyNjBlMTA2NDRiNjVl NzAxZjMwHhcNMjYwMTAxMTAxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4N2Q2ZjgyNWUzNTNlYzBmMjk1ODczM2NiOWE1ZTQ2NzcxZDY1YjY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApF+L/jQiXj43svIVpAzAG0zGec0K kKvFvd2iw9b1R23SSO75/pSRN7E++YOxfTL9l0yj0frCoY7SKoIRwvZAT6dBprEF VXSCgBtdepCCHMPE9I/Mko5COQuS5YLafKqMTw9pPs1SMIINUmfTvjdMyQnT5PjF C773saFdbLetU3KWpkjRUtqJMdwpfBOA/LZb/7bETBJomi99aW1H7QEu9xR1d67S g6NzuaIQoE14H4IgFhN7gtY+AkQf8DG0NJhNSdjcJzl2yyM6XmeXIu71BVkN599k aLYoM+i9d5Nu57wANOQnYTGxKARQHNT8NfMFHKxFvsyGNANelduuG1ErPQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIfW+CXjU+wPKVhzPLml5Gdx1ltnMB8GA1UdIwQY MBaAFEoEvML+4cOi4EOIJg4QZEtl5wHzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2dTOHd2N2h3NkxnUTRnbURoQmtTMlhuQWZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi81OTk3NDAtYjk2ZS00OWM0LWI2MDQt NjNmMTk3ZmIxYzk2LzEvaDliNEplTlQ3QThwV0hNOHVhWGtaM0hXVzJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi81OTk3NDAtYjk2ZS00OWM0LWI2MDQtNjNmMTk3ZmIxYzk2 LzEvU2dTOHd2N2h3NkxnUTRnbURoQmtTMlhuQWZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALpRwAwQA wY97MA0GCSqGSIb3DQEBCwUAA4IBAQCZ9AWzzHCUr64nW6xTwE8AAlGG0gCPzx5f Z+AZP7aagutPHS/G50CJolYHn/mmCcxCMGj1BJmApOb7G4Ya4eJ3ExRYmbHak7wV ApPgFsjIFFgWehPSZiSaR7jkTV4EGH0d1MZTnox76fM0R9bJuH9VnYiKRXdgb38J tMtFwj7/rRjJginvkvIboW1XE9zyUfoJ1CNw8fr/BH2ArQWgGhBliC5tM3TN7qRW 8KAPyfHvXzR8g41cu6ZIwSEXgRErWSvondGPeOVqtWnCzBy30xrSfRU0tOj/qcid NK8iUhFP1JTBjGeTMro1B2UJCqLCZbqtcsuhDjzBaZkGC2069KrL -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:00 2026 by rpki-client