This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/kF_MhhrVrNJnJI6hlcMp4VYOiFw.roa File: kF_MhhrVrNJnJI6hlcMp4VYOiFw.roa (raw, json) Hash identifier: TcbJFkd7jixEK59Vxv65SNcAq5F19tmFcSMyelxNl3k= Subject key identifier: 90:5F:CC:86:1A:D5:AC:D2:67:24:8E:A1:95:C3:29:E1:56:0E:88:5C Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Certificate serial: 019B7F8569A1E38CD2AA8715B113723BF8AE Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/kF_MhhrVrNJnJI6hlcMp4VYOiFw.roa Signing time: Fri 02 Jan 2026 16:23:28 +0000 ROA not before: Fri 02 Jan 2026 16:23:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208226 IP address blocks: 194.87.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:69:a1:e3:8c:d2:aa:87:15:b1:13:72:3b:f8:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Validity Not Before: Jan 2 16:23:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=905fcc861ad5acd267248ea195c329e1560e885c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4a:bf:07:f3:9b:a9:d0:47:e9:15:16:23:7e: 29:5f:4b:d2:4c:98:f5:0f:dd:99:95:8e:85:8e:0f: 63:bc:90:cf:46:af:8a:52:2b:16:11:20:b2:8e:7a: c7:d1:41:f7:fd:5a:50:c1:00:53:bb:7c:bc:91:1f: f1:b3:2d:da:dc:51:6d:fb:a9:64:4a:d3:77:ef:79: 43:c0:e6:46:62:f7:90:65:a9:78:75:7c:93:82:95: 26:d0:ae:8c:2a:9f:ba:e4:5a:30:51:ac:f2:44:0e: ca:4d:95:33:e7:8e:11:de:97:0e:dc:03:af:dc:0d: 2d:29:71:1d:ac:48:a0:15:1c:0e:d4:b5:9f:87:4c: 99:1d:0b:3c:d5:f6:f4:dc:ef:32:47:de:2a:74:c3: 17:2e:5c:81:c5:d1:21:05:d8:36:d2:b1:3f:ec:e3: ed:1b:3c:d8:ef:83:2c:b4:ed:3a:5c:a3:95:d8:9a: 65:21:ae:e1:b8:fb:af:25:7b:a3:17:2c:30:b0:dc: 44:79:a0:2c:f2:ff:0b:12:cf:eb:c7:db:b8:64:c6: 40:6e:b2:ab:21:6a:f1:c3:2e:86:96:d7:04:8f:54: 67:d0:50:ff:ea:6a:4c:a9:8a:bf:15:bf:a6:bc:f8: ec:95:fa:d4:bb:de:00:21:2a:9c:26:47:8c:82:89: df:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:5F:CC:86:1A:D5:AC:D2:67:24:8E:A1:95:C3:29:E1:56:0E:88:5C X509v3 Authority Key Identifier: keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/kF_MhhrVrNJnJI6hlcMp4VYOiFw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.87.217.0/24 Signature Algorithm: sha256WithRSAEncryption 98:b8:3d:12:17:d7:b6:20:74:20:57:9c:8a:32:2b:5d:33:d6: 2d:42:91:00:f3:33:e7:53:60:93:a7:76:5b:9b:41:17:d7:79: 12:ba:5d:84:05:3d:29:af:a1:7e:4a:61:7b:f1:c1:8f:3d:ed: d1:a7:ae:05:55:b2:3f:c5:bd:cb:59:3d:bb:c8:2d:64:8d:9b: b5:76:3a:b7:9b:12:45:d2:7c:45:ea:e1:a8:88:15:c4:9b:ed: fd:a5:4e:86:62:a2:59:e8:99:20:f4:2c:61:33:d1:1b:8b:a3: 09:3e:ef:02:6d:14:8d:1c:95:71:2e:6b:6e:fb:9a:86:db:46: 11:4f:bc:4e:41:67:c4:92:e8:9d:ea:88:49:e2:4c:b7:c2:86: b5:7e:67:44:b3:8d:0e:ce:3c:64:c6:e9:65:c8:1d:a6:8f:0f: 04:af:9d:3f:31:3d:cc:7a:85:08:58:5a:eb:c2:2e:38:8d:4e: c2:96:7b:bb:8a:a7:5a:20:c1:8e:9c:ed:b9:a4:75:c2:32:05: a6:1f:43:6f:c1:c2:66:66:5d:fc:10:25:2e:80:ea:11:1e:d2: 89:ef:d1:55:45:56:a7:6c:0d:94:a3:c3:af:b1:9a:2e:9a:48: 9e:c4:ae:24:d4:f3:1a:55:49:26:74:eb:5a:81:85:21:97:9c: 98:4b:b5:b2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hWmh44zSqocVsRNyO/iuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw ZTFhYzcwHhcNMjYwMTAyMTYyMzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDVmY2M4NjFhZDVhY2QyNjcyNDhlYTE5NWMzMjllMTU2MGU4ODVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0q/B/ObqdBH6RUWI34pX0vSTJj1 D92ZlY6Fjg9jvJDPRq+KUisWESCyjnrH0UH3/VpQwQBTu3y8kR/xsy3a3FFt+6lk StN373lDwOZGYveQZal4dXyTgpUm0K6MKp+65FowUazyRA7KTZUz544R3pcO3AOv 3A0tKXEdrEigFRwO1LWfh0yZHQs81fb03O8yR94qdMMXLlyBxdEhBdg20rE/7OPt GzzY74MstO06XKOV2JplIa7huPuvJXujFywwsNxEeaAs8v8LEs/rx9u4ZMZAbrKr IWrxwy6GltcEj1Rn0FD/6mpMqYq/Fb+mvPjslfrUu94AISqcJkeMgonfOwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJBfzIYa1azSZySOoZXDKeFWDohcMB8GA1UdIwQY MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt NWE0MjQyOGYxMTQzLzEva0ZfTWhoclZyTkpuSkk2aGxjTXA0VllPaUZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwlfZMA0G CSqGSIb3DQEBCwUAA4IBAQCYuD0SF9e2IHQgV5yKMitdM9YtQpEA8zPnU2CTp3Zb m0EX13kSul2EBT0pr6F+SmF78cGPPe3Rp64FVbI/xb3LWT27yC1kjZu1djq3mxJF 0nxF6uGoiBXEm+39pU6GYqJZ6Jkg9CxhM9Ebi6MJPu8CbRSNHJVxLmtu+5qG20YR T7xOQWfEkuid6ohJ4ky3woa1fmdEs40OzjxkxullyB2mjw8Er50/MT3MeoUIWFrr wi44jU7Clnu7iqdaIMGOnO25pHXCMgWmH0NvwcJmZl38ECUugOoRHtKJ79FVRVan bA2Uo8OvsZoumkiexK4k1PMaVUkmdOtagYUhl5yYS7Wy -----END CERTIFICATE-----Generated at Mon Jan 19 20:01:39 2026 by rpki-client