This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/HhEHXcVrA4jYly_4JLZyYZncnvg.roa File: HhEHXcVrA4jYly_4JLZyYZncnvg.roa (raw, json) Hash identifier: 6iTpuhytQNXUI4g8368tGo5DhJ/PIFrnzj+J0UysgLI= Subject key identifier: 1E:11:07:5D:C5:6B:03:88:D8:97:2F:F8:24:B6:72:61:99:DC:9E:F8 Certificate issuer: /CN=b4f49698d08e8c283c0df2a82f16997e6259bab6 Certificate serial: 019B78A300ED2FD0FAFBB24B80B885B5AF3D Authority key identifier: B4:F4:96:98:D0:8E:8C:28:3C:0D:F2:A8:2F:16:99:7E:62:59:BA:B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPSWmNCOjCg8DfKoLxaZfmJZurY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/HhEHXcVrA4jYly_4JLZyYZncnvg.roa Signing time: Thu 01 Jan 2026 08:18:27 +0000 ROA not before: Thu 01 Jan 2026 08:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202614 IP address blocks: 46.102.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.mft rsync://rpki.ripe.net/repository/DEFAULT/tPSWmNCOjCg8DfKoLxaZfmJZurY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:00:ed:2f:d0:fa:fb:b2:4b:80:b8:85:b5:af:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4f49698d08e8c283c0df2a82f16997e6259bab6 Validity Not Before: Jan 1 08:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1e11075dc56b0388d8972ff824b6726199dc9ef8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:bd:fa:f5:26:7d:74:d1:4b:98:a8:9f:52:ae: a5:04:12:35:f2:e2:92:44:97:55:13:7b:cb:65:e5: fd:14:34:1b:ee:50:18:ee:ec:e0:10:ad:84:76:ed: 2c:ab:1f:87:fd:4a:e3:5c:eb:4b:e4:a7:b3:5c:b5: c4:8c:c5:f8:07:dc:41:71:19:2d:04:f7:75:2c:1a: 1d:57:8d:41:dd:40:e8:42:6f:5c:bf:5b:51:ec:40: ab:38:98:aa:24:b0:ff:dc:ab:5b:73:4a:63:3b:7d: ad:05:f2:ef:4c:6f:a4:fd:8a:35:a7:8f:5c:3c:e4: 62:81:ae:82:9a:d1:20:26:2b:af:97:c1:5d:09:e8: 02:ef:80:9b:70:2b:79:3f:a1:92:dd:70:38:9c:b6: dd:73:14:f3:19:ef:68:c8:b2:21:ae:8d:ad:1d:b0: 50:a6:fa:04:6f:8a:10:93:a2:ee:16:24:24:05:db: b7:c5:f8:3f:97:08:05:4c:74:d7:da:49:b4:df:fe: f3:5c:f3:4c:72:43:27:57:d4:fc:23:5f:8f:fa:e1: f4:18:26:bc:83:f5:1d:a3:43:23:a1:dd:4f:c7:ec: c5:3c:13:16:04:63:b0:63:b1:03:44:cd:e6:d2:69: 72:a3:66:33:4b:c0:74:3e:c0:bd:86:27:81:16:74: 0f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:11:07:5D:C5:6B:03:88:D8:97:2F:F8:24:B6:72:61:99:DC:9E:F8 X509v3 Authority Key Identifier: keyid:B4:F4:96:98:D0:8E:8C:28:3C:0D:F2:A8:2F:16:99:7E:62:59:BA:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPSWmNCOjCg8DfKoLxaZfmJZurY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/HhEHXcVrA4jYly_4JLZyYZncnvg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.102.104.0/24 