This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/Hiap0OVVLyo8exwHEORYRd-74Sw.roa File: Hiap0OVVLyo8exwHEORYRd-74Sw.roa (raw, json) Hash identifier: mPLHn17XrcfRZQAiSgGZtGpJ14NN5e45m0IORKRFOUU= Subject key identifier: 1E:26:A9:D0:E5:55:2F:2A:3C:7B:1C:07:10:E4:58:45:DF:BB:E1:2C Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430 Certificate serial: 019B7FF19DFF5813D2B5D8C0629788BA20C8 Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/Hiap0OVVLyo8exwHEORYRd-74Sw.roa Signing time: Fri 02 Jan 2026 18:21:39 +0000 ROA not before: Fri 02 Jan 2026 18:21:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216169 IP address blocks: 46.38.142.0/24 maxlen: 24 109.94.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 23:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:9d:ff:58:13:d2:b5:d8:c0:62:97:88:ba:20:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430 Validity Not Before: Jan 2 18:21:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1e26a9d0e5552f2a3c7b1c0710e45845dfbbe12c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:78:37:db:7e:38:95:69:3e:51:7e:75:a7:1d: cb:74:3d:f1:38:d9:87:5d:10:6f:64:ec:1e:61:a3: f3:38:d0:11:d0:f0:fc:80:05:3a:f4:8a:2f:61:a2: f7:98:c7:cc:95:88:00:77:a5:34:b5:bd:88:52:ad: ec:8d:c8:f8:10:2b:5e:9b:a5:79:fa:44:05:33:cb: e6:83:88:5a:c7:d1:38:f9:e1:4e:3b:62:70:b5:20: 95:68:24:9d:24:f0:91:eb:4a:12:7c:83:8e:e1:1c: 9e:94:75:8a:26:88:02:b4:1e:d8:62:14:e4:aa:e4: 5d:24:cc:dc:de:18:37:ef:6f:26:f7:e1:b4:db:56: e7:e8:38:f8:c8:62:e3:3c:70:91:c7:73:4b:2b:ff: cc:0f:c8:5b:34:47:fa:bc:3c:aa:61:67:e4:20:45: bf:ba:75:8d:65:38:de:60:a5:25:34:9f:6d:f7:35: b5:9f:01:d1:2f:28:a1:60:79:ec:cd:b5:e9:a6:a9: 30:08:27:9d:d3:21:76:e4:24:24:52:2d:aa:42:80: a8:6a:1d:1a:9e:09:57:78:b0:2d:7f:ac:e6:c6:0c: 64:79:80:b4:ec:2a:c6:af:1a:3e:c3:fc:52:e9:52: 75:f7:71:19:95:2a:f9:be:92:c7:4a:25:27:5a:e2: 03:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:26:A9:D0:E5:55:2F:2A:3C:7B:1C:07:10:E4:58:45:DF:BB:E1:2C X509v3 Authority Key Identifier: keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/Hiap0OVVLyo8exwHEORYRd-74Sw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.38.142.0/24 109.94.164.0/24 Signature Algorithm: sha256WithRSAEncryption 65:02:10:30:b3:31:ec:a0:32:cc:ec:fe:a8:55:88:ef:c1:ef: 73:d0:38:62:c3:db:d1:d9:59:18:d7:e7:a3:4b:09:be:f6:69: fe:d4:62:33:12:e6:a2:eb:27:4c:a0:f2:a0:64:d8:c2:48:f5: 85:4e:b5:3a:c1:a2:de:d4:e5:76:d9:02:9c:92:5a:62:c6:04: 8f:51:a8:2b:63:e7:38:8e:cc:f2:9d:40:cb:a6:49:8a:59:fd: 82:d2:5e:a7:1a:41:54:7d:87:d2:9c:d9:77:a9:82:93:56:f2: 27:46:b3:25:ba:3f:8f:ce:e9:5d:12:5e:75:27:b8:f9:50:95: d8:86:1f:96:7b:30:f9:43:a7:28:71:f8:df:fb:e9:a2:f8:e5: 02:44:a3:a1:7c:35:1d:69:ad:9d:4e:e1:0e:c3:62:ca:9c:de: 3d:a4:1e:dd:04:3d:04:4e:f3:90:85:69:86:bc:7a:de:61:e1: ee:09:ff:9f:f9:f3:5d:e0:e8:19:25:b7:89:2f:14:ef:35:d9: bf:4c:74:57:6c:fb:52:8c:33:a9:cb:f6:e7:f6:ec:a3:7a:55: 77:ec:58:ed:22:12:59:4c:3d:34:ce:1c:f9:92:04:92:05:da: 63:6c:8c:66:16:b5:4e:93:7b:ab:64:c5:d5:8b:15:dc:a7:e8: 12:65:a8:b1 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/8Z3/WBPStdjAYpeIuiDIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3Mjk0NWY1NzEwMzE1M2EwNzg1NGU3NGUyMjdmMmFlYzFj NWY0MzAwHhcNMjYwMTAyMTgyMTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZTI2YTlkMGU1NTUyZjJhM2M3YjFjMDcxMGU0NTg0NWRmYmJlMTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Hg32344lWk+UX51px3LdD3xONmH XRBvZOweYaPzONAR0PD8gAU69IovYaL3mMfMlYgAd6U0tb2IUq3sjcj4ECtem6V5 +kQFM8vmg4hax9E4+eFOO2JwtSCVaCSdJPCR60oSfIOO4RyelHWKJogCtB7YYhTk quRdJMzc3hg3728m9+G021bn6Dj4yGLjPHCRx3NLK//MD8hbNEf6vDyqYWfkIEW/ unWNZTjeYKUlNJ9t9zW1nwHRLyihYHnszbXppqkwCCed0yF25CQkUi2qQoCoah0a nglXeLAtf6zmxgxkeYC07CrGrxo+w/xS6VJ193EZlSr5vpLHSiUnWuIDSwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFB4mqdDlVS8qPHscBxDkWEXfu+EsMB8GA1UdIwQY MBaAFLcpRfVxAxU6B4VOdOIn8q7BxfQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEt MmEwOWNjNTNhODA1LzEvSGlhcDBPVlZMeW84ZXh3SEVPUllSZC03NFN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEtMmEwOWNjNTNhODA1 LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALiaOAwQA bV6kMA0GCSqGSIb3DQEBCwUAA4IBAQBlAhAwszHsoDLM7P6oVYjvwe9z0Dhiw9vR 2VkY1+ejSwm+9mn+1GIzEuai6ydMoPKgZNjCSPWFTrU6waLe1OV22QKcklpixgSP UagrY+c4jszynUDLpkmKWf2C0l6nGkFUfYfSnNl3qYKTVvInRrMluj+PzuldEl51 J7j5UJXYhh+WezD5Q6cocfjf++mi+OUCRKOhfDUdaa2dTuEOw2LKnN49pB7dBD0E TvOQhWmGvHreYeHuCf+f+fNd4OgZJbeJLxTvNdm/THRXbPtSjDOpy/bn9uyjelV3 7FjtIhJZTD00zhz5kgSSBdpjbIxmFrVOk3urZMXVixXcp+gSZaix -----END CERTIFICATE-----Generated at Wed Jan 21 04:02:29 2026 by rpki-client