This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/28eeb6-eb48-4ff8-8741-bcfe3ad387ce/1/DhHou6x1y13RmrEI1DwwVxMriAI.roa File: DhHou6x1y13RmrEI1DwwVxMriAI.roa (raw, json) Hash identifier: 8Awo8MgFAOG/ThGzHT1b/F0CMeYnp/25xSvJwcgHWQo= Subject key identifier: 0E:11:E8:BB:AC:75:CB:5D:D1:9A:B1:08:D4:3C:30:57:13:2B:88:02 Certificate issuer: /CN=b8e4f734fde71ac421957f27c8499496f4440d7c Certificate serial: 019B7AC821426DF1557048D998695413D8C3 Authority key identifier: B8:E4:F7:34:FD:E7:1A:C4:21:95:7F:27:C8:49:94:96:F4:44:0D:7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uOT3NP3nGsQhlX8nyEmUlvREDXw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/28eeb6-eb48-4ff8-8741-bcfe3ad387ce/1/DhHou6x1y13RmrEI1DwwVxMriAI.roa Signing time: Thu 01 Jan 2026 18:18:14 +0000 ROA not before: Thu 01 Jan 2026 18:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208948 IP address blocks: 45.134.132.0/24 maxlen: 29 45.134.133.0/24 maxlen: 29 45.134.134.0/24 maxlen: 29 45.134.135.0/24 maxlen: 30 2a0d:d9c0::/32 maxlen: 64 2a0d:d9c3::/32 maxlen: 64 2a0d:d9c4::/32 maxlen: 64 2a0d:d9c5::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/28eeb6-eb48-4ff8-8741-bcfe3ad387ce/1/uOT3NP3nGsQhlX8nyEmUlvREDXw.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/28eeb6-eb48-4ff8-8741-bcfe3ad387ce/1/uOT3NP3nGsQhlX8nyEmUlvREDXw.mft rsync://rpki.ripe.net/repository/DEFAULT/uOT3NP3nGsQhlX8nyEmUlvREDXw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:21:42:6d:f1:55:70:48:d9:98:69:54:13:d8:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8e4f734fde71ac421957f27c8499496f4440d7c Validity Not Before: Jan 1 18:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e11e8bbac75cb5dd19ab108d43c3057132b8802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:6b:36:55:3e:1e:70:0e:42:c9:72:8c:37:e5: f8:74:a6:a4:37:26:54:6d:7c:54:d3:a6:b7:bd:e9: 3b:cd:4b:ff:8f:50:cd:5b:f9:d7:bd:36:6e:e4:91: c0:18:31:96:0e:70:24:e2:09:25:f4:45:a9:45:20: af:0c:2e:ce:89:e4:89:a3:78:34:7c:2e:4d:8a:d6: 2e:79:45:35:da:8d:1d:4d:a1:d1:0b:4d:a5:9c:9f: fd:d0:db:2d:37:53:b9:04:23:e8:7b:11:27:a4:f3: 87:a0:12:7b:69:98:a0:9f:d7:eb:b3:52:b4:6f:66: 5c:8a:17:68:a6:6f:9d:04:5f:b8:14:d5:66:23:b9: 35:79:df:65:82:97:f3:3a:51:f7:9b:56:1a:1f:82: a1:37:54:85:ed:f5:a1:57:23:36:f0:db:3c:65:3d: 29:fb:16:d3:8b:42:43:9c:5f:68:45:96:01:55:00: d2:13:ed:0f:bd:81:23:a9:b3:64:86:e4:6a:66:76: c1:1e:80:32:77:36:62:f9:aa:c6:72:af:90:d4:6c: e9:d2:f6:62:82:4f:c6:ca:87:47:31:9d:9f:27:a2: 16:1b:ed:17:0a:65:87:d1:87:64:be:ac:b4:f3:ae: 9e:44:28:60:a2:39:65:f4:10:fd:43:ff:5d:75:4a: a2:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:11:E8:BB:AC:75:CB:5D:D1:9A:B1:08:D4:3C:30:57:13:2B:88:02 X509v3 Authority Key Identifier: