This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/hS6uewCB_QrVL4l6szpbmIikwP4.roa File: hS6uewCB_QrVL4l6szpbmIikwP4.roa (raw, json) Hash identifier: HveKQzzsmxnwC74x4jZYUDMe8gGcI27oxthPBotk3XE= Subject key identifier: 85:2E:AE:7B:00:81:FD:0A:D5:2F:89:7A:B3:3A:5B:98:88:A4:C0:FE Certificate issuer: /CN=c1bf8f3e609072889e74dd0fb4e27f9bac47b3b0 Certificate serial: 019B7C1331DF3FD14E424DDF2D394DC5D55E Authority key identifier: C1:BF:8F:3E:60:90:72:88:9E:74:DD:0F:B4:E2:7F:9B:AC:47:B3:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/hS6uewCB_QrVL4l6szpbmIikwP4.roa Signing time: Fri 02 Jan 2026 00:19:51 +0000 ROA not before: Fri 02 Jan 2026 00:19:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48082 IP address blocks: 46.33.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:31:df:3f:d1:4e:42:4d:df:2d:39:4d:c5:d5:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1bf8f3e609072889e74dd0fb4e27f9bac47b3b0 Validity Not Before: Jan 2 00:19:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=852eae7b0081fd0ad52f897ab33a5b9888a4c0fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:41:f5:de:dd:f2:34:b1:2c:72:39:53:10:94: 6c:c6:61:17:27:87:f2:99:09:10:23:68:2f:6b:6e: fb:2c:3e:8a:22:1e:e5:77:3c:a1:b7:00:2a:c4:2e: 2a:25:f5:e4:9d:ac:35:d1:a4:ce:c0:cd:e2:1e:72: 0c:5a:1e:cd:6d:e1:fc:cf:0b:49:70:13:d1:a3:d6: 0f:88:fa:26:ed:22:3a:9e:77:17:25:c9:55:68:1b: a9:87:4c:9f:8b:17:6c:aa:91:b8:da:4c:9a:1e:9f: e4:86:bb:6c:83:56:82:90:a9:8f:a2:24:c6:b9:5b: 19:bc:78:d0:5c:ff:79:19:b3:6e:fe:f1:38:ef:d9: 7e:43:97:54:03:70:17:3d:e0:85:88:9a:da:b8:ce: 35:9a:76:ec:94:db:0b:2e:18:6e:02:d3:dc:f1:c6: 5f:83:27:ce:67:24:10:c5:09:12:53:c5:c8:cd:65: 79:f9:73:d8:5d:61:d6:86:e4:a5:0c:39:2f:80:99: 7a:0e:3d:ac:29:63:f2:f7:91:2a:25:af:e6:7c:1d: af:2d:b0:8d:ca:3b:10:22:ba:b6:c6:06:1d:60:1b: e0:15:77:69:bd:96:e7:34:d1:d9:65:92:0b:e9:f6: 45:87:38:94:4a:0c:5a:96:bb:cd:0a:98:30:d1:54: 2e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:2E:AE:7B:00:81:FD:0A:D5:2F:89:7A:B3:3A:5B:98:88:A4:C0:FE X509v3 Authority Key Identifier: keyid:C1:BF:8F:3E:60:90:72:88:9E:74:DD:0F:B4:E2:7F:9B:AC:47:B3:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/hS6uewCB_QrVL4l6szpbmIikwP4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.33.60.0/22 Signature Algorithm: sha256WithRSAEncryption 4b:1e:5b:7e:fd:20:fa:cb:86:2f:fa:68:c8:86:95:0b:6d:a1: 2c:7f:82:d9:93:01:49:f9:35:40:c8:44:da:15:7b:bb:27:07: 