This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/cHAy_4A-CMasQbGFupRjCXJRveA.roa File: cHAy_4A-CMasQbGFupRjCXJRveA.roa (raw, json) Hash identifier: Z5sX4UD5pwFqxzXI/4DJgcahhJVYCnCAo+Vk4S1WDik= Subject key identifier: 70:70:32:FF:80:3E:08:C6:AC:41:B1:85:BA:94:63:09:72:51:BD:E0 Certificate issuer: /CN=9d989b3998e19fc00f8670cf6c9d7401715cf34f Certificate serial: 019B7910A560801EB62A4C0C46224433C29C Authority key identifier: 9D:98:9B:39:98:E1:9F:C0:0F:86:70:CF:6C:9D:74:01:71:5C:F3:4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/cHAy_4A-CMasQbGFupRjCXJRveA.roa Signing time: Thu 01 Jan 2026 10:18:12 +0000 ROA not before: Thu 01 Jan 2026 10:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209616 IP address blocks: 46.231.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:a5:60:80:1e:b6:2a:4c:0c:46:22:44:33:c2:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d989b3998e19fc00f8670cf6c9d7401715cf34f Validity Not Before: Jan 1 10:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=707032ff803e08c6ac41b185ba9463097251bde0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:67:c4:3d:2d:18:67:33:ac:2e:c4:72:ae:d3: b6:aa:27:7a:09:bd:5e:d1:00:11:fb:75:7d:5f:96: 07:e4:c1:15:bd:4f:f1:e0:c2:77:65:25:d9:cf:ea: 3f:21:6f:35:af:2f:30:6d:f4:60:64:b1:4e:d1:a3: 28:f8:b0:92:49:59:8f:07:69:d0:94:b3:a3:84:aa: c3:ef:6f:2e:36:b8:59:19:fc:bf:b0:e4:91:09:12: a7:86:1e:ed:e2:af:38:44:32:6c:fd:42:e3:ba:3c: f5:2f:60:32:1e:2d:76:9c:30:a2:a2:e6:41:9e:dc: 1d:12:0c:c2:9f:49:fc:7e:29:2c:72:a8:f3:03:4f: e7:93:98:c4:c6:a3:6d:8a:30:60:46:8e:e4:31:d0: d9:84:5e:80:d3:17:e0:0c:11:0a:44:5f:c9:a0:23: 4c:6f:41:3e:51:b1:03:dc:98:81:cb:bb:5d:a2:e3: 3a:e3:57:75:b3:64:7b:30:7d:52:c8:b2:8c:d6:f2: 5b:44:33:60:01:02:f7:c3:f5:5d:dd:9e:ce:00:5a: 45:39:c5:a2:88:15:87:c7:bc:4c:77:8e:ce:1e:4a: ca:d5:92:87:de:c3:16:89:40:5c:e2:f6:03:b6:5f: ed:0c:2a:44:4b:87:ba:02:03:da:06:82:00:f5:19: 3b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:70:32:FF:80:3E:08:C6:AC:41:B1:85:BA:94:63:09:72:51:BD:E0 X509v3 Authority Key Identifier: keyid:9D:98:9B:39:98:E1:9F:C0:0F:86:70:CF:6C:9D:74:01:71:5C:F3:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/cHAy_4A-CMasQbGFupRjCXJRveA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.231.225.