This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/hChaNSU7h8cdh-e93nEgJaejH8c.roa File: hChaNSU7h8cdh-e93nEgJaejH8c.roa (raw, json) Hash identifier: Gudwjiq/t5T7NuD7RxID02xwuiRTjEdOLzGaGDACPKc= Subject key identifier: 84:28:5A:35:25:3B:87:C7:1D:87:E7:BD:DE:71:20:25:A7:A3:1F:C7 Certificate issuer: /CN=8eb44b078522da9c31062b9c7ef7f51727e73e5e Certificate serial: 019AC495B0FD495BEA4C065357A9CBB17079 Authority key identifier: 8E:B4:4B:07:85:22:DA:9C:31:06:2B:9C:7E:F7:F5:17:27:E7:3E:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRLB4Ui2pwxBiucfvf1FyfnPl4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/hChaNSU7h8cdh-e93nEgJaejH8c.roa Signing time: Thu 27 Nov 2025 09:12:15 +0000 ROA not before: Thu 27 Nov 2025 09:12:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 8676 IP address blocks: 194.24.162.96/28 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.crl rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.mft rsync://rpki.ripe.net/repository/DEFAULT/jrRLB4Ui2pwxBiucfvf1FyfnPl4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c4:95:b0:fd:49:5b:ea:4c:06:53:57:a9:cb:b1:70:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8eb44b078522da9c31062b9c7ef7f51727e73e5e Validity Not Before: Nov 27 09:12:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=84285a35253b87c71d87e7bdde712025a7a31fc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f4:07:02:d0:7e:f1:74:a4:39:a3:dd:38:58: e8:55:80:7e:12:30:4f:ac:e8:5c:87:a7:aa:27:40: 53:4d:63:c3:ea:f9:08:6c:38:e9:28:76:d4:af:fd: 96:21:2d:ec:d9:e8:3a:d1:02:28:86:2a:58:23:33: 89:57:ff:e3:19:74:44:a1:18:b0:f5:4a:60:44:4f: a6:f7:27:ed:e2:68:ae:19:8c:96:59:65:8c:61:10: 1c:12:e0:e2:05:a1:2b:ac:e5:8b:27:21:cc:64:07: 8a:56:a5:f4:eb:68:5d:82:48:b3:9b:51:0b:15:6c: 65:fa:6e:11:21:8d:e6:32:ad:7d:ab:11:db:53:0a: 7e:d0:db:fe:27:0f:28:31:18:78:ad:b8:11:d3:6a: 70:20:cd:97:9e:50:2f:48:f8:42:2a:07:38:d3:0d: a8:b4:e6:1c:8f:db:52:7c:9b:81:93:51:41:46:5e: 57:23:bb:9b:71:01:e7:37:20:bc:ae:fb:8b:0e:e5: 6d:02:6d:3a:4e:1e:8a:f5:79:ac:81:1b:33:ff:3a: b2:6b:8f:37:f8:c6:44:e4:68:95:94:fd:e7:f1:ff: 27:70:25:83:ea:e8:6a:61:fb:f4:b6:ad:9b:ac:c8: d6:4d:cc:99:cf:47:5c:ad:ed:74:1f:14:5a:60:e8: 8e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:28:5A:35:25:3B:87:C7:1D:87:E7:BD:DE:71:20:25:A7:A3:1F:C7 X509v3 Authority Key Identifier: keyid:8E:B4:4B:07:85:22:DA:9C:31:06:2B:9C:7E:F7:F5:17:27:E7:3E:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRLB4Ui2pwxBiucfvf1FyfnPl4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/hChaNSU7h8cdh-e93nEgJaejH8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.24.162.96/28 