0a:5e:cd:85:de:d7:45:31:ac:91:cb:e3:59:75:4b:c7:54:69: e1:4e:2e:a9:d2:02:88:21:5e:8a:98:e8:51:99:28:a2:bb:b9: ee:fc:67:7f:f1:e9:f0:a7:ad:f1:05:ef:9f:5f:cf:13:fb:14: 39:60:8a:ff:90:17:cb:13:1b:a2:ed:c7:f8:95:c3:82:f7:16: 52:b4:b8:44:e3:25:a4:c6:f6:e6:57:c3:04:09:03:42:77:76: 30:d6:b4:2b:42:cf:4d:55:ae:03:f3:45:71:e9:94:13:16:ee: 0d:66:89:72:74:6e:ee:ae:48:5c:97:e8:00:ac:87:09:81:16: a4:0d:9f:7b:c4:23:43:d8:df:e8:83:2f:50:0e:f7:81:85:2d: b5:4c:08:30:98:f8:3b:1e:54:9f:9d:20:86:b9:99:82:2e:f9: 84:d8:6d:a6:fa:42:24:31:a4:d1:3d:ed:9d:aa:24:f1:ec:df: 30:55:d7:e9:2f:c9:ab:12:40:3d:d2:1f:cd:1e:9d:62:cb:4e: c9:e8:ef:95:92:1d:6b:60:02:eb:f9:57:b6:45:a0:93:48:f5: c4:46:59:fc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EzHfP9FOQk3fLTlNxdVeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxYmY4ZjNlNjA5MDcyODg5ZTc0ZGQwZmI0ZTI3ZjliYWM0 N2IzYjAwHhcNMjYwMTAyMDAxOTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTJlYWU3YjAwODFmZDBhZDUyZjg5N2FiMzNhNWI5ODg4YTRjMGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUH13t3yNLEscjlTEJRsxmEXJ4fy mQkQI2gva277LD6KIh7ldzyhtwAqxC4qJfXknaw10aTOwM3iHnIMWh7NbeH8zwtJ cBPRo9YPiPom7SI6nncXJclVaBuph0yfixdsqpG42kyaHp/khrtsg1aCkKmPoiTG uVsZvHjQXP95GbNu/vE479l+Q5dUA3AXPeCFiJrauM41mnbslNsLLhhuAtPc8cZf gyfOZyQQxQkSU8XIzWV5+XPYXWHWhuSlDDkvgJl6Dj2sKWPy95EqJa/mfB2vLbCN yjsQIrq2xgYdYBvgFXdpvZbnNNHZZZIL6fZFhziUSgxalrvNCpgw0VQubQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIUurnsAgf0K1S+JerM6W5iIpMD+MB8GA1UdIwQY MBaAFMG/jz5gkHKInnTdD7Tif5usR7OwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2ItUFBtQ1Fjb2llZE4wUHRPSl9tNnhIczdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9hMWM2YzAtZTc1NC00NzllLTg1MWQt MGQwZGEwZDEwNDMyLzEvaFM2dWV3Q0JfUXJWTDRsNnN6cGJtSWlrd1A0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9hMWM2YzAtZTc1NC00NzllLTg1MWQtMGQwZGEwZDEwNDMy LzEvd2ItUFBtQ1Fjb2llZE4wUHRPSl9tNnhIczdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLiE8MA0G CSqGSIb3DQEBCwUAA4IBAQBLHlt+/SD6y4Yv+mjIhpULbaEsf4LZkwFJ+TVAyETa FXu7JwcKXs2F3tdFMayRy+NZdUvHVGnhTi6p0gKIIV6KmOhRmSiiu7nu/Gd/8enw p63xBe+fX88T+xQ5YIr/kBfLExui7cf4lcOC9xZStLhE4yWkxvbmV8MECQNCd3Yw 1rQrQs9NVa4D80Vx6ZQTFu4NZolydG7urkhcl+gArIcJgRakDZ97xCND2N/ogy9Q DveBhS21TAgwmPg7HlSfnSCGuZmCLvmE2G2m+kIkMaTRPe2dqiTx7N8wVdfpL8mr EkA90h/NHp1iy07J6O+Vkh1rYALr+Ve2RaCTSPXERln8 -----END CERTIFICATE-----Generated at Sun Jan 25 21:05:40 2026 by rpki-client