This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/hJ4yBwRAkPSn0hZDZUYf9X3bnuA.roa File: hJ4yBwRAkPSn0hZDZUYf9X3bnuA.roa (raw, json) Hash identifier: SieYkKpzIy6oq5VVbN7rTFUvyMh99g+Bi6wzQEIEdkQ= Subject key identifier: 84:9E:32:07:04:40:90:F4:A7:D2:16:43:65:46:1F:F5:7D:DB:9E:E0 Certificate issuer: /CN=8e350dd6d842ebd4ddd08cad41d8ff816bfdfff8 Certificate serial: 019B77C7490ECE89852115E929EB979B3C55 Authority key identifier: 8E:35:0D:D6:D8:42:EB:D4:DD:D0:8C:AD:41:D8:FF:81:6B:FD:FF:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjUN1thC69Td0IytQdj_gWv9__g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/hJ4yBwRAkPSn0hZDZUYf9X3bnuA.roa Signing time: Thu 01 Jan 2026 04:18:27 +0000 ROA not before: Thu 01 Jan 2026 04:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209386 IP address blocks: 46.231.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft rsync://rpki.ripe.net/repository/DEFAULT/jjUN1thC69Td0IytQdj_gWv9__g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:49:0e:ce:89:85:21:15:e9:29:eb:97:9b:3c:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e350dd6d842ebd4ddd08cad41d8ff816bfdfff8 Validity Not Before: Jan 1 04:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=849e3207044090f4a7d2164365461ff57ddb9ee0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e9:37:92:d7:87:bf:07:6d:8b:47:31:f0:c9: d1:42:e9:f9:1b:57:ab:39:40:63:01:34:53:06:26: d8:20:2e:32:d1:7b:92:38:34:c6:04:ae:56:d7:62: 08:e9:a3:4d:c1:69:e3:6a:95:d1:19:8a:8b:f5:3c: 35:5a:df:8e:5c:c6:5a:c8:ae:35:94:cc:71:d1:d8: 2a:4d:88:05:4c:9b:a8:8c:2d:84:12:cc:6c:de:b4: 1e:31:85:8d:bb:4f:4f:85:60:1f:9d:a0:dd:0c:05: 65:3d:d2:1a:87:1a:58:7e:f6:19:c7:ed:b5:83:e8: da:5a:aa:32:50:8a:d4:1a:a8:be:f7:7a:66:4a:4d: ff:69:05:82:ac:00:2d:c1:7a:e6:48:97:06:e7:c8: 20:4c:2f:06:1a:de:df:e3:5e:dc:c3:a0:43:99:e3: d0:4a:e6:8a:5f:56:2b:91:5b:24:78:be:56:dd:4d: 07:1f:6e:f8:fd:a9:bd:f5:c5:6e:50:b9:d2:b0:75: 17:02:ab:77:9b:97:de:4d:05:e3:b1:e5:2d:85:87: 26:e6:8e:b7:89:e6:eb:dd:fa:6a:4e:4e:ec:5b:ee: a7:19:30:25:86:47:6b:79:a2:d6:7d:e6:f5:af:16: 3a:bf:3d:9a:e7:e6:ae:4e:18:40:fd:8d:ef:60:24: 90:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:9E:32:07:04:40:90:F4:A7:D2:16:43:65:46:1F:F5:7D:DB:9E:E0 X509v3 Authority Key Identifier: keyid:8E:35:0D:D6:D8:42:EB:D4:DD:D0:8C:AD:41:D8:FF:81:6B:FD:FF:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjUN1thC69Td0IytQdj_gWv9__g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/hJ4yBwRAkPSn0hZDZUYf9X3bnuA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.231.52.0/22 