This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/nHHN0WPLlHYApdgpFpnFyF7FXNo.roa File: nHHN0WPLlHYApdgpFpnFyF7FXNo.roa (raw, json) Hash identifier: xucnQbWZYtMeJ0bkGPwNcpkM2rdQLkCGv8+6HH3/d1M= Subject key identifier: 9C:71:CD:D1:63:CB:94:76:00:A5:D8:29:16:99:C5:C8:5E:C5:5C:DA Certificate issuer: /CN=d4afe3f0c9e555e52d3505d6163278df3da18cee Certificate serial: 019BE5E81462FCA90E38DC3AEAB5168C5041 Authority key identifier: D4:AF:E3:F0:C9:E5:55:E5:2D:35:05:D6:16:32:78:DF:3D:A1:8C:EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/nHHN0WPLlHYApdgpFpnFyF7FXNo.roa Signing time: Thu 22 Jan 2026 13:32:30 +0000 ROA not before: Thu 22 Jan 2026 13:32:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211373 IP address blocks: 194.53.139.0/24 maxlen: 24 213.239.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e5:e8:14:62:fc:a9:0e:38:dc:3a:ea:b5:16:8c:50:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4afe3f0c9e555e52d3505d6163278df3da18cee Validity Not Before: Jan 22 13:32:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9c71cdd163cb947600a5d8291699c5c85ec55cda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:07:80:f5:33:d9:ad:75:f7:ea:29:46:5d:b9: 6f:b4:5f:99:e5:97:eb:8f:b8:22:8a:93:3b:cb:b8: 9f:c5:b2:8a:6e:aa:f7:0c:2e:aa:d4:0b:f4:b7:3a: 72:39:98:97:6c:02:92:1f:ce:87:37:ce:54:ed:ea: b1:ab:ee:2f:3d:61:d3:20:46:e0:31:24:6f:52:18: 62:67:60:af:f0:31:54:8b:39:44:9f:e0:70:8c:c1: 17:78:c2:26:e0:6f:fb:db:b5:86:0e:8e:cf:88:55: fc:1f:ac:80:c7:64:6e:e2:7d:11:48:81:0a:6c:05: 24:23:e3:24:d9:25:9d:77:31:2a:33:30:2f:c4:61: 14:08:6f:dc:47:60:f1:45:cd:95:e4:4d:40:de:2f: fe:a4:37:e3:45:e0:ed:b6:80:d7:7c:d2:c0:db:39: 91:69:9c:f0:37:59:bb:d5:cd:60:e7:82:c1:67:ac: 6e:85:c7:5e:58:0f:96:c9:9c:7d:e0:1b:ae:c5:cd: f7:10:3a:98:de:fe:c4:40:9d:76:63:b2:23:0f:0f: 3b:64:cc:aa:7a:d2:c3:6f:f8:1f:28:d8:c4:5d:8b: ae:00:25:7b:28:bb:1a:e5:29:e7:86:d2:75:16:e4: 9f:3f:2a:56:76:41:ec:f9:93:cc:bc:41:87:55:da: 7d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:71:CD:D1:63:CB:94:76:00:A5:D8:29:16:99:C5:C8:5E:C5:5C:DA X509v3 Authority Key Identifier: keyid:D4:AF:E3:F0:C9:E5:55:E5:2D:35:05:D6:16:32:78:DF:3D:A1:8C:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/nHHN0WPLlHYApdgpFpnFyF7FXNo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.53.139.0/24 213.239.138.0/24 Signature Algorithm: sha256WithRSAEncryption 90:35:1c:56:f6:de:d1:73:37:03:5a:98:2a:87:d9:bc:53:ea: 