This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/HO2U7d5NcmWKb9JFFOS4xst6Ap0.roa File: HO2U7d5NcmWKb9JFFOS4xst6Ap0.roa (raw, json) Hash identifier: jIkU93mIxfPKkS6ZV5Em7YZjODmsWtP1r4eJlBEyOBI= Subject key identifier: 1C:ED:94:ED:DE:4D:72:65:8A:6F:D2:45:14:E4:B8:C6:CB:7A:02:9D Certificate issuer: /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab Certificate serial: 019B7E388AEE5BDDD845CEE8FDC8BDB06CA0 Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/HO2U7d5NcmWKb9JFFOS4xst6Ap0.roa Signing time: Fri 02 Jan 2026 10:19:53 +0000 ROA not before: Fri 02 Jan 2026 10:19:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216205 IP address blocks: 46.36.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:8a:ee:5b:dd:d8:45:ce:e8:fd:c8:bd:b0:6c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab Validity Not Before: Jan 2 10:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1ced94edde4d72658a6fd24514e4b8c6cb7a029d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e4:c2:93:db:92:86:e4:e0:e7:a3:1a:5a:fa: b6:6d:a7:c6:6f:9b:4e:b9:6b:22:00:b4:54:cb:09: 0a:84:76:8a:8b:de:f1:71:47:e4:5a:10:6a:bb:77: 45:25:2e:da:17:c7:4c:90:64:a0:bd:24:24:e1:2d: d8:0a:af:25:9b:bc:8d:5d:d0:c8:f6:a0:ef:e1:ae: 89:80:ca:01:7e:7e:06:5b:e5:96:7f:58:b3:4c:20: 2f:b4:ae:0f:8f:bd:63:02:77:b5:1a:c4:9a:19:fc: fe:01:04:1a:1a:7e:52:fb:d1:02:b0:b6:54:aa:86: 7b:81:be:6f:8b:a2:50:e8:08:33:b2:bf:ca:7d:4b: 01:2d:d5:9a:4b:5b:87:a2:89:d2:67:b8:a5:69:af: b4:1e:f5:f8:dc:45:60:cc:ba:f7:48:23:e4:95:f6: b7:2d:e4:63:e8:e5:be:c7:ab:07:be:2e:54:9b:00: 96:53:f7:10:6b:24:26:a7:cb:67:8e:2b:2c:55:67: 9c:18:cc:de:2d:b7:2d:e1:87:00:8e:a9:80:d5:48: 13:cb:8e:20:70:5c:f9:7d:ee:00:25:62:ab:ba:03: a7:2b:dd:36:0b:30:07:02:6a:b2:4c:bf:7d:51:38: 5c:bc:bd:d0:e1:5a:55:38:84:c2:15:a0:1b:da:82: 93:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:ED:94:ED:DE:4D:72:65:8A:6F:D2:45:14:E4:B8:C6:CB:7A:02:9D X509v3 Authority Key Identifier: keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/HO2U7d5NcmWKb9JFFOS4xst6Ap0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.36.99.0/24 Signature Algorithm: sha256WithRSAEncryption 87:88:f2:58:cd:34:ef:9c:0b:ae:9d:b4:1f:1d:20:28:36:48: 03:77:23:89:4a:20:27:bf:84:a7:a8:33:aa:ea:21:2e:44:d6: b4:b0:2d:60:80:3b:34:43:83:06:62:6c:27:86:ab:a8:8d:36: cd:60:b3:80:7a:bb:9c:bf:96:4c:5e:3f:19:1a:a5:a9:52:e8: a8:e1:ad:18:ab:e6:be:27:55:7f:0f:41:de:93:99:19:42:94: 3a:da:48:bf:6e:ef:50:ee:d4:ee:33:bb:71:a2:10:d5:0e:b3: eb:66:94:c9:af:50:bf:b5:e4:9c:4b:92:07:95:34:20:80:7e: 43:f0:77:1d:1e:34:22:43:82:b6:07:26:1a:3a:dd:55:3c:88: 27:ea:e0:5e:43:bb:ed:84:9a:cb:08:ad:78:97:62:da:cf:c6: c0:89:32:e0:99:79:be:96:cd:8d:3d:27:92:0f:06:27:82:8b: 3e:48:58:f7:e3:ac:c4:93:99:d5:c5:84:fa:60:3b:cd:7b:05: 46:04:d8:92:5c:9f:61:1b:b9:d9:a3:d2:66:9a:b6:ae:40:f4: 23:e6:31:2c:07:3a:15:6a:76:32:71:2b:ae:56:66:4f:9c:5a: 8c:55:9a:17:94:90:6f:e0:f3:08:ec:30:88:51:21:1d:f1:d6: 82:71:43:86 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OIruW93YRc7o/ci9sGygMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNmE0MzRjNGI1ZDIzOWM0ZTZlNDFiN2U1ODVjOGQ1OGY4 OTk1YWIwHhcNMjYwMTAyMTAxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxY2VkOTRlZGRlNGQ3MjY1OGE2ZmQyNDUxNGU0YjhjNmNiN2EwMjlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOTCk9uShuTg56MaWvq2bafGb5tO uWsiALRUywkKhHaKi97xcUfkWhBqu3dFJS7aF8dMkGSgvSQk4S3YCq8lm7yNXdDI 9qDv4a6JgMoBfn4GW+WWf1izTCAvtK4Pj71jAne1GsSaGfz+AQQaGn5S+9ECsLZU qoZ7gb5vi6JQ6Agzsr/KfUsBLdWaS1uHoonSZ7ilaa+0HvX43EVgzLr3SCPklfa3 LeRj6OW+x6sHvi5UmwCWU/cQayQmp8tnjissVWecGMzeLbct4YcAjqmA1UgTy44g cFz5fe4AJWKrugOnK902CzAHAmqyTL99UThcvL3Q4VpVOITCFaAb2oKTVwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBztlO3eTXJlim/SRRTkuMbLegKdMB8GA1UdIwQY MBaAFC9qQ0xLXSOcTm5Bt+WFyNWPiZWrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWIt NDBiNmQ2N2ZjZDk0LzEvSE8yVTdkNU5jbVdLYjlKRkZPUzR4c3Q2QXAwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWItNDBiNmQ2N2ZjZDk0 LzEvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiRjMA0G CSqGSIb3DQEBCwUAA4IBAQCHiPJYzTTvnAuunbQfHSAoNkgDdyOJSiAnv4SnqDOq 6iEuRNa0sC1ggDs0Q4MGYmwnhquojTbNYLOAerucv5ZMXj8ZGqWpUuio4a0Yq+a+ J1V/D0Hek5kZQpQ62ki/bu9Q7tTuM7txohDVDrPrZpTJr1C/teScS5IHlTQggH5D 8HcdHjQiQ4K2ByYaOt1VPIgn6uBeQ7vthJrLCK14l2Laz8bAiTLgmXm+ls2NPSeS DwYngos+SFj346zEk5nVxYT6YDvNewVGBNiSXJ9hG7nZo9JmmrauQPQj5jEsBzoV anYycSuuVmZPnFqMVZoXlJBv4PMI7DCIUSEd8daCcUOG -----END CERTIFICATE-----Generated at Mon Jan 26 08:37:49 2026 by rpki-client