This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/DHHjGMt7-3BtKh8jbUtHgjtd7Zk.roa File: DHHjGMt7-3BtKh8jbUtHgjtd7Zk.roa (raw, json) Hash identifier: AGrA4B/DyddJdpJQ+MaOxYEeNzNiJWqbWYvLiR+2oDU= Subject key identifier: 0C:71:E3:18:CB:7B:FB:70:6D:2A:1F:23:6D:4B:47:82:3B:5D:ED:99 Certificate issuer: /CN=79ad074aface91ac3fdd0a3ebd60fadbc16de4fc Certificate serial: 019B79ED6147C35D91F340D5E86BB6E5D284 Authority key identifier: 79:AD:07:4A:FA:CE:91:AC:3F:DD:0A:3E:BD:60:FA:DB:C1:6D:E4:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/DHHjGMt7-3BtKh8jbUtHgjtd7Zk.roa Signing time: Thu 01 Jan 2026 14:19:18 +0000 ROA not before: Thu 01 Jan 2026 14:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213027 IP address blocks: 45.92.48.0/22 maxlen: 22 45.92.48.0/24 maxlen: 24 45.92.49.0/24 maxlen: 24 45.92.50.0/24 maxlen: 24 45.92.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.mft rsync://rpki.ripe.net/repository/DEFAULT/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:61:47:c3:5d:91:f3:40:d5:e8:6b:b6:e5:d2:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79ad074aface91ac3fdd0a3ebd60fadbc16de4fc Validity Not Before: Jan 1 14:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0c71e318cb7bfb706d2a1f236d4b47823b5ded99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:ba:18:3e:a9:8d:23:01:c0:15:22:05:51:97: 8e:25:86:98:fd:24:a7:a2:22:4e:c3:64:56:fd:a4: fa:76:c1:69:93:77:b8:0d:e1:a4:9f:39:96:73:ba: b2:46:7a:41:7c:8e:7e:28:c8:2f:bc:d1:b4:49:84: c7:11:fa:36:a8:40:40:c1:0b:09:0e:b2:6d:eb:75: e8:77:0d:99:e2:f5:46:d1:e6:5d:77:a4:41:24:19: ad:c3:74:32:82:91:1d:f4:dd:31:30:75:34:ab:75: c4:ec:ad:46:0b:45:09:ad:50:9c:1d:26:12:45:49: 26:a4:57:a5:a4:70:99:d6:a3:30:3b:dd:73:e2:dc: 34:8f:97:5f:03:23:4e:83:8f:7d:3c:d1:30:af:a4: b6:44:ed:e8:72:d0:24:ed:87:c4:a6:a5:6e:b4:10: cf:05:7d:53:21:1a:2e:64:1d:84:6a:7b:3b:81:6a: 89:8e:89:90:4a:0b:f6:d1:15:0e:3d:a8:84:fd:06: 68:48:63:af:f7:5b:59:42:24:6f:c0:ae:ff:3d:b1: 26:75:8d:68:13:41:28:b9:19:54:83:6b:ea:c3:39: bd:63:91:9b:fe:42:20:f1:8c:bf:fb:51:13:0a:f9: 5f:1a:be:cd:1f:27:af:c7:85:44:89:fa:d1:6e:2b: f1:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:71:E3:18:CB:7B:FB:70:6D:2A:1F:23:6D:4B:47:82:3B:5D:ED:99 X509v3 Authority Key Identifier: keyid:79:AD:07:4A:FA:CE:91:AC:3F:DD:0A:3E:BD:60:FA:DB:C1:6D:E4:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/DHHjGMt7-3BtKh8jbUtHgjtd7Zk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.92.48.0/22 Signature Algorithm: sha256WithRSAEncryption 