This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/hmKoDxRn434vXEK-hPdsbe6_RKc.roa File: hmKoDxRn434vXEK-hPdsbe6_RKc.roa (raw, json) Hash identifier: w7LrvFCs4q8tWPgfM7SEvaMXxSu+sAvyt4DZnLap2XQ= Subject key identifier: 86:62:A8:0F:14:67:E3:7E:2F:5C:42:BE:84:F7:6C:6D:EE:BF:44:A7 Certificate issuer: /CN=02d0e88885ef48b20c87b76fd85d42e6eb3d7183 Certificate serial: 019B7E377950717C9F95588DD5271A38584C Authority key identifier: 02:D0:E8:88:85:EF:48:B2:0C:87:B7:6F:D8:5D:42:E6:EB:3D:71:83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/hmKoDxRn434vXEK-hPdsbe6_RKc.roa Signing time: Fri 02 Jan 2026 10:18:43 +0000 ROA not before: Fri 02 Jan 2026 10:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51764 IP address blocks: 46.31.0.0/21 maxlen: 24 46.31.6.0/24 maxlen: 24 91.102.200.0/21 maxlen: 24 91.102.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:79:50:71:7c:9f:95:58:8d:d5:27:1a:38:58:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02d0e88885ef48b20c87b76fd85d42e6eb3d7183 Validity Not Before: Jan 2 10:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8662a80f1467e37e2f5c42be84f76c6deebf44a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ba:e9:3f:b9:72:bb:b8:26:9c:ff:e9:ba:03: a0:01:f8:e6:ed:57:03:cf:f0:36:4c:a9:41:d7:2a: c1:b9:59:0f:38:0b:0b:2e:42:2d:4d:a9:f3:62:ac: b1:49:69:f3:f2:c9:bf:ae:49:52:73:08:90:b7:73: 83:85:55:dc:e1:13:54:66:de:65:70:ee:6c:47:97: 57:2b:1b:a5:5b:02:02:11:3c:25:a1:ea:3c:5b:e1: 24:77:6e:9b:f7:07:20:43:3f:91:5a:e9:9a:e2:54: 7d:2d:e7:dd:db:d5:e8:64:86:4b:c0:88:9b:32:91: 93:54:5b:ba:fd:79:3f:d3:7a:f7:58:21:65:ec:99: 99:dd:ab:a8:cb:44:6c:17:14:2b:59:9b:fc:be:96: 41:9f:0e:b2:74:91:3e:61:28:7d:9e:d3:e2:2b:62: 07:43:a8:ac:ac:90:0e:72:77:da:8c:f2:42:79:05: df:d8:66:9f:ef:e7:cb:bc:e9:07:96:f0:36:86:10: 1e:d7:0a:32:2b:77:60:d6:26:e3:00:f8:c5:56:c0: d1:11:75:22:a0:07:b2:93:5a:6f:3f:b1:34:b4:05: 81:c3:05:16:c5:9c:9b:c0:52:36:39:6c:8b:dd:db: 6c:b0:99:21:62:f9:1d:a4:20:ed:3c:19:49:0a:ee: 31:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:62:A8:0F:14:67:E3:7E:2F:5C:42:BE:84:F7:6C:6D:EE:BF:44:A7 X509v3 Authority Key Identifier: keyid:02:D0:E8:88:85:EF:48:B2:0C:87:B7:6F:D8:5D:42:E6:EB:3D:71:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/hmKoDxRn434vXEK-hPdsbe6_RKc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.31.0.0/21 91.102.200.0/21 Signature Algorithm: sha256WithRSAEncryption a1:0b:34:5e:5f:cb:cb:55:ab:3b:cb:d4:71:0e:22:38:8e:34: 