This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/HmUomsPgXy_ichPpqzKABnF-f1Q.roa File: HmUomsPgXy_ichPpqzKABnF-f1Q.roa (raw, json) Hash identifier: Bx6E3+408hVB6DPUkC1/WmqYHNWX0Umjmfc5LiZnxMs= Subject key identifier: 1E:65:28:9A:C3:E0:5F:2F:E2:72:13:E9:AB:32:80:06:71:7E:7F:54 Certificate issuer: /CN=85ed4fcc45964d4ea72fc4492c4d7957133210c3 Certificate serial: 019B7EA6D22593E3949AED99D60B759A16A2 Authority key identifier: 85:ED:4F:CC:45:96:4D:4E:A7:2F:C4:49:2C:4D:79:57:13:32:10:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/he1PzEWWTU6nL8RJLE15VxMyEMM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/HmUomsPgXy_ichPpqzKABnF-f1Q.roa Signing time: Fri 02 Jan 2026 12:20:20 +0000 ROA not before: Fri 02 Jan 2026 12:20:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208847 IP address blocks: 45.82.232.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/he1PzEWWTU6nL8RJLE15VxMyEMM.crl rsync://rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/he1PzEWWTU6nL8RJLE15VxMyEMM.mft rsync://rpki.ripe.net/repository/DEFAULT/he1PzEWWTU6nL8RJLE15VxMyEMM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 15:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:d2:25:93:e3:94:9a:ed:99:d6:0b:75:9a:16:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85ed4fcc45964d4ea72fc4492c4d7957133210c3 Validity Not Before: Jan 2 12:20:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1e65289ac3e05f2fe27213e9ab328006717e7f54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2d:65:86:3a:92:a4:72:d4:0c:b6:a4:f9:3b: 1d:7d:71:35:b1:6a:8f:d6:ee:56:8a:7c:b9:62:17: e0:65:75:01:c1:37:21:a3:8b:77:1b:5f:11:74:42: 76:38:67:62:53:6b:2e:39:78:cc:30:a5:18:2c:7b: b5:76:d7:b0:94:7d:fb:c8:33:be:3a:c8:ab:83:90: 33:c3:57:16:62:e2:dc:c4:48:6b:5e:95:86:e5:c7: 61:3f:56:78:ad:86:d5:39:6d:8f:94:2b:16:c1:6c: 55:19:32:2b:44:16:9a:e3:7a:48:20:4a:ae:a1:d5: cc:d0:37:36:60:64:ee:4e:93:9b:ed:e9:1a:bb:c0: 6f:0c:3e:30:ef:f3:84:13:22:be:89:87:99:9b:0f: 95:b7:68:db:3f:f1:3c:96:09:0f:f9:56:d7:de:b0: fb:6c:0d:41:8f:b6:42:9c:0a:2a:7b:79:9d:11:2b: 36:5d:00:56:64:81:5a:b5:53:20:b8:31:fd:ec:f6: 9e:1c:1a:34:90:b1:24:24:43:6a:ac:b5:da:52:d0: 7a:d5:56:24:29:b0:9b:90:04:fd:bb:ba:fc:af:fb: fa:92:5c:e7:d5:d2:19:6a:ea:6b:14:c4:10:a7:e6: e1:b6:6f:cb:4c:b0:75:0d:6f:c2:37:fa:5f:15:d4: 7f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:65:28:9A:C3:E0:5F:2F:E2:72:13:E9:AB:32:80:06:71:7E:7F:54 X509v3 Authority Key Identifier: keyid:85:ED:4F:CC:45:96:4D:4E:A7:2F:C4:49:2C:4D:79:57:13:32:10:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/he1PzEWWTU6nL8RJLE15VxMyEMM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/HmUomsPgXy_ichPpqzKABnF-f1Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/he1PzEWWTU6nL8RJLE15VxMyEMM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.82.232.0/22 