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:3a:1a:55:0d:61:d9:a7:aa:9d:86:34:f5:48:b3:f4:e1:45: e2:92:29:43:4f:bf:2c:eb:89:9e:31:16:e8:d8:21:dc:24:c9: cd:85:7f:05:2f:0f:d3:04:e4:3a:66:0b:f4:35:59:a7:c5:c1: 17:ad:c3:0f:17:04:9a:91:7f:39:d5:fb:74:3e:21:f8:14:a6: 8b:a3:a2:51:05:28:36:9e:ac:b0:cd:f2:f5:7e:fd:ef:55:2a: 66:6e:2f:a9:6d:7a:a4:3d:63:90:46:15:d6:f1:1d:13:6a:e1: 17:7f:19:c5:cd:00:42:55:e2:06:96:11:01:b9:d0:82:db:53: 8c:58:23:74:f5:11:77:6d:22:af:00:5a:22:e5:52:2c:01:30: 96:80:7a:8f:93:16:59:cf:28:54:b9:10:94:93:e7:02:b7:c0: ae:c7:88:19:14:75:d6:9c:11:0e:7b:7f:91:29:18:25:1e:a7: fb:00:63:58:3f:68:48:30:f1:1e:06:ff:a4:a6:d9:51:5a:b0: d1:54:85:d3:04:a5:6c:a7:8a:38:a1:30:04:4d:cd:da:76:d4: ae:37:9e:46:ce:a4:08:f9:76:79:b8:f4:74:11:ae:cf:52:16: 79:51:3a:1c:3d:d6:e4:51:56:b0:93:0c:73:0c:98:ec:d1:71: f8:c9:57:a8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EKVggB62KkwMRiJEM8KcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkOTg5YjM5OThlMTlmYzAwZjg2NzBjZjZjOWQ3NDAxNzE1 Y2YzNGYwHhcNMjYwMTAxMTAxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDcwMzJmZjgwM2UwOGM2YWM0MWIxODViYTk0NjMwOTcyNTFiZGUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GfEPS0YZzOsLsRyrtO2qid6Cb1e 0QAR+3V9X5YH5MEVvU/x4MJ3ZSXZz+o/IW81ry8wbfRgZLFO0aMo+LCSSVmPB2nQ lLOjhKrD728uNrhZGfy/sOSRCRKnhh7t4q84RDJs/ULjujz1L2AyHi12nDCiouZB ntwdEgzCn0n8fikscqjzA0/nk5jExqNtijBgRo7kMdDZhF6A0xfgDBEKRF/JoCNM b0E+UbED3JiBy7tdouM641d1s2R7MH1SyLKM1vJbRDNgAQL3w/Vd3Z7OAFpFOcWi iBWHx7xMd47OHkrK1ZKH3sMWiUBc4vYDtl/tDCpES4e6AgPaBoIA9Rk7zQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHBwMv+APgjGrEGxhbqUYwlyUb3gMB8GA1UdIwQY MBaAFJ2YmzmY4Z/AD4Zwz2yddAFxXPNPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblppYk9aamhuOEFQaG5EUGJKMTBBWEZjODA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC84YzVmNWEtODA0Yi00ZGY2LTgyN2It YzdjY2Q3OTQzMTA2LzEvY0hBeV80QS1DTWFzUWJHRnVwUmpDWEpSdmVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC84YzVmNWEtODA0Yi00ZGY2LTgyN2ItYzdjY2Q3OTQzMTA2 LzEvblppYk9aamhuOEFQaG5EUGJKMTBBWEZjODA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALufhMA0G CSqGSIb3DQEBCwUAA4IBAQAbOhpVDWHZp6qdhjT1SLP04UXikilDT78s64meMRbo 2CHcJMnNhX8FLw/TBOQ6Zgv0NVmnxcEXrcMPFwSakX851ft0PiH4FKaLo6JRBSg2 nqywzfL1fv3vVSpmbi+pbXqkPWOQRhXW8R0TauEXfxnFzQBCVeIGlhEBudCC21OM WCN09RF3bSKvAFoi5VIsATCWgHqPkxZZzyhUuRCUk+cCt8Cux4gZFHXWnBEOe3+R KRglHqf7AGNYP2hIMPEeBv+kptlRWrDRVIXTBKVsp4o4oTAETc3adtSuN55GzqQI +XZ5uPR0Ea7PUhZ5UTocPdbkUVawkwxzDJjs0XH4yVeo -----END CERTIFICATE-----Generated at Mon Feb 9 23:56:01 2026 by rpki-client