This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/0b06bc-b8c7-4f75-b29e-c107a7ac0488/1/hG4a79V4no1d_RNh-MvVJ0RwdRY.roa File: hG4a79V4no1d_RNh-MvVJ0RwdRY.roa (raw, json) Hash identifier: 03AXjMNUx9Pj+KWkDOfShpsuL+deAZNIFF1GbK07I4U= Subject key identifier: 84:6E:1A:EF:D5:78:9E:8D:5D:FD:13:61:F8:CB:D5:27:44:70:75:16 Certificate issuer: /CN=58ffa14df2a89cb6709636f2b0b570abccf8b84b Certificate serial: 019B7B365FF25EA94CEF7A60A018810BD191 Authority key identifier: 58:FF:A1:4D:F2:A8:9C:B6:70:96:36:F2:B0:B5:70:AB:CC:F8:B8:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WP-hTfKonLZwljbysLVwq8z4uEs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/0b06bc-b8c7-4f75-b29e-c107a7ac0488/1/hG4a79V4no1d_RNh-MvVJ0RwdRY.roa Signing time: Thu 01 Jan 2026 20:18:39 +0000 ROA not before: Thu 01 Jan 2026 20:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213251 IP address blocks: 146.19.42.0/24 maxlen: 24 185.216.212.0/22 maxlen: 32 2a0b:bbc0::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/0b06bc-b8c7-4f75-b29e-c107a7ac0488/1/WP-hTfKonLZwljbysLVwq8z4uEs.crl rsync://rpki.ripe.net/repository/DEFAULT/64/0b06bc-b8c7-4f75-b29e-c107a7ac0488/1/WP-hTfKonLZwljbysLVwq8z4uEs.mft rsync://rpki.ripe.net/repository/DEFAULT/WP-hTfKonLZwljbysLVwq8z4uEs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:5f:f2:5e:a9:4c:ef:7a:60:a0:18:81:0b:d1:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58ffa14df2a89cb6709636f2b0b570abccf8b84b Validity Not Before: Jan 1 20:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=846e1aefd5789e8d5dfd1361f8cbd52744707516 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:26:51:13:b1:7e:c7:0d:7c:f5:3c:27:37:0c: be:78:49:7b:93:a9:37:f2:8d:45:6f:33:b6:85:f9: 01:07:1e:fa:ca:59:42:77:7b:3e:5c:62:ab:c5:44: d4:98:94:79:69:2c:18:08:8f:45:52:a1:00:c1:b0: f0:c0:e8:00:1d:66:48:35:20:50:56:a8:56:66:60: 35:63:e8:ca:d6:a5:01:f6:09:df:df:f1:29:8c:1a: 9a:3b:86:67:a9:35:ec:d7:63:e7:f1:15:a4:14:b7: 7c:85:4f:44:e4:cc:5e:cf:e2:01:e4:75:34:1c:80: 5d:bc:0e:c5:d6:e8:d9:e3:7b:47:36:1b:6e:a4:b9: 12:be:5e:d2:66:3d:71:81:e1:eb:fd:58:19:83:5c: 87:a4:c8:59:fa:35:ce:41:95:5d:f3:ac:47:20:e8: b8:0a:b9:63:d5:43:eb:83:db:dc:dc:4f:f3:a2:05: 63:c3:3a:ae:09:c5:30:86:11:9a:a9:25:d1:3e:0f: 37:98:7b:24:0d:cb:7e:aa:18:c2:55:88:06:c0:23: 12:6b:c9:f2:72:32:b9:8f:99:3f:53:8f:a2:fd:7e: 67:35:59:d6:3b:58:e6:7e:a3:aa:24:25:60:18:91: 9d:db:33:5c:12:61:7a:39:02:25:09:05:f2:d1:57: 87:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:6E:1A:EF:D5:78:9E:8D:5D:FD:13:61:F8:CB:D5:27:44:70:75:16 X509v3 Authority Key Identifier: keyid:58:FF:A1:4D:F2:A8:9C:B6:70:96:36:F2:B0:B5:70:AB:CC:F8:B8:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WP-hTfKonLZwljbysLVwq8z4uEs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0b06bc-b8c7-4f75-b29e-c107a7ac0488/1/hG4a79V4no1d_RNh-MvVJ0RwdRY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0b06bc-b8c7-4f75-b29e-c107a7ac0488/1/WP-hTfKonLZwljbysLVwq8z4uEs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.19.42.0/24 