10:12:6d:bc:95:51:87:11:3e:8c:e8:21:c9:05:e3:7b:af:ae: 05:58:df:41:ba:56:43:5e:be:27:18:6d:ef:fa:d3:01:5e:46: 57:9e:79:95:94:36:da:00:ab:85:42:a3:3c:92:83:9b:8a:b3: 73:2f:55:95:b9:09:12:8d:96:92:0b:ea:57:45:0c:f4:13:30: 48:22:6a:2a:16:fd:78:b3:f1:b3:51:6e:52:c6:ca:7a:d3:ec: 30:00:03:fb:47:c1:b7:0a:dd:45:2d:dc:2c:ba:36:65:95:73: 84:d2:89:08:23:ff:64:1d:09:59:3a:9d:59:39:c3:bc:e4:17: 41:3b:90:8e:3d:b2:26:4b:96:6c:ff:56:d4:ae:97:53:63:d5: bb:28:4f:58:af:f1:2b:22:74:6b:1c:17:d3:d0:c9:fb:76:d7: e7:32:8a:15:b4:f4:94:28:a4:a3:96:c0:bb:15:a2:80:d1:3e: 76:4c:22:ab:14:50:7a:db:bb:13:72:73:70:db:99:b0:0f:b6: 3d:ec:46:76:fc:ff:41:d4:b4:a8:8d:c4:c3:fd:fb:a3:b2:e3: b9:3c:59:58:37:10:a0:be:9e:c2:8f:2c:57:ce:a5:06:73:47: a3:45:97:a3 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZvl6BRi/KkOONw66rUWjFBBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0YWZlM2YwYzllNTU1ZTUyZDM1MDVkNjE2MzI3OGRmM2Rh MThjZWUwHhcNMjYwMTIyMTMzMjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YzcxY2RkMTYzY2I5NDc2MDBhNWQ4MjkxNjk5YzVjODVlYzU1Y2RhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAeA9TPZrXX36ilGXblvtF+Z5Zfr j7giipM7y7ifxbKKbqr3DC6q1Av0tzpyOZiXbAKSH86HN85U7eqxq+4vPWHTIEbg MSRvUhhiZ2Cv8DFUizlEn+BwjMEXeMIm4G/727WGDo7PiFX8H6yAx2Ru4n0RSIEK bAUkI+Mk2SWddzEqMzAvxGEUCG/cR2DxRc2V5E1A3i/+pDfjReDttoDXfNLA2zmR aZzwN1m71c1g54LBZ6xuhcdeWA+WyZx94Buuxc33EDqY3v7EQJ12Y7IjDw87ZMyq etLDb/gfKNjEXYuuACV7KLsa5SnnhtJ1FuSfPypWdkHs+ZPMvEGHVdp9vQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJxxzdFjy5R2AKXYKRaZxchexVzaMB8GA1UdIwQY MBaAFNSv4/DJ5VXlLTUF1hYyeN89oYzuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUtfajhNbmxWZVV0TlFYV0ZqSjQzejJoak80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8xYzY3ZWYtZTgzZC00NDI3LTg2NGIt YzU5ODI1YmJjYjMyLzEvbkhITjBXUExsSFlBcGRncEZwbkZ5RjdGWE5vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8xYzY3ZWYtZTgzZC00NDI3LTg2NGItYzU5ODI1YmJjYjMy LzEvMUtfajhNbmxWZVV0TlFYV0ZqSjQzejJoak80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwjWLAwQA 1e+KMA0GCSqGSIb3DQEBCwUAA4IBAQCQNRxW9t7RczcDWpgqh9m8U+oQEm28lVGH ET6M6CHJBeN7r64FWN9BulZDXr4nGG3v+tMBXkZXnnmVlDbaAKuFQqM8koObirNz L1WVuQkSjZaSC+pXRQz0EzBIImoqFv14s/GzUW5Sxsp60+wwAAP7R8G3Ct1FLdws ujZllXOE0okII/9kHQlZOp1ZOcO85BdBO5COPbImS5Zs/1bUrpdTY9W7KE9Yr/Er InRrHBfT0Mn7dtfnMooVtPSUKKSjlsC7FaKA0T52TCKrFFB627sTcnNw25mwD7Y9 7EZ2/P9B1LSojcTD/fujsuO5PFlYNxCgvp7CjyxXzqUGc0ejRZej -----END CERTIFICATE-----Generated at Sun Jan 25 16:09:47 2026 by rpki-client