0b:57:0c:f1:7d:b1:c6:9e:92:62:ed:dd:b2:53:da:bc:0a:60: e2:fb:23:fd:e2:f9:93:71:b9:89:07:07:6f:1f:15:17:e3:0c: b1:b7:a2:08:d5:48:99:ff:ca:a3:5c:a8:c3:c3:53:c9:12:bc: 9a:2e:8f:da:81:4d:f9:9b:87:c3:0b:ab:80:48:17:57:6e:3a: ad:4d:93:3a:94:ae:5d:9f:df:52:60:aa:45:e5:20:c6:33:f8: c4:4d:2d:fe:95:dd:90:27:fa:a4:4e:e8:64:d3:66:48:ba:be: 42:1a:4b:f7:94:9b:75:ec:37:df:08:23:07:d7:0f:d0:52:16: d2:0b:20:45:16:47:6c:0e:4a:90:e5:24:ac:6f:a0:17:36:db: 36:7d:d0:81:48:de:46:fa:a7:a1:f0:bd:a4:fc:0f:06:ee:02: c0:f4:46:70:09:83:1e:d1:a1:2d:83:2d:03:34:3e:c8:ae:fa: d7:89:ca:ff:cb:b9:bd:b4:95:b5:0a:3c:1a:c0:1d:c8:a6:0a: 2a:7d:57:8d:fc:13:0e:d1:a6:a7:d8:a3:fc:58:88:7e:d8:b3: 4f:a5:ac:46:9a:d9:19:2f:a6:fc:58:40:8a:7e:2c:63:6c:16: 23:a6:d6:ad -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+N3lQcXyflViN1ScaOFhMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyZDBlODg4ODVlZjQ4YjIwYzg3Yjc2ZmQ4NWQ0MmU2ZWIz ZDcxODMwHhcNMjYwMTAyMTAxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NjYyYTgwZjE0NjdlMzdlMmY1YzQyYmU4NGY3NmM2ZGVlYmY0NGE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7rpP7lyu7gmnP/pugOgAfjm7VcD z/A2TKlB1yrBuVkPOAsLLkItTanzYqyxSWnz8sm/rklScwiQt3ODhVXc4RNUZt5l cO5sR5dXKxulWwICETwloeo8W+Ekd26b9wcgQz+RWuma4lR9Lefd29XoZIZLwIib MpGTVFu6/Xk/03r3WCFl7JmZ3auoy0RsFxQrWZv8vpZBnw6ydJE+YSh9ntPiK2IH Q6isrJAOcnfajPJCeQXf2Gaf7+fLvOkHlvA2hhAe1woyK3dg1ibjAPjFVsDREXUi oAeyk1pvP7E0tAWBwwUWxZybwFI2OWyL3dtssJkhYvkdpCDtPBlJCu4xZwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIZiqA8UZ+N+L1xCvoT3bG3uv0SnMB8GA1UdIwQY MBaAFALQ6IiF70iyDIe3b9hdQubrPXGDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXREb2lJWHZTTElNaDdkdjJGMUM1dXM5Y1lNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS81ZjRlYjYtNjAyNi00MDk4LTg4ZDct OTUzYzY4NTA2ZDVjLzEvaG1Lb0R4Um40MzR2WEVLLWhQZHNiZTZfUktjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS81ZjRlYjYtNjAyNi00MDk4LTg4ZDctOTUzYzY4NTA2ZDVj LzEvQXREb2lJWHZTTElNaDdkdjJGMUM1dXM5Y1lNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDLh8AAwQD W2bIMA0GCSqGSIb3DQEBCwUAA4IBAQChCzReX8vLVas7y9RxDiI4jjQLVwzxfbHG npJi7d2yU9q8CmDi+yP94vmTcbmJBwdvHxUX4wyxt6II1UiZ/8qjXKjDw1PJErya Lo/agU35m4fDC6uASBdXbjqtTZM6lK5dn99SYKpF5SDGM/jETS3+ld2QJ/qkTuhk 02ZIur5CGkv3lJt17DffCCMH1w/QUhbSCyBFFkdsDkqQ5SSsb6AXNts2fdCBSN5G +qeh8L2k/A8G7gLA9EZwCYMe0aEtgy0DND7IrvrXicr/y7m9tJW1CjwawB3Ipgoq fVeN/BMO0aan2KP8WIh+2LNPpaxGmtkZL6b8WECKfixjbBYjptat -----END CERTIFICATE-----Generated at Sun Jan 25 17:42:30 2026 by rpki-client