This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/hV7NKevFA0ewYKiLaG6VTY0eIjQ.roa File: hV7NKevFA0ewYKiLaG6VTY0eIjQ.roa (raw, json) Hash identifier: 4UJFHEZacEZTnaUPzOrYjsQeEVtt1wITuEFPial+OOU= Subject key identifier: 85:5E:CD:29:EB:C5:03:47:B0:60:A8:8B:68:6E:95:4D:8D:1E:22:34 Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Certificate serial: 019B7F85489C0F3520D55D38C6C895408692 Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/hV7NKevFA0ewYKiLaG6VTY0eIjQ.roa Signing time: Fri 02 Jan 2026 16:23:19 +0000 ROA not before: Fri 02 Jan 2026 16:23:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41082 IP address blocks: 194.87.15.0/24 maxlen: 24 194.87.100.0/24 maxlen: 24 194.87.173.0/24 maxlen: 24 195.133.90.0/24 maxlen: 24 195.133.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:48:9c:0f:35:20:d5:5d:38:c6:c8:95:40:86:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Validity Not Before: Jan 2 16:23:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=855ecd29ebc50347b060a88b686e954d8d1e2234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:37:20:44:16:28:cd:e7:8f:9b:6b:61:d4:07: b4:61:d5:ca:ff:5d:a4:7d:b5:58:a9:9f:73:98:d8: 7b:d1:6d:d7:49:df:5a:ce:b9:ce:10:44:57:17:8f: c7:38:57:10:07:c8:a0:e6:96:1f:ff:c0:10:f7:c7: 93:c1:00:94:3a:35:23:c8:d9:93:97:b4:c9:ab:9a: 35:9b:49:71:bb:53:42:58:a7:e9:6d:91:1b:6c:3b: 62:2a:10:cb:f4:5d:d1:c5:69:c2:fe:20:3f:17:62: c2:39:6d:3c:e1:6e:e9:5e:08:91:69:5c:33:64:34: 88:df:22:91:2d:d0:03:c0:b9:c6:81:04:df:fd:09: 80:10:e4:83:77:27:39:75:b9:27:90:b9:6f:60:8f: 0b:9e:56:de:09:a2:33:fe:e9:85:5c:7f:aa:8a:dc: 9d:74:77:4b:5d:56:0d:11:8f:47:1e:9b:48:c1:57: 06:52:5d:30:23:56:27:1b:5c:dd:6c:ea:28:a7:d8: 01:44:23:f7:8e:0c:10:7a:8b:95:68:4d:bb:de:70: ef:ed:eb:48:96:93:d4:f0:bc:24:30:8f:a9:5c:ef: 28:5e:72:ff:ad:b8:e5:44:43:b1:9c:ea:93:13:6d: 24:cd:41:b9:89:b3:f2:2d:a2:15:65:8d:1d:e1:aa: 24:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:5E:CD:29:EB:C5:03:47:B0:60:A8:8B:68:6E:95:4D:8D:1E:22:34 X509v3 Authority Key Identifier: keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/hV7NKevFA0ewYKiLaG6VTY0eIjQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.87.15.0/24 194.87.100.0/24 194.87.173.0/24 195.133.90.0/23 Signature Algorithm: sha256WithRSAEncryption 93:ff:e2:0d:b5:6c:9c:fb:d9:bd:59:66:73:82:67:55:01:3b: 4f:12:42:53:63:77:e2:3b:6a:a4:31:d6:9d:21:a9:60:b1:ee: e4:4b:b3:51:7a:c1:cc:48:71:3f:ab:ef:cd:48:a9:d6:ef:cc: 7d:72:d4:59:1e:64:7b:31:93:28:a7:e1:86:8d:89:91:8e:21: 7d:84:4a:8a:01:50:b7:1d:2f:0b:8e:0c:f1:32:26:85:bd:6d: 3d:85:ab:dd:a2:d9:02:45:f0:da:4d:b0:24:9c:ec:66:85:84: 03:29:b9:7d:93:b5:15:53:be:7b:75:80:c4:70:8f:d3:d7:47: 8c:80:53:7e:53:31:2e:cb:ed:2e:1b:75:be:12:e8:35:71:a0: 14:ce:be:3a:32:6e:8f:01:b6:6c:34:4c:2c:fc:c4:6a:d7:b8: 29:43:80:fb:cb:b5:36:28:85:e8:e3:5a:fd:ea:2d:31:d5:9c: 93:0f:f8:8b:01:06:6f:2b:6a:36:e2:fd:cf:ab:eb:0c:2f:4b: 70:7c:7c:60:02:53:57:a1:25:aa:40:62:14:f1:2e:0e:31:bc: 32:40:38:df:cc:5d:5c:fe:90:be:f0:cd:d0:03:09:e1:06:04: 9d:5c:1c:1b:67:04:7c:a0:a3:db:f6:11:8e:f4:55:ab:cd:ef: 11:53:9a:30 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt/hUicDzUg1V04xsiVQIaSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw ZTFhYzcwHhcNMjYwMTAyMTYyMzE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTVlY2QyOWViYzUwMzQ3YjA2MGE4OGI2ODZlOTU0ZDhkMWUyMjM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzcgRBYozeePm2th1Ae0YdXK/12k fbVYqZ9zmNh70W3XSd9azrnOEERXF4/HOFcQB8ig5pYf/8AQ98eTwQCUOjUjyNmT l7TJq5o1m0lxu1NCWKfpbZEbbDtiKhDL9F3RxWnC/iA/F2LCOW084W7pXgiRaVwz ZDSI3yKRLdADwLnGgQTf/QmAEOSDdyc5dbknkLlvYI8LnlbeCaIz/umFXH+qityd dHdLXVYNEY9HHptIwVcGUl0wI1YnG1zdbOoop9gBRCP3jgwQeouVaE273nDv7etI lpPU8LwkMI+pXO8oXnL/rbjlREOxnOqTE20kzUG5ibPyLaIVZY0d4aokPQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFIVezSnrxQNHsGCoi2hulU2NHiI0MB8GA1UdIwQY MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt NWE0MjQyOGYxMTQzLzEvaFY3TktldkZBMGV3WUtpTGFHNlZUWTBlSWpRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAwlcPAwQA wldkAwQAwletAwQBw4VaMA0GCSqGSIb3DQEBCwUAA4IBAQCT/+INtWyc+9m9WWZz gmdVATtPEkJTY3fiO2qkMdadIalgse7kS7NResHMSHE/q+/NSKnW78x9ctRZHmR7 MZMop+GGjYmRjiF9hEqKAVC3HS8LjgzxMiaFvW09havdotkCRfDaTbAknOxmhYQD Kbl9k7UVU757dYDEcI/T10eMgFN+UzEuy+0uG3W+Eug1caAUzr46Mm6PAbZsNEws /MRq17gpQ4D7y7U2KIXo41r96i0x1ZyTD/iLAQZvK2o24v3Pq+sML0twfHxgAlNX oSWqQGIU8S4OMbwyQDjfzF1c/pC+8M3QAwnhBgSdXBwbZwR8oKPb9hGO9FWrze8R U5ow -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:52 2026 by rpki-client