This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/hBfOWNz8aB-uKsUJCSf2XACnmmc.roa File: hBfOWNz8aB-uKsUJCSf2XACnmmc.roa (raw, json) Hash identifier: 5Y5YLQETtQumGJBT9gG5Cwrp98Yqiy17fOUfKzajf7c= Subject key identifier: 84:17:CE:58:DC:FC:68:1F:AE:2A:C5:09:09:27:F6:5C:00:A7:9A:67 Certificate issuer: /CN=be966dbeb641382a15f467f5a03e9a96fa1dc194 Certificate serial: 019B7CECF2809C4B6016035E95302A99DD73 Authority key identifier: BE:96:6D:BE:B6:41:38:2A:15:F4:67:F5:A0:3E:9A:96:FA:1D:C1:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vpZtvrZBOCoV9Gf1oD6alvodwZQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/hBfOWNz8aB-uKsUJCSf2XACnmmc.roa Signing time: Fri 02 Jan 2026 04:17:41 +0000 ROA not before: Fri 02 Jan 2026 04:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211874 IP address blocks: 194.93.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft rsync://rpki.ripe.net/repository/DEFAULT/vpZtvrZBOCoV9Gf1oD6alvodwZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 04:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:f2:80:9c:4b:60:16:03:5e:95:30:2a:99:dd:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be966dbeb641382a15f467f5a03e9a96fa1dc194 Validity Not Before: Jan 2 04:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8417ce58dcfc681fae2ac5090927f65c00a79a67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:0c:4c:a1:7a:2b:d2:21:f0:89:a0:aa:e3:6b: 57:f6:a3:7e:ab:17:b3:d2:37:88:63:aa:2c:7a:94: 8c:d3:6d:9a:56:1f:f6:d8:e4:7a:3b:36:95:09:36: dd:af:1e:d3:f5:f8:c2:50:5b:48:b2:1f:89:ab:31: 5b:dc:13:73:b5:66:c9:8b:9e:3b:46:d6:f2:07:72: 57:91:b0:24:7c:92:6a:7c:64:64:4a:21:17:ed:e4: 0b:18:5b:93:79:65:b3:2d:e4:b6:1e:87:8f:2b:c6: 05:7f:3e:7c:f8:4c:3a:73:12:4e:0a:bb:6a:76:ca: aa:ae:89:93:8b:26:d4:a6:97:dd:15:9c:ec:08:87: 1b:2a:87:72:82:5b:7a:54:10:bd:c4:69:9c:a7:ed: 27:16:78:39:d6:5b:07:1a:f0:ee:cc:7e:1c:47:21: ec:69:f6:8b:ac:cc:96:46:e7:60:45:36:d1:78:c8: e4:05:35:8a:5e:eb:d6:80:c8:4a:92:2c:d6:60:e5: c8:04:ce:dc:42:59:33:c0:29:5d:10:f7:d1:43:4c: 56:7a:79:c3:17:fb:e5:2d:17:30:ae:ab:0f:1f:99: c5:2a:04:d5:02:e6:2c:36:7a:44:03:e1:67:af:2d: 42:8e:71:71:d9:8b:6c:9f:91:b2:27:89:34:ee:c6: 5d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:17:CE:58:DC:FC:68:1F:AE:2A:C5:09:09:27:F6:5C:00:A7:9A:67 X509v3 Authority Key Identifier: keyid:BE:96:6D:BE:B6:41:38:2A:15:F4:67:F5:A0:3E:9A:96:FA:1D:C1:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vpZtvrZBOCoV9Gf1oD6alvodwZQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/hBfOWNz8aB-uKsUJCSf2XACnmmc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.93.44.0/22 