This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hNHJviO15_wUokR1an19UqwDqGw.roa File: hNHJviO15_wUokR1an19UqwDqGw.roa (raw, json) Hash identifier: a/rXCW5KX5kn/2Y3jJBNdZXah47Ax5iFoxDp+MPK4Us= Subject key identifier: 84:D1:C9:BE:23:B5:E7:FC:14:A2:44:75:6A:7D:7D:52:AC:03:A8:6C Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A31794C913BA80B7137C495AADBA0A Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hNHJviO15_wUokR1an19UqwDqGw.roa Signing time: Thu 01 Jan 2026 08:18:32 +0000 ROA not before: Thu 01 Jan 2026 08:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 136258 IP address blocks: 94.156.250.0/24 maxlen: 24 185.226.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:17:94:c9:13:ba:80:b7:13:7c:49:5a:ad:ba:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=84d1c9be23b5e7fc14a244756a7d7d52ac03a86c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:16:5a:f1:66:a6:be:1b:c3:72:51:09:3d:1b: a8:88:1d:86:d5:a8:d3:32:33:46:00:f4:c2:8e:50: 17:c3:fa:98:1d:c1:1e:fa:a1:69:6b:2d:11:43:50: 9a:bf:82:33:b2:b7:89:98:70:9d:37:c3:ef:21:93: cd:9b:6f:de:50:f8:a4:b0:b0:5c:93:f3:b6:26:71: ab:6c:67:8e:9a:8a:30:ff:c1:89:8c:06:f2:06:0d: 70:13:4a:a7:f3:4f:c9:77:41:55:e2:aa:a6:76:86: 23:58:6d:6a:ba:1e:53:44:42:ac:e7:46:72:2e:59: 51:fb:b3:7b:f4:ec:10:88:73:00:d5:90:2e:3c:69: 16:c1:bd:f1:d4:38:b9:bb:a9:37:df:cc:89:cc:9c: 13:cc:32:78:e2:b1:f9:a8:68:f5:0d:0f:1a:7c:58: f6:de:af:9f:66:ba:09:bd:2c:04:79:fd:0b:d7:31: e0:20:73:e6:08:e7:d1:98:7c:f6:2e:bb:b0:f3:96: d2:8c:e2:15:5e:3e:63:13:03:84:37:9a:11:ab:01: f8:d2:66:47:33:b1:c1:2c:67:05:2f:40:52:1a:9a: c8:09:a6:e0:23:55:cc:76:77:e2:cf:08:af:33:7d: 9e:20:0f:ff:92:f5:67:4d:ff:a6:b7:24:6d:36:a8: 09:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:D1:C9:BE:23:B5:E7:FC:14:A2:44:75:6A:7D:7D:52:AC:03:A8:6C X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hNHJviO15_wUokR1an19UqwDqGw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.156.250.0/24 185.226.172.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:6b:04:ab:12:f6:7a:6a:36:cf:c8:62:77:80:de:17:03:4b: 7d:12:1d:c5:25:5a:17:78:72:29:cf:9a:f7:7d:9c:b1:70:d0: 95:ad:55:be:84:20:ff:81:9a:c2:09:81:4b:34:7e:65:df:c3: 4c:ff:88:4e:ac:56:ff:82:6e:43:f9:ef:17:2b:63:ed:d4:24: 7c:f6:97:bb:49:d0:8f:14:cf:00:a0:eb:1a:db:f9:f4:05:16: 53:f7:30:02:d4:7c:08:f7:d1:32:af:d2:70:9f:9a:07:16:6f: 7b:04:2b:b2:b0:be:a1:a5:14:29:d6:ca:af:df:d2:c6:a8:a2: 7b:64:cc:8f:94:66:50:33:4e:3a:30:e1:f2:da:b9:26:a5:1c: 44:53:0b:56:b2:73:3f:a1:56:ae:86:55:5f:fe:32:3b:64:ed: 28:35:52:c0:76:80:6a:70:60:07:67:08:6a:73:57:31:0a:ea: e8:35:60:4c:c1:da:a6:68:8e:8b:3c:a1:c1:c0:0f:79:a1:b0: 55:04:d4:8a:bf:42:2b:58:dd:0c:31:fa:f6:14:95:45:9f:ed: ea:ef:82:05:ef:62:8c:4b:71:99:ef:bf:fe:d6:53:ad:8c:4e: 87:e2:d1:c1:24:5e:22:50:6f:9d:85:d9:b0:1c:ff:49:dd:76: 40:87:c4:4f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4oxeUyRO6gLcTfElarboKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NGQxYzliZTIzYjVlN2ZjMTRhMjQ0NzU2YTdkN2Q1MmFjMDNhODZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxZa8WamvhvDclEJPRuoiB2G1ajT MjNGAPTCjlAXw/qYHcEe+qFpay0RQ1Cav4IzsreJmHCdN8PvIZPNm2/eUPiksLBc k/O2JnGrbGeOmoow/8GJjAbyBg1wE0qn80/Jd0FV4qqmdoYjWG1quh5TREKs50Zy LllR+7N79OwQiHMA1ZAuPGkWwb3x1Di5u6k338yJzJwTzDJ44rH5qGj1DQ8afFj2 3q+fZroJvSwEef0L1zHgIHPmCOfRmHz2Lruw85bSjOIVXj5jEwOEN5oRqwH40mZH M7HBLGcFL0BSGprICabgI1XMdnfizwivM32eIA//kvVnTf+mtyRtNqgJowIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFITRyb4jtef8FKJEdWp9fVKsA6hsMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvaE5ISnZpTzE1X3dVb2tSMWFuMTlVcXdEcUd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXpz6AwQA ueKsMA0GCSqGSIb3DQEBCwUAA4IBAQCcawSrEvZ6ajbPyGJ3gN4XA0t9Eh3FJVoX eHIpz5r3fZyxcNCVrVW+hCD/gZrCCYFLNH5l38NM/4hOrFb/gm5D+e8XK2Pt1CR8 9pe7SdCPFM8AoOsa2/n0BRZT9zAC1HwI99Eyr9Jwn5oHFm97BCuysL6hpRQp1sqv 39LGqKJ7ZMyPlGZQM046MOHy2rkmpRxEUwtWsnM/oVauhlVf/jI7ZO0oNVLAdoBq cGAHZwhqc1cxCuroNWBMwdqmaI6LPKHBwA95obBVBNSKv0IrWN0MMfr2FJVFn+3q 74IF72KMS3GZ77/+1lOtjE6H4tHBJF4iUG+dhdmwHP9J3XZAh8RP -----END CERTIFICATE-----Generated at Fri Jan 2 12:09:43 2026 by rpki-client