This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/nh-Wtkp8cIbeFTAbMCzHrogLZOk.roa File: nh-Wtkp8cIbeFTAbMCzHrogLZOk.roa (raw, json) Hash identifier: ZoPGJhQjngDKtHRl4GaKJCyCLGknp9jYT2TDKz7hc78= Subject key identifier: 9E:1F:96:B6:4A:7C:70:86:DE:15:30:1B:30:2C:C7:AE:88:0B:64:E9 Certificate issuer: /CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86 Certificate serial: 019B79ED20FF0D62A5C1ED630EAD61736861 Authority key identifier: E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/nh-Wtkp8cIbeFTAbMCzHrogLZOk.roa Signing time: Thu 01 Jan 2026 14:19:02 +0000 ROA not before: Thu 01 Jan 2026 14:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208088 IP address blocks: 94.188.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:20:ff:0d:62:a5:c1:ed:63:0e:ad:61:73:68:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86 Validity Not Before: Jan 1 14:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e1f96b64a7c7086de15301b302cc7ae880b64e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0a:8f:53:94:52:48:8f:e7:d6:ff:22:19:a7: cc:92:98:db:42:36:d6:89:e1:68:78:cb:12:9f:5e: 08:34:3b:79:98:7e:14:5a:0e:b2:a4:65:0a:4f:3b: cc:38:fe:f1:bb:58:43:7e:eb:44:e0:62:00:86:f4: 38:fc:00:df:6b:77:bd:46:85:6a:89:f1:9a:72:18: 9b:96:35:59:a0:ee:98:1e:87:95:47:70:4c:77:4c: 02:e0:7c:16:7c:f7:73:88:b4:04:c2:d9:bf:d6:97: 77:96:84:8d:dc:2f:ba:d8:d9:fa:3b:d0:bb:95:73: e6:0f:8e:4b:fd:ac:2e:8e:2d:1c:4b:77:00:c3:49: 99:7a:40:8e:d4:05:ff:c3:b9:6d:f7:fb:0b:51:da: 97:66:30:cf:92:eb:d5:9d:95:4b:cb:d5:ff:0a:6b: 9d:6f:5c:a0:a6:0b:c7:73:af:c5:dc:8a:49:c7:77: 46:64:f5:bf:bf:33:c5:88:63:89:5b:de:0c:2f:61: c7:13:d0:fb:b1:8e:68:59:ba:77:26:e3:9e:26:18: 81:ec:88:f5:25:a1:11:cd:9e:6e:f4:e8:d5:7f:70: 5b:f9:7a:2e:26:00:d8:a6:54:07:7f:76:62:ea:c7: 05:bc:d1:49:89:df:4e:87:6a:c1:26:ad:a3:b8:32: bb:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:1F:96:B6:4A:7C:70:86:DE:15:30:1B:30:2C:C7:AE:88:0B:64:E9 X509v3 Authority Key Identifier: keyid:E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/nh-Wtkp8cIbeFTAbMCzHrogLZOk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.188.184.0/24 Signature Algorithm: sha256WithRSAEncryption 46:d2:a9:7a:ce:8f:23:c7:e1:18:c2:c9:bf:bb:69:7c:27:0b: 56:95:c1:4d:52:76:64:ce:33:3a:68:2e:35:94:0f:d9:72:1c: 15:ce:aa:73:ef:39:9f:c4:fe:85:0c:c7:de:c8:21:5d:d5:7c: 50:d9:7d:1c:64:c4:30:f3:fc:b0:e9:93:b9:d8:f2:01:f4:72: df:f8:22:dc:78:23:7d:cb:12:f8:12:c4:6a:a9:6e:fe:b2:01: 72:50:ca:8b:76:9e:cb:f8:a7:dd:6d:23:27:98:84:73:90:7f: 64:53:12:72:8c:87:6a:8f:e0:80:e3:53:cf:b0:85:2c:5d:66: 0f:93:1c:3e:d6:e7:d4:4f:3b:27:cf:4c:51:34:bb:5f:d2:c9: a1:1e:5d:95:0a:fc:c9:f0:91:28:22:78:11:68:5d:4c:b5:a7: ae:a5:84:e3:be:bf:cd:27:b4:33:22:73:72:21:8b:e7:e4:16: eb:39:b4:c4:d6:18:96:46:a7:0c:90:6a:bd:15:58:5c:f8:ad: be:5c:57:86:4f:76:28:e7:a0:cf:9f:8a:ca:08:3c:36:52:c2: f0:e6:71:d4:a7:7a:24:bc:ba:65:25:3f:3e:ec:40:e6:38:99: 5f:66:56:58:10:a5:a2:2e:96:8d:51:47:91:f2:02:d9:84:39: 98:b7:78:5f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57SD/DWKlwe1jDq1hc2hhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDViYjQwMTE4MGU1NWY1YzE2NWQ0NzkwOGRmZjRmZTI5 YTBkODYwHhcNMjYwMTAxMTQxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTFmOTZiNjRhN2M3MDg2ZGUxNTMwMWIzMDJjYzdhZTg4MGI2NGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwqPU5RSSI/n1v8iGafMkpjbQjbW ieFoeMsSn14INDt5mH4UWg6ypGUKTzvMOP7xu1hDfutE4GIAhvQ4/ADfa3e9RoVq ifGachibljVZoO6YHoeVR3BMd0wC4HwWfPdziLQEwtm/1pd3loSN3C+62Nn6O9C7 lXPmD45L/awuji0cS3cAw0mZekCO1AX/w7lt9/sLUdqXZjDPkuvVnZVLy9X/Cmud b1ygpgvHc6/F3IpJx3dGZPW/vzPFiGOJW94ML2HHE9D7sY5oWbp3JuOeJhiB7Ij1 JaERzZ5u9OjVf3Bb+XouJgDYplQHf3Zi6scFvNFJid9Oh2rBJq2juDK71QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ4flrZKfHCG3hUwGzAsx66IC2TpMB8GA1UdIwQY MBaAFOLVu0ARgOVfXBZdR5CN/0/img2GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEt NDIxZTZiYzdlMmU4LzEvbmgtV3RrcDhjSWJlRlRBYk1Dekhyb2dMWk9rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEtNDIxZTZiYzdlMmU4 LzEvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXry4MA0G CSqGSIb3DQEBCwUAA4IBAQBG0ql6zo8jx+EYwsm/u2l8JwtWlcFNUnZkzjM6aC41 lA/ZchwVzqpz7zmfxP6FDMfeyCFd1XxQ2X0cZMQw8/yw6ZO52PIB9HLf+CLceCN9 yxL4EsRqqW7+sgFyUMqLdp7L+KfdbSMnmIRzkH9kUxJyjIdqj+CA41PPsIUsXWYP kxw+1ufUTzsnz0xRNLtf0smhHl2VCvzJ8JEoIngRaF1MtaeupYTjvr/NJ7QzInNy IYvn5BbrObTE1hiWRqcMkGq9FVhc+K2+XFeGT3Yo56DPn4rKCDw2UsLw5nHUp3ok vLplJT8+7EDmOJlfZlZYEKWiLpaNUUeR8gLZhDmYt3hf -----END CERTIFICATE-----Generated at Sun Jan 25 08:49:14 2026 by rpki-client