This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/HN0OoAUAd9K52llzkc8gz48p9mk.roa File: HN0OoAUAd9K52llzkc8gz48p9mk.roa (raw, json) Hash identifier: PcXNwk3D3I+0WIsogpXnMqQlII+v2oCwHcAJQWcFWvY= Subject key identifier: 1C:DD:0E:A0:05:00:77:D2:B9:DA:59:73:91:CF:20:CF:8F:29:F6:69 Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Certificate serial: 019B7F82DCAA6C8098AB0A74707624BE8A81 Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/HN0OoAUAd9K52llzkc8gz48p9mk.roa Signing time: Fri 02 Jan 2026 16:20:41 +0000 ROA not before: Fri 02 Jan 2026 16:20:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212477 IP address blocks: 194.31.143.0/24 maxlen: 24 2a0b:7080::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 07:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:dc:aa:6c:80:98:ab:0a:74:70:76:24:be:8a:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Validity Not Before: Jan 2 16:20:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1cdd0ea0050077d2b9da597391cf20cf8f29f669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:05:42:53:e3:f1:0e:68:b3:af:80:b6:36:5c: 24:16:70:db:f5:aa:62:b7:e1:46:cc:70:d8:48:1a: 5d:49:c6:53:8a:27:c4:6c:47:60:19:4d:f8:fb:ff: e8:68:bd:dd:53:f1:2f:c7:73:f2:0c:2f:da:9e:a0: ee:c8:fc:2f:6c:e5:71:4b:95:45:c2:21:f8:69:2c: a4:ef:01:7a:f4:24:12:47:05:d1:6e:83:9a:7b:b1: fa:90:c5:be:a5:8f:e9:a4:02:35:9d:bb:65:b9:cf: 74:e5:20:d3:f0:cb:b2:6e:e3:e8:ea:ce:f2:84:3d: 68:08:2f:03:bb:09:66:f4:d2:a8:42:a9:6e:d9:58: 01:9b:84:71:60:d4:fa:02:98:bc:a9:65:87:d1:27: 17:26:8c:1a:92:d4:fc:84:e5:44:fa:e8:84:29:67: 12:83:e3:6f:57:eb:db:b0:d0:c9:a9:3a:51:86:e2: e6:41:54:fd:36:a0:32:96:7b:ae:d6:ca:d7:7c:3e: 17:04:02:0f:9c:1f:d2:d7:e5:79:2b:de:7f:00:63: 70:b4:93:a4:20:df:cc:ce:0f:f1:ae:1e:c2:db:21: e5:8a:57:09:f2:a1:c9:50:01:c9:fd:ee:f3:5d:10: 67:9e:73:88:7a:c3:df:89:5a:7a:ca:c7:49:53:43: 53:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:DD:0E:A0:05:00:77:D2:B9:DA:59:73:91:CF:20:CF:8F:29:F6:69 X509v3 Authority Key Identifier: keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/HN0OoAUAd9K52llzkc8gz48p9mk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.31.143.0/24 IPv6: 2a0b:7080::/29 Signature Algorithm: sha256WithRSAEncryption 10:f7:c4:44:7a:08:e4:ba:ad:eb:cb:32:be:b9:3b:6e:e8:96: 26:9d:a8:4f:2f:cd:0f:67:f9:3e:cb:6c:31:ec:c5:13:78:a1: ff:4e:7f:9b:2b:7d:4d:21:a4:4a:1b:b6:67:af:49:f9:ca:60: 0c:59:02:0f:a0:19:4d:83:20:75:86:0b:82:34:34:14:54:bd: 71:bf:11:b5:81:97:37:99:5b:4a:71:78:eb:d2:fc:91:b0:dc: eb:cb:24:43:fa:1b:03:47:45:04:12:3a:66:7f:7c:f4:7c:5e: b8:4c:e6:98:2b:d5:57:65:5f:70:a3:b0:79:11:80:7d:b8:c7: f4:1e:61:00:d4:95:b1:c7:63:ca:1c:9e:a0:90:90:38:1b:eb: 37:08:ae:cc:04:68:16:40:07:3c:10:91:cb:39:3f:a8:93:c6: 9a:9f:48:0d:d9:a4:15:dc:cf:c2:2d:c8:59:f9:f7:cc:50:4e: b5:8c:7f:a8:2c:3e:f1:51:0d:40:21:03:c0:18:45:04:2b:ac: af:05:e9:11:2f:a2:02:38:89:35:c5:2f:fc:4e:7c:f2:94:20: 27:71:07:3c:b0:63:a5:6e:96:85:75:f6:82:a2:01:51:a8:ce: ce:74:59:81:62:da:d7:2e:13:4f:3e:31:ae:e6:d6:c2:90:c1: 0b:bc:28:3f -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/gtyqbICYqwp0cHYkvoqBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz YjUwMzQwHhcNMjYwMTAyMTYyMDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxY2RkMGVhMDA1MDA3N2QyYjlkYTU5NzM5MWNmMjBjZjhmMjlmNjY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygVCU+PxDmizr4C2NlwkFnDb9api t+FGzHDYSBpdScZTiifEbEdgGU34+//oaL3dU/Evx3PyDC/anqDuyPwvbOVxS5VF wiH4aSyk7wF69CQSRwXRboOae7H6kMW+pY/ppAI1nbtluc905SDT8MuybuPo6s7y hD1oCC8Duwlm9NKoQqlu2VgBm4RxYNT6Api8qWWH0ScXJowaktT8hOVE+uiEKWcS g+NvV+vbsNDJqTpRhuLmQVT9NqAylnuu1srXfD4XBAIPnB/S1+V5K95/AGNwtJOk IN/Mzg/xrh7C2yHlilcJ8qHJUAHJ/e7zXRBnnnOIesPfiVp6ysdJU0NTnwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBzdDqAFAHfSudpZc5HPIM+PKfZpMB8GA1UdIwQY MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It Mzk0YWNkMjFmMzliLzEvSE4wT29BVUFkOUs1MmxsemtjOGd6NDhwOW1rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwh+PMA0E AgACMAcDBQMqC3CAMA0GCSqGSIb3DQEBCwUAA4IBAQAQ98REegjkuq3ryzK+uTtu 6JYmnahPL80PZ/k+y2wx7MUTeKH/Tn+bK31NIaRKG7Znr0n5ymAMWQIPoBlNgyB1 hguCNDQUVL1xvxG1gZc3mVtKcXjr0vyRsNzryyRD+hsDR0UEEjpmf3z0fF64TOaY K9VXZV9wo7B5EYB9uMf0HmEA1JWxx2PKHJ6gkJA4G+s3CK7MBGgWQAc8EJHLOT+o k8aan0gN2aQV3M/CLchZ+ffMUE61jH+oLD7xUQ1AIQPAGEUEK6yvBekRL6ICOIk1 xS/8TnzylCAncQc8sGOlbpaFdfaCogFRqM7OdFmBYtrXLhNPPjGu5tbCkMELvCg/ -----END CERTIFICATE-----Generated at Sun Jan 11 15:07:33 2026 by rpki-client