This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/HBS5CYoNWOXobGPomOlaeFTG4h8.roa File: HBS5CYoNWOXobGPomOlaeFTG4h8.roa (raw, json) Hash identifier: D7vH7TbSVaq4pp/oo4dyUnQisHAJ6z4gW2NLDiuh3AQ= Subject key identifier: 1C:14:B9:09:8A:0D:58:E5:E8:6C:63:E8:98:E9:5A:78:54:C6:E2:1F Certificate issuer: /CN=e37ee1eced19f8a0a3a635bfaa264293e3437795 Certificate serial: 019B77C756347BB122C909EA1E2960DF298B Authority key identifier: E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/HBS5CYoNWOXobGPomOlaeFTG4h8.roa Signing time: Thu 01 Jan 2026 04:18:31 +0000 ROA not before: Thu 01 Jan 2026 04:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205547 IP address blocks: 46.32.168.0/24 maxlen: 24 46.32.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:56:34:7b:b1:22:c9:09:ea:1e:29:60:df:29:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e37ee1eced19f8a0a3a635bfaa264293e3437795 Validity Not Before: Jan 1 04:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1c14b9098a0d58e5e86c63e898e95a7854c6e21f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:65:74:ee:9c:83:8a:a5:b8:90:36:9f:b4:7f: c7:d9:51:c7:b2:c7:f7:c2:c2:de:a5:c1:6d:b4:09: 74:13:a6:85:f7:98:e2:99:9d:36:0b:7f:0a:9a:16: 46:1a:29:2b:2a:00:9d:15:23:19:8b:e7:8c:bf:21: 35:5c:71:7a:9a:6a:0b:24:3e:7b:b1:9a:a0:61:6e: eb:5c:2c:60:27:17:96:0a:b2:38:27:a2:b5:e3:c8: 44:48:45:db:ae:52:9a:a1:e7:1d:07:ce:ef:53:bf: 8e:07:e4:71:f7:e5:dc:85:ca:49:f9:6a:e1:dd:52: 1e:8c:ed:9b:c1:55:4b:91:ec:8c:8f:36:ac:6d:39: 9a:6c:55:53:ab:02:83:79:e7:d4:39:fe:ca:bf:41: c2:67:bb:a2:8c:67:2b:46:ad:36:a2:3e:3f:6a:4d: 71:14:a7:9f:c1:5c:6c:ab:41:75:6a:f5:9d:98:50: b4:e9:2d:37:8f:bf:7c:59:6b:33:e8:85:fc:87:a6: a2:05:2e:14:ab:00:81:58:0a:ec:34:95:6e:43:45: 60:19:9a:77:cd:ff:cf:6b:d8:68:38:e7:29:3b:cb: d4:c4:a1:9e:4e:f6:18:7e:fb:59:b1:e8:bd:2a:51: fc:28:ef:2d:f8:44:67:0b:6d:82:52:7b:2f:9a:e7: 16:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:14:B9:09:8A:0D:58:E5:E8:6C:63:E8:98:E9:5A:78:54:C6:E2:1F X509v3 Authority Key Identifier: keyid:E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/HBS5CYoNWOXobGPomOlaeFTG4h8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.32.168.0/24 46.32.174.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:cd:2d:16:e0:af:61:7e:50:38:78:5e:a2:88:2d:ed:19:e9: 91:c1:d3:2a:24:d2:7b:f9:19:fc:69:4d:81:a3:d7:4a:2e:4b: 5e:41:69:62:81:22:d5:50:4a:91:10:15:d1:48:6c:56:0c:96: fb:cd:d7:9c:82:e5:82:85:a1:ec:8e:a5:f8:d9:1f:a2:1b:28: c5:ef:51:67:94:e1:62:c4:b7:94:08:68:51:db:1c:06:c1:03: ce:01:ab:01:46:e0:96:bf:20:76:1a:06:71:1a:4f:fc:82:40: 3f:7c:b0:27:1a:fa:9d:8c:15:d8:c1:24:7b:27:d9:82:0b:36: 6d:0b:c8:2a:34:84:a4:ed:92:c7:c5:24:ae:88:d7:c3:8d:b8: 11:28:63:2b:b7:9b:8c:d5:08:64:0f:4e:8b:a8:ba:3e:15:d1: 70:ed:bc:9e:fe:96:93:ad:31:18:13:2e:92:37:53:4a:fa:ea: 86:3c:d6:39:66:4c:14:ac:81:3b:ee:8c:46:bf:ff:65:7b:09: 9a:96:c6:bf:dd:3a:04:2c:5c:4e:c4:32:07:34:9b:8e:f8:a7: 69:36:1f:a7:26:b2:3c:de:7e:41:72:5d:6a:5e:b8:af:60:bb: 4e:50:09:c1:6f:a3:12:9c:27:a4:43:48:f6:79:ed:e8:02:0a: 5a:a9:01:b5 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3x1Y0e7EiyQnqHilg3ymLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzN2VlMWVjZWQxOWY4YTBhM2E2MzViZmFhMjY0MjkzZTM0 Mzc3OTUwHhcNMjYwMTAxMDQxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzE0YjkwOThhMGQ1OGU1ZTg2YzYzZTg5OGU5NWE3ODU0YzZlMjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGV07pyDiqW4kDaftH/H2VHHssf3 wsLepcFttAl0E6aF95jimZ02C38KmhZGGikrKgCdFSMZi+eMvyE1XHF6mmoLJD57 sZqgYW7rXCxgJxeWCrI4J6K148hESEXbrlKaoecdB87vU7+OB+Rx9+XchcpJ+Wrh 3VIejO2bwVVLkeyMjzasbTmabFVTqwKDeefUOf7Kv0HCZ7uijGcrRq02oj4/ak1x FKefwVxsq0F1avWdmFC06S03j798WWsz6IX8h6aiBS4UqwCBWArsNJVuQ0VgGZp3 zf/Pa9hoOOcpO8vUxKGeTvYYfvtZsei9KlH8KO8t+ERnC22CUnsvmucWUwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBwUuQmKDVjl6Gxj6JjpWnhUxuIfMB8GA1UdIwQY MBaAFON+4eztGfigo6Y1v6omQpPjQ3eVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC82ZDVkNzUtNGQxZS00Njk3LWIxZDMt MzZlMzQ0YWJjOWQzLzEvSEJTNUNZb05XT1hvYkdQb21PbGFlRlRHNGg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC82ZDVkNzUtNGQxZS00Njk3LWIxZDMtMzZlMzQ0YWJjOWQz LzEvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALiCoAwQA LiCuMA0GCSqGSIb3DQEBCwUAA4IBAQCKzS0W4K9hflA4eF6iiC3tGemRwdMqJNJ7 +Rn8aU2Bo9dKLkteQWligSLVUEqREBXRSGxWDJb7zdecguWChaHsjqX42R+iGyjF 71FnlOFixLeUCGhR2xwGwQPOAasBRuCWvyB2GgZxGk/8gkA/fLAnGvqdjBXYwSR7 J9mCCzZtC8gqNISk7ZLHxSSuiNfDjbgRKGMrt5uM1QhkD06LqLo+FdFw7bye/paT rTEYEy6SN1NK+uqGPNY5ZkwUrIE77oxGv/9lewmalsa/3ToELFxOxDIHNJuO+Kdp Nh+nJrI83n5Bcl1qXrivYLtOUAnBb6MSnCekQ0j2ee3oAgpaqQG1 -----END CERTIFICATE-----Generated at Sun Jan 25 18:05:33 2026 by rpki-client