This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/hnX3GEWSMirkXg0F3Fz0pWka2cc.roa File: hnX3GEWSMirkXg0F3Fz0pWka2cc.roa (raw, json) Hash identifier: WY0W829d26Ieh54IESsnjlETa41xER8gZPgemFOcDZk= Subject key identifier: 86:75:F7:18:45:92:32:2A:E4:5E:0D:05:DC:5C:F4:A5:69:1A:D9:C7 Certificate issuer: /CN=815780532ed29a3f80e7ba414efcb379d9ec97c9 Certificate serial: 019B7BA5365B6AD73DA618D455AAA661C447 Authority key identifier: 81:57:80:53:2E:D2:9A:3F:80:E7:BA:41:4E:FC:B3:79:D9:EC:97:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/hnX3GEWSMirkXg0F3Fz0pWka2cc.roa Signing time: Thu 01 Jan 2026 22:19:43 +0000 ROA not before: Thu 01 Jan 2026 22:19:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24232 IP address blocks: 46.235.104.0/24 maxlen: 24 46.235.105.0/24 maxlen: 24 46.235.106.0/24 maxlen: 24 46.235.107.0/24 maxlen: 24 46.235.110.0/24 maxlen: 24 77.247.2.0/24 maxlen: 24 77.247.3.0/24 maxlen: 24 77.247.6.0/24 maxlen: 24 77.247.7.0/24 maxlen: 24 77.247.12.0/24 maxlen: 24 212.11.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.crl rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.mft rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:36:5b:6a:d7:3d:a6:18:d4:55:aa:a6:61:c4:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=815780532ed29a3f80e7ba414efcb379d9ec97c9 Validity Not Before: Jan 1 22:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8675f7184592322ae45e0d05dc5cf4a5691ad9c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6e:18:0b:55:20:46:31:a3:5e:f7:3a:13:c6: c9:6a:e1:c4:76:fa:06:12:7b:4c:55:50:95:22:67: 31:ca:44:fc:b0:c1:90:87:9e:85:8f:91:7a:8e:f9: b6:0f:af:52:f6:b6:bc:bb:cf:26:72:e1:be:15:3e: 1f:cb:8a:0d:b8:af:d8:16:0c:4b:cf:80:4c:a1:35: 60:51:01:cc:99:cf:55:99:6c:94:84:08:cb:eb:99: f2:99:a7:57:6a:4d:be:4e:64:bf:32:d8:85:06:a6: 34:2a:48:ae:be:3c:9f:c9:9d:ce:d8:0f:e1:57:64: 26:e8:1f:94:24:e7:30:02:9d:4e:c0:9b:a3:98:3c: de:c1:ce:bb:bd:3e:05:8b:a4:f6:10:c1:2d:c2:98: 64:52:49:e2:da:6b:61:ae:c5:99:95:2a:8c:84:96: 27:d3:15:eb:77:ef:fe:82:c1:35:02:98:d6:74:0c: 30:9b:ac:60:2d:75:05:15:d0:57:98:c1:92:d2:24: 59:58:42:33:e6:b8:1b:42:ac:d8:88:65:48:78:cc: 04:88:33:ad:08:90:c7:48:f4:0d:29:90:98:d9:a6: 82:79:2b:37:14:51:85:06:07:23:a1:de:db:83:8f: ef:20:d3:98:1b:29:a6:a0:46:97:f2:a7:9d:f6:87: 34:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:75:F7:18:45:92:32:2A:E4:5E:0D:05:DC:5C:F4:A5:69:1A:D9:C7 X509v3 Authority Key Identifier: keyid:81:57:80:53:2E:D2:9A:3F:80:E7:BA:41:4E:FC:B3:79:D9:EC:97:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/hnX3GEWSMirkXg0F3Fz0pWka2cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.235.104.0/22 46.235.110.0/24 77.247.2.0/23 77.247.6.0/23 77.247.12.0/24 212.11.80.