8c:36:a4:18:0c:cf:4c:5d:07:a0:71:7a:19:cf:ff:ee:3e:fb: 8b:9c:a8:d4:fa:22:99:67:ef:01:b8:8d:7e:9e:2b:ad:58:79: ce:78:3a:82:db:47:70:ab:36:ba:c7:0c:3c:5a:40:69:ae:80: 00:aa:28:75:70:48:69:79:38:ca:2b:69:2c:7d:2b:25:dd:33: 0a:b8:b3:fc:e9:8f:d3:25:5c:67:b3:d6:67:d5:47:2b:cb:8c: 8f:38:8e:29:37:82:7a:ae:f3:60:75:a0:10:f6:61:40:59:ec: 29:b1:87:fe:26:6e:a9:5b:c0:71:51:4f:cc:7d:a7:76:18:f0: 0d:a7:b6:77:25:15:c1:68:0b:b2:23:2a:36:b5:5e:bf:0c:42: e5:af:9b:53:fd:a7:69:f8:de:53:d0:2c:80:f0:f1:33:60:d7: be:05:5f:17:46:0a:a0:ba:4f:d5:9f:0c:af:e4:55:e0:48:89: 41:c9:78:79:7b:4a:37:2c:f9:fc:be:d4:14:81:21:b8:16:88: 58:5b:58:f2:b0:ca:4b:73:0b:2c:e8:70:94:4f:bf:5b:1a:81: 49:e2:4c:e7:f7:c9:0e:26:af:25:6c:83:b4:6e:56:ac:04:9f: 16:ae:3b:17:49:68:d7:9f:ee:9a:d3:64:96:da:82:0f:bc:36: db:ba:8f:d6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57WFHw12R80DV6Gu25dKEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5YWQwNzRhZmFjZTkxYWMzZmRkMGEzZWJkNjBmYWRiYzE2 ZGU0ZmMwHhcNMjYwMTAxMTQxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzcxZTMxOGNiN2JmYjcwNmQyYTFmMjM2ZDRiNDc4MjNiNWRlZDk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9roYPqmNIwHAFSIFUZeOJYaY/SSn oiJOw2RW/aT6dsFpk3e4DeGknzmWc7qyRnpBfI5+KMgvvNG0SYTHEfo2qEBAwQsJ DrJt63Xodw2Z4vVG0eZdd6RBJBmtw3QygpEd9N0xMHU0q3XE7K1GC0UJrVCcHSYS RUkmpFelpHCZ1qMwO91z4tw0j5dfAyNOg499PNEwr6S2RO3octAk7YfEpqVutBDP BX1TIRouZB2Eans7gWqJjomQSgv20RUOPaiE/QZoSGOv91tZQiRvwK7/PbEmdY1o E0EouRlUg2vqwzm9Y5Gb/kIg8Yy/+1ETCvlfGr7NHyevx4VEifrRbivxrwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAxx4xjLe/twbSofI21LR4I7Xe2ZMB8GA1UdIwQY MBaAFHmtB0r6zpGsP90KPr1g+tvBbeT8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWEwSFN2ck9rYXdfM1FvLXZXRDYyOEZ0NVB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8xZjZkZTgtOWUyOS00Y2IzLWFhNGEt MGEyZTkzMzZkNmQwLzEvREhIakdNdDctM0J0S2g4amJVdEhnanRkN1prLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi8xZjZkZTgtOWUyOS00Y2IzLWFhNGEtMGEyZTkzMzZkNmQw LzEvZWEwSFN2ck9rYXdfM1FvLXZXRDYyOEZ0NVB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVwwMA0G CSqGSIb3DQEBCwUAA4IBAQCMNqQYDM9MXQegcXoZz//uPvuLnKjU+iKZZ+8BuI1+ niutWHnOeDqC20dwqza6xww8WkBproAAqih1cEhpeTjKK2ksfSsl3TMKuLP86Y/T JVxns9Zn1Ucry4yPOI4pN4J6rvNgdaAQ9mFAWewpsYf+Jm6pW8BxUU/Mfad2GPAN p7Z3JRXBaAuyIyo2tV6/DELlr5tT/adp+N5T0CyA8PEzYNe+BV8XRgqguk/Vnwyv 5FXgSIlByXh5e0o3LPn8vtQUgSG4FohYW1jysMpLcwss6HCUT79bGoFJ4kzn98kO Jq8lbIO0blasBJ8WrjsXSWjXn+6a02SW2oIPvDbbuo/W -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:57 2026 by rpki-client