This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hlbDH1BhxY_47J6JKo3X--hFSJc.roa File: hlbDH1BhxY_47J6JKo3X--hFSJc.roa (raw, json) Hash identifier: j+krjic4ia3MsnX0RPgsoulWfYQqpaFZ1Z4xAOqKERc= Subject key identifier: 86:56:C3:1F:50:61:C5:8F:F8:EC:9E:89:2A:8D:D7:FB:E8:45:48:97 Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4 Certificate serial: 019A9D1B84DA873B453F3E41C4D634CCAF16 Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hlbDH1BhxY_47J6JKo3X--hFSJc.roa Signing time: Wed 19 Nov 2025 17:13:37 +0000 ROA not before: Wed 19 Nov 2025 17:13:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 14618 IP address blocks: 46.20.210.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9d:1b:84:da:87:3b:45:3f:3e:41:c4:d6:34:cc:af:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4 Validity Not Before: Nov 19 17:13:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8656c31f5061c58ff8ec9e892a8dd7fbe8454897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f5:72:3e:e5:f0:21:c8:69:4c:8e:06:50:3d: c0:6a:55:55:6e:d4:d3:76:81:14:ba:b9:42:02:55: 30:ef:77:e2:e6:28:a1:a0:77:27:e0:16:a2:b1:2c: 5e:8c:6a:61:60:16:c2:5b:bb:64:7f:11:30:1c:c1: 45:8c:f5:57:1c:bb:47:f7:40:af:44:66:1f:4e:b6: 27:0d:4f:59:0d:9d:07:35:00:76:a8:8f:d9:44:c7: da:64:73:ff:44:86:20:3b:e9:b3:a5:e3:7c:10:55: b1:66:81:1f:58:c4:5e:9d:8e:46:77:d9:fd:f2:d1: ad:79:c0:af:d5:d8:87:c3:a3:78:5d:92:fb:9a:a3: 60:83:29:26:a7:c1:1f:ba:ca:c8:a9:c4:a0:7e:b2: 29:77:4f:d7:dd:70:a1:2b:ae:18:51:dd:46:d4:ad: 48:32:92:bb:b1:fb:92:0f:c5:32:c0:40:59:05:3e: 0c:49:a8:74:ce:0e:be:4e:34:b8:84:4e:50:28:87: dd:55:58:6d:5e:7d:fa:3c:06:e7:8e:97:9d:0e:d6: 08:34:db:a5:b8:27:ff:88:1b:4b:fa:07:0e:04:9b: 70:f2:df:01:1b:c2:dd:60:b9:7e:42:24:a8:a6:13: 38:c8:e0:e0:ea:bb:52:7b:ae:f7:90:66:52:64:56: 6f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:56:C3:1F:50:61:C5:8F:F8:EC:9E:89:2A:8D:D7:FB:E8:45:48:97 X509v3 Authority Key Identifier: keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hlbDH1BhxY_47J6JKo3X--hFSJc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.20.210.0/23 Signature Algorithm: sha256WithRSAEncryption 7d:bd:6b:43:2e:1c:69:08:62:cb:00:05:2b:bf:d1:fe:82:89: b7:15:4a:6b:9b:3d:a1:17:33:7f:a5:dd:c4:cf:01:41:02:08: 92:1f:04:8d:be:49:0f:9e:a1:81:cb:1f:a0:27:a2:c1:da:bd: c8:29:e9:48:35:89:6f:a5:c9:6e:14:7f:af:45:2f:43:e3:de: 1a:b5:70:4f:d2:0c:80:c1:bf:4a:96:50:e9:11:d1:47:67:d5: fc:c1:1b:4d:d3:db:26:b5:df:1d:8d:27:61:e2:57:97:e2:9f: b2:6e:59:ed:61:ba:9a:f1:d8:2f:ad:de:c5:d2:ff:74:aa:42: 01:41:88:e1:c1:d7:e6:5c:cb:1d:27:6a:ac:fa:ed:84:f8:33: fd:c4:c9:6c:1b:40:14:d4:80:3e:89:3b:35:bb:d9:bf:5f:9d: 63:6c:bc:cb:d2:6c:24:af:96:47:a5:4e:5a:ad:78:c0:bd:c5: bb:b4:b7:18:e2:0f:f9:4f:6d:e9:c1:5a:ab:31:e7:6e:6b:5a: 8a:1c:07:0d:0a:cc:4c:4a:b7:82:95:41:1e:8b:20:dd:9b:ab: bf:f3:3c:69:ce:f0:a0:e8:02:74:5a:88:06:0a:ba:e8:ce:58: 03:e2:c9:1d:47:35:8b:20:d9:f6:4b:18:95:3c:a8:cd:22:5c: a1:bb:85:c0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqdG4TahztFPz5BxNY0zK8WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2Y2NlMDZlNzBkZjk3MGQ5MGFiZmUzY2JlN2ZhODgyZjQ2 N2IxZTQwHhcNMjUxMTE5MTcxMzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NjU2YzMxZjUwNjFjNThmZjhlYzllODkyYThkZDdmYmU4NDU0ODk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvVyPuXwIchpTI4GUD3AalVVbtTT doEUurlCAlUw73fi5iihoHcn4BaisSxejGphYBbCW7tkfxEwHMFFjPVXHLtH90Cv RGYfTrYnDU9ZDZ0HNQB2qI/ZRMfaZHP/RIYgO+mzpeN8EFWxZoEfWMRenY5Gd9n9 8tGtecCv1diHw6N4XZL7mqNggykmp8EfusrIqcSgfrIpd0/X3XChK64YUd1G1K1I MpK7sfuSD8UywEBZBT4MSah0zg6+TjS4hE5QKIfdVVhtXn36PAbnjpedDtYINNul uCf/iBtL+gcOBJtw8t8BG8LdYLl+QiSophM4yODg6rtSe673kGZSZFZv9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIZWwx9QYcWP+OyeiSqN1/voRUiXMB8GA1UdIwQY MBaAFIbM4G5w35cNkKv+PL5/qIL0Z7HkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2Ut ODk3MTRhN2U4ZDU4LzEvaGxiREgxQmh4WV80N0o2SktvM1gtLWhGU0pjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2UtODk3MTRhN2U4ZDU4 LzEvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLhTSMA0G CSqGSIb3DQEBCwUAA4IBAQB9vWtDLhxpCGLLAAUrv9H+gom3FUprmz2hFzN/pd3E zwFBAgiSHwSNvkkPnqGByx+gJ6LB2r3IKelINYlvpcluFH+vRS9D494atXBP0gyA wb9KllDpEdFHZ9X8wRtN09smtd8djSdh4leX4p+yblntYbqa8dgvrd7F0v90qkIB QYjhwdfmXMsdJ2qs+u2E+DP9xMlsG0AU1IA+iTs1u9m/X51jbLzL0mwkr5ZHpU5a rXjAvcW7tLcY4g/5T23pwVqrMedua1qKHAcNCsxMSreClUEeiyDdm6u/8zxpzvCg 6AJ0WogGCrrozlgD4skdRzWLINn2SxiVPKjNIlyhu4XA -----END CERTIFICATE-----Generated at Sat Nov 22 21:34:48 2025 by rpki-client