This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/H8kw6Sg_EEFlV4WiqGHQYPzK8jI.roa File: H8kw6Sg_EEFlV4WiqGHQYPzK8jI.roa (raw, json) Hash identifier: vA9KgFsuau17xYabkQq0t4vvihSWAC35OyURHBxCae8= Subject key identifier: 1F:C9:30:E9:28:3F:10:41:65:57:85:A2:A8:61:D0:60:FC:CA:F2:32 Certificate issuer: /CN=2b928097dc9f89a7a3a8a296a78a4f9d0cbce17f Certificate serial: 019B7C8003E43825775DD01B1ED8E8591F88 Authority key identifier: 2B:92:80:97:DC:9F:89:A7:A3:A8:A2:96:A7:8A:4F:9D:0C:BC:E1:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/H8kw6Sg_EEFlV4WiqGHQYPzK8jI.roa Signing time: Fri 02 Jan 2026 02:18:42 +0000 ROA not before: Fri 02 Jan 2026 02:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 46.243.16.0/24 maxlen: 24 46.243.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 17:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:03:e4:38:25:77:5d:d0:1b:1e:d8:e8:59:1f:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b928097dc9f89a7a3a8a296a78a4f9d0cbce17f Validity Not Before: Jan 2 02:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1fc930e9283f1041655785a2a861d060fccaf232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8e:24:4f:b4:60:27:2b:f3:7d:05:62:97:14: ba:59:e9:9b:dd:8f:10:6f:12:9e:6a:a3:2b:aa:d0: 6d:69:64:7b:e9:76:b5:f6:16:76:1c:68:95:6a:63: e8:63:98:f7:eb:d2:2c:ce:11:49:4e:8c:6c:92:4f: f8:ea:76:97:bc:10:2c:25:31:88:bb:93:0f:ac:b6: f4:c5:71:88:a1:b6:63:f4:e3:35:92:a1:44:6c:6a: aa:48:35:5d:66:4a:3b:a4:d4:d3:55:3b:1d:1d:41: eb:72:76:7e:bb:b6:45:10:19:06:6c:f1:da:8a:ea: 5e:08:66:70:66:7c:01:73:7d:c1:d7:17:56:0e:b7: 00:b4:fb:60:d7:a9:c0:62:8f:97:08:62:e5:0a:b9: bc:fd:9a:f4:38:9e:06:59:8f:1b:ab:3d:4e:0d:cf: 3c:5d:d8:f4:a9:ba:20:cf:3e:d8:92:d6:bc:db:85: a5:7f:26:f1:5d:ef:75:9e:26:96:67:c1:64:9c:ad: 68:81:ca:64:e5:4c:61:63:54:14:dd:35:95:17:f0: c0:1c:40:11:5d:80:b1:9f:71:a4:11:9e:6d:07:91: 3c:7a:87:82:d2:5a:91:fe:29:c5:2d:fa:c9:88:71: 23:9c:6c:21:0a:1c:b3:bd:34:4a:d2:f4:64:c8:e6: ec:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:C9:30:E9:28:3F:10:41:65:57:85:A2:A8:61:D0:60:FC:CA:F2:32 X509v3 Authority Key Identifier: keyid:2B:92:80:97:DC:9F:89:A7:A3:A8:A2:96:A7:8A:4F:9D:0C:BC:E1:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/H8kw6Sg_EEFlV4WiqGHQYPzK8jI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.243.16.0/24 46.243.20.0/24 Signature Algorithm: sha256WithRSAEncryption b4:5d:7d:f1:15:af:4d:a2:81:e3:11:32:82:ba:b7:c7:36:0f: