This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/St46xIo1d9knxq8PKrr8XW7TwzU.roa File: St46xIo1d9knxq8PKrr8XW7TwzU.roa (raw, json) Hash identifier: 5UDdZgZaEMq8c+SXgir/OU7FrS+ku+43OPJRvyq63so= Subject key identifier: 4A:DE:3A:C4:8A:35:77:D9:27:C6:AF:0F:2A:BA:FC:5D:6E:D3:C3:35 Certificate issuer: /CN=1f0c8d80c3a34275f03e28ed79864cee26948dc7 Certificate serial: 019B7CED1A5C5F338693C71B106C866E4358 Authority key identifier: 1F:0C:8D:80:C3:A3:42:75:F0:3E:28:ED:79:86:4C:EE:26:94:8D:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwyNgMOjQnXwPijteYZM7iaUjcc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/St46xIo1d9knxq8PKrr8XW7TwzU.roa Signing time: Fri 02 Jan 2026 04:17:52 +0000 ROA not before: Fri 02 Jan 2026 04:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207367 IP address blocks: 185.65.142.0/24 maxlen: 24 2a10:300::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.crl rsync://rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.mft rsync://rpki.ripe.net/repository/DEFAULT/HwyNgMOjQnXwPijteYZM7iaUjcc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:1a:5c:5f:33:86:93:c7:1b:10:6c:86:6e:43:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f0c8d80c3a34275f03e28ed79864cee26948dc7 Validity Not Before: Jan 2 04:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4ade3ac48a3577d927c6af0f2abafc5d6ed3c335 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3e:cf:61:8c:77:26:e9:ef:59:c7:0b:4f:e2: 27:15:e5:ef:01:b0:bd:31:8e:ad:b0:82:8e:90:d5: 4d:7e:8b:33:66:f9:00:cb:9c:dc:17:e0:52:97:ec: da:6e:6d:a8:15:8d:99:b7:3b:74:54:06:9d:52:f0: f3:b6:5e:bb:25:9d:3d:9d:c0:19:a3:5f:41:b9:67: 95:6c:31:d8:d2:0a:89:95:2e:05:b4:7b:05:6e:bb: 29:18:5d:1e:ad:08:93:ed:03:2a:da:89:d6:11:0a: 7d:8c:cf:44:67:40:fd:45:1d:3a:80:62:f9:ca:3b: 9b:0f:83:8f:d6:11:b3:b0:69:fa:64:19:ea:65:34: 8d:67:ce:d7:41:a2:93:15:96:36:a0:35:72:a4:5e: ad:f0:c6:3d:ea:40:b0:98:5b:8f:31:91:82:11:31: 1c:f8:59:b5:0b:eb:cf:5a:75:75:8d:08:12:02:18: de:2f:5f:be:d7:01:52:ba:63:d2:2a:d9:93:c9:21: fd:8c:65:67:38:89:21:1c:a3:8e:6e:f6:50:67:02: db:ef:d6:95:85:23:47:26:b3:51:c8:ec:49:ed:b7: e3:ce:b9:ee:29:e1:ab:5d:17:d2:2d:8a:56:02:a2: 80:a2:5f:3d:28:8c:4f:83:ed:05:9c:ae:88:fe:d1: b3:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:DE:3A:C4:8A:35:77:D9:27:C6:AF:0F:2A:BA:FC:5D:6E:D3:C3:35 X509v3 Authority Key Identifier: keyid:1F:0C:8D:80:C3:A3:42:75:F0:3E:28:ED:79:86:4C:EE:26:94:8D:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwyNgMOjQnXwPijteYZM7iaUjcc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/St46xIo1d9knxq8PKrr8XW7TwzU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.65.142.0/24 