This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/HughWH6Do-c-ENW-fx99oMeCUqI.roa File: HughWH6Do-c-ENW-fx99oMeCUqI.roa (raw, json) Hash identifier: 14sSq9ial8O4LgAIGDTRQt5ot4BvdM54tuDwJgopA0M= Subject key identifier: 1E:E8:21:58:7E:83:A3:E7:3E:10:D5:BE:7F:1F:7D:A0:C7:82:52:A2 Certificate issuer: /CN=81c00cc8c73d1141c89254ed556a8d012ca90226 Certificate serial: 019B7C7FB9830C5F1C17FF378AC8EC0FCE0B Authority key identifier: 81:C0:0C:C8:C7:3D:11:41:C8:92:54:ED:55:6A:8D:01:2C:A9:02:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcAMyMc9EUHIklTtVWqNASypAiY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/HughWH6Do-c-ENW-fx99oMeCUqI.roa Signing time: Fri 02 Jan 2026 02:18:23 +0000 ROA not before: Fri 02 Jan 2026 02:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41644 IP address blocks: 185.144.212.0/22 maxlen: 22 193.219.102.0/24 maxlen: 24 2001:3e40:1000::/36 maxlen: 36 2001:3e42:1000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.mft rsync://rpki.ripe.net/repository/DEFAULT/gcAMyMc9EUHIklTtVWqNASypAiY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:b9:83:0c:5f:1c:17:ff:37:8a:c8:ec:0f:ce:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81c00cc8c73d1141c89254ed556a8d012ca90226 Validity Not Before: Jan 2 02:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1ee821587e83a3e73e10d5be7f1f7da0c78252a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:27:18:11:f4:a0:be:72:1b:72:6e:6e:23:d8: cb:d2:54:17:85:42:53:66:8e:d0:e4:df:14:4a:99: be:09:63:70:ae:be:f4:c2:ac:2c:81:37:2a:33:a3: 82:4d:c6:21:e9:cc:10:96:b4:e9:5a:8c:51:17:7e: 87:fe:b0:77:be:c0:7f:3e:01:b5:18:f2:92:f5:60: 66:34:7a:ce:97:87:00:f1:b4:ed:74:b5:c1:38:12: d2:f5:27:04:86:6b:80:18:35:7b:a7:03:f5:73:6b: 4a:b1:28:78:c0:e6:dd:a2:36:44:b5:8a:4f:04:6f: 48:ac:ff:81:0e:4c:38:ce:42:c9:66:70:ba:c5:49: cf:20:8f:9a:7e:3e:77:1d:c7:32:54:b3:06:50:7f: 57:db:2a:b3:3c:5c:22:ce:94:ec:d2:0d:9a:17:5f: 99:68:3a:76:08:4e:06:8e:6d:ec:be:22:aa:b2:6c: e3:49:7b:f0:21:78:94:f7:19:8a:12:c9:ef:ca:70: 27:55:91:02:6d:1e:e4:41:c2:1e:70:98:79:11:38: d2:67:eb:a0:f1:7f:6f:80:28:83:16:1e:79:de:86: 68:5a:9b:14:1d:e5:7d:cd:33:4b:bd:ef:30:a5:f0: 5e:a6:2e:2a:02:ec:46:e1:61:78:ea:48:20:1f:2a: e8:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:E8:21:58:7E:83:A3:E7:3E:10:D5:BE:7F:1F:7D:A0:C7:82:52:A2 X509v3 Authority Key Identifier: keyid:81:C0:0C:C8:C7:3D:11:41:C8:92:54:ED:55:6A:8D:01:2C:A9:02:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcAMyMc9EUHIklTtVWqNASypAiY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/HughWH6Do-c-ENW-fx99oMeCUqI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.144.212.0/22 193.219.102.0/24 