This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/hTRi4HtTpCkolgUuQDDvPG_VyIs.roa File: hTRi4HtTpCkolgUuQDDvPG_VyIs.roa (raw, json) Hash identifier: 0FlUN5CzPW1X1y6ikdRfKAaNuwCJRvtbLFmH3Xzp8cI= Subject key identifier: 85:34:62:E0:7B:53:A4:29:28:96:05:2E:40:30:EF:3C:6F:D5:C8:8B Certificate issuer: /CN=6a016dad273047b18886691485dedd97171c4d68 Certificate serial: 019B7EA64A13A9146E61063042560C6AF25F Authority key identifier: 6A:01:6D:AD:27:30:47:B1:88:86:69:14:85:DE:DD:97:17:1C:4D:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/hTRi4HtTpCkolgUuQDDvPG_VyIs.roa Signing time: Fri 02 Jan 2026 12:19:45 +0000 ROA not before: Fri 02 Jan 2026 12:19:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 194.1.164.0/24 maxlen: 24 194.1.165.0/24 maxlen: 24 194.1.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 02:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:4a:13:a9:14:6e:61:06:30:42:56:0c:6a:f2:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a016dad273047b18886691485dedd97171c4d68 Validity Not Before: Jan 2 12:19:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=853462e07b53a4292896052e4030ef3c6fd5c88b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9e:90:a8:da:45:b3:de:61:44:b5:2b:4f:bc: 7c:9b:0b:7e:3a:d5:73:e7:c9:4c:f8:ef:a4:d1:cb: bf:9b:60:d4:24:e1:72:d0:03:eb:9a:23:7d:a6:80: 08:7d:f1:14:70:8f:d1:0a:24:a4:57:31:a8:cf:bd: 0b:96:c3:eb:74:29:79:9e:9f:bf:c4:29:d3:66:b0: 3d:e9:02:a4:5f:59:da:af:3b:57:11:58:bb:1f:53: db:ad:8e:84:aa:b8:3f:11:b5:65:3e:ad:18:58:3a: 3f:fe:78:8d:79:3a:d4:2c:92:ba:d2:c7:b3:1c:e5: 41:c3:70:55:36:f8:44:6d:5f:d1:29:0f:5d:ce:97: 32:9e:92:d9:ea:61:f8:08:7c:8a:99:e7:1b:bf:b1: 0f:14:2f:c6:54:2a:76:bf:2e:99:b1:7b:33:16:48: 19:00:f3:63:62:8a:bf:a1:f2:61:43:d1:a5:68:34: b2:de:10:cf:35:0c:00:c4:c6:a1:ac:8b:4e:52:dd: 66:c7:f6:2e:37:be:49:1f:7e:a7:02:3e:a9:41:c9: c1:ee:78:40:a1:6a:f6:20:a2:9b:25:0a:d4:8c:e5: 67:d1:b3:50:e6:b3:a0:c4:c4:c0:2a:91:50:59:fe: fb:cc:81:39:0a:7a:22:8e:ac:cd:14:86:96:15:2e: 3d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:34:62:E0:7B:53:A4:29:28:96:05:2E:40:30:EF:3C:6F:D5:C8:8B X509v3 Authority Key Identifier: keyid:6A:01:6D:AD:27:30:47:B1:88:86:69:14:85:DE:DD:97:17:1C:4D:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/hTRi4HtTpCkolgUuQDDvPG_VyIs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.1.164.0-194.1.166.255 Signature Algorithm: sha256WithRSAEncryption a0:be:7d:ad:a0:ed:2f:dc:cc:a8:bf:e4:25:49:3e:0b:f6:1f: 