This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/Hx2Y_QxMoZhXy4e6JKX5KPRxYeM.roa File: Hx2Y_QxMoZhXy4e6JKX5KPRxYeM.roa (raw, json) Hash identifier: 3uzaIFxXEFFxlqJhGt+PM/l/uaNGyKXUk1SwVD4qq1o= Subject key identifier: 1F:1D:98:FD:0C:4C:A1:98:57:CB:87:BA:24:A5:F9:28:F4:71:61:E3 Certificate issuer: /CN=52a59bf043080306359f5a29491f545b07051c05 Certificate serial: 019B7DCAA24FAFAF3BDE26460733EBD99034 Authority key identifier: 52:A5:9B:F0:43:08:03:06:35:9F:5A:29:49:1F:54:5B:07:05:1C:05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UqWb8EMIAwY1n1opSR9UWwcFHAU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/Hx2Y_QxMoZhXy4e6JKX5KPRxYeM.roa Signing time: Fri 02 Jan 2026 08:19:50 +0000 ROA not before: Fri 02 Jan 2026 08:19:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28716 IP address blocks: 46.183.232.0/21 maxlen: 21 185.133.216.0/22 maxlen: 22 185.133.216.0/24 maxlen: 24 185.133.217.0/24 maxlen: 24 185.133.218.0/24 maxlen: 24 185.133.219.0/24 maxlen: 24 2a03:9c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/UqWb8EMIAwY1n1opSR9UWwcFHAU.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/UqWb8EMIAwY1n1opSR9UWwcFHAU.mft rsync://rpki.ripe.net/repository/DEFAULT/UqWb8EMIAwY1n1opSR9UWwcFHAU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 17:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:a2:4f:af:af:3b:de:26:46:07:33:eb:d9:90:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52a59bf043080306359f5a29491f545b07051c05 Validity Not Before: Jan 2 08:19:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f1d98fd0c4ca19857cb87ba24a5f928f47161e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3c:46:d6:d6:69:49:5a:d0:80:8b:18:05:56: c5:94:a3:e2:cd:b3:18:da:5a:e9:a6:02:6d:77:48: e1:0c:b1:26:c8:6c:c8:7b:14:30:a7:f9:38:83:a4: 98:25:27:b7:5e:d2:18:c3:77:8a:d6:13:e2:db:e9: e5:62:07:d5:7d:c9:4b:a9:66:16:49:b0:63:e2:b1: f3:0c:d5:58:f6:4f:77:55:61:45:a8:a2:08:6d:aa: 0a:d1:c1:47:f3:07:41:e4:c4:4f:56:f1:9a:d9:7b: 5a:7c:40:5a:cd:6d:cd:eb:e2:54:6e:b2:ae:15:dd: 9a:43:ff:bb:b9:f4:50:89:49:f9:e3:a2:37:f4:00: b4:a2:9e:9f:ea:f3:69:68:2b:94:84:ff:a6:75:73: 56:46:68:48:8c:07:36:6c:66:b8:b2:7a:49:71:e7: 4a:35:6c:3a:1e:0e:6c:f2:50:9c:be:8c:5e:99:93: d1:65:0a:2a:17:5d:b7:87:3a:ae:28:d8:c9:ae:6f: e1:06:c7:64:2a:81:1b:2d:47:d9:7d:52:4f:db:48: 56:19:48:8c:24:45:42:d6:9b:1e:bd:50:dc:66:bc: 1e:94:c9:5f:6c:02:ca:27:63:3c:59:c9:98:ce:63: 4f:3e:36:cc:ae:75:8e:c4:16:f9:3f:fc:3c:cc:bc: 6b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:1D:98:FD:0C:4C:A1:98:57:CB:87:BA:24:A5:F9:28:F4:71:61:E3 X509v3 Authority Key Identifier: keyid:52:A5:9B:F0:43:08:03:06:35:9F:5A:29:49:1F:54:5B:07:05:1C:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqWb8EMIAwY1n1opSR9UWwcFHAU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/Hx2Y_QxMoZhXy4e6JKX5KPRxYeM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/UqWb8EMIAwY1n1opSR9UWwcFHAU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.183.232.0/21 