This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/9h9M7PjhCe5Xzh52sY19F_HCfoo.roa File: 9h9M7PjhCe5Xzh52sY19F_HCfoo.roa (raw, json) Hash identifier: dKnlXAO85KhguToJuoLLUtMZOEcwIkloXdGeaFlciRA= Subject key identifier: F6:1F:4C:EC:F8:E1:09:EE:57:CE:1E:76:B1:8D:7D:17:F1:C2:7E:8A Certificate issuer: /CN=46ba3f80039b9e784cfb24bf2c7ddb24e1900a76 Certificate serial: 019B77C6E9EEB71282A53DA42A8E5BFC160C Authority key identifier: 46:BA:3F:80:03:9B:9E:78:4C:FB:24:BF:2C:7D:DB:24:E1:90:0A:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/9h9M7PjhCe5Xzh52sY19F_HCfoo.roa Signing time: Thu 01 Jan 2026 04:18:03 +0000 ROA not before: Thu 01 Jan 2026 04:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49053 IP address blocks: 185.62.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.crl rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:e9:ee:b7:12:82:a5:3d:a4:2a:8e:5b:fc:16:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46ba3f80039b9e784cfb24bf2c7ddb24e1900a76 Validity Not Before: Jan 1 04:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f61f4cecf8e109ee57ce1e76b18d7d17f1c27e8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:96:43:5e:67:6e:9f:6d:12:50:1b:5b:06:a0: b5:97:94:a3:93:f0:1a:df:75:82:76:4a:ce:c7:59: eb:b9:bd:6c:4e:e6:71:f1:55:21:ea:3d:ae:c1:d4: 62:1c:03:4b:62:c5:3b:02:71:0a:ae:2b:0b:67:50: 85:0c:02:7f:fb:be:8e:8a:9b:96:a9:62:85:a4:d0: cf:25:fe:04:17:91:60:24:fe:fc:1f:9c:b2:b1:7c: 01:df:4f:c6:a0:ca:bf:b8:ab:96:3c:74:f5:c6:a3: 90:48:fd:bf:7b:4e:23:40:9c:fb:d5:8f:62:d8:a9: b0:37:03:2f:4f:3a:8f:4a:cf:00:91:dc:7e:67:e8: a9:08:bd:55:50:92:2a:c2:bb:0d:22:44:29:73:3f: d9:b4:58:22:cc:ce:58:37:4d:f6:93:bd:b8:31:02: fe:05:44:e9:9c:82:41:a3:8f:bc:76:4e:29:ac:55: 32:55:73:b1:fb:ad:f9:72:0a:bb:83:21:58:72:ae: 4f:5f:e4:73:25:cc:59:e5:91:32:73:75:65:38:41: 73:80:35:eb:74:c6:d8:74:86:20:7e:b0:fe:ed:3d: e5:40:96:75:7d:a2:64:38:69:3d:7f:b0:3e:31:d0: 5e:b1:b3:c7:da:1e:4c:39:1b:0f:d2:fb:c6:b7:29: fc:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:1F:4C:EC:F8:E1:09:EE:57:CE:1E:76:B1:8D:7D:17:F1:C2:7E:8A X509v3 Authority Key Identifier: keyid:46:BA:3F:80:03:9B:9E:78:4C:FB:24:BF:2C:7D:DB:24:E1:90:0A:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/9h9M7PjhCe5Xzh52sY19F_HCfoo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.62.203.