This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/hXvvQkLJvhzxavEc_sq_0wTtXuE.roa File: hXvvQkLJvhzxavEc_sq_0wTtXuE.roa (raw, json) Hash identifier: z3B4fVsqejliNZdI/Ba32Wz6gpFTA9HO4UoOilrauKc= Subject key identifier: 85:7B:EF:42:42:C9:BE:1C:F1:6A:F1:1C:FE:CA:BF:D3:04:ED:5E:E1 Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9 Certificate serial: 019B7E37EE1F070FE27CA4664691D63D42E6 Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/hXvvQkLJvhzxavEc_sq_0wTtXuE.roa Signing time: Fri 02 Jan 2026 10:19:13 +0000 ROA not before: Fri 02 Jan 2026 10:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58156 IP address blocks: 46.234.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.mft rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:ee:1f:07:0f:e2:7c:a4:66:46:91:d6:3d:42:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9 Validity Not Before: Jan 2 10:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=857bef4242c9be1cf16af11cfecabfd304ed5ee1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:67:e6:aa:bf:23:e5:28:bb:02:57:18:cc:d9: e1:0f:48:3c:d1:6b:19:6b:ce:37:e2:67:86:9e:58: d2:19:ee:1c:3f:54:31:5e:be:f8:a9:6b:b3:30:6e: 87:a7:3a:a2:47:81:a5:c1:06:15:c0:3b:8c:50:15: c4:d3:9f:1d:a2:88:a6:64:f0:29:ea:db:80:22:bf: db:6e:d4:38:ef:03:c9:82:65:0f:7d:fb:c9:75:2d: d9:cc:61:e2:5e:3c:f5:d1:e6:e0:61:cf:0c:39:d1: 70:b6:ed:d7:3a:14:0c:73:d3:70:d8:59:a5:fe:c2: 83:39:c2:87:5e:65:2f:31:29:0d:18:1b:09:15:a4: 92:9c:c0:d7:d5:0e:b4:a7:69:bf:f5:2c:cb:0a:56: d3:9f:c2:ab:f1:44:e1:83:2f:36:bb:c0:4a:26:77: 99:b1:b9:54:7d:19:29:a8:da:ee:54:7f:05:a4:03: 42:03:cf:86:07:59:57:50:b8:65:f1:e1:05:df:57: a0:67:b8:36:61:25:be:57:83:f1:c8:41:f4:f5:01: da:b5:fd:40:0d:7d:8b:fe:d6:3f:87:20:a0:19:85: 72:2d:2d:61:41:cb:51:83:09:2b:f8:3b:ae:a9:a5: 10:26:c4:80:42:c6:6a:9c:92:eb:2c:b4:30:74:79: a8:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:7B:EF:42:42:C9:BE:1C:F1:6A:F1:1C:FE:CA:BF:D3:04:ED:5E:E1 X509v3 Authority Key Identifier: keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/hXvvQkLJvhzxavEc_sq_0wTtXuE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.234.13.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:72:9f:e5:04:3d:79:b2:dc:f8:ad:31:6b:04:3f:ac:23:98: b9:61:51:c9:0d:e0:3f:9b:37:48:03:75:71:4c:b0:7f:07:3e: c0:95:f8:81:9d:70:26:90:60:e7:e0:de:7d:e8:d6:4e:51:61: 46:81:7e:37:e5:75:d2:21:db:d6:d2:56:be:8c:53:cb:67:bf: ea:9e:83:26:7a:a3:77:d1:3e:fc:c9:7d:38:91:a6:3e:7b:0b: f1:ac:7f:8e:2e:54:61:53:5f:09:7d:0f:28:f2:02:f8:bc:81: ab:36:88:b4:b9:bf:80:87:5f:51:bd:65:10:f9:97:54:5e:97: b8:a1:ef:10:6b:88:0a:12:44:4d:ec:ac:3f:95:46:b1:e5:12: f7:3c:f8:61:21:19:15:b3:a0:b5:97:94:39:e9:17:3a:09:4e: 8f:03:fe:39:f8:9a:a3:cd:c6:f3:ac:76:e2:5d:26:28:3b:8a: 84:23:12:68:18:77:be:03:98:3a:71:9a:cf:7f:93:7d:25:a0: eb:87:06:26:b6:c1:4f:aa:06:3f:61:b1:16:fd:70:9f:f0:a4: 52:80:b3:d3:ab:c8:18:bb:a0:dd:53:1d:9d:74:7f:9a:c2:22: b3:5b:30:79:b7:af:4a:d2:9a:67:7f:80:cc:71:97:0f:6a:5e: 38:36:d6:9d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N+4fBw/ifKRmRpHWPULmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2OGZlMzVjYzk2MjYzM2EyNzU3YWYxMGEwZTZlOGFiNmQw MWY0YzkwHhcNMjYwMTAyMTAxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTdiZWY0MjQyYzliZTFjZjE2YWYxMWNmZWNhYmZkMzA0ZWQ1ZWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomfmqr8j5Si7AlcYzNnhD0g80WsZ a8434meGnljSGe4cP1QxXr74qWuzMG6HpzqiR4GlwQYVwDuMUBXE058dooimZPAp 6tuAIr/bbtQ47wPJgmUPffvJdS3ZzGHiXjz10ebgYc8MOdFwtu3XOhQMc9Nw2Fml /sKDOcKHXmUvMSkNGBsJFaSSnMDX1Q60p2m/9SzLClbTn8Kr8UThgy82u8BKJneZ sblUfRkpqNruVH8FpANCA8+GB1lXULhl8eEF31egZ7g2YSW+V4PxyEH09QHatf1A DX2L/tY/hyCgGYVyLS1hQctRgwkr+DuuqaUQJsSAQsZqnJLrLLQwdHmoTwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIV770JCyb4c8WrxHP7Kv9ME7V7hMB8GA1UdIwQY MBaAFFaP41zJYmM6J1evEKDm6KttAfTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVm9falhNbGlZem9uVjY4UW9PYm9xMjBCOU1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8zN2ViZTYtOGJmZS00YzFmLWExODMt ODNkNjQ4Zjc5NzQ2LzEvaFh2dlFrTEp2aHp4YXZFY19zcV8wd1R0WHVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8zN2ViZTYtOGJmZS00YzFmLWExODMtODNkNjQ4Zjc5NzQ2 LzEvVm9falhNbGlZem9uVjY4UW9PYm9xMjBCOU1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALuoNMA0G CSqGSIb3DQEBCwUAA4IBAQANcp/lBD15stz4rTFrBD+sI5i5YVHJDeA/mzdIA3Vx TLB/Bz7AlfiBnXAmkGDn4N596NZOUWFGgX435XXSIdvW0la+jFPLZ7/qnoMmeqN3 0T78yX04kaY+ewvxrH+OLlRhU18JfQ8o8gL4vIGrNoi0ub+Ah19RvWUQ+ZdUXpe4 oe8Qa4gKEkRN7Kw/lUax5RL3PPhhIRkVs6C1l5Q56Rc6CU6PA/45+JqjzcbzrHbi XSYoO4qEIxJoGHe+A5g6cZrPf5N9JaDrhwYmtsFPqgY/YbEW/XCf8KRSgLPTq8gY u6DdUx2ddH+awiKzWzB5t69K0ppnf4DMcZcPal44Ntad -----END CERTIFICATE-----Generated at Sun Jan 25 22:16:56 2026 by rpki-client