This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/hAHPjweyfzEmZctOAqBgVej6D9Y.roa File: hAHPjweyfzEmZctOAqBgVej6D9Y.roa (raw, json) Hash identifier: hZD266S3QeLuF8KPvtFtT0P+a47oHHfhQQOsd40VTSc= Subject key identifier: 84:01:CF:8F:07:B2:7F:31:26:65:CB:4E:02:A0:60:55:E8:FA:0F:D6 Certificate issuer: /CN=9255218b69e551143c51fa1d919512e1a44c5c9d Certificate serial: 019B7CEE066882277D3A15C95555FD5350A8 Authority key identifier: 92:55:21:8B:69:E5:51:14:3C:51:FA:1D:91:95:12:E1:A4:4C:5C:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klUhi2nlURQ8UfodkZUS4aRMXJ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/hAHPjweyfzEmZctOAqBgVej6D9Y.roa Signing time: Fri 02 Jan 2026 04:18:52 +0000 ROA not before: Fri 02 Jan 2026 04:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56364 IP address blocks: 46.173.208.0/22 maxlen: 22 46.173.208.0/24 maxlen: 24 46.173.220.0/22 maxlen: 22 46.173.220.0/24 maxlen: 24 46.173.221.0/24 maxlen: 24 46.173.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.mft rsync://rpki.ripe.net/repository/DEFAULT/klUhi2nlURQ8UfodkZUS4aRMXJ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:06:68:82:27:7d:3a:15:c9:55:55:fd:53:50:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9255218b69e551143c51fa1d919512e1a44c5c9d Validity Not Before: Jan 2 04:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8401cf8f07b27f312665cb4e02a06055e8fa0fd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b7:b6:fc:61:55:d2:26:de:12:ce:8d:45:9c: b7:01:a1:69:df:6e:22:3a:51:8c:29:29:7a:e8:c5: 9d:92:73:8e:bb:cd:40:db:e7:c1:34:4a:0d:55:41: 91:3a:34:a0:05:61:07:d8:e3:f8:73:bf:31:b3:6a: b8:df:2f:8a:ae:71:ac:d1:56:8f:6d:4b:4e:3e:f3: 31:b6:84:6f:71:8e:b1:45:49:24:28:65:9f:d0:e5: 06:fa:e5:5e:81:d7:45:65:46:10:5b:44:31:2d:9c: 28:f0:84:be:00:75:6a:bb:f1:fa:5f:66:c2:cd:c9: 02:f6:33:a1:e0:1b:92:50:a3:97:dc:65:93:0a:77: 9e:dd:e8:4e:d9:d1:8f:4c:ed:1c:7a:08:f2:7a:8c: f6:84:28:40:62:8e:55:e5:21:37:3d:d9:0a:9e:b6: 27:6e:23:34:c3:99:89:7d:66:e5:b1:ad:72:bf:ba: ca:56:a5:50:2e:dd:e5:b2:08:97:4b:b1:6f:61:82: 16:4f:22:b0:97:01:ce:16:be:bb:4a:44:38:95:41: 86:a0:de:b3:da:99:8c:66:4d:a8:fe:28:53:99:a0: eb:29:2b:af:5f:b3:9d:ca:73:5b:75:71:b0:d6:ef: 96:7b:8a:7a:c1:aa:b9:65:74:17:12:8f:f0:a8:19: e3:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:01:CF:8F:07:B2:7F:31:26:65:CB:4E:02:A0:60:55:E8:FA:0F:D6 X509v3 Authority Key Identifier: keyid:92:55:21:8B:69:E5:51:14:3C:51:FA:1D:91:95:12:E1:A4:4C:5C:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klUhi2nlURQ8UfodkZUS4aRMXJ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/hAHPjweyfzEmZctOAqBgVej6D9Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.173.208.0/22 