Signature Algorithm: sha256WithRSAEncryption 3e:4a:11:9d:10:e8:e7:79:18:05:e3:7d:51:91:86:83:86:f7: 35:40:bd:5e:31:d5:2e:df:ea:4b:76:81:6d:24:89:10:06:9e: d4:a6:19:20:89:93:49:92:a3:82:4d:38:92:d4:f3:e7:e5:03: b2:47:cf:1a:a1:4c:84:db:fd:f1:50:20:ea:ff:73:85:2c:ee: d7:be:fb:1a:6c:dd:ec:8c:f3:f8:69:cb:7a:b5:0c:fc:ac:e5: c2:37:7f:d6:e0:c4:92:64:04:29:9d:73:ad:7b:68:de:09:6f: 44:1f:73:07:91:29:ad:04:1e:6d:49:79:01:10:2a:c3:ab:eb: 13:0d:cf:48:4b:a7:a6:d4:e9:50:ee:6f:d1:41:a9:7f:84:87: 8a:34:0e:d0:1a:6e:c8:19:1f:40:1e:2e:7b:16:7a:af:1f:f6: fe:e5:f5:92:e8:31:e0:13:69:51:e0:3f:88:ec:93:14:d3:98: 23:c3:ef:52:64:b3:ed:84:e8:c1:9d:9d:72:ae:4b:7d:48:b5: 28:2c:32:b4:32:63:9b:62:83:59:40:b3:b4:e1:a7:69:a0:6d: 0a:43:f3:ec:3a:80:78:78:db:47:2a:8f:e0:59:d0:84:13:70: f9:5d:b5:fe:16:c5:f8:86:af:5e:f6:f5:49:7a:52:36:4b:e9: 1e:e3:44:b2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87PKAnEtgFgNelTAqmd1zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlOTY2ZGJlYjY0MTM4MmExNWY0NjdmNWEwM2U5YTk2ZmEx ZGMxOTQwHhcNMjYwMTAyMDQxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDE3Y2U1OGRjZmM2ODFmYWUyYWM1MDkwOTI3ZjY1YzAwYTc5YTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwxMoXor0iHwiaCq42tX9qN+qxez 0jeIY6osepSM022aVh/22OR6OzaVCTbdrx7T9fjCUFtIsh+JqzFb3BNztWbJi547 RtbyB3JXkbAkfJJqfGRkSiEX7eQLGFuTeWWzLeS2HoePK8YFfz58+Ew6cxJOCrtq dsqqromTiybUppfdFZzsCIcbKodyglt6VBC9xGmcp+0nFng51lsHGvDuzH4cRyHs afaLrMyWRudgRTbReMjkBTWKXuvWgMhKkizWYOXIBM7cQlkzwCldEPfRQ0xWennD F/vlLRcwrqsPH5nFKgTVAuYsNnpEA+Fnry1CjnFx2Ytsn5GyJ4k07sZd0wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIQXzljc/GgfrirFCQkn9lwAp5pnMB8GA1UdIwQY MBaAFL6Wbb62QTgqFfRn9aA+mpb6HcGUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnBadHZyWkJPQ29WOUdmMW9ENmFsdm9kd1pRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9lMjEyZDItZmI3Mi00OGNmLTg4MDYt MTRiOGQzMGYxMzk3LzEvaEJmT1dOejhhQi11S3NVSkNTZjJYQUNubW1jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9lMjEyZDItZmI3Mi00OGNmLTg4MDYtMTRiOGQzMGYxMzk3 LzEvdnBadHZyWkJPQ29WOUdmMW9ENmFsdm9kd1pRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwl0sMA0G CSqGSIb3DQEBCwUAA4IBAQA+ShGdEOjneRgF431RkYaDhvc1QL1eMdUu3+pLdoFt JIkQBp7UphkgiZNJkqOCTTiS1PPn5QOyR88aoUyE2/3xUCDq/3OFLO7XvvsabN3s jPP4act6tQz8rOXCN3/W4MSSZAQpnXOte2jeCW9EH3MHkSmtBB5tSXkBECrDq+sT Dc9IS6em1OlQ7m/RQal/hIeKNA7QGm7IGR9AHi57FnqvH/b+5fWS6DHgE2lR4D+I 7JMU05gjw+9SZLPthOjBnZ1yrkt9SLUoLDK0MmObYoNZQLO04adpoG0KQ/PsOoB4 eNtHKo/gWdCEE3D5XbX+FsX4hq9e9vVJelI2S+ke40Sy -----END CERTIFICATE-----Generated at Mon Jan 26 12:55:15 2026 by rpki-client