IPv6: 2a10:300::/29 Signature Algorithm: sha256WithRSAEncryption 50:aa:7d:f1:eb:ac:d6:b0:d0:9c:69:df:bc:f1:91:a5:51:cb: ca:37:3b:71:0c:96:ea:d2:4c:88:30:b8:4d:76:5f:4b:a9:0f: bb:1e:1a:db:74:d4:ef:c2:9e:88:44:03:c9:a4:09:30:16:9d: 67:5e:47:da:ce:26:72:7c:69:6f:24:93:92:d1:65:f7:9d:38: 6e:be:80:a1:1d:a6:20:c7:bb:14:d6:75:39:8d:a8:31:6e:ac: e6:21:36:c8:d1:1a:a5:1f:7c:cc:02:bf:60:11:a1:7b:05:d8: 53:02:a7:29:80:50:f6:76:63:05:e4:51:49:c6:8a:ba:31:21: 15:05:d3:d6:92:49:00:e6:46:03:39:ce:12:ae:4f:13:37:82: 11:04:ec:e0:fe:b1:f2:c2:7a:00:8b:59:75:be:ef:00:72:25: 14:61:c4:75:7d:99:f7:52:3a:ee:35:6a:00:13:8a:b5:16:92: 76:1a:7e:12:6f:39:b2:b4:46:a8:a1:e1:c6:56:a2:cd:10:d6: f7:7e:71:1f:ed:c6:83:70:44:50:3c:e1:3e:f9:f4:f7:67:3e: 96:a9:1a:6e:5f:ad:4e:c6:4f:91:af:2a:dd:88:a3:6f:22:c1: 4f:d6:dd:1d:fc:42:47:0c:2b:72:12:ce:3a:ac:1b:cb:bf:b1: 3d:68:8d:a5 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt87RpcXzOGk8cbEGyGbkNYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmMGM4ZDgwYzNhMzQyNzVmMDNlMjhlZDc5ODY0Y2VlMjY5 NDhkYzcwHhcNMjYwMTAyMDQxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YWRlM2FjNDhhMzU3N2Q5MjdjNmFmMGYyYWJhZmM1ZDZlZDNjMzM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwT7PYYx3JunvWccLT+InFeXvAbC9 MY6tsIKOkNVNfoszZvkAy5zcF+BSl+zabm2oFY2Ztzt0VAadUvDztl67JZ09ncAZ o19BuWeVbDHY0gqJlS4FtHsFbrspGF0erQiT7QMq2onWEQp9jM9EZ0D9RR06gGL5 yjubD4OP1hGzsGn6ZBnqZTSNZ87XQaKTFZY2oDVypF6t8MY96kCwmFuPMZGCETEc +Fm1C+vPWnV1jQgSAhjeL1++1wFSumPSKtmTySH9jGVnOIkhHKOObvZQZwLb79aV hSNHJrNRyOxJ7bfjzrnuKeGrXRfSLYpWAqKAol89KIxPg+0FnK6I/tGz2wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFEreOsSKNXfZJ8avDyq6/F1u08M1MB8GA1UdIwQY MBaAFB8MjYDDo0J18D4o7XmGTO4mlI3HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHd5TmdNT2pRblh3UGlqdGVZWk03aWFVamNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC83ZDhhNDItN2U4Mi00ZDE4LThhM2Mt ZjU0M2I5MTg1OTMyLzEvU3Q0NnhJbzFkOWtueHE4UEtycjhYVzdUd3pVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC83ZDhhNDItN2U4Mi00ZDE4LThhM2MtZjU0M2I5MTg1OTMy LzEvSHd5TmdNT2pRblh3UGlqdGVZWk03aWFVamNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuUGOMA0E AgACMAcDBQMqEAMAMA0GCSqGSIb3DQEBCwUAA4IBAQBQqn3x66zWsNCcad+88ZGl UcvKNztxDJbq0kyIMLhNdl9LqQ+7HhrbdNTvwp6IRAPJpAkwFp1nXkfaziZyfGlv JJOS0WX3nThuvoChHaYgx7sU1nU5jagxbqzmITbI0RqlH3zMAr9gEaF7BdhTAqcp gFD2dmMF5FFJxoq6MSEVBdPWkkkA5kYDOc4Srk8TN4IRBOzg/rHywnoAi1l1vu8A ciUUYcR1fZn3UjruNWoAE4q1FpJ2Gn4SbzmytEaooeHGVqLNENb3fnEf7caDcERQ POE++fT3Zz6WqRpuX61Oxk+RryrdiKNvIsFP1t0d/EJHDCtyEs46rBvLv7E9aI2l -----END CERTIFICATE-----Generated at Sat Jan 10 03:56:09 2026 by rpki-client