185.133.216.0/22 IPv6: 2a03:9c0::/32 Signature Algorithm: sha256WithRSAEncryption 10:63:3c:48:23:4c:69:e8:b6:6e:84:c2:e9:4c:85:5d:ba:f7: 58:98:f3:c3:63:28:00:b0:de:6a:b2:f1:f8:35:59:5e:96:93: bf:9a:dd:9d:d0:15:5f:18:5e:72:60:f4:4b:b4:e5:58:4a:ca: f1:4d:6f:ee:ae:50:f8:a4:d7:b0:a3:eb:42:9f:21:48:c4:c1: d7:26:e9:1c:0e:10:00:7d:3b:a1:ca:bc:83:d8:b2:05:cc:ec: 92:1a:59:d1:38:df:54:dd:89:d9:09:3c:be:53:3b:f4:13:59: be:d7:72:77:65:1d:61:c3:8f:5a:9d:43:72:6d:c7:53:18:12: 2c:68:60:6a:f5:4b:dc:00:3b:c6:97:c2:2b:5c:fc:a9:cb:ba: aa:a8:71:a1:ad:c0:3f:a7:79:57:cd:a3:df:49:d4:45:a9:f1: d7:1e:ba:92:6d:b3:30:7c:5e:a2:96:b0:13:03:9e:a3:73:94: 11:54:7e:4c:31:82:8e:be:05:2f:f3:9d:e0:39:ca:f8:53:fb: 44:c6:4b:eb:a3:d2:0a:e1:f5:2a:40:77:73:0d:8e:c0:26:4a: ee:aa:c1:ef:ad:93:2c:c7:a7:f3:42:eb:f1:d7:c2:e7:e7:0f: 33:f4:ec:7f:55:0d:99:a6:d1:d1:f5:21:74:2a:8c:8e:54:99: 9c:9e:96:94 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt9yqJPr6873iZGBzPr2ZA0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyYTU5YmYwNDMwODAzMDYzNTlmNWEyOTQ5MWY1NDViMDcw NTFjMDUwHhcNMjYwMTAyMDgxOTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjFkOThmZDBjNGNhMTk4NTdjYjg3YmEyNGE1ZjkyOGY0NzE2MWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTxG1tZpSVrQgIsYBVbFlKPizbMY 2lrppgJtd0jhDLEmyGzIexQwp/k4g6SYJSe3XtIYw3eK1hPi2+nlYgfVfclLqWYW SbBj4rHzDNVY9k93VWFFqKIIbaoK0cFH8wdB5MRPVvGa2XtafEBazW3N6+JUbrKu Fd2aQ/+7ufRQiUn546I39AC0op6f6vNpaCuUhP+mdXNWRmhIjAc2bGa4snpJcedK NWw6Hg5s8lCcvoxemZPRZQoqF123hzquKNjJrm/hBsdkKoEbLUfZfVJP20hWGUiM JEVC1psevVDcZrwelMlfbALKJ2M8WcmYzmNPPjbMrnWOxBb5P/w8zLxrxwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFB8dmP0MTKGYV8uHuiSl+Sj0cWHjMB8GA1UdIwQY MBaAFFKlm/BDCAMGNZ9aKUkfVFsHBRwFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXFXYjhFTUlBd1kxbjFvcFNSOVVXd2NGSEFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy82ZDcyOWUtZTE2Yi00MWE5LTkwMTIt MDE0YzcwOTc3ZDQ5LzEvSHgyWV9ReE1vWmhYeTRlNkpLWDVLUFJ4WWVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy82ZDcyOWUtZTE2Yi00MWE5LTkwMTItMDE0YzcwOTc3ZDQ5 LzEvVXFXYjhFTUlBd1kxbjFvcFNSOVVXd2NGSEFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDLrfoAwQC uYXYMA0EAgACMAcDBQAqAwnAMA0GCSqGSIb3DQEBCwUAA4IBAQAQYzxII0xp6LZu hMLpTIVduvdYmPPDYygAsN5qsvH4NVlelpO/mt2d0BVfGF5yYPRLtOVYSsrxTW/u rlD4pNewo+tCnyFIxMHXJukcDhAAfTuhyryD2LIFzOySGlnRON9U3YnZCTy+Uzv0 E1m+13J3ZR1hw49anUNybcdTGBIsaGBq9UvcADvGl8IrXPypy7qqqHGhrcA/p3lX zaPfSdRFqfHXHrqSbbMwfF6ilrATA56jc5QRVH5MMYKOvgUv853gOcr4U/tExkvr o9IK4fUqQHdzDY7AJkruqsHvrZMsx6fzQuvx18Ln5w8z9Ox/VQ2ZptHR9SF0KoyO VJmcnpaU -----END CERTIFICATE-----Generated at Tue Jan 27 03:52:41 2026 by rpki-client