Signature Algorithm: sha256WithRSAEncryption 7c:1f:7e:a5:f1:83:a7:99:64:db:62:b7:93:5b:35:63:d7:25: bf:ba:5d:12:fb:79:d3:cc:29:d3:b1:98:1b:50:ad:a2:d7:a7: 2f:a8:80:93:5c:55:58:a3:c8:e6:d8:f3:72:f9:c8:91:d0:14: a2:e7:a2:2c:f4:98:59:81:6c:54:8c:2e:83:d0:f3:fe:fc:db: 8b:a2:c9:cc:f5:6e:34:3d:b1:54:e0:f7:85:a0:10:74:5f:62: 07:4c:a9:0f:18:ee:4f:50:2f:f4:3f:5b:e9:f6:da:7d:cf:c4: 48:e9:5c:43:ad:3f:46:d2:75:93:0f:8f:40:92:8a:5d:6c:74: 7e:ae:99:62:46:30:c7:74:90:bc:7f:94:4f:be:be:7a:fb:04: 36:17:0f:f3:54:9e:63:42:71:70:3c:73:84:db:fa:dc:ef:fa: b0:3f:0d:15:d0:d9:58:a5:9d:76:05:2b:02:18:fc:cd:c1:a4: b7:42:34:d6:0e:79:b4:a3:59:f9:a8:25:30:06:4d:9f:dc:6a: 1a:9b:43:5b:d6:58:b7:a9:c0:db:bb:92:30:56:99:92:4a:93: 91:a8:a1:25:18:26:36:d2:60:7c:c6:be:98:61:fa:16:71:3c: 87:fd:10:41:de:94:65:b3:6b:33:a5:43:a7:47:54:87:74:08: 4d:9c:68:a4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+ptIlk+OUmu2Z1gt1mhaiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1ZWQ0ZmNjNDU5NjRkNGVhNzJmYzQ0OTJjNGQ3OTU3MTMz MjEwYzMwHhcNMjYwMTAyMTIyMDIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZTY1Mjg5YWMzZTA1ZjJmZTI3MjEzZTlhYjMyODAwNjcxN2U3ZjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvi1lhjqSpHLUDLak+TsdfXE1sWqP 1u5Winy5YhfgZXUBwTcho4t3G18RdEJ2OGdiU2suOXjMMKUYLHu1dtewlH37yDO+ Osirg5Azw1cWYuLcxEhrXpWG5cdhP1Z4rYbVOW2PlCsWwWxVGTIrRBaa43pIIEqu odXM0Dc2YGTuTpOb7ekau8BvDD4w7/OEEyK+iYeZmw+Vt2jbP/E8lgkP+VbX3rD7 bA1Bj7ZCnAoqe3mdESs2XQBWZIFatVMguDH97PaeHBo0kLEkJENqrLXaUtB61VYk KbCbkAT9u7r8r/v6klzn1dIZauprFMQQp+bhtm/LTLB1DW/CN/pfFdR/8QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB5lKJrD4F8v4nIT6asygAZxfn9UMB8GA1UdIwQY MBaAFIXtT8xFlk1Opy/ESSxNeVcTMhDDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGUxUHpFV1dUVTZuTDhSSkxFMTVWeE15RU1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9jYTQ2MGUtNjYzNS00ODFiLWI2ZTkt Zjg1YTdjYjFkMTkyLzEvSG1Vb21zUGdYeV9pY2hQcHF6S0FCbkYtZjFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9jYTQ2MGUtNjYzNS00ODFiLWI2ZTktZjg1YTdjYjFkMTky LzEvaGUxUHpFV1dUVTZuTDhSSkxFMTVWeE15RU1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVLoMA0G CSqGSIb3DQEBCwUAA4IBAQB8H36l8YOnmWTbYreTWzVj1yW/ul0S+3nTzCnTsZgb UK2i16cvqICTXFVYo8jm2PNy+ciR0BSi56Is9JhZgWxUjC6D0PP+/NuLosnM9W40 PbFU4PeFoBB0X2IHTKkPGO5PUC/0P1vp9tp9z8RI6VxDrT9G0nWTD49AkopdbHR+ rpliRjDHdJC8f5RPvr56+wQ2Fw/zVJ5jQnFwPHOE2/rc7/qwPw0V0NlYpZ12BSsC GPzNwaS3QjTWDnm0o1n5qCUwBk2f3Goam0Nb1li3qcDbu5IwVpmSSpORqKElGCY2 0mB8xr6YYfoWcTyH/RBB3pRls2szpUOnR1SHdAhNnGik -----END CERTIFICATE-----Generated at Tue Feb 3 00:18:35 2026 by rpki-client