keyid:B8:E4:F7:34:FD:E7:1A:C4:21:95:7F:27:C8:49:94:96:F4:44:0D:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uOT3NP3nGsQhlX8nyEmUlvREDXw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/28eeb6-eb48-4ff8-8741-bcfe3ad387ce/1/DhHou6x1y13RmrEI1DwwVxMriAI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/28eeb6-eb48-4ff8-8741-bcfe3ad387ce/1/uOT3NP3nGsQhlX8nyEmUlvREDXw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.134.132.0/22 IPv6: 2a0d:d9c0::/32 2a0d:d9c3::-2a0d:d9c5:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 88:fb:b2:02:65:4b:16:e4:61:28:00:80:4f:2e:de:4b:a8:c8: bc:87:0c:cc:6e:11:21:73:a1:5b:7b:ac:8d:83:cf:e8:96:2e: 95:29:cf:bc:8b:8c:fe:2c:d9:76:4e:2d:6e:ed:06:b7:6f:f4: 22:be:d7:bb:d7:77:61:a4:1e:4e:66:0b:5c:4c:90:30:55:a0: a2:9a:46:13:bf:8d:ab:3c:24:30:7e:e2:ee:ec:e1:c4:93:a9: 0d:14:7a:3a:61:68:8d:fd:33:2d:8c:df:f0:b5:d3:47:ca:69: 3a:08:20:3d:b0:16:78:7b:4c:6b:e7:cd:60:fb:48:6f:5e:e1: 74:b3:b5:aa:a1:07:bc:1c:0d:35:4b:db:7f:60:8f:01:c7:a2: 45:79:92:5e:6d:53:cb:4a:d8:c6:7f:06:f0:e0:d3:9a:52:39: 91:df:e0:0a:58:66:3b:8d:a6:04:9c:2b:1c:bd:8e:39:3e:3c: 08:24:cb:0a:61:b5:f8:04:98:0b:36:dd:8f:16:b8:9a:19:20: 47:d1:17:4a:68:96:c0:02:0d:2e:2f:c1:cd:0c:97:e7:44:9b: 67:2d:eb:a2:b3:ed:44:ed:e6:ba:5a:58:04:c7:93:0b:89:19: 6d:f2:d7:3d:c8:59:28:c9:4d:9a:61:48:1c:7d:26:32:a4:5b: 18:53:0a:a1 -----BEGIN CERTIFICATE----- MIIFHDCCBASgAwIBAgISAZt6yCFCbfFVcEjZmGlUE9jDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4ZTRmNzM0ZmRlNzFhYzQyMTk1N2YyN2M4NDk5NDk2ZjQ0 NDBkN2MwHhcNMjYwMTAxMTgxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTExZThiYmFjNzVjYjVkZDE5YWIxMDhkNDNjMzA1NzEzMmI4ODAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjms2VT4ecA5CyXKMN+X4dKakNyZU bXxU06a3vek7zUv/j1DNW/nXvTZu5JHAGDGWDnAk4gkl9EWpRSCvDC7OieSJo3g0 fC5NitYueUU12o0dTaHRC02lnJ/90NstN1O5BCPoexEnpPOHoBJ7aZign9frs1K0 b2Zcihdopm+dBF+4FNVmI7k1ed9lgpfzOlH3m1YaH4KhN1SF7fWhVyM28Ns8ZT0p +xbTi0JDnF9oRZYBVQDSE+0PvYEjqbNkhuRqZnbBHoAydzZi+arGcq+Q1Gzp0vZi gk/GyodHMZ2fJ6IWG+0XCmWH0Ydkvqy0866eRChgojll9BD9Q/9ddUqiNQIDAQAB o4ICKDCCAiQwHQYDVR0OBBYEFA4R6Lusdctd0ZqxCNQ8MFcTK4gCMB8GA1UdIwQY MBaAFLjk9zT95xrEIZV/J8hJlJb0RA18MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdU9UM05QM25Hc1FobFg4bnlFbVVsdlJFRFh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8yOGVlYjYtZWI0OC00ZmY4LTg3NDEt YmNmZTNhZDM4N2NlLzEvRGhIb3U2eDF5MTNSbXJFSTFEd3dWeE1yaUFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8yOGVlYjYtZWI0OC00ZmY4LTg3NDEtYmNmZTNhZDM4N2Nl LzEvdU9UM05QM25Hc1FobFg4bnlFbVVsdlJFRFh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD4GCCsGAQUFBwEHAQH/BC8wLTAMBAIAATAGAwQCLYaEMB0E AgACMBcDBQAqDdnAMA4DBQAqDdnDAwUBKg3ZxDANBgkqhkiG9w0BAQsFAAOCAQEA iPuyAmVLFuRhKACATy7eS6jIvIcMzG4RIXOhW3usjYPP6JYulSnPvIuM/izZdk4t bu0Gt2/0Ir7Xu9d3YaQeTmYLXEyQMFWgoppGE7+NqzwkMH7i7uzhxJOpDRR6OmFo jf0zLYzf8LXTR8ppOgggPbAWeHtMa+fNYPtIb17hdLO1qqEHvBwNNUvbf2CPAcei RXmSXm1Ty0rYxn8G8ODTmlI5kd/gClhmO42mBJwrHL2OOT48CCTLCmG1+ASYCzbd jxa4mhkgR9EXSmiWwAINLi/BzQyX50SbZy3rorPtRO3mulpYBMeTC4kZbfLXPchZ KMlNmmFIHH0mMqRbGFMKoQ== -----END CERTIFICATE-----Generated at Tue Feb 10 08:41:31 2026 by rpki-client