Signature Algorithm: sha256WithRSAEncryption 25:34:ba:c9:13:96:b3:a2:85:0c:4c:98:54:08:51:2c:c0:f9: b1:4d:ab:20:39:3c:76:07:8c:76:47:ef:57:c0:15:63:3d:02: 75:ee:b4:f8:59:07:79:68:51:67:33:a7:4b:b8:9a:f4:47:4b: 2f:a3:05:57:53:73:59:c9:01:a8:3f:2c:15:f5:e5:0e:7a:b2: aa:2a:00:62:4c:6a:ea:44:26:be:43:e4:a6:98:5d:45:89:22: 96:95:76:ea:f1:d6:ec:f9:6b:7e:b5:66:5b:8a:52:fb:35:5f: 96:79:06:c9:20:13:03:84:53:56:3a:69:d8:1d:ad:a6:76:72: dd:38:97:3f:a8:d7:18:5c:8f:ac:6e:3a:df:d2:4a:47:02:d0: bf:16:42:fd:26:0a:9c:69:c3:3b:bc:69:20:7a:45:7a:24:90: 08:2f:19:fd:5e:81:31:e9:6b:1b:a5:3d:be:be:e6:69:74:a3: 15:cd:7e:93:ca:1a:f6:55:67:2a:44:ea:7f:12:72:05:1e:e4: af:f2:e7:46:23:48:31:69:6b:2d:89:df:68:2b:94:d4:13:06: f2:43:bd:ca:41:25:ed:4d:e8:5b:ac:1b:54:e7:aa:9d:ca:c2: 63:34:7c:99:d6:ef:0d:ce:71:5b:08:a2:de:1c:31:07:0b:13: 86:1c:65:01 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4owDtL9D6+7JLgLiFta89MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ZjQ5Njk4ZDA4ZThjMjgzYzBkZjJhODJmMTY5OTdlNjI1 OWJhYjYwHhcNMjYwMTAxMDgxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZTExMDc1ZGM1NmIwMzg4ZDg5NzJmZjgyNGI2NzI2MTk5ZGM5ZWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApL369SZ9dNFLmKifUq6lBBI18uKS RJdVE3vLZeX9FDQb7lAY7uzgEK2Edu0sqx+H/UrjXOtL5KezXLXEjMX4B9xBcRkt BPd1LBodV41B3UDoQm9cv1tR7ECrOJiqJLD/3Ktbc0pjO32tBfLvTG+k/Yo1p49c PORiga6CmtEgJiuvl8FdCegC74CbcCt5P6GS3XA4nLbdcxTzGe9oyLIhro2tHbBQ pvoEb4oQk6LuFiQkBdu3xfg/lwgFTHTX2km03/7zXPNMckMnV9T8I1+P+uH0GCa8 g/Udo0Mjod1Px+zFPBMWBGOwY7EDRM3m0mlyo2YzS8B0PsC9hieBFnQPAQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB4RB13FawOI2Jcv+CS2cmGZ3J74MB8GA1UdIwQY MBaAFLT0lpjQjowoPA3yqC8WmX5iWbq2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFBTV21OQ09qQ2c4RGZLb0x4YVpmbUpadXJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9mNjNkNzYtMmZiNi00M2EyLWJmZWMt OWY3YWEwOTQzMDNiLzEvSGhFSFhjVnJBNGpZbHlfNEpMWnlZWm5jbnZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9mNjNkNzYtMmZiNi00M2EyLWJmZWMtOWY3YWEwOTQzMDNi LzEvdFBTV21OQ09qQ2c4RGZLb0x4YVpmbUpadXJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALmZoMA0G CSqGSIb3DQEBCwUAA4IBAQAlNLrJE5azooUMTJhUCFEswPmxTasgOTx2B4x2R+9X wBVjPQJ17rT4WQd5aFFnM6dLuJr0R0svowVXU3NZyQGoPywV9eUOerKqKgBiTGrq RCa+Q+SmmF1FiSKWlXbq8dbs+Wt+tWZbilL7NV+WeQbJIBMDhFNWOmnYHa2mdnLd OJc/qNcYXI+sbjrf0kpHAtC/FkL9JgqcacM7vGkgekV6JJAILxn9XoEx6WsbpT2+ vuZpdKMVzX6Tyhr2VWcqROp/EnIFHuSv8udGI0gxaWstid9oK5TUEwbyQ73KQSXt TehbrBtU56qdysJjNHyZ1u8NznFbCKLeHDEHCxOGHGUB -----END CERTIFICATE-----Generated at Tue Jan 27 08:34:45 2026 by rpki-client