This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/7ea195-2fbe-4806-a82d-16b44c4935ea/1/HYZwU1q8cqgPShX-RWS5UdIDZcs.roa File: HYZwU1q8cqgPShX-RWS5UdIDZcs.roa (raw, json) Hash identifier: pxyDD70WarwleFchwfjCCFNP4JSQb/ZGj4hPQ3pTdJU= Subject key identifier: 1D:86:70:53:5A:BC:72:A8:0F:4A:15:FE:45:64:B9:51:D2:03:65:CB Certificate issuer: /CN=2fc438cd8aaeb1ad242ed49b4ff287c9d0f43b0e Certificate serial: 019B77C6DBA306826E74F4590BDAF618D0D7 Authority key identifier: 2F:C4:38:CD:8A:AE:B1:AD:24:2E:D4:9B:4F:F2:87:C9:D0:F4:3B:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8Q4zYqusa0kLtSbT_KHydD0Ow4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/7ea195-2fbe-4806-a82d-16b44c4935ea/1/HYZwU1q8cqgPShX-RWS5UdIDZcs.roa Signing time: Thu 01 Jan 2026 04:17:59 +0000 ROA not before: Thu 01 Jan 2026 04:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35665 IP address blocks: 46.18.96.0/24 maxlen: 24 46.18.97.0/24 maxlen: 24 46.18.98.0/24 maxlen: 24 46.18.99.0/24 maxlen: 24 46.18.100.0/24 maxlen: 24 46.18.101.0/24 maxlen: 24 46.18.102.0/24 maxlen: 24 46.18.103.0/24 maxlen: 24 185.177.224.0/22 maxlen: 22 195.160.188.0/24 maxlen: 24 195.160.189.0/24 maxlen: 24 213.108.232.0/23 maxlen: 23 213.108.234.0/23 maxlen: 23 213.108.236.0/23 maxlen: 23 213.108.238.0/23 maxlen: 23 2a02:2778::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/7ea195-2fbe-4806-a82d-16b44c4935ea/1/L8Q4zYqusa0kLtSbT_KHydD0Ow4.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/7ea195-2fbe-4806-a82d-16b44c4935ea/1/L8Q4zYqusa0kLtSbT_KHydD0Ow4.mft rsync://rpki.ripe.net/repository/DEFAULT/L8Q4zYqusa0kLtSbT_KHydD0Ow4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:db:a3:06:82:6e:74:f4:59:0b:da:f6:18:d0:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fc438cd8aaeb1ad242ed49b4ff287c9d0f43b0e Validity Not Before: Jan 1 04:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1d8670535abc72a80f4a15fe4564b951d20365cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:fb:6d:09:56:5b:25:ee:8e:0f:40:88:18:cb: 87:e9:a4:5d:5c:e7:cb:90:68:b4:fc:49:dd:38:12: e0:57:7d:9a:2d:cf:e2:63:f9:1c:50:cb:ac:49:b7: c3:43:f9:b0:7f:a2:ff:29:62:a9:22:1c:43:5b:c6: 4b:41:97:f8:e5:de:35:5b:a0:66:9b:aa:82:51:77: 7e:68:6f:5b:9c:92:45:c5:67:96:42:17:f4:cf:56: 6b:de:ee:62:6b:64:5b:86:60:97:9e:c9:ea:01:4b: d0:39:8d:a1:20:b1:c8:89:ad:84:6d:b6:57:40:b3: cd:1f:5b:c1:06:52:1f:71:b5:1d:b1:bf:d0:dd:cf: 95:b4:62:8f:91:9e:74:58:9f:45:58:2a:71:04:12: 23:be:21:f2:9e:43:34:03:83:07:e9:b6:3b:be:bd: 8c:1c:16:31:5e:91:6b:f7:d9:81:75:6c:cd:b4:cc: 00:57:56:ee:2f:a6:63:94:d1:39:89:6a:0d:f5:aa: 7b:0c:ce:01:42:fa:36:56:3f:33:2f:fd:7d:c3:fc: cc:30:27:bd:3c:59:24:f7:e6:3a:a4:9c:53:0a:94: aa:51:07:2b:83:d4:bb:b3:1a:7c:39:20:af:b7:a4: 35:d6:09:af:40:09:3e:09:da:43:e5:8b:50:a3:e9: a6:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:86:70:53:5A:BC:72:A8:0F:4A:15:FE:45:64:B9:51:D2:03:65:CB X509v3 Authority Key Identifier: keyid:2F:C4:38:CD:8A:AE:B1:AD:24:2E:D4:9B:4F:F2:87:C9:D0:F4:3B:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8Q4zYqusa0kLtSbT_KHydD0Ow4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7ea195-2fbe-4806-a82d-16b44c4935ea/1/HYZwU1q8cqgPShX-RWS5UdIDZcs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7ea195-2fbe-4806-a82d-16b44c4935ea/1/L8Q4zYqusa0kLtSbT_KHydD0Ow4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.18.96.0/21 185.177.224.0/22 195.160.188.0/23 213.108.232.0/21 IPv6: 2a02:2778::/32 Signature Algorithm: sha256WithRSAEncryption 6e:a6:d9:e2:2b:3f:64:68:ef:4f:99:46:8d:30:14:68:62:87: e1:e5:be:76:58:aa:63:27:55:4a:98:97:7d:69:86:b7:b1:96: b0:e3:61:95:65:fe:15:7e:08:e4:89:8a:4f:78:92:0a:b0:ee: 59:fa:d0:bb:b2:45:b1:e0:91:fc:2f:a0:eb:33:5b:3b:7a:b5: ee:da:3d:f6:89:08:38:06:02:92:eb:b2:3b:c9:fc:05:f7:1e: b7:b3:46:80:5b:45:37:5a:f2:88:f2:38:44:8d:5a:a5:f4:fa: 15:23:aa:b3:8c:5b:16:38:67:87:39:c6:d3:d6:1a:5e:68:bf: ed:86:22:f4:c9:3d:98:b1:91:3f:69:a7:97:ed:e3:a8:7f:d0: 87:00:a4:b8:eb:d2:2e:40:c8:54:d2:a8:47:50:f6:8f:60:2d: 65:48:36:44:a9:4d:73:45:e0:05:26:6e:83:34:40:3b:66:0b: 94:c3:dd:c8:a8:2f:41:12:9d:07:33:55:23:0d:f2:3a:40:eb: 9a:88:f1:50:88:c3:ca:af:d8:9c:d3:49:6a:e1:ea:04:96:e2: eb:db:c2:c8:27:05:c4:f2:28:15:30:14:9b:a2:52:26:f7:d3: 19:48:5d:d4:23:ae:95:ae:c3:c8:9d:85:13:c3:57:0e:11:9a: bd:96:b0:1f -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt3xtujBoJudPRZC9r2GNDXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmYzQzOGNkOGFhZWIxYWQyNDJlZDQ5YjRmZjI4N2M5ZDBm NDNiMGUwHhcNMjYwMTAxMDQxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZDg2NzA1MzVhYmM3MmE4MGY0YTE1ZmU0NTY0Yjk1MWQyMDM2NWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4vttCVZbJe6OD0CIGMuH6aRdXOfL kGi0/EndOBLgV32aLc/iY/kcUMusSbfDQ/mwf6L/KWKpIhxDW8ZLQZf45d41W6Bm m6qCUXd+aG9bnJJFxWeWQhf0z1Zr3u5ia2RbhmCXnsnqAUvQOY2hILHIia2EbbZX QLPNH1vBBlIfcbUdsb/Q3c+VtGKPkZ50WJ9FWCpxBBIjviHynkM0A4MH6bY7vr2M HBYxXpFr99mBdWzNtMwAV1buL6ZjlNE5iWoN9ap7DM4BQvo2Vj8zL/19w/zMMCe9 PFkk9+Y6pJxTCpSqUQcrg9S7sxp8OSCvt6Q11gmvQAk+CdpD5YtQo+mmRwIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFB2GcFNavHKoD0oV/kVkuVHSA2XLMB8GA1UdIwQY MBaAFC/EOM2KrrGtJC7Um0/yh8nQ9DsOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDhRNHpZcXVzYTBrTHRTYlRfS0h5ZEQwT3c0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi83ZWExOTUtMmZiZS00ODA2LWE4MmQt MTZiNDRjNDkzNWVhLzEvSFlad1UxcThjcWdQU2hYLVJXUzVVZElEWmNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi83ZWExOTUtMmZiZS00ODA2LWE4MmQtMTZiNDRjNDkzNWVh LzEvTDhRNHpZcXVzYTBrTHRTYlRfS0h5ZEQwT3c0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDLhJgAwQC ubHgAwQBw6C8AwQD1WzoMA0EAgACMAcDBQAqAid4MA0GCSqGSIb3DQEBCwUAA4IB AQBuptniKz9kaO9PmUaNMBRoYofh5b52WKpjJ1VKmJd9aYa3sZaw42GVZf4Vfgjk iYpPeJIKsO5Z+tC7skWx4JH8L6DrM1s7erXu2j32iQg4BgKS67I7yfwF9x63s0aA W0U3WvKI8jhEjVql9PoVI6qzjFsWOGeHOcbT1hpeaL/thiL0yT2YsZE/aaeX7eOo f9CHAKS469IuQMhU0qhHUPaPYC1lSDZEqU1zReAFJm6DNEA7ZguUw93IqC9BEp0H M1UjDfI6QOuaiPFQiMPKr9ic00lq4eoEluLr28LIJwXE8igVMBSbolIm99MZSF3U I66VrsPInYUTw1cOEZq9lrAf -----END CERTIFICATE-----Generated at Mon Feb 9 21:23:42 2026 by rpki-client