This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/6b9ec0-9b10-4443-b5e6-c4fd53ebeb67/1/HpEQ35wYcpdgu7Xx3TWMgnDMgr4.roa File: HpEQ35wYcpdgu7Xx3TWMgnDMgr4.roa (raw, json) Hash identifier: R5O1iCublXAekieUKPQ0Y89Zyi72MgQUUVwuCgdlYZM= Subject key identifier: 1E:91:10:DF:9C:18:72:97:60:BB:B5:F1:DD:35:8C:82:70:CC:82:BE Certificate issuer: /CN=4b61cc8a365cc40382a31dad54f6cb723f58758a Certificate serial: 019B797E4AF3CC836DB3E5498B7092C14775 Authority key identifier: 4B:61:CC:8A:36:5C:C4:03:82:A3:1D:AD:54:F6:CB:72:3F:58:75:8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S2HMijZcxAOCox2tVPbLcj9YdYo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/6b9ec0-9b10-4443-b5e6-c4fd53ebeb67/1/HpEQ35wYcpdgu7Xx3TWMgnDMgr4.roa Signing time: Thu 01 Jan 2026 12:17:58 +0000 ROA not before: Thu 01 Jan 2026 12:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42339 IP address blocks: 46.28.224.0/21 maxlen: 21 77.72.120.0/21 maxlen: 21 185.22.204.0/22 maxlen: 22 2a00:60a0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/6b9ec0-9b10-4443-b5e6-c4fd53ebeb67/1/S2HMijZcxAOCox2tVPbLcj9YdYo.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/6b9ec0-9b10-4443-b5e6-c4fd53ebeb67/1/S2HMijZcxAOCox2tVPbLcj9YdYo.mft rsync://rpki.ripe.net/repository/DEFAULT/S2HMijZcxAOCox2tVPbLcj9YdYo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:4a:f3:cc:83:6d:b3:e5:49:8b:70:92:c1:47:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b61cc8a365cc40382a31dad54f6cb723f58758a Validity Not Before: Jan 1 12:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1e9110df9c18729760bbb5f1dd358c8270cc82be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f7:9f:22:b0:a1:2d:39:06:38:b6:0d:6b:7b: 01:56:bc:d4:a5:b0:6a:ca:63:bd:f1:f9:0e:f8:62: 78:66:3e:51:fc:d4:c0:d1:0d:fc:cf:7d:74:82:5c: 2a:87:d8:48:57:d3:09:19:ea:3a:0d:a4:16:6a:94: f5:27:8d:88:be:75:03:57:0d:06:d9:4d:55:8a:fb: 5c:63:8c:db:2c:28:2e:56:32:ef:13:ce:2e:09:71: 94:0c:71:3a:8a:08:94:52:d7:73:b6:49:04:71:4e: 23:c5:db:a2:e3:c9:cd:dc:c2:12:2a:41:66:1c:ac: cc:0f:25:7a:d4:e2:c4:45:a5:16:19:f2:e1:d7:71: b4:eb:51:d4:f5:c1:eb:fe:31:c0:07:38:15:06:e7: 06:96:2d:2d:03:7a:a4:78:2b:3f:b4:a3:89:6b:d6: f1:da:44:a2:6e:c7:52:96:ad:96:38:81:8f:0f:41: 1f:91:b9:cc:dd:24:b4:05:e4:b5:fa:19:23:35:40: 0a:34:fb:fc:b4:de:59:31:1f:67:ff:bc:81:3d:6d: c7:6b:d4:56:0a:9e:57:4e:aa:ba:08:07:8f:e3:a6: 65:bd:f0:7c:d1:43:e4:ae:37:19:97:6a:e1:c9:26: 12:3f:f5:cd:95:0d:93:69:40:20:41:35:d3:e4:73: 5c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:91:10:DF:9C:18:72:97:60:BB:B5:F1:DD:35:8C:82:70:CC:82:BE X509v3 Authority Key Identifier: keyid:4B:61:CC:8A:36:5C:C4:03:82:A3:1D:AD:54:F6:CB:72:3F:58:75:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2HMijZcxAOCox2tVPbLcj9YdYo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6b9ec0-9b10-4443-b5e6-c4fd53ebeb67/1/HpEQ35wYcpdgu7Xx3TWMgnDMgr4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6b9ec0-9b10-4443-b5e6-c4fd53ebeb67/1/S2HMijZcxAOCox2tVPbLcj9YdYo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.28.224.0/21 