Signature Algorithm: sha256WithRSAEncryption 82:74:66:a7:bb:e4:f4:44:3c:2a:9c:60:24:8b:46:bc:cb:56: da:33:bd:4d:37:64:e9:12:04:f6:d1:6c:4c:14:f3:33:e4:32: cb:19:a4:59:bd:c1:1a:d6:1b:39:02:19:35:0e:dc:6b:07:f1: 35:98:be:57:19:9b:b1:6a:af:47:ac:fb:db:57:cf:27:a0:b8: 2d:b0:d3:40:ed:b0:ff:c2:e3:85:dd:3a:03:b3:5a:68:4a:7f: a4:cc:6b:d7:45:1c:0e:e0:85:70:08:aa:6e:2a:9c:26:eb:28: 0e:2c:74:e8:17:cd:a7:9b:9a:58:95:6e:27:1a:05:78:cf:2e: a0:3f:56:ad:3f:1f:3a:32:9c:d8:2e:be:f1:95:00:46:ee:35: f9:f2:be:c3:d9:bd:0e:4b:b4:3c:44:78:8d:7f:5c:8f:ed:fc: 90:a6:de:51:31:b3:ec:c0:9c:30:64:55:cf:ce:11:b8:8b:33: be:99:d6:94:d0:c1:37:75:7b:98:8c:4d:51:12:24:74:50:72: fd:24:31:a7:24:61:f6:16:b0:cc:d8:b0:0b:01:25:28:3e:97: 9f:d7:02:52:e2:4d:73:85:da:e7:04:57:bd:d8:a2:02:77:29: de:e0:9e:73:1e:1f:2b:08:cd:ed:dd:7a:6f:ab:04:5b:c6:8a: fc:8b:2c:be -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x0kOzomFIRXpKeuXmzxVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlMzUwZGQ2ZDg0MmViZDRkZGQwOGNhZDQxZDhmZjgxNmJm ZGZmZjgwHhcNMjYwMTAxMDQxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDllMzIwNzA0NDA5MGY0YTdkMjE2NDM2NTQ2MWZmNTdkZGI5ZWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+k3kteHvwdti0cx8MnRQun5G1er OUBjATRTBibYIC4y0XuSODTGBK5W12II6aNNwWnjapXRGYqL9Tw1Wt+OXMZayK41 lMxx0dgqTYgFTJuojC2EEsxs3rQeMYWNu09PhWAfnaDdDAVlPdIahxpYfvYZx+21 g+jaWqoyUIrUGqi+93pmSk3/aQWCrAAtwXrmSJcG58ggTC8GGt7f417cw6BDmePQ SuaKX1YrkVskeL5W3U0HH274/am99cVuULnSsHUXAqt3m5feTQXjseUthYcm5o63 iebr3fpqTk7sW+6nGTAlhkdreaLWfeb1rxY6vz2a5+auThhA/Y3vYCSQbwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFISeMgcEQJD0p9IWQ2VGH/V9257gMB8GA1UdIwQY MBaAFI41DdbYQuvU3dCMrUHY/4Fr/f/4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvampVTjF0aEM2OVRkMEl5dFFkal9nV3Y5X19nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8xYmYyZTEtMzM5Mi00YjZlLTk1OTct MjFmM2YyNjQ4NGQ5LzEvaEo0eUJ3UkFrUFNuMGhaRFpVWWY5WDNibnVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS8xYmYyZTEtMzM5Mi00YjZlLTk1OTctMjFmM2YyNjQ4NGQ5 LzEvampVTjF0aEM2OVRkMEl5dFFkal9nV3Y5X19nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLuc0MA0G CSqGSIb3DQEBCwUAA4IBAQCCdGanu+T0RDwqnGAki0a8y1baM71NN2TpEgT20WxM FPMz5DLLGaRZvcEa1hs5Ahk1DtxrB/E1mL5XGZuxaq9HrPvbV88noLgtsNNA7bD/ wuOF3ToDs1poSn+kzGvXRRwO4IVwCKpuKpwm6ygOLHToF82nm5pYlW4nGgV4zy6g P1atPx86MpzYLr7xlQBG7jX58r7D2b0OS7Q8RHiNf1yP7fyQpt5RMbPswJwwZFXP zhG4izO+mdaU0ME3dXuYjE1REiR0UHL9JDGnJGH2FrDM2LALASUoPpef1wJS4k1z hdrnBFe92KICdyne4J5zHh8rCM3t3XpvqwRbxor8iyy+ -----END CERTIFICATE-----Generated at Tue Feb 10 00:08:30 2026 by rpki-client