This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/hgQs7MYBd_0sfn5XYxmwzSv5ps4.roa File: hgQs7MYBd_0sfn5XYxmwzSv5ps4.roa (raw, json) Hash identifier: ZtQrVgGudfrVRG4YhbUKKHLoFLvlQ7OJR646o1ECYOw= Subject key identifier: 86:04:2C:EC:C6:01:77:FD:2C:7E:7E:57:63:19:B0:CD:2B:F9:A6:CE Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce Certificate serial: 019BB2D9764FFED8E159EAD3A24957CEE7CE Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/hgQs7MYBd_0sfn5XYxmwzSv5ps4.roa Signing time: Mon 12 Jan 2026 15:35:54 +0000 ROA not before: Mon 12 Jan 2026 15:35:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205220 IP address blocks: 46.34.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b2:d9:76:4f:fe:d8:e1:59:ea:d3:a2:49:57:ce:e7:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce Validity Not Before: Jan 12 15:35:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=86042cecc60177fd2c7e7e576319b0cd2bf9a6ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ce:01:f2:5b:26:fa:16:c6:33:fd:1c:cd:bc: 4a:6f:39:e3:de:9b:dd:cc:a1:b1:e7:b1:50:30:7c: cf:95:6e:2d:81:07:93:7f:fe:19:23:4f:cb:80:ca: 77:b5:df:e7:86:b4:17:91:fe:9d:ec:8b:7d:87:01: bf:97:b1:dd:81:4f:45:df:fb:fe:73:7e:3a:1e:72: e8:d3:5e:b0:db:29:db:dd:a1:85:ee:18:93:16:af: c3:75:b2:ca:54:e8:4b:89:c8:10:b3:d9:ed:03:99: 78:b7:7b:b6:4f:be:47:4c:fd:83:1f:c5:9b:15:2b: 37:f2:68:d6:1d:42:35:f4:9c:c8:8a:23:fb:07:8f: 6c:11:ce:ad:ba:a0:e6:1c:31:57:fc:3d:e2:b6:b7: 1d:54:83:86:e1:20:41:d5:02:3f:ba:89:b6:60:c3: bb:a7:5b:d6:ee:3b:5e:b4:21:1c:13:bc:2d:90:1d: 85:a1:be:ee:fe:d8:8a:92:13:d5:a7:f5:e7:51:d8: e7:86:c3:d5:ca:b5:c1:6d:10:6d:69:2b:e2:13:61: c3:3f:1c:46:bf:68:1b:f9:9e:e5:b5:95:6f:4a:3e: 0c:b8:3e:61:b3:37:ae:98:cf:19:04:69:ad:10:a1: 0d:cb:d1:11:bb:cc:87:8f:c4:c3:be:53:23:68:5f: 6f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:04:2C:EC:C6:01:77:FD:2C:7E:7E:57:63:19:B0:CD:2B:F9:A6:CE X509v3 Authority Key Identifier: keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/hgQs7MYBd_0sfn5XYxmwzSv5ps4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.34.50.0/24 Signature Algorithm: sha256WithRSAEncryption 59:ab:b0:ba:fb:19:f2:9e:0a:c2:a1:a0:cd:14:5b:03:74:38: 7e:11:46:f5:0b:18:2b:1e:90:a3:9c:d3:19:c5:3d:38:3e:c9: f8:80:c9:0e:35:15:f8:c2:0d:c1:ad:6a:3e:e8:a0:ce:a9:0b: 25:d8:fa:44:30:34:6a:e1:66:dc:99:e1:35:65:45:50:5d:3a: e1:df:33:4a:2c:65:8b:7c:a1:4e:fd:d7:bb:77:36:95:4a:9b: e7:61:1c:83:88:a0:7d:ed:44:f4:e8:a7:ec:9a:5c:6c:8c:ce: d3:6d:30:c7:42:c5:37:d2:fa:f3:ff:04:4b:ff:7a:a1:42:c5: 67:b3:c3:9c:c6:d3:ae:ae:f7:a9:39:d4:a8:5e:f5:5a:e5:d6: b3:77:2e:85:f6:69:f3:5e:7d:80:aa:49:59:ec:eb:71:d4:d9: 5a:d7:2e:4a:69:1e:1d:34:6e:6b:44:68:0a:cd:d5:9a:1b:81: 5c:68:51:67:07:20:b2:a1:13:2a:1d:f4:dc:41:c6:bb:23:f1: 5a:f5:99:98:e8:69:c1:a9:34:48:01:55:0a:e7:16:fb:03:61: 9c:ea:83:bb:c6:ae:85:c3:fb:59:6c:f1:de:d7:9c:c5:43:e6: 37:b5:74:59:80:90:5c:78:58:37:fd:12:05:9a:0e:4f:da:e0: 29:a8:6d:78 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuy2XZP/tjhWerToklXzufOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNDcxY2Q2Y2U2MGFiZWRkNzQ3NjJiMTAxYWE1ZTZmNDIw N2VmY2UwHhcNMjYwMTEyMTUzNTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NjA0MmNlY2M2MDE3N2ZkMmM3ZTdlNTc2MzE5YjBjZDJiZjlhNmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2s4B8lsm+hbGM/0czbxKbznj3pvd zKGx57FQMHzPlW4tgQeTf/4ZI0/LgMp3td/nhrQXkf6d7It9hwG/l7HdgU9F3/v+ c346HnLo016w2ynb3aGF7hiTFq/DdbLKVOhLicgQs9ntA5l4t3u2T75HTP2DH8Wb FSs38mjWHUI19JzIiiP7B49sEc6tuqDmHDFX/D3itrcdVIOG4SBB1QI/uom2YMO7 p1vW7jtetCEcE7wtkB2Fob7u/tiKkhPVp/XnUdjnhsPVyrXBbRBtaSviE2HDPxxG v2gb+Z7ltZVvSj4MuD5hszeumM8ZBGmtEKENy9ERu8yHj8TDvlMjaF9vGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIYELOzGAXf9LH5+V2MZsM0r+abOMB8GA1UdIwQY MBaAFEpHHNbOYKvt10disQGqXm9CB+/OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2Qt YTZiOTkxZjRmYWY4LzEvaGdRczdNWUJkXzBzZm41WFl4bXd6U3Y1cHM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2QtYTZiOTkxZjRmYWY4 LzEvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiIyMA0G CSqGSIb3DQEBCwUAA4IBAQBZq7C6+xnyngrCoaDNFFsDdDh+EUb1CxgrHpCjnNMZ xT04Psn4gMkONRX4wg3BrWo+6KDOqQsl2PpEMDRq4WbcmeE1ZUVQXTrh3zNKLGWL fKFO/de7dzaVSpvnYRyDiKB97UT06KfsmlxsjM7TbTDHQsU30vrz/wRL/3qhQsVn s8OcxtOurvepOdSoXvVa5dazdy6F9mnzXn2AqklZ7Otx1Nla1y5KaR4dNG5rRGgK zdWaG4FcaFFnByCyoRMqHfTcQca7I/Fa9ZmY6GnBqTRIAVUK5xb7A2Gc6oO7xq6F w/tZbPHe15zFQ+Y3tXRZgJBceFg3/RIFmg5P2uApqG14 -----END CERTIFICATE-----Generated at Wed Jan 21 01:08:57 2026 by rpki-client