185.216.212.0/22 IPv6: 2a0b:bbc0::/32 Signature Algorithm: sha256WithRSAEncryption c5:e4:57:24:50:2f:3a:66:e3:60:d1:3e:bf:3e:97:1a:73:17: 93:aa:4f:68:a7:11:ae:18:dc:12:0a:81:b2:95:7d:37:49:41: e5:a8:14:3d:62:c8:34:36:40:4b:62:71:f3:47:d7:84:c9:46: 27:b9:3c:c4:16:e6:e5:de:b9:ea:aa:94:59:12:f5:4b:4f:bd: bd:27:05:e1:d8:87:20:d5:8b:c0:d8:18:d3:02:53:3b:89:5c: b3:9f:97:de:d6:c4:fb:5b:8c:56:74:06:20:77:45:8a:be:6d: 4b:fa:a8:d3:40:3d:76:2c:70:0c:70:d0:59:81:75:b9:c6:92: 62:32:dd:55:ec:8b:09:ce:09:a2:bf:4b:54:c7:e0:33:bb:02: 50:31:39:9d:fb:63:8c:f6:ba:7e:09:aa:e3:b8:9b:2f:7e:19: a8:fb:56:4a:45:d2:61:7c:63:af:b3:31:4f:ea:14:91:4d:5d: bf:87:e5:14:ba:0e:61:4b:f3:06:6c:c2:63:f1:d2:91:dc:0a: a6:71:88:85:15:bb:8d:9a:d2:39:5e:21:a3:93:da:43:98:91: cf:a3:c8:bc:80:6f:3c:07:b8:0f:0f:8d:f7:13:41:bc:7c:bc: 7c:62:a0:b4:49:ef:55:05:c4:0b:e3:50:29:23:7b:25:74:bc: fc:6a:2e:d8 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt7Nl/yXqlM73pgoBiBC9GRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ZmZhMTRkZjJhODljYjY3MDk2MzZmMmIwYjU3MGFiY2Nm OGI4NGIwHhcNMjYwMTAxMjAxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDZlMWFlZmQ1Nzg5ZThkNWRmZDEzNjFmOGNiZDUyNzQ0NzA3NTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSZRE7F+xw189TwnNwy+eEl7k6k3 8o1FbzO2hfkBBx76yllCd3s+XGKrxUTUmJR5aSwYCI9FUqEAwbDwwOgAHWZINSBQ VqhWZmA1Y+jK1qUB9gnf3/EpjBqaO4ZnqTXs12Pn8RWkFLd8hU9E5Mxez+IB5HU0 HIBdvA7F1ujZ43tHNhtupLkSvl7SZj1xgeHr/VgZg1yHpMhZ+jXOQZVd86xHIOi4 Crlj1UPrg9vc3E/zogVjwzquCcUwhhGaqSXRPg83mHskDct+qhjCVYgGwCMSa8ny cjK5j5k/U4+i/X5nNVnWO1jmfqOqJCVgGJGd2zNcEmF6OQIlCQXy0VeHIwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFIRuGu/VeJ6NXf0TYfjL1SdEcHUWMB8GA1UdIwQY MBaAFFj/oU3yqJy2cJY28rC1cKvM+LhLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1AtaFRmS29uTFp3bGpieXNMVndxOHo0dUVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8wYjA2YmMtYjhjNy00Zjc1LWIyOWUt YzEwN2E3YWMwNDg4LzEvaEc0YTc5VjRubzFkX1JOaC1NdlZKMFJ3ZFJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8wYjA2YmMtYjhjNy00Zjc1LWIyOWUtYzEwN2E3YWMwNDg4 LzEvV1AtaFRmS29uTFp3bGpieXNMVndxOHo0dUVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAkhMqAwQC udjUMA0EAgACMAcDBQAqC7vAMA0GCSqGSIb3DQEBCwUAA4IBAQDF5FckUC86ZuNg 0T6/PpcacxeTqk9opxGuGNwSCoGylX03SUHlqBQ9Ysg0NkBLYnHzR9eEyUYnuTzE Fubl3rnqqpRZEvVLT729JwXh2Icg1YvA2BjTAlM7iVyzn5fe1sT7W4xWdAYgd0WK vm1L+qjTQD12LHAMcNBZgXW5xpJiMt1V7IsJzgmiv0tUx+AzuwJQMTmd+2OM9rp+ CarjuJsvfhmo+1ZKRdJhfGOvszFP6hSRTV2/h+UUug5hS/MGbMJj8dKR3AqmcYiF FbuNmtI5XiGjk9pDmJHPo8i8gG88B7gPD433E0G8fLx8YqC0Se9VBcQL41ApI3sl dLz8ai7Y -----END CERTIFICATE-----Generated at Tue Feb 10 00:14:53 2026 by rpki-client