IPv6: 2001:3e40:1000::/36 2001:3e42:1000::/36 Signature Algorithm: sha256WithRSAEncryption 9d:04:0e:f0:71:b4:94:69:f4:61:51:a1:87:04:ed:85:be:53: 6e:3f:49:cb:81:07:04:65:3d:f9:35:49:07:ff:b8:f3:83:e0: d4:bd:db:ec:10:41:af:9e:e5:ec:c2:1d:a7:9f:f1:b9:94:76: de:a3:82:56:01:4a:be:2d:09:c3:c0:e4:0e:63:9c:8f:44:4d: aa:9a:04:ad:1e:dc:3e:96:17:04:2b:f1:77:72:2d:8e:68:bb: c1:ec:b9:f3:2d:d5:d0:76:40:95:09:8a:ce:45:ca:62:1e:d6: a9:ab:80:60:da:cc:6d:0a:51:71:72:99:c1:af:ae:62:fc:b0: 96:ff:5b:97:c8:ff:17:3e:26:61:a0:85:5d:18:a8:38:05:9a: 37:f3:9b:a3:25:e2:98:5b:66:c0:05:06:40:a4:34:92:02:a4: 41:59:93:4a:07:99:dc:76:4d:bc:5c:db:71:39:fc:7a:6a:9f: b0:2a:75:97:f9:4a:b7:b1:e0:4d:19:a5:34:e4:7b:1e:36:47: 7d:53:9c:a9:c5:cc:be:40:9c:a6:57:a5:82:af:46:18:e0:48: 95:ea:c7:8f:75:96:79:1e:e1:7b:ba:c2:7b:d0:09:7b:33:e8: 4a:de:a6:5f:97:9d:98:86:fd:62:29:2d:7b:77:d1:d9:2a:8c: 22:70:06:d7 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt8f7mDDF8cF/83isjsD84LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxYzAwY2M4YzczZDExNDFjODkyNTRlZDU1NmE4ZDAxMmNh OTAyMjYwHhcNMjYwMTAyMDIxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZWU4MjE1ODdlODNhM2U3M2UxMGQ1YmU3ZjFmN2RhMGM3ODI1MmEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ycYEfSgvnIbcm5uI9jL0lQXhUJT Zo7Q5N8USpm+CWNwrr70wqwsgTcqM6OCTcYh6cwQlrTpWoxRF36H/rB3vsB/PgG1 GPKS9WBmNHrOl4cA8bTtdLXBOBLS9ScEhmuAGDV7pwP1c2tKsSh4wObdojZEtYpP BG9IrP+BDkw4zkLJZnC6xUnPII+afj53HccyVLMGUH9X2yqzPFwizpTs0g2aF1+Z aDp2CE4Gjm3sviKqsmzjSXvwIXiU9xmKEsnvynAnVZECbR7kQcIecJh5ETjSZ+ug 8X9vgCiDFh553oZoWpsUHeV9zTNLve8wpfBepi4qAuxG4WF46kggHyrogwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFB7oIVh+g6PnPhDVvn8ffaDHglKiMB8GA1UdIwQY MBaAFIHADMjHPRFByJJU7VVqjQEsqQImMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2NBTXlNYzlFVUhJa2xUdFZXcU5BU3lwQWlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9iNGQ0ZWEtZjEwYi00YmNkLWEzZjUt OTA1Mjc2YzVjNDE0LzEvSHVnaFdINkRvLWMtRU5XLWZ4OTlvTWVDVXFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9iNGQ0ZWEtZjEwYi00YmNkLWEzZjUtOTA1Mjc2YzVjNDE0 LzEvZ2NBTXlNYzlFVUhJa2xUdFZXcU5BU3lwQWlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDASBAIAATAMAwQCuZDUAwQA wdtmMBYEAgACMBADBgQgAT5AEAMGBCABPkIQMA0GCSqGSIb3DQEBCwUAA4IBAQCd BA7wcbSUafRhUaGHBO2FvlNuP0nLgQcEZT35NUkH/7jzg+DUvdvsEEGvnuXswh2n n/G5lHbeo4JWAUq+LQnDwOQOY5yPRE2qmgStHtw+lhcEK/F3ci2OaLvB7LnzLdXQ dkCVCYrORcpiHtapq4Bg2sxtClFxcpnBr65i/LCW/1uXyP8XPiZhoIVdGKg4BZo3 85ujJeKYW2bABQZApDSSAqRBWZNKB5ncdk28XNtxOfx6ap+wKnWX+Uq3seBNGaU0 5HseNkd9U5ypxcy+QJymV6WCr0YY4EiV6sePdZZ5HuF7usJ70Al7M+hK3qZfl52Y hv1iKS17d9HZKowicAbX -----END CERTIFICATE-----Generated at Mon Feb 9 21:23:30 2026 by rpki-client