This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/51ba0b-69c6-4ed9-82c7-429307f24320/1/houJ7vIRZ9HauJFjo7vep23v1l4.roa File: houJ7vIRZ9HauJFjo7vep23v1l4.roa (raw, json) Hash identifier: Dds8IwMmrP0DFqcL4LXj6TnQyrrZYIsZqDL+yVjeTCE= Subject key identifier: 86:8B:89:EE:F2:11:67:D1:DA:B8:91:63:A3:BB:DE:A7:6D:EF:D6:5E Certificate issuer: /CN=78a4c4eaef6fe1705698b00e61915677a2fb8d5b Certificate serial: 019B76EAE2DF4C4C4C0F84C90D736E73DC03 Authority key identifier: 78:A4:C4:EA:EF:6F:E1:70:56:98:B0:0E:61:91:56:77:A2:FB:8D:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eKTE6u9v4XBWmLAOYZFWd6L7jVs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/51ba0b-69c6-4ed9-82c7-429307f24320/1/houJ7vIRZ9HauJFjo7vep23v1l4.roa Signing time: Thu 01 Jan 2026 00:17:43 +0000 ROA not before: Thu 01 Jan 2026 00:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51978 IP address blocks: 46.30.112.0/21 maxlen: 21 46.35.32.0/20 maxlen: 20 64.190.238.0/23 maxlen: 23 82.180.64.0/18 maxlen: 18 130.193.112.0/21 maxlen: 21 185.8.136.0/22 maxlen: 22 194.182.192.0/19 maxlen: 19 194.182.200.0/22 maxlen: 22 2a03:b580::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/51ba0b-69c6-4ed9-82c7-429307f24320/1/eKTE6u9v4XBWmLAOYZFWd6L7jVs.crl rsync://rpki.ripe.net/repository/DEFAULT/db/51ba0b-69c6-4ed9-82c7-429307f24320/1/eKTE6u9v4XBWmLAOYZFWd6L7jVs.mft rsync://rpki.ripe.net/repository/DEFAULT/eKTE6u9v4XBWmLAOYZFWd6L7jVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:e2:df:4c:4c:4c:0f:84:c9:0d:73:6e:73:dc:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78a4c4eaef6fe1705698b00e61915677a2fb8d5b Validity Not Before: Jan 1 00:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=868b89eef21167d1dab89163a3bbdea76defd65e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:bb:de:1c:9a:7f:cd:5b:18:88:42:59:7d:9d: 7c:04:4a:d5:de:e1:64:1b:3c:6d:03:34:c2:83:c8: d9:d2:72:04:c6:5a:67:5d:bb:fc:a0:ce:c2:f6:6d: fe:cc:ed:2c:b8:ce:1b:c7:fc:45:3f:eb:44:99:91: ac:1d:02:15:89:9c:28:69:ae:0d:32:0e:ac:35:d9: 06:84:1a:73:01:9e:4e:0f:2d:3b:26:fc:b6:f1:fd: ff:8c:e6:5d:16:7d:3f:6b:9c:79:0c:37:72:a1:a8: 43:2b:54:97:2c:2c:96:c8:1d:80:15:75:87:47:73: 52:fd:ff:22:46:98:f6:4b:e5:33:10:75:5f:07:04: 96:a5:3a:ce:84:c4:1b:13:aa:c1:4d:fc:7d:e4:6f: af:ed:78:29:92:a4:53:da:c7:97:f0:d0:13:53:43: 44:ab:08:8f:87:6e:55:51:cc:2b:08:49:ab:9c:d9: a3:bb:3d:72:89:e6:97:c9:d0:72:a6:a6:0a:f2:40: 5f:76:23:b8:27:90:cb:8e:b0:ed:1f:e6:62:5e:53: 2e:03:7e:36:8a:fe:d6:56:27:3d:4a:d2:26:dc:63: c3:77:32:c3:49:95:75:d5:45:ff:f9:0d:be:1c:3e: a8:af:97:a5:48:07:34:46:14:40:8f:5e:71:45:6c: 7f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:8B:89:EE:F2:11:67:D1:DA:B8:91:63:A3:BB:DE:A7:6D:EF:D6:5E X509v3 Authority Key Identifier: keyid:78:A4:C4:EA:EF:6F:E1:70:56:98:B0:0E:61:91:56:77:A2:FB:8D:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eKTE6u9v4XBWmLAOYZFWd6L7jVs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/51ba0b-69c6-4ed9-82c7-429307f24320/1/houJ7vIRZ9HauJFjo7vep23v1l4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/51ba0b-69c6-4ed9-82c7-429307f24320/1/eKTE6u9v4XBWmLAOYZFWd6L7jVs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.30.112.0/21 