This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/Hi85wc6uJWXTGae11EDMD2GIBrI.roa File: Hi85wc6uJWXTGae11EDMD2GIBrI.roa (raw, json) Hash identifier: F5Lq64IGd6DB3AuiERrPRgP1NYUhYidZ19qyklKfzQk= Subject key identifier: 1E:2F:39:C1:CE:AE:25:65:D3:19:A7:B5:D4:40:CC:0F:61:88:06:B2 Certificate issuer: /CN=70cbeb388f5902c16160bbed0962cb622b2bb832 Certificate serial: 019B7EA4B6C67700E6450EE9DF0EC1221ACA Authority key identifier: 70:CB:EB:38:8F:59:02:C1:61:60:BB:ED:09:62:CB:62:2B:2B:B8:32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/Hi85wc6uJWXTGae11EDMD2GIBrI.roa Signing time: Fri 02 Jan 2026 12:18:02 +0000 ROA not before: Fri 02 Jan 2026 12:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34702 IP address blocks: 185.46.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft rsync://rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:b6:c6:77:00:e6:45:0e:e9:df:0e:c1:22:1a:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70cbeb388f5902c16160bbed0962cb622b2bb832 Validity Not Before: Jan 2 12:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1e2f39c1ceae2565d319a7b5d440cc0f618806b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a0:1c:c5:b1:1b:ca:5a:8a:06:8f:90:01:ec: e9:c6:94:62:df:cf:72:fc:c3:44:31:d0:6a:4b:e0: d1:d3:b0:de:2d:5d:7a:de:0a:13:6c:7b:c3:86:d5: 4b:df:01:5e:70:f2:69:01:44:ad:1e:d0:57:e7:1b: bd:80:31:dd:e3:3c:a7:96:f4:df:b1:9f:c4:c5:e3: 16:c3:26:6a:1f:91:46:cb:bd:6d:ad:2f:ee:76:f3: 1e:fd:b0:f4:03:3d:36:62:3b:27:b4:f6:01:d5:0a: 0f:1e:b2:42:84:cc:ec:fb:c6:b7:67:21:49:2c:a8: 77:9e:cc:b0:30:b0:4f:1a:73:df:24:78:6f:dd:be: bb:17:83:29:5e:1b:e6:93:d8:d2:4a:a7:39:45:f4: dd:7a:ce:42:2c:fc:06:1e:f5:11:cd:35:a6:9f:45: 34:ab:af:4b:c7:c2:d4:98:9d:ea:ca:ed:fa:c9:bb: cf:0b:6b:33:94:20:88:8e:d0:76:46:fc:a6:e3:8d: c1:4a:ea:5e:4f:d5:5e:78:4d:1c:f2:a9:82:2f:eb: 95:72:63:44:fb:98:3a:31:8d:5d:5b:5c:4c:ca:05: d6:0d:59:6a:fa:7d:27:8e:19:b8:45:d4:26:92:87: 31:47:94:15:f0:04:a5:54:e6:48:0d:98:10:ab:ab: 1b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:2F:39:C1:CE:AE:25:65:D3:19:A7:B5:D4:40:CC:0F:61:88:06:B2 X509v3 Authority Key Identifier: keyid:70:CB:EB:38:8F:59:02:C1:61:60:BB:ED:09:62:CB:62:2B:2B:B8:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/Hi85wc6uJWXTGae11EDMD2GIBrI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.46.20.0/22 Signature Algorithm: sha256WithRSAEncryption 3d:bf:7b:45:0b:14:41:d2:19:bb:8a:36:a2:c0:a2:a2:66:df: 