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:63:44:5f:89:19:d3:4f:a2:95:7c:6a:1b:58:47:42:60:de: 97:ea:f0:75:22:65:3d:ef:01:00:02:6d:6e:7e:1e:d0:3b:18: 25:35:23:00:3a:d3:cf:9c:83:00:3a:85:5d:2b:af:c9:5f:3d: 5d:28:b7:4c:aa:a5:04:c9:07:e3:c5:73:71:e6:4f:7b:92:6c: da:0d:6b:30:fc:ec:af:e7:39:6d:5f:d9:ff:25:6f:a5:8f:e0: 28:04:5f:b0:b8:6d:95:4f:39:2d:07:bc:ab:99:67:b8:5e:b3: b3:cb:b9:c7:73:9f:c7:45:1c:0a:1e:35:39:34:d8:48:67:90: d0:56:0b:ae:76:34:e3:d8:85:8c:12:cd:8f:5f:bc:d6:18:9d: c4:f0:d1:c4:77:9b:5c:fa:10:a2:9a:b3:fd:00:c1:2c:87:ca: f2:6c:50:83:22:70:b6:cd:c9:42:87:68:3e:55:40:c9:7f:94: dd:74:54:6a:8d:da:d2:1a:ec:de:60:9f:91:75:66:08:d3:ae: 35:9c:ac:4b:1c:40:bb:e2:0b:49:a8:77:1c:6e:db:b1:e9:c8: 7d:ed:1f:1f:37:07:a4:a7:4f:3d:1f:3d:8e:49:ec:de:f9:3b: bb:52:3e:25:d7:fb:57:b1:ad:6b:ef:ba:96:5f:14:57:a9:cf: af:fe:77:e8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xunutxKCpT2kKo5b/BYMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2YmEzZjgwMDM5YjllNzg0Y2ZiMjRiZjJjN2RkYjI0ZTE5 MDBhNzYwHhcNMjYwMTAxMDQxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjFmNGNlY2Y4ZTEwOWVlNTdjZTFlNzZiMThkN2QxN2YxYzI3ZThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspZDXmdun20SUBtbBqC1l5Sjk/Aa 33WCdkrOx1nrub1sTuZx8VUh6j2uwdRiHANLYsU7AnEKrisLZ1CFDAJ/+76OipuW qWKFpNDPJf4EF5FgJP78H5yysXwB30/GoMq/uKuWPHT1xqOQSP2/e04jQJz71Y9i 2KmwNwMvTzqPSs8Akdx+Z+ipCL1VUJIqwrsNIkQpcz/ZtFgizM5YN032k724MQL+ BUTpnIJBo4+8dk4prFUyVXOx+635cgq7gyFYcq5PX+RzJcxZ5ZEyc3VlOEFzgDXr dMbYdIYgfrD+7T3lQJZ1faJkOGk9f7A+MdBesbPH2h5MORsP0vvGtyn87wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPYfTOz44QnuV84edrGNfRfxwn6KMB8GA1UdIwQY MBaAFEa6P4ADm554TPskvyx92yThkAp2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnJvX2dBT2JubmhNLXlTX0xIM2JKT0dRQ25ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9jZmEyYWUtZTUyNC00YmQwLTg3NWIt ODlhY2UzODIyMGZiLzEvOWg5TTdQamhDZTVYemg1MnNZMTlGX0hDZm9vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9jZmEyYWUtZTUyNC00YmQwLTg3NWItODlhY2UzODIyMGZi LzEvUnJvX2dBT2JubmhNLXlTX0xIM2JKT0dRQ25ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuT7LMA0G CSqGSIb3DQEBCwUAA4IBAQAfY0RfiRnTT6KVfGobWEdCYN6X6vB1ImU97wEAAm1u fh7QOxglNSMAOtPPnIMAOoVdK6/JXz1dKLdMqqUEyQfjxXNx5k97kmzaDWsw/Oyv 5zltX9n/JW+lj+AoBF+wuG2VTzktB7yrmWe4XrOzy7nHc5/HRRwKHjU5NNhIZ5DQ VguudjTj2IWMEs2PX7zWGJ3E8NHEd5tc+hCimrP9AMEsh8rybFCDInC2zclCh2g+ VUDJf5TddFRqjdrSGuzeYJ+RdWYI0641nKxLHEC74gtJqHccbtux6ch97R8fNwek p089Hz2OSeze+Tu7Uj4l1/tXsa1r77qWXxRXqc+v/nfo -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:29 2026 by rpki-client