This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/hQ2GFL3dnEKzJSAPLs1axACh1nE.roa File: hQ2GFL3dnEKzJSAPLs1axACh1nE.roa (raw, json) Hash identifier: XfsYyUXshVaU5kesRq6m5zdn9J6jCqEigoDtxpwvnck= Subject key identifier: 85:0D:86:14:BD:DD:9C:42:B3:25:20:0F:2E:CD:5A:C4:00:A1:D6:71 Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3 Certificate serial: 019B77C6707E036A189E6F14158E7D247D8A Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/hQ2GFL3dnEKzJSAPLs1axACh1nE.roa Signing time: Thu 01 Jan 2026 04:17:32 +0000 ROA not before: Thu 01 Jan 2026 04:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21230 IP address blocks: 46.35.160.0/21 maxlen: 24 46.35.168.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:70:7e:03:6a:18:9e:6f:14:15:8e:7d:24:7d:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3 Validity Not Before: Jan 1 04:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=850d8614bddd9c42b325200f2ecd5ac400a1d671 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:80:9f:5b:d0:ac:7c:7f:99:38:d5:58:a2:45: 0e:17:9f:20:6f:64:df:76:90:99:1f:0a:20:92:84: ef:71:57:76:df:22:37:82:9a:3e:5c:36:19:08:db: 86:a1:00:96:39:cc:7d:c7:dc:d3:b3:94:4a:3e:96: 4b:c9:2f:a7:a3:0b:b8:c8:c1:f7:8f:bd:d6:f7:98: e0:97:35:13:8b:9e:f4:fb:4b:81:07:a6:03:23:b4: dc:05:fe:5f:55:8b:7f:87:c3:8e:98:25:7c:f0:a5: c4:29:9f:a9:c1:04:6c:5e:d5:69:8e:36:94:b4:08: 49:a6:48:06:ec:65:bf:ce:83:5a:d4:08:f4:28:f1: 19:8c:da:86:b7:71:7e:a6:7d:89:ca:77:6a:79:2d: 86:46:15:83:f1:02:ad:d6:d1:41:ee:23:4e:fa:69: e0:9a:f7:01:21:90:f6:43:37:20:c8:f7:50:67:2e: ba:63:b5:6b:a9:a7:97:fd:84:06:33:ff:5e:34:04: 68:28:4e:6a:79:8f:72:fa:0e:e6:dc:71:06:6b:0b: 11:17:14:10:66:24:bd:58:da:e5:46:66:5e:b7:5d: 26:b3:33:81:66:e6:af:51:fe:6b:7e:a4:03:66:48: c3:e8:e5:26:46:dd:c7:fc:49:6b:8c:86:a1:7e:72: 8f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:0D:86:14:BD:DD:9C:42:B3:25:20:0F:2E:CD:5A:C4:00:A1:D6:71 X509v3 Authority Key Identifier: keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/hQ2GFL3dnEKzJSAPLs1axACh1nE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.35.160.0-46.35.169.255 Signature Algorithm: sha256WithRSAEncryption 54:f5:06:72:54:69:5d:3a:b7:ea:3a:64:01:c0:23:87:77:18: 49:26:bd:1a:e5:14:4c:45:ce:ef:47:f3:09:78:7f:61:f4:87: f7:e5:4b:20:f2:1a:d8:be:61:14:4f:f9:13:18:ad:7d:95:63: fb:59:4e:5a:62:ea:fe:c9:1f:24:2a:5e:13:2f:3a:82:37:04: 41:0b:46:f3:b9:bc:91:1d:05:6a:02:3f:a7:98:3e:85:1f:57: ce:37:e1:6b:ab:92:21:3a:20:55:52:25:20:59:97:a2:41:61: 4a:92:1b:a6:2b:36:6f:2c:f8:06:23:b1:5e:32:16:cb:6f:5b: 8a:59:74:e1:8f:3e:db:e3:56:85:bd:9b:8b:77:1a:a7:ec:e5: 2e:4d:eb:c0:c6:f2:99:11:57:1f:45:67:1a:56:cb:22:56:e5: a9:59:57:f7:36:70:38:2c:5f:8b:0e:fb:8c:c6:d0:08:d0:b0: b7:9d:6e:8a:87:49:b5:f8:92:d0:d8:6e:f6:65:74:d5:bd:28: 6a:14:69:3d:0e:7d:6b:ae:7d:52:1b:89:41:77:78:7d:66:39: fa:f4:43:6a:95:1b:e5:34:16:2b:b4:4c:08:04:74:16:15:b2: d8:bd:e7:5f:80:5d:db:76:e8:a3:fc:80:f1:f2:91:5f:ca:fa: e5:2b:94:ab -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xnB+A2oYnm8UFY59JH2KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViZWM5MDMwYzcwYTNkNDE5MmQ1OWMyOGRjYzhkNTQ3Njk0 MzQwYjMwHhcNMjYwMTAxMDQxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTBkODYxNGJkZGQ5YzQyYjMyNTIwMGYyZWNkNWFjNDAwYTFkNjcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoCfW9CsfH+ZONVYokUOF58gb2Tf dpCZHwogkoTvcVd23yI3gpo+XDYZCNuGoQCWOcx9x9zTs5RKPpZLyS+nowu4yMH3 j73W95jglzUTi570+0uBB6YDI7TcBf5fVYt/h8OOmCV88KXEKZ+pwQRsXtVpjjaU tAhJpkgG7GW/zoNa1Aj0KPEZjNqGt3F+pn2JyndqeS2GRhWD8QKt1tFB7iNO+mng mvcBIZD2QzcgyPdQZy66Y7VrqaeX/YQGM/9eNARoKE5qeY9y+g7m3HEGawsRFxQQ ZiS9WNrlRmZet10mszOBZuavUf5rfqQDZkjD6OUmRt3H/ElrjIahfnKPKwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFIUNhhS93ZxCsyUgDy7NWsQAodZxMB8GA1UdIwQY MBaAFOvskDDHCj1BktWcKNzI1UdpQ0CzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNi15UU1NY0tQVUdTMVp3bzNNalZSMmxEUUxNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8zNzJiODctOTVmNC00Yzk4LWE2ZjQt NGE2Zjg2ODMyNjVjLzEvaFEyR0ZMM2RuRUt6SlNBUExzMWF4QUNoMW5FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8zNzJiODctOTVmNC00Yzk4LWE2ZjQtNGE2Zjg2ODMyNjVj LzEvNi15UU1NY0tQVUdTMVp3bzNNalZSMmxEUUxNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAUuI6AD BAEuI6gwDQYJKoZIhvcNAQELBQADggEBAFT1BnJUaV06t+o6ZAHAI4d3GEkmvRrl FExFzu9H8wl4f2H0h/flSyDyGti+YRRP+RMYrX2VY/tZTlpi6v7JHyQqXhMvOoI3 BEELRvO5vJEdBWoCP6eYPoUfV8434WurkiE6IFVSJSBZl6JBYUqSG6YrNm8s+AYj sV4yFstvW4pZdOGPPtvjVoW9m4t3Gqfs5S5N68DG8pkRVx9FZxpWyyJW5alZV/c2 cDgsX4sO+4zG0AjQsLedboqHSbX4ktDYbvZldNW9KGoUaT0OfWuufVIbiUF3eH1m Ofr0Q2qVG+U0Fiu0TAgEdBYVsti951+AXdt26KP8gPHykV/K+uUrlKs= -----END CERTIFICATE-----Generated at Sun Jan 25 12:18:04 2026 by rpki-client