This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/hkTeBzR1zcpqpx-K2o2CKT69syE.roa File: hkTeBzR1zcpqpx-K2o2CKT69syE.roa (raw, json) Hash identifier: 2ch6dbKSCdDQEw4rDKS8nHOAKxa/9jjwxReZLqw+2wk= Subject key identifier: 86:44:DE:07:34:75:CD:CA:6A:A7:1F:8A:DA:8D:82:29:3E:BD:B3:21 Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Certificate serial: 019B7C7EFB564E5F5265B0F9A78CCD1220B5 Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/hkTeBzR1zcpqpx-K2o2CKT69syE.roa Signing time: Fri 02 Jan 2026 02:17:35 +0000 ROA not before: Fri 02 Jan 2026 02:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 135391 IP address blocks: 94.124.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 08:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7e:fb:56:4e:5f:52:65:b0:f9:a7:8c:cd:12:20:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Validity Not Before: Jan 2 02:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8644de073475cdca6aa71f8ada8d82293ebdb321 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:62:7a:1f:02:c2:ea:28:5e:55:72:24:9a:60: c9:e5:be:09:33:e0:7b:fd:b6:37:b0:cd:64:78:26: 69:aa:f9:75:0c:e7:59:02:76:89:05:29:af:47:cc: 23:db:7b:6b:8c:fb:b1:f9:6a:a2:9e:24:43:61:7e: 42:6a:5e:df:5b:6b:e0:4a:f3:db:ef:29:69:4a:c5: 02:ee:b8:de:e0:d6:8a:e1:75:08:b5:a3:b2:82:6b: 9b:5f:93:27:b5:08:9d:67:96:d5:9b:e9:8f:a1:bc: 97:73:02:81:97:65:77:9c:55:51:6b:0a:5c:0c:bf: 97:da:d4:9f:c4:03:75:ce:f9:12:8c:0c:19:7e:e1: 42:31:cb:48:d8:ab:97:14:e6:d9:20:b5:85:af:36: 1e:a4:d5:93:4b:cf:1e:9a:f9:7a:04:3d:05:94:00: a0:46:4d:e3:5a:20:81:2e:20:9f:2a:14:91:0c:7f: 94:93:29:d0:d5:9f:37:60:34:2c:3e:f8:d4:45:8e: 39:01:ec:84:c6:b0:03:ab:ed:9d:be:40:32:2e:8e: 9c:c8:d1:42:4a:86:79:65:86:87:42:36:be:44:e8: ca:18:e0:60:de:5a:cb:80:3d:c0:b2:99:4e:3a:9c: 50:8e:98:7a:1a:e6:08:fc:52:71:75:16:f5:b1:45: 0e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:44:DE:07:34:75:CD:CA:6A:A7:1F:8A:DA:8D:82:29:3E:BD:B3:21 X509v3 Authority Key Identifier: keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/hkTeBzR1zcpqpx-K2o2CKT69syE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.124.161.0/24 Signature Algorithm: sha256WithRSAEncryption 22:4b:b5:47:4d:d9:e2:d8:32:64:6b:58:d9:bd:26:44:1f:fc: 8e:5c:d4:bd:6c:0a:1c:a7:f2:d4:65:75:8d:00:63:fa:ee:c6: 0c:2d:e1:7b:88:7e:81:4d:69:78:6f:1e:7d:a6:0e:46:5c:03: 99:5f:dc:57:8d:f8:58:a9:a2:f6:a9:06:e6:4a:b2:bf:7c:13: af:c8:86:3f:78:57:46:2b:19:76:4e:f6:51:0c:c6:7c:52:09: 26:fd:45:bb:64:13:6d:bd:86:1d:b7:f3:d5:8d:cb:1d:65:96: 1c:38:c8:1f:f0:c1:33:73:2c:33:66:98:e8:aa:b8:bf:67:f0: f9:a6:ad:76:32:16:4f:fa:2b:fe:22:e5:1a:c6:a3:63:29:7d: fc:e5:a1:9b:ff:e4:47:c8:3f:17:43:53:67:7a:00:f2:ad:a1: d9:20:28:ba:94:45:b3:1a:2f:bc:5e:c5:0d:f8:c9:40:15:95: 7e:7b:df:57:cb:fc:29:a7:6b:53:a1:2a:b9:22:05:ae:ca:83: b8:3a:a5:8c:f4:02:81:3d:5c:39:24:53:61:8a:e0:53:30:57: ec:94:ea:d0:71:43:52:95:b2:44:79:ca:83:31:1c:2b:99:6f: a4:1a:cd:1c:91:f1:a3:0f:1a:55:2b:86:e2:44:1f:ab:c8:90: 62:a2:b9:c1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8fvtWTl9SZbD5p4zNEiC1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZDA4YTFlMWNiYzkwOTI1NGU5ZTZiOWM5MzlmZDg1YTI2 OGIxZTEwHhcNMjYwMTAyMDIxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NjQ0ZGUwNzM0NzVjZGNhNmFhNzFmOGFkYThkODIyOTNlYmRiMzIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmJ6HwLC6iheVXIkmmDJ5b4JM+B7 /bY3sM1keCZpqvl1DOdZAnaJBSmvR8wj23trjPux+WqiniRDYX5Cal7fW2vgSvPb 7ylpSsUC7rje4NaK4XUItaOygmubX5MntQidZ5bVm+mPobyXcwKBl2V3nFVRawpc DL+X2tSfxAN1zvkSjAwZfuFCMctI2KuXFObZILWFrzYepNWTS88emvl6BD0FlACg Rk3jWiCBLiCfKhSRDH+UkynQ1Z83YDQsPvjURY45AeyExrADq+2dvkAyLo6cyNFC SoZ5ZYaHQja+ROjKGOBg3lrLgD3AsplOOpxQjph6GuYI/FJxdRb1sUUOvQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIZE3gc0dc3KaqcfitqNgik+vbMhMB8GA1UdIwQY MBaAFPTQih4cvJCSVOnmuck5/YWiaLHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2Ut ZGNlOTQ3ZTI5NGI2LzEvaGtUZUJ6UjF6Y3BxcHgtSzJvMkNLVDY5c3lFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2UtZGNlOTQ3ZTI5NGI2 LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXnyhMA0G CSqGSIb3DQEBCwUAA4IBAQAiS7VHTdni2DJka1jZvSZEH/yOXNS9bAocp/LUZXWN AGP67sYMLeF7iH6BTWl4bx59pg5GXAOZX9xXjfhYqaL2qQbmSrK/fBOvyIY/eFdG Kxl2TvZRDMZ8Ugkm/UW7ZBNtvYYdt/PVjcsdZZYcOMgf8MEzcywzZpjoqri/Z/D5 pq12MhZP+iv+IuUaxqNjKX385aGb/+RHyD8XQ1NnegDyraHZICi6lEWzGi+8XsUN +MlAFZV+e99Xy/wpp2tToSq5IgWuyoO4OqWM9AKBPVw5JFNhiuBTMFfslOrQcUNS lbJEecqDMRwrmW+kGs0ckfGjDxpVK4biRB+ryJBiornB -----END CERTIFICATE-----Generated at Wed Jan 7 14:41:03 2026 by rpki-client