46.35.32.0/20 64.190.238.0/23 82.180.64.0/18 130.193.112.0/21 185.8.136.0/22 194.182.192.0/19 IPv6: 2a03:b580::/32 Signature Algorithm: sha256WithRSAEncryption 59:cb:49:0d:0a:b8:5b:31:3c:99:7b:2b:4c:4c:dd:4f:3e:d7: 8d:7e:6f:92:72:b1:1e:b5:fd:78:c3:7d:6f:5e:89:84:cc:32: 4b:31:d4:9d:fb:2f:a6:be:6e:9e:a5:d3:46:1e:d9:89:3d:ad: f2:9d:21:c6:48:72:8c:8a:e4:73:d4:22:8f:b4:08:47:ac:df: df:c0:cf:14:4d:4f:38:26:2a:84:cf:ca:17:ad:f5:fe:6f:b8: b6:b1:f8:0b:c4:6f:0a:b7:0b:0d:5f:33:da:7d:57:02:b9:cb: 79:f9:9c:7a:e6:d5:6f:9a:5f:04:9d:a0:df:5c:6e:51:6a:40: 7a:3a:a0:d2:84:1d:82:38:cd:11:b3:59:99:9d:ad:98:7f:00: a8:0c:8a:c0:de:c2:ca:bf:24:8f:ef:61:8b:9c:47:33:c8:7e: e1:87:5f:9f:58:71:c1:6d:67:7f:74:9a:1f:fd:3a:d2:ec:69: 8b:da:71:e8:13:2e:c9:c4:a8:ed:7e:a2:31:5d:52:bc:08:fa: 5e:b6:34:ea:1e:00:eb:f3:5a:38:be:46:6f:d0:20:01:e2:36: 6f:5e:f4:76:02:58:ac:79:80:0c:a8:d9:1d:e5:6d:3d:cf:d0: 5b:eb:39:30:1c:28:38:ac:dc:64:c4:29:5c:58:16:44:ee:4f: 8e:8b:7f:90 -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgISAZt26uLfTExMD4TJDXNuc9wDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4YTRjNGVhZWY2ZmUxNzA1Njk4YjAwZTYxOTE1Njc3YTJm YjhkNWIwHhcNMjYwMTAxMDAxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NjhiODllZWYyMTE2N2QxZGFiODkxNjNhM2JiZGVhNzZkZWZkNjVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbveHJp/zVsYiEJZfZ18BErV3uFk GzxtAzTCg8jZ0nIExlpnXbv8oM7C9m3+zO0suM4bx/xFP+tEmZGsHQIViZwoaa4N Mg6sNdkGhBpzAZ5ODy07Jvy28f3/jOZdFn0/a5x5DDdyoahDK1SXLCyWyB2AFXWH R3NS/f8iRpj2S+UzEHVfBwSWpTrOhMQbE6rBTfx95G+v7XgpkqRT2seX8NATU0NE qwiPh25VUcwrCEmrnNmjuz1yieaXydBypqYK8kBfdiO4J5DLjrDtH+ZiXlMuA342 iv7WVic9StIm3GPDdzLDSZV11UX/+Q2+HD6or5elSAc0RhRAj15xRWx/WwIDAQAB o4ICPDCCAjgwHQYDVR0OBBYEFIaLie7yEWfR2riRY6O73qdt79ZeMB8GA1UdIwQY MBaAFHikxOrvb+FwVpiwDmGRVnei+41bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUtURTZ1OXY0WEJXbUxBT1laRldkNkw3alZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi81MWJhMGItNjljNi00ZWQ5LTgyYzct NDI5MzA3ZjI0MzIwLzEvaG91Sjd2SVJaOUhhdUpGam83dmVwMjN2MWw0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi81MWJhMGItNjljNi00ZWQ5LTgyYzctNDI5MzA3ZjI0MzIw LzEvZUtURTZ1OXY0WEJXbUxBT1laRldkNkw3alZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAwBAIAATAqAwQDLh5wAwQE LiMgAwQBQL7uAwQGUrRAAwQDgsFwAwQCuQiIAwQFwrbAMA0EAgACMAcDBQAqA7WA MA0GCSqGSIb3DQEBCwUAA4IBAQBZy0kNCrhbMTyZeytMTN1PPteNfm+ScrEetf14 w31vXomEzDJLMdSd+y+mvm6epdNGHtmJPa3ynSHGSHKMiuRz1CKPtAhHrN/fwM8U TU84JiqEz8oXrfX+b7i2sfgLxG8KtwsNXzPafVcCuct5+Zx65tVvml8EnaDfXG5R akB6OqDShB2COM0Rs1mZna2YfwCoDIrA3sLKvySP72GLnEczyH7hh1+fWHHBbWd/ dJof/TrS7GmL2nHoEy7JxKjtfqIxXVK8CPpetjTqHgDr81o4vkZv0CAB4jZvXvR2 AliseYAMqNkd5W09z9Bb6zkwHCg4rNxkxClcWBZE7k+Oi3+Q -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:19 2026 by rpki-client