This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/hhYndYmrtj6UVK4MXLjISC5kjY8.roa File: hhYndYmrtj6UVK4MXLjISC5kjY8.roa (raw, json) Hash identifier: Hp6kG7ylNYSrFI+JCOb5ieLSxf03lMDks7YDXEs5v7Q= Subject key identifier: 86:16:27:75:89:AB:B6:3E:94:54:AE:0C:5C:B8:C8:48:2E:64:8D:8F Certificate issuer: /CN=7cd1bc700905d1ac6d7733aebc3263e6ae76fa97 Certificate serial: 019B7A5ABE9CA489569361D560BCDA9DFCDD Authority key identifier: 7C:D1:BC:70:09:05:D1:AC:6D:77:33:AE:BC:32:63:E6:AE:76:FA:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fNG8cAkF0axtdzOuvDJj5q52-pc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/hhYndYmrtj6UVK4MXLjISC5kjY8.roa Signing time: Thu 01 Jan 2026 16:18:45 +0000 ROA not before: Thu 01 Jan 2026 16:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1103 IP address blocks: 194.53.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/fNG8cAkF0axtdzOuvDJj5q52-pc.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/fNG8cAkF0axtdzOuvDJj5q52-pc.mft rsync://rpki.ripe.net/repository/DEFAULT/fNG8cAkF0axtdzOuvDJj5q52-pc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:be:9c:a4:89:56:93:61:d5:60:bc:da:9d:fc:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7cd1bc700905d1ac6d7733aebc3263e6ae76fa97 Validity Not Before: Jan 1 16:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8616277589abb63e9454ae0c5cb8c8482e648d8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:1c:36:f5:14:98:33:15:60:94:b7:a0:97:3b: 4e:ab:b1:a1:3c:1d:89:9c:67:0f:6f:dd:c4:cb:da: 99:98:d4:fe:61:db:55:ac:89:6b:72:17:b4:a0:7d: 74:4d:b9:04:2d:89:2d:cd:df:cc:0f:46:e0:9b:23: 97:f3:35:f1:b4:c0:07:e6:05:2e:41:ac:e1:5f:15: 95:5b:6c:84:08:52:9c:a4:bd:8c:4a:c6:18:42:49: 20:2a:70:e9:19:39:f6:a7:e6:77:d6:2f:1f:24:e9: 25:2a:96:d9:29:b0:f5:5d:cb:13:92:bd:8c:43:9b: bb:76:b7:42:09:d7:a7:b8:03:66:3b:72:76:1e:b2: 3c:6c:a9:b8:64:3f:f0:8f:d9:5a:12:fd:87:fe:bc: 61:13:7e:9f:90:83:6a:5c:13:43:94:7f:56:0b:4b: 51:af:f8:05:0a:98:88:58:ba:95:57:d1:fc:97:d6: e6:55:86:ac:8e:eb:b5:4e:19:2e:ed:1c:6b:9e:4a: 20:ed:92:fa:64:73:33:0c:19:5f:73:bc:f0:c3:9d: 92:38:7a:94:d3:1e:16:78:f6:41:c7:cb:b2:a9:8f: e4:f3:61:ad:af:51:32:59:ae:fd:55:d6:87:80:3f: 8b:14:10:e0:0a:75:16:87:7d:c3:63:d3:4a:54:d7: 4e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:16:27:75:89:AB:B6:3E:94:54:AE:0C:5C:B8:C8:48:2E:64:8D:8F X509v3 Authority Key Identifier: keyid:7C:D1:BC:70:09:05:D1:AC:6D:77:33:AE:BC:32:63:E6:AE:76:FA:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fNG8cAkF0axtdzOuvDJj5q52-pc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/hhYndYmrtj6UVK4MXLjISC5kjY8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/fNG8cAkF0axtdzOuvDJj5q52-pc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.53.92.0/24 