This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/hARTp8Mibx8WODEuOIUHpvobncw.roa File: hARTp8Mibx8WODEuOIUHpvobncw.roa (raw, json) Hash identifier: xaYjb6X7y2C4MO+aFX5sY8YM6es27SbRjICMp6w4VYw= Subject key identifier: 84:04:53:A7:C3:22:6F:1F:16:38:31:2E:38:85:07:A6:FA:1B:9D:CC Certificate issuer: /CN=290bcc50a9a33ba5651efd1afe40b6fdb02556f0 Certificate serial: 019B7DCA297F71828A5C568D85FD1D397EBB Authority key identifier: 29:0B:CC:50:A9:A3:3B:A5:65:1E:FD:1A:FE:40:B6:FD:B0:25:56:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQvMUKmjO6VlHv0a_kC2_bAlVvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/hARTp8Mibx8WODEuOIUHpvobncw.roa Signing time: Fri 02 Jan 2026 08:19:19 +0000 ROA not before: Fri 02 Jan 2026 08:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215730 IP address blocks: 45.144.52.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.crl rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft rsync://rpki.ripe.net/repository/DEFAULT/KQvMUKmjO6VlHv0a_kC2_bAlVvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:29:7f:71:82:8a:5c:56:8d:85:fd:1d:39:7e:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=290bcc50a9a33ba5651efd1afe40b6fdb02556f0 Validity Not Before: Jan 2 08:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=840453a7c3226f1f1638312e388507a6fa1b9dcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:97:8d:2b:55:79:fb:36:7d:ea:c5:70:69:12: 24:51:18:83:54:d7:6b:e3:c6:55:7d:9e:7a:cb:da: e9:58:df:94:4d:01:42:cd:2a:82:15:d3:76:d6:30: 3c:ab:f6:56:d8:29:9d:d0:24:eb:b3:d3:c6:c8:d6: 05:60:b2:52:6f:41:c1:6b:44:62:11:b6:46:49:81: 73:9b:bb:d4:1b:05:de:f5:87:11:ed:b3:13:8d:d2: 52:a1:23:43:7e:d5:3e:51:60:22:e8:81:50:82:14: 4a:1b:0a:5f:4b:7c:e6:f4:98:7a:0e:07:7d:4e:99: 78:73:04:4b:e7:34:25:a2:3d:b0:fb:18:63:29:ca: 07:e9:52:6d:48:4a:6d:ce:b0:3b:29:4e:1a:db:9c: aa:d2:2f:9b:75:ac:40:f8:6d:6f:08:a3:c5:82:5c: 4e:32:e6:f1:9b:b3:8e:85:24:74:8c:35:69:11:c8: 24:fe:ed:42:cd:b6:4e:63:4a:5a:d8:a4:94:d0:72: 34:32:a3:07:bc:d1:27:a4:32:ec:20:24:2e:db:92: af:44:e0:92:4a:45:a6:d9:fe:fa:cb:1f:3c:9c:36: 5b:88:46:9e:f2:7a:a6:6a:2c:5d:78:a8:21:bd:1e: 77:75:58:41:7d:91:3c:03:2a:d1:7c:b8:48:a0:79: eb:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:04:53:A7:C3:22:6F:1F:16:38:31:2E:38:85:07:A6:FA:1B:9D:CC X509v3 Authority Key Identifier: keyid:29:0B:CC:50:A9:A3:3B:A5:65:1E:FD:1A:FE:40:B6:FD:B0:25:56:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQvMUKmjO6VlHv0a_kC2_bAlVvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/hARTp8Mibx8WODEuOIUHpvobncw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.144.52.0/23 