02:ce:5a:1c:f6:2c:14:eb:13:e8:af:5b:d2:60:34:05:c4:d5: 7c:2b:ce:04:37:e7:63:e8:d0:bb:4c:c3:cc:06:2a:06:b6:6e: 0e:45:56:7d:80:56:ca:4d:0e:df:ab:ec:09:44:02:aa:94:83: 79:42:1a:17:78:35:8a:b5:86:cb:88:7f:bb:b5:43:ed:16:e6: 16:45:56:c3:e5:57:c6:49:ef:5a:05:5c:e7:b4:29:60:11:56: 99:d0:e7:f4:3d:e9:eb:18:e6:8c:e4:12:2c:ea:8e:c0:61:eb: 31:9b:16:ec:39:22:41:b7:ed:e7:bc:ec:a3:ec:1f:7a:af:9e: 5b:92:ec:57:f1:1e:55:39:1c:e9:4d:9e:a3:0b:b8:dd:e7:77: 32:16:64:28:78:e7:d6:37:30:13:d3:68:a8:ad:9b:31:e2:0e: e7:d3:4d:2a:8e:70:6e:f4:ae:c9:ea:5a:2d:f8:69:06:04:c8: e6:07:94:29:f4:cc:aa:fd:00:16:1f:e8:b7:16:6c:58:0f:d7: a8:1a:a4:95:6c:89:b0:04:5c:33:09:44:47:c2:02:8a:b9:ed: 02:bf:45:8b:9e:af:9e:ad:bc:f7:17:18:1c:ff:8e:57:c8:10: ff:8f:b7:aa -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt+pkoTqRRuYQYwQlYMavJfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhMDE2ZGFkMjczMDQ3YjE4ODg2NjkxNDg1ZGVkZDk3MTcx YzRkNjgwHhcNMjYwMTAyMTIxOTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTM0NjJlMDdiNTNhNDI5Mjg5NjA1MmU0MDMwZWYzYzZmZDVjODhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAop6QqNpFs95hRLUrT7x8mwt+OtVz 58lM+O+k0cu/m2DUJOFy0APrmiN9poAIffEUcI/RCiSkVzGoz70LlsPrdCl5np+/ xCnTZrA96QKkX1narztXEVi7H1PbrY6Eqrg/EbVlPq0YWDo//niNeTrULJK60sez HOVBw3BVNvhEbV/RKQ9dzpcynpLZ6mH4CHyKmecbv7EPFC/GVCp2vy6ZsXszFkgZ APNjYoq/ofJhQ9GlaDSy3hDPNQwAxMahrItOUt1mx/YuN75JH36nAj6pQcnB7nhA oWr2IKKbJQrUjOVn0bNQ5rOgxMTAKpFQWf77zIE5CnoijqzNFIaWFS498wIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFIU0YuB7U6QpKJYFLkAw7zxv1ciLMB8GA1UdIwQY MBaAFGoBba0nMEexiIZpFIXe3ZcXHE1oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWdGdHJTY3dSN0dJaG1rVWhkN2RseGNjVFdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80NWM5YWQtYzRhNy00NjUyLWFhZDMt Yzk1MjgwNDkzMmMyLzEvaFRSaTRIdFRwQ2tvbGdVdVFERHZQR19WeUlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80NWM5YWQtYzRhNy00NjUyLWFhZDMtYzk1MjgwNDkzMmMy LzEvYWdGdHJTY3dSN0dJaG1rVWhkN2RseGNjVFdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBALCAaQD BADCAaYwDQYJKoZIhvcNAQELBQADggEBAKC+fa2g7S/czKi/5CVJPgv2HwLOWhz2 LBTrE+ivW9JgNAXE1XwrzgQ352Po0LtMw8wGKga2bg5FVn2AVspNDt+r7AlEAqqU g3lCGhd4NYq1hsuIf7u1Q+0W5hZFVsPlV8ZJ71oFXOe0KWARVpnQ5/Q96esY5ozk EizqjsBh6zGbFuw5IkG37ee87KPsH3qvnluS7FfxHlU5HOlNnqMLuN3ndzIWZCh4 59Y3MBPTaKitmzHiDufTTSqOcG70rsnqWi34aQYEyOYHlCn0zKr9ABYf6LcWbFgP 16gapJVsibAEXDMJREfCAoq57QK/RYuer56tvPcXGBz/jlfIEP+Pt6o= -----END CERTIFICATE-----Generated at Sat Jan 17 06:46:22 2026 by rpki-client