This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/HhZLJKHTDSxUIKRb-RQDIpmwb2c.roa File: HhZLJKHTDSxUIKRb-RQDIpmwb2c.roa (raw, json) Hash identifier: a/gPxO3vEuqfCp70KpDQq2lcCKuUQZuTopPVCy8m4LA= Subject key identifier: 1E:16:4B:24:A1:D3:0D:2C:54:20:A4:5B:F9:14:03:22:99:B0:6F:67 Certificate issuer: /CN=5d86c47da6d9079347b60f04ed5c5557fe983eb8 Certificate serial: 019B7BA4C33D8F51415A1F82B74100C1B7F2 Authority key identifier: 5D:86:C4:7D:A6:D9:07:93:47:B6:0F:04:ED:5C:55:57:FE:98:3E:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/HhZLJKHTDSxUIKRb-RQDIpmwb2c.roa Signing time: Thu 01 Jan 2026 22:19:14 +0000 ROA not before: Thu 01 Jan 2026 22:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39011 IP address blocks: 194.102.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.crl rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.mft rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:c3:3d:8f:51:41:5a:1f:82:b7:41:00:c1:b7:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d86c47da6d9079347b60f04ed5c5557fe983eb8 Validity Not Before: Jan 1 22:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1e164b24a1d30d2c5420a45bf914032299b06f67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:7f:59:a5:a6:8c:e1:99:b5:cd:7d:e9:aa:51: 75:bb:be:04:b5:8f:b9:50:40:0c:79:e5:dc:3e:ed: 4d:b9:4c:cd:98:d7:98:2f:b7:1a:20:8b:ae:37:39: a7:b9:14:90:0a:a0:fb:84:4f:b8:dc:36:af:06:f9: 9e:98:44:52:08:99:66:c3:a3:9a:3c:1e:f4:ee:10: 01:22:77:b6:7f:8a:d1:c9:19:45:35:f9:e4:79:fd: cd:72:de:e9:53:0f:6d:5f:de:9a:62:3e:d4:c2:06: 4b:8b:5c:d2:53:2a:62:d0:53:89:00:34:e2:90:35: 1c:5d:ba:f5:38:63:c9:6b:d8:17:2f:bf:db:b5:a7: 5f:52:ec:a5:66:f1:a8:c4:21:fb:5a:68:77:29:14: 5e:9f:19:e4:83:3a:7e:75:b7:b4:48:76:0e:5e:e1: a9:97:f4:29:b6:90:87:54:62:71:28:c4:af:87:66: f1:c2:7b:f3:89:46:6f:16:10:09:72:ab:3f:c6:cf: 08:b3:d9:00:2a:5e:15:e0:29:6d:c2:48:91:f6:7c: a9:e8:17:b9:63:e9:f2:ae:52:8e:de:6c:93:75:2d: c6:fb:f7:6e:49:86:c7:05:32:00:40:6a:48:2e:10: d6:1c:04:c7:7a:98:5b:f0:ab:01:2f:fc:79:2d:4d: 70:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:16:4B:24:A1:D3:0D:2C:54:20:A4:5B:F9:14:03:22:99:B0:6F:67 X509v3 Authority Key Identifier: keyid:5D:86:C4:7D:A6:D9:07:93:47:B6:0F:04:ED:5C:55:57:FE:98:3E:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/HhZLJKHTDSxUIKRb-RQDIpmwb2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.102.204.