77.72.120.0/21 185.22.204.0/22 IPv6: 2a00:60a0::/32 Signature Algorithm: sha256WithRSAEncryption a0:71:91:6d:e2:53:f1:42:1a:21:d8:31:64:4d:b1:8d:f1:f4: 71:b7:ad:bf:46:be:e8:a9:f0:f4:ed:b8:9d:3b:0e:3c:4e:20: 44:28:be:d0:3e:6a:30:80:21:c9:1d:02:01:82:0c:7b:08:ae: 46:b6:09:b5:ac:b1:d3:fe:41:7c:58:bc:ea:ba:8d:29:a8:85: 5a:a1:69:c8:56:47:82:8d:d9:5f:4d:19:fd:92:16:2b:60:c2: 0c:62:ba:fc:17:81:74:84:19:19:32:55:36:17:ed:39:35:aa: 6a:bf:e6:9d:4e:eb:67:c3:4f:00:1e:ec:ec:9b:aa:4e:63:f6: 1e:5a:6d:03:1b:a0:3d:42:22:e7:59:a3:da:d4:67:3c:b5:e6: 66:8b:f0:0d:ff:08:21:bc:90:f5:22:07:88:f2:a1:3a:49:a6: 61:49:f6:fb:98:e9:39:2b:26:2b:0c:09:24:c6:28:f7:1e:21: 30:08:81:1c:48:21:cc:c2:60:e2:cb:33:ac:b2:e9:0c:61:f1: 77:d7:e3:9d:b0:72:d8:15:7e:c8:de:47:9d:21:49:30:45:71: 89:ef:0d:5a:8e:b8:e7:de:93:b9:86:91:3a:67:b4:f8:8d:3d: de:6c:48:56:e7:b6:f1:80:f9:c1:1e:9d:b3:c2:7c:cd:e1:a4: 6c:c0:c2:68 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt5fkrzzINts+VJi3CSwUd1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiNjFjYzhhMzY1Y2M0MDM4MmEzMWRhZDU0ZjZjYjcyM2Y1 ODc1OGEwHhcNMjYwMTAxMTIxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZTkxMTBkZjljMTg3Mjk3NjBiYmI1ZjFkZDM1OGM4MjcwY2M4MmJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfefIrChLTkGOLYNa3sBVrzUpbBq ymO98fkO+GJ4Zj5R/NTA0Q38z310glwqh9hIV9MJGeo6DaQWapT1J42IvnUDVw0G 2U1VivtcY4zbLCguVjLvE84uCXGUDHE6igiUUtdztkkEcU4jxdui48nN3MISKkFm HKzMDyV61OLERaUWGfLh13G061HU9cHr/jHABzgVBucGli0tA3qkeCs/tKOJa9bx 2kSibsdSlq2WOIGPD0EfkbnM3SS0BeS1+hkjNUAKNPv8tN5ZMR9n/7yBPW3Ha9RW Cp5XTqq6CAeP46ZlvfB80UPkrjcZl2rhySYSP/XNlQ2TaUAgQTXT5HNc+QIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFB6REN+cGHKXYLu18d01jIJwzIK+MB8GA1UdIwQY MBaAFEthzIo2XMQDgqMdrVT2y3I/WHWKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzJITWlqWmN4QU9Db3gydFZQYkxjajlZZFlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi82YjllYzAtOWIxMC00NDQzLWI1ZTYt YzRmZDUzZWJlYjY3LzEvSHBFUTM1d1ljcGRndTdYeDNUV01nbkRNZ3I0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi82YjllYzAtOWIxMC00NDQzLWI1ZTYtYzRmZDUzZWJlYjY3 LzEvUzJITWlqWmN4QU9Db3gydFZQYkxjajlZZFlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDLhzgAwQD TUh4AwQCuRbMMA0EAgACMAcDBQAqAGCgMA0GCSqGSIb3DQEBCwUAA4IBAQCgcZFt 4lPxQhoh2DFkTbGN8fRxt62/Rr7oqfD07bidOw48TiBEKL7QPmowgCHJHQIBggx7 CK5Gtgm1rLHT/kF8WLzquo0pqIVaoWnIVkeCjdlfTRn9khYrYMIMYrr8F4F0hBkZ MlU2F+05Napqv+adTutnw08AHuzsm6pOY/YeWm0DG6A9QiLnWaPa1Gc8teZmi/AN /wghvJD1IgeI8qE6SaZhSfb7mOk5KyYrDAkkxij3HiEwCIEcSCHMwmDiyzOssukM YfF31+OdsHLYFX7I3kedIUkwRXGJ7w1ajrjn3pO5hpE6Z7T4jT3ebEhW57bxgPnB Hp2zwnzN4aRswMJo -----END CERTIFICATE-----Generated at Mon Feb 9 22:22:37 2026 by rpki-client