Signature Algorithm: sha256WithRSAEncryption 30:e4:a9:f5:b2:5b:c7:ea:e9:fa:de:50:a3:81:bd:de:a8:5d: ea:3f:0a:6f:c2:a0:e4:ff:28:39:16:03:3a:88:01:f9:46:20: 1d:0f:8e:f5:a1:21:3e:b4:c1:0a:1c:1d:c1:7e:ff:e4:de:54: 66:4e:90:f9:17:d9:c8:8e:fa:29:d3:73:9b:9d:55:d3:6a:55: 8a:51:40:e5:ce:45:b4:84:13:ae:8a:88:bd:37:94:23:34:46: db:5a:b6:c5:92:a5:8c:cf:31:f4:03:90:81:c0:30:0d:0d:68: 9d:a5:d6:aa:dc:f5:b6:b2:c5:1e:d6:b5:1f:56:b5:13:10:83: fc:24:d4:6e:11:64:e5:2f:0f:9b:8f:15:4d:f0:49:f7:aa:c3: 1c:6a:8a:ed:84:84:12:98:75:5a:75:d9:ad:27:2c:b7:88:99: d1:fc:9c:f9:06:f5:ae:34:8c:d8:89:3d:29:94:58:7e:a9:db: ac:97:9e:3c:df:4a:cd:d5:3c:26:2e:77:2c:86:61:96:a2:70: 98:1d:61:bb:6f:b1:eb:ed:d3:5e:52:c4:7c:b7:05:3a:02:24: 9b:ab:ab:6f:43:d4:34:da:cb:f7:9b:12:02:3c:76:40:05:b8: eb:02:db:15:e0:49:89:bb:9e:fb:7b:ac:e9:e3:1c:d5:cb:ae: e9:82:fb:17 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yil/cYKKXFaNhf0dOX67MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MGJjYzUwYTlhMzNiYTU2NTFlZmQxYWZlNDBiNmZkYjAy NTU2ZjAwHhcNMjYwMTAyMDgxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDA0NTNhN2MzMjI2ZjFmMTYzODMxMmUzODg1MDdhNmZhMWI5ZGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpeNK1V5+zZ96sVwaRIkURiDVNdr 48ZVfZ56y9rpWN+UTQFCzSqCFdN21jA8q/ZW2Cmd0CTrs9PGyNYFYLJSb0HBa0Ri EbZGSYFzm7vUGwXe9YcR7bMTjdJSoSNDftU+UWAi6IFQghRKGwpfS3zm9Jh6Dgd9 Tpl4cwRL5zQloj2w+xhjKcoH6VJtSEptzrA7KU4a25yq0i+bdaxA+G1vCKPFglxO Mubxm7OOhSR0jDVpEcgk/u1CzbZOY0pa2KSU0HI0MqMHvNEnpDLsICQu25KvROCS SkWm2f76yx88nDZbiEae8nqmaixdeKghvR53dVhBfZE8AyrRfLhIoHnrQQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIQEU6fDIm8fFjgxLjiFB6b6G53MMB8GA1UdIwQY MBaAFCkLzFCpozulZR79Gv5Atv2wJVbwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1F2TVVLbWpPNlZsSHYwYV9rQzJfYkFsVnZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi80YjZlZjQtMzhlZS00YzA2LThjYjYt NzY5ODI0OTNlYTFhLzEvaEFSVHA4TWlieDhXT0RFdU9JVUhwdm9ibmN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi80YjZlZjQtMzhlZS00YzA2LThjYjYtNzY5ODI0OTNlYTFh LzEvS1F2TVVLbWpPNlZsSHYwYV9rQzJfYkFsVnZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZA0MA0G CSqGSIb3DQEBCwUAA4IBAQAw5Kn1slvH6un63lCjgb3eqF3qPwpvwqDk/yg5FgM6 iAH5RiAdD471oSE+tMEKHB3Bfv/k3lRmTpD5F9nIjvop03ObnVXTalWKUUDlzkW0 hBOuioi9N5QjNEbbWrbFkqWMzzH0A5CBwDANDWidpdaq3PW2ssUe1rUfVrUTEIP8 JNRuEWTlLw+bjxVN8En3qsMcaorthIQSmHVaddmtJyy3iJnR/Jz5BvWuNIzYiT0p lFh+qdusl54830rN1TwmLncshmGWonCYHWG7b7Hr7dNeUsR8twU6AiSbq6tvQ9Q0 2sv3mxICPHZABbjrAtsV4EmJu577e6zp4xzVy67pgvsX -----END CERTIFICATE-----Generated at Sun Jan 25 18:06:37 2026 by rpki-client