46.173.220.0/22 Signature Algorithm: sha256WithRSAEncryption 3a:59:50:49:5a:fd:13:e0:d2:47:68:76:5b:dc:df:50:ba:21: 91:1d:e7:c4:83:0f:17:fe:7d:c7:8f:99:d3:a3:e5:74:c6:e0: 4a:e9:37:04:32:54:b2:3a:13:3e:2e:5d:69:ea:a8:81:c2:59: ca:af:66:d6:4b:5d:d5:fc:79:04:34:17:93:5f:d3:4d:5d:a1: 41:d4:2e:80:d5:54:b6:da:50:b5:18:04:0f:ad:d3:74:32:70: 6b:0c:bc:c9:e3:7c:c6:06:10:ec:60:99:39:74:4c:c5:af:82: da:4e:fe:96:bb:40:ad:46:19:b3:7a:37:4e:bc:ca:b5:ca:31: 54:47:5a:76:66:db:2c:29:34:fc:5c:6c:7b:06:ca:c7:79:b1: 88:42:ab:92:21:ed:d3:54:cc:67:40:1b:95:f8:f0:78:80:6a: 58:d4:6f:59:31:20:ad:77:db:b4:c9:65:d2:81:4f:c1:c4:67: 6d:49:4c:21:46:12:7e:02:6a:18:9d:a3:56:56:83:1e:79:e2: 71:e8:3b:cb:84:30:5e:c4:04:4c:78:1f:cc:f7:4c:ff:69:50: 86:cb:32:80:bd:5c:29:74:2f:d7:0e:ed:f1:c5:63:02:b2:15: 45:e7:ca:51:3f:53:e5:c4:16:c8:04:ca:9c:e4:32:7c:9f:cf: a9:41:58:dd -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt87gZogid9OhXJVVX9U1CoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyNTUyMThiNjllNTUxMTQzYzUxZmExZDkxOTUxMmUxYTQ0 YzVjOWQwHhcNMjYwMTAyMDQxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDAxY2Y4ZjA3YjI3ZjMxMjY2NWNiNGUwMmEwNjA1NWU4ZmEwZmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtre2/GFV0ibeEs6NRZy3AaFp324i OlGMKSl66MWdknOOu81A2+fBNEoNVUGROjSgBWEH2OP4c78xs2q43y+KrnGs0VaP bUtOPvMxtoRvcY6xRUkkKGWf0OUG+uVegddFZUYQW0QxLZwo8IS+AHVqu/H6X2bC zckC9jOh4BuSUKOX3GWTCnee3ehO2dGPTO0cegjyeoz2hChAYo5V5SE3PdkKnrYn biM0w5mJfWblsa1yv7rKVqVQLt3lsgiXS7FvYYIWTyKwlwHOFr67SkQ4lUGGoN6z 2pmMZk2o/ihTmaDrKSuvX7OdynNbdXGw1u+We4p6waq5ZXQXEo/wqBnjxwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIQBz48Hsn8xJmXLTgKgYFXo+g/WMB8GA1UdIwQY MBaAFJJVIYtp5VEUPFH6HZGVEuGkTFydMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2xVaGkybmxVUlE4VWZvZGtaVVM0YVJNWEowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS80ODI4OTYtODI2YS00YmVkLWIxNGYt YWZmYmEyZGYzZDYyLzEvaEFIUGp3ZXlmekVtWmN0T0FxQmdWZWo2RDlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS80ODI4OTYtODI2YS00YmVkLWIxNGYtYWZmYmEyZGYzZDYy LzEva2xVaGkybmxVUlE4VWZvZGtaVVM0YVJNWEowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLq3QAwQC Lq3cMA0GCSqGSIb3DQEBCwUAA4IBAQA6WVBJWv0T4NJHaHZb3N9QuiGRHefEgw8X /n3Hj5nTo+V0xuBK6TcEMlSyOhM+Ll1p6qiBwlnKr2bWS13V/HkENBeTX9NNXaFB 1C6A1VS22lC1GAQPrdN0MnBrDLzJ43zGBhDsYJk5dEzFr4LaTv6Wu0CtRhmzejdO vMq1yjFUR1p2ZtssKTT8XGx7BsrHebGIQquSIe3TVMxnQBuV+PB4gGpY1G9ZMSCt d9u0yWXSgU/BxGdtSUwhRhJ+AmoYnaNWVoMeeeJx6DvLhDBexARMeB/M90z/aVCG yzKAvVwpdC/XDu3xxWMCshVF58pRP1PlxBbIBMqc5DJ8n8+pQVjd -----END CERTIFICATE-----Generated at Tue Feb 10 00:13:26 2026 by rpki-client