This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/HDtnmCKAC5JX0fJj15bjRiUv9QA.roa File: HDtnmCKAC5JX0fJj15bjRiUv9QA.roa (raw, json) Hash identifier: Acfc9rsOEbm7/R6yZISZPxDK0YVh2wi2Ha5hkcFU8Jo= Subject key identifier: 1C:3B:67:98:22:80:0B:92:57:D1:F2:63:D7:96:E3:46:25:2F:F5:00 Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1 Certificate serial: 019B7F15B4F571CC1B2EBE933860170F1B5F Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/HDtnmCKAC5JX0fJj15bjRiUv9QA.roa Signing time: Fri 02 Jan 2026 14:21:27 +0000 ROA not before: Fri 02 Jan 2026 14:21:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8659 IP address blocks: 195.55.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:b4:f5:71:cc:1b:2e:be:93:38:60:17:0f:1b:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1 Validity Not Before: Jan 2 14:21:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1c3b679822800b9257d1f263d796e346252ff500 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:3d:cb:49:9b:0c:8a:23:49:9a:a4:51:03:9b: 27:81:c1:2b:30:be:c7:7e:8b:42:5b:c2:65:2a:2f: bf:5f:83:61:e2:11:fd:b5:a2:17:17:ac:3a:e7:59: d6:01:b8:40:43:53:56:7d:fe:74:d3:36:e3:64:4f: 09:82:10:e9:e9:9d:19:ae:6c:e6:05:4a:a5:49:98: b2:ca:4e:63:0b:24:74:ed:80:7c:87:56:b7:00:45: 21:66:42:ce:76:17:d7:13:0d:6d:da:88:5e:65:54: 68:64:35:c4:fb:8c:47:52:5c:a6:54:63:3c:8f:d0: ef:c4:65:10:92:bb:90:4d:25:cf:8f:af:f4:fb:ab: fc:84:4f:95:29:5d:bf:6d:27:0c:07:3d:7a:2f:d4: ba:fe:88:38:9c:be:82:b8:e6:9e:2f:55:e5:ad:e0: f1:66:dc:76:9f:10:26:e9:14:fb:b9:9c:47:b9:d4: 70:95:0a:23:00:fe:72:aa:74:11:77:08:20:16:91: 97:af:cb:52:63:9b:03:48:ac:33:60:5b:05:60:c5: d2:9a:bc:45:38:76:cf:d1:d1:12:27:d4:97:11:d4: 47:7a:49:50:2f:32:1b:e5:7d:83:1e:d1:38:f2:d3: 1d:93:79:09:52:31:31:16:ca:d8:2f:db:2f:6e:96: 32:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:3B:67:98:22:80:0B:92:57:D1:F2:63:D7:96:E3:46:25:2F:F5:00 X509v3 Authority Key Identifier: keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/HDtnmCKAC5JX0fJj15bjRiUv9QA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.55.64.0/24 Signature Algorithm: sha256WithRSAEncryption b2:41:37:1f:22:b0:80:94:85:da:a8:cd:ca:be:89:82:5e:64: eb:36:cd:d1:17:27:c5:09:7c:d5:86:36:bb:c0:ba:a4:88:3a: 9a:37:49:ab:0b:e1:85:26:59:44:f9:9e:56:fe:18:cb:3e:f3: 85:a2:99:19:b8:d1:1e:9a:78:46:98:1f:c7:5e:9f:51:cc:3e: c3:c2:06:c8:4f:cc:af:0f:32:95:2f:6a:6e:8c:84:44:e2:17: ea:f1:f6:0f:24:06:b3:c5:53:38:01:d3:78:ed:5c:37:23:da: d9:ff:1b:ea:e6:c9:8d:91:d6:11:c1:f5:d0:d5:e6:9e:0c:ad: e9:f3:85:8c:8b:40:22:b4:60:b6:8a:d3:80:67:3f:bf:4a:b5: 4a:7f:8e:1c:76:ff:6d:5b:ce:02:8b:31:e1:d7:fc:57:e3:bd: 8e:38:79:6c:c9:f4:17:1d:04:82:b0:d1:79:a0:8f:e6:ab:71: 91:42:3f:76:cd:3f:01:cd:6b:e8:19:b2:ee:22:b1:17:72:2b: e5:99:5a:d6:a0:96:6f:ae:07:b9:2b:e7:5b:e5:8d:39:5b:e3: 73:27:ed:eb:db:69:79:4b:4f:ce:f8:45:f1:98:90:c2:2c:54: b9:98:b4:14:f6:e0:a1:6a:bc:7c:87:af:7e:06:77:ce:0a:e1: 34:ed:c3:3e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FbT1ccwbLr6TOGAXDxtfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwN2Y1ZmUyNzQwYTJiNmRlNGMzNzA5ZDI5NjQxMTViM2M5 NjdkYTEwHhcNMjYwMTAyMTQyMTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzNiNjc5ODIyODAwYjkyNTdkMWYyNjNkNzk2ZTM0NjI1MmZmNTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4j3LSZsMiiNJmqRRA5sngcErML7H fotCW8JlKi+/X4Nh4hH9taIXF6w651nWAbhAQ1NWff500zbjZE8JghDp6Z0Zrmzm BUqlSZiyyk5jCyR07YB8h1a3AEUhZkLOdhfXEw1t2oheZVRoZDXE+4xHUlymVGM8 j9DvxGUQkruQTSXPj6/0+6v8hE+VKV2/bScMBz16L9S6/og4nL6CuOaeL1XlreDx Ztx2nxAm6RT7uZxHudRwlQojAP5yqnQRdwggFpGXr8tSY5sDSKwzYFsFYMXSmrxF OHbP0dESJ9SXEdRHeklQLzIb5X2DHtE48tMdk3kJUjExFsrYL9svbpYyaQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBw7Z5gigAuSV9HyY9eW40YlL/UAMB8GA1UdIwQY MBaAFDB/X+J0Citt5MNwnSlkEVs8ln2hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQt NGJhMmY4ZjFmODNiLzEvSER0bm1DS0FDNUpYMGZKajE1YmpSaVV2OVFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQtNGJhMmY4ZjFmODNi LzEvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwzdAMA0G CSqGSIb3DQEBCwUAA4IBAQCyQTcfIrCAlIXaqM3KvomCXmTrNs3RFyfFCXzVhja7 wLqkiDqaN0mrC+GFJllE+Z5W/hjLPvOFopkZuNEemnhGmB/HXp9RzD7DwgbIT8yv DzKVL2pujIRE4hfq8fYPJAazxVM4AdN47Vw3I9rZ/xvq5smNkdYRwfXQ1eaeDK3p 84WMi0AitGC2itOAZz+/SrVKf44cdv9tW84CizHh1/xX472OOHlsyfQXHQSCsNF5 oI/mq3GRQj92zT8BzWvoGbLuIrEXcivlmVrWoJZvrge5K+db5Y05W+NzJ+3r22l5 S0/O+EXxmJDCLFS5mLQU9uCharx8h69+BnfOCuE07cM+ -----END CERTIFICATE-----Generated at Sun Jan 25 21:05:43 2026 by rpki-client