This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/hQDLXIuFPbPeMoA0n3wg3FSKYSw.roa File: hQDLXIuFPbPeMoA0n3wg3FSKYSw.roa (raw, json) Hash identifier: BBMPveKRndrvVUm7Cra4ibGzFpyOil4iXtzIOV4kIxg= Subject key identifier: 85:00:CB:5C:8B:85:3D:B3:DE:32:80:34:9F:7C:20:DC:54:8A:61:2C Certificate issuer: /CN=9c47ee73c28780b12f152cfa259ade3d8ae0d13b Certificate serial: 019B7CEDCDBB84357F2FCE58294F79C6BFF0 Authority key identifier: 9C:47:EE:73:C2:87:80:B1:2F:15:2C:FA:25:9A:DE:3D:8A:E0:D1:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nEfuc8KHgLEvFSz6JZrePYrg0Ts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/hQDLXIuFPbPeMoA0n3wg3FSKYSw.roa Signing time: Fri 02 Jan 2026 04:18:38 +0000 ROA not before: Fri 02 Jan 2026 04:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59962 IP address blocks: 194.33.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/nEfuc8KHgLEvFSz6JZrePYrg0Ts.crl rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/nEfuc8KHgLEvFSz6JZrePYrg0Ts.mft rsync://rpki.ripe.net/repository/DEFAULT/nEfuc8KHgLEvFSz6JZrePYrg0Ts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:cd:bb:84:35:7f:2f:ce:58:29:4f:79:c6:bf:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c47ee73c28780b12f152cfa259ade3d8ae0d13b Validity Not Before: Jan 2 04:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8500cb5c8b853db3de3280349f7c20dc548a612c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1c:91:0f:78:5a:71:b6:a4:d5:e2:11:6b:58: b3:b1:66:17:2b:ce:0e:f2:71:09:9f:70:01:9a:c1: 93:f9:b2:bf:58:ed:a0:9a:f5:42:1d:88:af:1f:b3: e6:77:10:71:6a:ac:e3:3d:68:f9:21:4b:1a:84:6d: 54:bb:ef:30:67:37:35:ce:8d:15:a0:b6:31:ed:fd: ae:10:f5:1f:76:44:d3:38:0c:90:58:c1:ff:32:74: fb:48:ed:eb:bc:ec:9a:27:c4:fc:51:da:44:d3:79: 8c:c3:7b:17:e3:71:08:a7:59:ec:1f:4d:ec:72:e4: 9a:48:cb:de:78:4d:18:46:eb:4c:08:a0:54:25:01: 29:61:99:af:de:63:0b:10:66:45:94:22:78:23:14: ec:c2:7f:e4:c2:7d:b9:41:f6:2a:fe:b3:e3:43:cd: 45:e6:d2:81:80:53:e3:fb:34:66:fc:13:17:55:c1: e4:68:34:84:59:ea:b8:25:30:4e:bf:37:7e:b9:c2: 79:8f:d2:fc:a6:db:70:09:4a:be:28:72:23:3e:f5: 28:c8:2c:12:4d:9b:5d:50:8a:c2:ef:e9:4d:3a:18: 54:5d:cf:6d:09:38:9c:e6:63:d7:7d:bb:86:f0:2a: 23:72:4f:8f:54:20:5b:22:54:03:46:c3:f5:e1:51: ca:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:00:CB:5C:8B:85:3D:B3:DE:32:80:34:9F:7C:20:DC:54:8A:61:2C X509v3 Authority Key Identifier: keyid:9C:47:EE:73:C2:87:80:B1:2F:15:2C:FA:25:9A:DE:3D:8A:E0:D1:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nEfuc8KHgLEvFSz6JZrePYrg0Ts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/hQDLXIuFPbPeMoA0n3wg3FSKYSw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/nEfuc8KHgLEvFSz6JZrePYrg0Ts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.33.104.0/24 