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:47:db:b2:24:75:0e:15:8e:26:94:af:df:96:de:f1:11:a7: 2a:52:11:82:bd:0c:76:ba:c6:4c:61:dd:b9:c1:f3:bc:8f:1d: 45:2f:7b:77:49:23:15:34:ec:0a:77:2e:24:9a:9e:d5:cc:cb: 90:46:cb:64:54:7d:1b:9c:2d:4c:e8:df:8d:8b:c9:be:e6:83: f6:b3:62:70:24:b0:44:2c:0a:cc:2f:e2:fd:86:2b:a8:c6:3b: 6d:a0:86:a5:67:95:df:af:19:4d:21:a3:5d:8c:aa:40:b3:7f: 4f:d4:9c:b0:89:06:8e:34:09:cf:29:26:9c:b9:d5:83:f0:88: bf:9b:f0:35:49:66:1c:30:ec:e2:c3:88:13:49:0c:b7:30:3e: de:47:b3:40:25:37:93:09:9f:d5:9b:b6:de:cc:aa:ec:29:b8: e2:4d:48:fb:2d:83:64:bb:39:c1:b8:ff:a6:a4:dd:5b:5a:81: 40:cd:59:c6:27:b4:1f:ac:72:5a:8a:ae:e0:5d:e6:f6:e5:7e: 34:e6:e8:10:eb:35:b2:94:42:a6:ce:b7:23:56:43:06:03:e5: 56:e8:93:c9:f6:44:fd:6c:c1:cc:b5:ee:96:28:2b:56:06:61: 13:0e:74:8a:90:ec:cb:45:11:a7:a4:c0:52:70:f9:57:a4:95: e1:02:50:ff -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pMM9j1FBWh+Ct0EAwbfyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkODZjNDdkYTZkOTA3OTM0N2I2MGYwNGVkNWM1NTU3ZmU5 ODNlYjgwHhcNMjYwMTAxMjIxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZTE2NGIyNGExZDMwZDJjNTQyMGE0NWJmOTE0MDMyMjk5YjA2ZjY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1n9ZpaaM4Zm1zX3pqlF1u74EtY+5 UEAMeeXcPu1NuUzNmNeYL7caIIuuNzmnuRSQCqD7hE+43DavBvmemERSCJlmw6Oa PB707hABIne2f4rRyRlFNfnkef3Nct7pUw9tX96aYj7UwgZLi1zSUypi0FOJADTi kDUcXbr1OGPJa9gXL7/btadfUuylZvGoxCH7Wmh3KRRenxnkgzp+dbe0SHYOXuGp l/QptpCHVGJxKMSvh2bxwnvziUZvFhAJcqs/xs8Is9kAKl4V4CltwkiR9nyp6Be5 Y+nyrlKO3myTdS3G+/duSYbHBTIAQGpILhDWHATHephb8KsBL/x5LU1wRQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB4WSySh0w0sVCCkW/kUAyKZsG9nMB8GA1UdIwQY MBaAFF2GxH2m2QeTR7YPBO1cVVf+mD64MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFliRWZhYlpCNU5IdGc4RTdWeFZWXzZZUHJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9kZjY2YTAtYzk1OC00ZTVjLWE2ZGYt ZmM2MzI4NDFiYTNlLzEvSGhaTEpLSFREU3hVSUtSYi1SUURJcG13YjJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9kZjY2YTAtYzk1OC00ZTVjLWE2ZGYtZmM2MzI4NDFiYTNl LzEvWFliRWZhYlpCNU5IdGc4RTdWeFZWXzZZUHJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwmbMMA0G CSqGSIb3DQEBCwUAA4IBAQBtR9uyJHUOFY4mlK/flt7xEacqUhGCvQx2usZMYd25 wfO8jx1FL3t3SSMVNOwKdy4kmp7VzMuQRstkVH0bnC1M6N+Ni8m+5oP2s2JwJLBE LArML+L9hiuoxjttoIalZ5XfrxlNIaNdjKpAs39P1JywiQaONAnPKSacudWD8Ii/ m/A1SWYcMOziw4gTSQy3MD7eR7NAJTeTCZ/Vm7bezKrsKbjiTUj7LYNkuznBuP+m pN1bWoFAzVnGJ7QfrHJaiq7gXeb25X405ugQ6zWylEKmzrcjVkMGA+VW6JPJ9kT9 bMHMte6WKCtWBmETDnSKkOzLRRGnpMBScPlXpJXhAlD/ -----END CERTIFICATE-----Generated at Sun Jan 25 17:20:22 2026 by rpki-client