Signature Algorithm: sha256WithRSAEncryption 0f:4f:c7:6a:b4:9b:54:ba:42:72:0b:54:0a:6a:1f:23:ee:73: 7d:92:aa:0a:63:60:92:b3:7f:c4:4d:88:46:aa:51:89:79:89: 92:99:80:e8:08:6a:78:96:2a:58:96:67:6a:d5:3e:73:21:dd: ac:bf:e9:b0:9b:84:ec:96:f7:fe:d0:d9:09:a5:11:0a:61:8a: 1f:40:b0:00:49:95:43:22:4b:de:4c:db:ad:84:05:7c:aa:2e: 6f:e7:93:3d:48:4f:96:eb:e7:87:48:3b:f9:44:9a:b1:16:c4: 06:39:c1:48:52:94:bf:ff:2e:fc:60:4d:9f:ac:3c:f4:73:73: 2c:72:17:51:de:35:e0:d0:55:77:95:2e:0d:1f:48:cf:e7:82: 5b:9d:e0:83:6e:29:38:78:7b:3e:3a:41:c7:33:80:d8:30:a5: 74:89:3b:46:5c:95:36:92:c9:31:37:dc:da:42:3d:ae:f1:65: 1c:f5:f0:f8:e5:f8:1d:82:a7:48:25:6b:e7:da:d9:4b:5c:e2: ac:fe:16:55:55:fb:bb:7b:50:1a:c1:9a:a9:18:51:bc:aa:30: b7:44:57:3e:1c:e4:ed:80:04:86:e6:0f:30:12:87:c7:54:03: 14:99:c9:b4:ea:70:02:2c:cf:d7:36:45:c7:94:99:ba:d0:54: 5e:f2:6c:17 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZrElbD9SVvqTAZTV6nLsXB5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlYjQ0YjA3ODUyMmRhOWMzMTA2MmI5YzdlZjdmNTE3Mjdl NzNlNWUwHhcNMjUxMTI3MDkxMjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDI4NWEzNTI1M2I4N2M3MWQ4N2U3YmRkZTcxMjAyNWE3YTMxZmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvQHAtB+8XSkOaPdOFjoVYB+EjBP rOhch6eqJ0BTTWPD6vkIbDjpKHbUr/2WIS3s2eg60QIohipYIzOJV//jGXREoRiw 9UpgRE+m9yft4miuGYyWWWWMYRAcEuDiBaErrOWLJyHMZAeKVqX062hdgkizm1EL FWxl+m4RIY3mMq19qxHbUwp+0Nv+Jw8oMRh4rbgR02pwIM2XnlAvSPhCKgc40w2o tOYcj9tSfJuBk1FBRl5XI7ubcQHnNyC8rvuLDuVtAm06Th6K9XmsgRsz/zqya483 +MZE5GiVlP3n8f8ncCWD6uhqYfv0tq2brMjWTcyZz0dcre10HxRaYOiONQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFIQoWjUlO4fHHYfnvd5xICWnox/HMB8GA1UdIwQY MBaAFI60SweFItqcMQYrnH739Rcn5z5eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanJSTEI0VWkycHd4Qml1Y2Z2ZjFGeWZuUGw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS81NzkyZTAtNmEzYS00NTI3LTkwZmMt NjdmZjVhMGNlMWE1LzEvaENoYU5TVTdoOGNkaC1lOTNuRWdKYWVqSDhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS81NzkyZTAtNmEzYS00NTI3LTkwZmMtNjdmZjVhMGNlMWE1 LzEvanJSTEI0VWkycHd4Qml1Y2Z2ZjFGeWZuUGw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEwhiiYDAN BgkqhkiG9w0BAQsFAAOCAQEAD0/HarSbVLpCcgtUCmofI+5zfZKqCmNgkrN/xE2I RqpRiXmJkpmA6AhqeJYqWJZnatU+cyHdrL/psJuE7Jb3/tDZCaURCmGKH0CwAEmV QyJL3kzbrYQFfKoub+eTPUhPluvnh0g7+USasRbEBjnBSFKUv/8u/GBNn6w89HNz LHIXUd414NBVd5UuDR9Iz+eCW53gg24pOHh7PjpBxzOA2DCldIk7RlyVNpLJMTfc 2kI9rvFlHPXw+OX4HYKnSCVr59rZS1zirP4WVVX7u3tQGsGaqRhRvKowt0RXPhzk 7YAEhuYPMBKHx1QDFJnJtOpwAizP1zZFx5SZutBUXvJsFw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:04:40 2025 by rpki-client