This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/rh400W3gPjj1_YFzBT71Qx7DChw.roa File: rh400W3gPjj1_YFzBT71Qx7DChw.roa (raw, json) Hash identifier: t+J0ubclPkVfiW0jaTws5AUpP+hTl6oPlajWNWwD//o= Subject key identifier: AE:1E:34:D1:6D:E0:3E:38:F5:FD:81:73:05:3E:F5:43:1E:C3:0A:1C Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Certificate serial: 019B797E3D068C356AED4935FF3998C2C45D Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/rh400W3gPjj1_YFzBT71Qx7DChw.roa Signing time: Thu 01 Jan 2026 12:17:54 +0000 ROA not before: Thu 01 Jan 2026 12:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209859 IP address blocks: 45.10.0.0/24 maxlen: 32 195.85.10.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 12:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:3d:06:8c:35:6a:ed:49:35:ff:39:98:c2:c4:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Validity Not Before: Jan 1 12:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ae1e34d16de03e38f5fd8173053ef5431ec30a1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:49:45:81:2e:1f:8c:be:6e:34:50:10:6d:8f: e8:49:2a:eb:ca:5f:cf:0f:08:4c:29:46:f8:89:54: c1:98:d2:40:0a:94:4f:4c:85:ef:6b:5c:27:12:1f: fb:cb:c7:67:3f:b8:b9:b8:e8:27:89:65:a8:0e:03: 6d:20:7c:85:bf:02:95:5f:a1:f5:d4:ff:cf:96:30: 33:01:27:fe:1b:cb:12:09:1a:3c:72:32:73:03:db: e2:1c:ba:ee:35:39:04:51:4e:bc:88:23:d5:6c:dc: 49:50:ef:5f:fe:2f:8a:95:a7:74:41:c1:20:90:8f: fa:e9:b2:bc:99:89:dd:53:45:a1:69:c0:fe:dd:3b: a5:9a:bd:5b:04:d6:c2:1c:60:9f:1c:8c:1f:13:af: 80:25:6d:a3:dc:52:e8:dc:23:87:85:e8:1e:a9:4e: e8:2f:54:cf:cf:b3:02:a7:2a:56:4e:7d:6d:83:81: ef:eb:67:da:f6:6e:e8:79:ad:df:39:cc:12:29:48: f3:ed:ea:aa:bb:ca:c0:c0:91:77:08:b6:ab:c7:67: 0e:d6:ac:54:55:08:10:57:3a:55:17:e3:38:20:43: 17:bc:8b:ea:53:50:ec:2b:ad:e7:ec:9d:3c:be:05: ce:fa:35:1a:b3:ce:03:0c:b6:40:f1:b6:4a:04:4b: aa:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:1E:34:D1:6D:E0:3E:38:F5:FD:81:73:05:3E:F5:43:1E:C3:0A:1C X509v3 Authority Key Identifier: keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/rh400W3gPjj1_YFzBT71Qx7DChw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.10.0.0/24 195.85.10.0/23 Signature Algorithm: sha256WithRSAEncryption 21:36:b2:a0:fc:c0:d8:86:00:45:57:ac:59:ee:a5:05:38:4b: c6:3d:87:a9:43:9e:75:38:b4:f5:48:7e:61:de:76:e4:b2:d4: 6f:5c:08:0b:7c:10:12:c2:82:5c:92:a5:07:55:1a:26:f7:b5: 53:aa:ab:26:29:42:ab:11:79:63:e7:3a:93:6d:f9:0c:35:4b: 42:5f:54:46:50:b4:01:c6:74:6e:2d:57:08:83:68:48:ec:ab: 40:da:94:ac:07:33:f7:ec:4f:3a:48:b7:30:33:1b:07:54:c4: 07:20:e6:19:a2:15:67:bf:d8:c8:06:9a:0f:33:ee:0d:0c:6a: 17:64:c2:58:4a:80:8d:ec:84:05:87:ac:5b:ac:77:ce:d0:98: 1c:1f:c2:db:26:5a:a1:05:ac:0f:7b:81:b9:1a:22:25:b7:19: 58:ae:c9:bc:be:20:44:e3:9b:73:92:96:65:f0:ad:17:cd:5c: f1:05:b2:a8:84:14:78:b3:7a:fe:63:65:76:cf:33:88:a6:ed: 03:b3:6a:aa:99:f1:9f:68:8e:60:5a:dd:d3:e6:2f:d7:5e:d6: 25:95:6c:73:bf:c2:69:44:51:d4:1c:9e:ad:d6:af:6d:65:84: a9:8e:14:39:3d:3a:59:e1:de:c0:9d:08:b6:66:a5:77:7f:9e: 37:39:ff:e5 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5fj0GjDVq7Uk1/zmYwsRdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi YTU3NDUwHhcNMjYwMTAxMTIxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZTFlMzRkMTZkZTAzZTM4ZjVmZDgxNzMwNTNlZjU0MzFlYzMwYTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUlFgS4fjL5uNFAQbY/oSSrryl/P DwhMKUb4iVTBmNJACpRPTIXva1wnEh/7y8dnP7i5uOgniWWoDgNtIHyFvwKVX6H1 1P/PljAzASf+G8sSCRo8cjJzA9viHLruNTkEUU68iCPVbNxJUO9f/i+Klad0QcEg kI/66bK8mYndU0WhacD+3Tulmr1bBNbCHGCfHIwfE6+AJW2j3FLo3COHhegeqU7o L1TPz7MCpypWTn1tg4Hv62fa9m7oea3fOcwSKUjz7eqqu8rAwJF3CLarx2cO1qxU VQgQVzpVF+M4IEMXvIvqU1DsK63n7J08vgXO+jUas84DDLZA8bZKBEuq8QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFK4eNNFt4D449f2BcwU+9UMewwocMB8GA1UdIwQY MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt ZmVhYzI2ZWFlY2MyLzEvcmg0MDBXM2dQamoxX1lGekJUNzFReDdEQ2h3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALQoAAwQB w1UKMA0GCSqGSIb3DQEBCwUAA4IBAQAhNrKg/MDYhgBFV6xZ7qUFOEvGPYepQ551 OLT1SH5h3nbkstRvXAgLfBASwoJckqUHVRom97VTqqsmKUKrEXlj5zqTbfkMNUtC X1RGULQBxnRuLVcIg2hI7KtA2pSsBzP37E86SLcwMxsHVMQHIOYZohVnv9jIBpoP M+4NDGoXZMJYSoCN7IQFh6xbrHfO0JgcH8LbJlqhBawPe4G5GiIltxlYrsm8viBE 45tzkpZl8K0XzVzxBbKohBR4s3r+Y2V2zzOIpu0Ds2qqmfGfaI5gWt3T5i/XXtYl lWxzv8JpRFHUHJ6t1q9tZYSpjhQ5PTpZ4d7AnQi2ZqV3f543Of/l -----END CERTIFICATE-----Generated at Mon Jan 19 20:27:38 2026 by rpki-client