Signature Algorithm: sha256WithRSAEncryption a2:aa:05:bd:fc:ba:8e:2d:dd:32:13:58:8f:4f:c6:55:2d:b6: e1:4e:62:0f:14:33:92:a4:7e:5d:4e:b8:0a:57:2b:b6:bf:6a: cf:4e:08:34:4a:eb:65:59:34:99:e5:7d:0c:86:74:dd:ab:21: 4e:6c:0f:37:88:47:f7:96:3b:7b:93:1e:92:70:78:38:79:78: 65:7e:80:77:3d:5e:60:9a:7e:44:a1:7f:09:04:96:7a:75:78: 02:be:c9:a7:ba:3b:a0:b6:cb:d6:d4:5e:34:99:8b:df:b5:6a: a3:2f:1a:4a:72:1c:d3:20:01:c7:15:d2:e0:55:7d:24:7c:60: c3:60:77:3e:30:ad:f3:44:db:dc:ea:8d:f7:b5:be:31:fe:3e: 62:23:09:7e:28:27:eb:4a:da:41:ae:9c:9b:b9:d2:21:80:0e: 22:05:59:22:1e:35:2b:c4:04:f5:f3:f5:3c:d3:f6:91:f0:ed: 86:4f:67:f1:3f:45:97:43:c3:40:80:ec:1c:c6:1f:42:b5:ce: 70:f7:6a:7b:b9:c4:d7:58:d8:e9:8c:b0:43:b0:0a:6f:1f:a4: 11:80:24:75:03:56:a6:7f:ec:75:0e:4f:77:9f:f9:e9:d4:02: c2:da:a1:9c:a3:4b:b2:cf:4e:6e:3d:16:f2:e2:d3:e4:b7:de: 73:51:c4:75 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87c27hDV/L85YKU95xr/wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljNDdlZTczYzI4NzgwYjEyZjE1MmNmYTI1OWFkZTNkOGFl MGQxM2IwHhcNMjYwMTAyMDQxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTAwY2I1YzhiODUzZGIzZGUzMjgwMzQ5ZjdjMjBkYzU0OGE2MTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRyRD3hacbak1eIRa1izsWYXK84O 8nEJn3ABmsGT+bK/WO2gmvVCHYivH7PmdxBxaqzjPWj5IUsahG1Uu+8wZzc1zo0V oLYx7f2uEPUfdkTTOAyQWMH/MnT7SO3rvOyaJ8T8UdpE03mMw3sX43EIp1nsH03s cuSaSMveeE0YRutMCKBUJQEpYZmv3mMLEGZFlCJ4IxTswn/kwn25QfYq/rPjQ81F 5tKBgFPj+zRm/BMXVcHkaDSEWeq4JTBOvzd+ucJ5j9L8pttwCUq+KHIjPvUoyCwS TZtdUIrC7+lNOhhUXc9tCTic5mPXfbuG8Cojck+PVCBbIlQDRsP14VHKoQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIUAy1yLhT2z3jKANJ98INxUimEsMB8GA1UdIwQY MBaAFJxH7nPCh4CxLxUs+iWa3j2K4NE7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkVmdWM4S0hnTEV2RlN6NkpacmVQWXJnMFRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9jN2M1MWQtNGY5MC00MDg3LWExM2Et ZjNjMWE5YTExZDczLzEvaFFETFhJdUZQYlBlTW9BMG4zd2czRlNLWVN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9jN2M1MWQtNGY5MC00MDg3LWExM2EtZjNjMWE5YTExZDcz LzEvbkVmdWM4S0hnTEV2RlN6NkpacmVQWXJnMFRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwiFoMA0G CSqGSIb3DQEBCwUAA4IBAQCiqgW9/LqOLd0yE1iPT8ZVLbbhTmIPFDOSpH5dTrgK Vyu2v2rPTgg0SutlWTSZ5X0MhnTdqyFObA83iEf3ljt7kx6ScHg4eXhlfoB3PV5g mn5EoX8JBJZ6dXgCvsmnujugtsvW1F40mYvftWqjLxpKchzTIAHHFdLgVX0kfGDD YHc+MK3zRNvc6o33tb4x/j5iIwl+KCfrStpBrpybudIhgA4iBVkiHjUrxAT18/U8 0/aR8O2GT2fxP0WXQ8NAgOwcxh9Ctc5w92p7ucTXWNjpjLBDsApvH6QRgCR1A1am f+x1Dk93n/np1ALC2qGco0uyz05uPRby4tPkt95zUcR1 -----END CERTIFICATE-----Generated at Mon Jan 26 20:42:27 2026 by rpki-client