Signature Algorithm: sha256WithRSAEncryption 44:2b:30:3c:18:9e:2a:2c:74:9c:cf:9a:fe:d9:be:04:e8:0e: 3d:ee:09:d6:36:7e:33:66:eb:5b:39:34:96:cf:c2:4e:6b:0a: 6f:aa:2e:bc:86:d4:b3:9a:b7:03:d0:1c:19:11:87:21:08:65: 67:57:aa:b4:81:4b:2b:01:5a:a7:99:f1:df:87:87:12:7b:b5: c9:fd:83:35:1f:59:f2:4b:d9:43:ab:c3:88:ac:ff:8d:6c:e7: a8:3c:ff:21:e3:4f:06:2b:6b:04:42:b6:98:cb:bc:91:37:a5: f2:8a:6e:af:17:e6:00:06:ec:8e:17:69:f3:91:2d:f7:08:c4: 37:be:32:59:16:53:90:74:a9:76:ef:50:1f:4a:ce:4d:e9:0c: 4d:5a:ff:93:90:84:0b:5d:14:6f:36:6c:bf:80:1b:8f:db:74: 16:c2:65:3a:80:06:b0:c1:ed:00:13:77:15:12:67:9c:ee:09: eb:8a:c0:35:2c:d2:12:10:15:23:fe:01:30:14:dc:3e:30:2c: 19:fa:cd:a4:39:59:9d:40:f3:d3:01:b4:b4:0b:53:2e:c4:dd: e5:58:a5:4f:58:71:4e:15:4c:c9:ba:74:42:eb:7a:f3:d4:33: 41:30:ed:6f:44:48:59:c2:39:1c:6d:7a:31:0c:6a:49:b4:5b: 52:3f:b4:fd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wr6cpIlWk2HVYLzanfzdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjZDFiYzcwMDkwNWQxYWM2ZDc3MzNhZWJjMzI2M2U2YWU3 NmZhOTcwHhcNMjYwMTAxMTYxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NjE2Mjc3NTg5YWJiNjNlOTQ1NGFlMGM1Y2I4Yzg0ODJlNjQ4ZDhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xw29RSYMxVglLeglztOq7GhPB2J nGcPb93Ey9qZmNT+YdtVrIlrche0oH10TbkELYktzd/MD0bgmyOX8zXxtMAH5gUu QazhXxWVW2yECFKcpL2MSsYYQkkgKnDpGTn2p+Z31i8fJOklKpbZKbD1XcsTkr2M Q5u7drdCCdenuANmO3J2HrI8bKm4ZD/wj9laEv2H/rxhE36fkINqXBNDlH9WC0tR r/gFCpiIWLqVV9H8l9bmVYasjuu1Thku7Rxrnkog7ZL6ZHMzDBlfc7zww52SOHqU 0x4WePZBx8uyqY/k82Gtr1EyWa79VdaHgD+LFBDgCnUWh33DY9NKVNdObwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIYWJ3WJq7Y+lFSuDFy4yEguZI2PMB8GA1UdIwQY MBaAFHzRvHAJBdGsbXczrrwyY+audvqXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZk5HOGNBa0YwYXh0ZHpPdXZESmo1cTUyLXBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9iYWRlODMtN2E4NC00YzQyLTlkMjYt ZmNlOWUyYmY0ZWY5LzEvaGhZbmRZbXJ0ajZVVks0TVhMaklTQzVralk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9iYWRlODMtN2E4NC00YzQyLTlkMjYtZmNlOWUyYmY0ZWY5 LzEvZk5HOGNBa0YwYXh0ZHpPdXZESmo1cTUyLXBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjVcMA0G CSqGSIb3DQEBCwUAA4IBAQBEKzA8GJ4qLHScz5r+2b4E6A497gnWNn4zZutbOTSW z8JOawpvqi68htSzmrcD0BwZEYchCGVnV6q0gUsrAVqnmfHfh4cSe7XJ/YM1H1ny S9lDq8OIrP+NbOeoPP8h408GK2sEQraYy7yRN6Xyim6vF+YABuyOF2nzkS33CMQ3 vjJZFlOQdKl271AfSs5N6QxNWv+TkIQLXRRvNmy/gBuP23QWwmU6gAawwe0AE3cV Emec7gnrisA1LNISEBUj/gEwFNw+MCwZ+s2kOVmdQPPTAbS0C1MuxN3lWKVPWHFO FUzJunRC63rz1DNBMO1vREhZwjkcbXoxDGpJtFtSP7T9 -----END CERTIFICATE-----Generated at Sun Jan 25 18:06:23 2026 by rpki-client