fd:04:d3:60:63:96:79:6f:e1:c1:db:58:c2:ff:02:d9:c5:ac: 3f:eb:6e:8a:06:0e:94:94:1d:50:ef:1b:ce:57:29:46:a6:7b: 1e:9f:51:2a:f3:a8:17:67:be:89:74:47:a6:2f:f7:de:be:a1: ac:ac:e4:ce:1f:d8:c8:2c:f4:1d:7a:d7:87:8f:a9:54:75:f2: e6:b5:b6:b5:ac:22:0d:25:fc:52:7f:ad:6c:64:bb:a7:fb:92: 97:f7:29:16:c6:26:89:6e:3f:1e:39:3b:d5:42:25:b5:58:17: 1a:71:97:97:cb:fb:95:c3:41:04:1e:4a:15:f3:d3:9d:75:db: 24:64:92:66:7d:2c:88:dc:ea:65:a2:a7:67:8a:52:99:60:1e: 17:d0:92:e3:4c:97:0d:16:76:32:c7:00:58:e9:82:08:d9:31: a6:55:a6:a2:78:9e:96:55:88:b1:82:73:c8:d6:da:58:1f:cd: 2f:f1:61:78:a9:20:07:fd:17:6d:cc:31:62:54:2f:bb:73:3d: 10:e0:96:b6:94:a9:84:25:85:90:2c:3e:c3:35:98:c8:68:45: ce:b3:cb:21:27:99:bb:1e:11:5f:bc:ba:3a:fd:04:0d:97:3d: 38:0e:d3:6d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8gAPkOCV3XdAbHtjoWR+IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiOTI4MDk3ZGM5Zjg5YTdhM2E4YTI5NmE3OGE0ZjlkMGNi Y2UxN2YwHhcNMjYwMTAyMDIxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZmM5MzBlOTI4M2YxMDQxNjU1Nzg1YTJhODYxZDA2MGZjY2FmMjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAro4kT7RgJyvzfQVilxS6Wemb3Y8Q bxKeaqMrqtBtaWR76Xa19hZ2HGiVamPoY5j369IszhFJToxskk/46naXvBAsJTGI u5MPrLb0xXGIobZj9OM1kqFEbGqqSDVdZko7pNTTVTsdHUHrcnZ+u7ZFEBkGbPHa iupeCGZwZnwBc33B1xdWDrcAtPtg16nAYo+XCGLlCrm8/Zr0OJ4GWY8bqz1ODc88 Xdj0qbogzz7Ykta824WlfybxXe91niaWZ8FknK1ogcpk5UxhY1QU3TWVF/DAHEAR XYCxn3GkEZ5tB5E8eoeC0lqR/inFLfrJiHEjnGwhChyzvTRK0vRkyObsYwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFB/JMOkoPxBBZVeFoqhh0GD8yvIyMB8GA1UdIwQY MBaAFCuSgJfcn4mno6iilqeKT50MvOF/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzVLQWw5eWZpYWVqcUtLV3A0cFBuUXk4NFg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9hNzM0YTQtMTQzZC00NjFkLWJmZDYt NDVjYWE2ZWY2NzAwLzEvSDhrdzZTZ19FRUZsVjRXaXFHSFFZUHpLOGpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9hNzM0YTQtMTQzZC00NjFkLWJmZDYtNDVjYWE2ZWY2NzAw LzEvSzVLQWw5eWZpYWVqcUtLV3A0cFBuUXk4NFg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALvMQAwQA LvMUMA0GCSqGSIb3DQEBCwUAA4IBAQC0XX3xFa9NooHjETKCurfHNg/9BNNgY5Z5 b+HB21jC/wLZxaw/626KBg6UlB1Q7xvOVylGpnsen1Eq86gXZ76JdEemL/fevqGs rOTOH9jILPQdeteHj6lUdfLmtba1rCINJfxSf61sZLun+5KX9ykWxiaJbj8eOTvV QiW1WBcacZeXy/uVw0EEHkoV89OdddskZJJmfSyI3OploqdnilKZYB4X0JLjTJcN FnYyxwBY6YII2TGmVaaieJ6WVYixgnPI1tpYH80v8WF4qSAH/RdtzDFiVC+7cz0Q 4Ja2lKmEJYWQLD7DNZjIaEXOs8shJ5m7HhFfvLo6/QQNlz04DtNt -----END CERTIFICATE-----Generated at Tue Jan 20 01:22:01 2026 by rpki-client