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:81:a5:ad:56:50:56:48:a3:83:cf:b4:a4:51:be:90:c1:67: 13:03:9d:60:6d:46:f2:cd:9a:21:24:d5:3a:67:e5:be:dd:36: be:d7:81:be:9e:6b:69:43:1a:cd:d4:0c:4b:b2:88:4a:de:41: 1a:8d:f5:27:d7:65:5a:01:05:a1:ab:ef:15:95:14:9d:77:64: f5:ec:f6:de:cb:92:8e:a5:ab:3d:60:ff:db:7c:02:b6:18:c2: a8:53:44:dc:04:c9:45:4a:e4:22:f2:39:fa:42:49:e7:25:db: 0b:b6:b8:1c:bc:23:2f:93:ce:c9:72:c1:a8:24:05:c9:04:a9: d6:5c:4f:14:c1:8f:08:79:10:c0:fd:0d:f3:ae:ec:4f:83:75: 86:58:43:2f:26:36:fc:78:26:7f:f1:65:ea:f1:db:74:28:f9: e9:b5:01:c9:ca:b0:be:13:28:8c:35:c7:ae:e4:e6:03:62:f3: 58:ae:38:ad:89:96:71:e4:c6:b8:96:3d:e8:d5:21:b1:68:50: 95:fc:4a:cb:d2:22:1b:ed:f3:5e:fd:55:4c:b7:92:7d:86:d9: c5:1d:96:d8:50:3a:02:d2:c3:26:a2:79:e7:f0:87:94:d7:8b: c6:f1:79:54:80:7b:fc:eb:9d:d5:4a:b8:5a:1e:61:d0:72:9e: 52:24:3f:ec -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt7pTZbatc9phjUVaqmYcRHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxNTc4MDUzMmVkMjlhM2Y4MGU3YmE0MTRlZmNiMzc5ZDll Yzk3YzkwHhcNMjYwMTAxMjIxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Njc1ZjcxODQ1OTIzMjJhZTQ1ZTBkMDVkYzVjZjRhNTY5MWFkOWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw24YC1UgRjGjXvc6E8bJauHEdvoG EntMVVCVImcxykT8sMGQh56Fj5F6jvm2D69S9ra8u88mcuG+FT4fy4oNuK/YFgxL z4BMoTVgUQHMmc9VmWyUhAjL65nymadXak2+TmS/MtiFBqY0KkiuvjyfyZ3O2A/h V2Qm6B+UJOcwAp1OwJujmDzewc67vT4Fi6T2EMEtwphkUkni2mthrsWZlSqMhJYn 0xXrd+/+gsE1ApjWdAwwm6xgLXUFFdBXmMGS0iRZWEIz5rgbQqzYiGVIeMwEiDOt CJDHSPQNKZCY2aaCeSs3FFGFBgcjod7bg4/vINOYGymmoEaX8qed9oc0YQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFIZ19xhFkjIq5F4NBdxc9KVpGtnHMB8GA1UdIwQY MBaAFIFXgFMu0po/gOe6QU78s3nZ7JfJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1ZlQVV5N1Ntai1BNTdwQlR2eXplZG5zbDhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9kZTMxYTYtYWFhMy00MDlkLThkNGYt ZjYxNTU0YzZjMTQ1LzEvaG5YM0dFV1NNaXJrWGcwRjNGejBwV2thMmNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9kZTMxYTYtYWFhMy00MDlkLThkNGYtZjYxNTU0YzZjMTQ1 LzEvZ1ZlQVV5N1Ntai1BNTdwQlR2eXplZG5zbDhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQCLutoAwQA LutuAwQBTfcCAwQBTfcGAwQATfcMAwQA1AtQMA0GCSqGSIb3DQEBCwUAA4IBAQCL gaWtVlBWSKODz7SkUb6QwWcTA51gbUbyzZohJNU6Z+W+3Ta+14G+nmtpQxrN1AxL sohK3kEajfUn12VaAQWhq+8VlRSdd2T17Pbey5KOpas9YP/bfAK2GMKoU0TcBMlF SuQi8jn6QknnJdsLtrgcvCMvk87JcsGoJAXJBKnWXE8UwY8IeRDA/Q3zruxPg3WG WEMvJjb8eCZ/8WXq8dt0KPnptQHJyrC+EyiMNceu5OYDYvNYrjitiZZx5Ma4lj3o 1SGxaFCV/ErL0iIb7fNe/VVMt5J9htnFHZbYUDoC0sMmonnn8IeU14vG8XlUgHv8 653VSrhaHmHQcp5SJD/s -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:16 2026 by rpki-client