24:69:fe:45:ce:26:47:11:8f:90:a5:93:7e:a8:22:eb:46:96: 7d:4b:39:16:1e:a2:5d:f0:6d:d5:81:a9:be:26:a8:3a:5f:c8: 65:4e:6a:61:bf:73:02:38:4e:3f:ba:bc:21:51:26:ee:32:4d: 50:62:d4:90:9f:6f:cb:7b:2b:a1:ef:e6:5a:fd:3e:43:9f:8c: da:25:1b:ee:ca:c7:9d:12:02:ac:52:7e:8b:91:a1:10:9e:79: 59:33:a9:b3:5c:7a:a9:07:47:99:cf:a8:ef:11:25:16:ab:4e: 5b:5a:07:7e:d9:0a:54:43:6b:fb:62:10:0e:a2:3a:54:3e:7a: 40:b5:c5:98:d6:d5:c9:dc:7e:f9:d1:da:d0:9b:ab:92:46:08: 5f:d0:7f:55:cd:9b:66:7a:84:9e:72:9f:6a:fb:66:50:c7:a4: 6f:c1:c1:6d:aa:02:32:8b:a4:ec:76:14:ab:8d:f1:b3:cf:e5: 63:5e:da:4f:83:fe:0e:44:11:51:83:58:80:68:a3:51:00:66: ce:c4:d7:ef:c1:5d:4d:42:5b:6f:30:c2:bb:9b:b7:64:7e:f2: 7a:1d:94:ba:d3:ef:42:f1:ec:9a:23:b4:77:bb:fd:3b:ea:3f: ce:0f:bf:f3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pLbGdwDmRQ7p3w7BIhrKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwY2JlYjM4OGY1OTAyYzE2MTYwYmJlZDA5NjJjYjYyMmIy YmI4MzIwHhcNMjYwMTAyMTIxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZTJmMzljMWNlYWUyNTY1ZDMxOWE3YjVkNDQwY2MwZjYxODgwNmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6AcxbEbylqKBo+QAezpxpRi389y /MNEMdBqS+DR07DeLV163goTbHvDhtVL3wFecPJpAUStHtBX5xu9gDHd4zynlvTf sZ/ExeMWwyZqH5FGy71trS/udvMe/bD0Az02YjsntPYB1QoPHrJChMzs+8a3ZyFJ LKh3nsywMLBPGnPfJHhv3b67F4MpXhvmk9jSSqc5RfTdes5CLPwGHvURzTWmn0U0 q69Lx8LUmJ3qyu36ybvPC2szlCCIjtB2Rvym443BSupeT9VeeE0c8qmCL+uVcmNE +5g6MY1dW1xMygXWDVlq+n0njhm4RdQmkocxR5QV8ASlVOZIDZgQq6sbJwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB4vOcHOriVl0xmntdRAzA9hiAayMB8GA1UdIwQY MBaAFHDL6ziPWQLBYWC77Qliy2IrK7gyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY012ck9JOVpBc0ZoWUx2dENXTExZaXNydURJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8xNDljZjYtNjExZC00ZTAzLWE2NjAt ZGNlMTEyN2FiMjIzLzEvSGk4NXdjNnVKV1hUR2FlMTFFRE1EMkdJQnJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS8xNDljZjYtNjExZC00ZTAzLWE2NjAtZGNlMTEyN2FiMjIz LzEvY012ck9JOVpBc0ZoWUx2dENXTExZaXNydURJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuS4UMA0G CSqGSIb3DQEBCwUAA4IBAQA9v3tFCxRB0hm7ijaiwKKiZt8kaf5FziZHEY+QpZN+ qCLrRpZ9SzkWHqJd8G3Vgam+Jqg6X8hlTmphv3MCOE4/urwhUSbuMk1QYtSQn2/L eyuh7+Za/T5Dn4zaJRvuysedEgKsUn6LkaEQnnlZM6mzXHqpB0eZz6jvESUWq05b Wgd+2QpUQ2v7YhAOojpUPnpAtcWY1tXJ3H750drQm6uSRghf0H9VzZtmeoSecp9q +2ZQx6RvwcFtqgIyi6TsdhSrjfGzz+VjXtpPg/4ORBFRg1iAaKNRAGbOxNfvwV1N QltvMMK7m7dkfvJ6HZS60+9C8eyaI7R3u/076j/OD7/z -----END CERTIFICATE-----Generated at Sun Jan 18 13:13:32 2026 by rpki-client