This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/HTIxoi8WyFSrHeUOWzzUiEIhzDk.roa File: HTIxoi8WyFSrHeUOWzzUiEIhzDk.roa (raw, json) Hash identifier: cd0RecHzNsbQYeDphiQhrKlq2//otbl1g44Ke+zy6bw= Subject key identifier: 1D:32:31:A2:2F:16:C8:54:AB:1D:E5:0E:5B:3C:D4:88:42:21:CC:39 Certificate issuer: /CN=b6f3db35659133315d2fcf93058dce350a4cb17a Certificate serial: 019B7E388E5BA55482E7863681364232B8CD Authority key identifier: B6:F3:DB:35:65:91:33:31:5D:2F:CF:93:05:8D:CE:35:0A:4C:B1:7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/HTIxoi8WyFSrHeUOWzzUiEIhzDk.roa Signing time: Fri 02 Jan 2026 10:19:54 +0000 ROA not before: Fri 02 Jan 2026 10:19:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 194.44.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 13:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:8e:5b:a5:54:82:e7:86:36:81:36:42:32:b8:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6f3db35659133315d2fcf93058dce350a4cb17a Validity Not Before: Jan 2 10:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1d3231a22f16c854ab1de50e5b3cd4884221cc39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:1e:e9:7d:25:4e:a2:1c:15:4b:19:f4:35:67: 31:f6:d4:25:e8:33:62:19:5b:21:ec:78:dc:3a:3a: 96:a0:ab:0e:3e:16:35:a2:90:2f:48:56:84:38:24: 97:0e:1c:42:fe:1d:70:fb:49:48:68:58:1b:dc:2f: 52:b1:36:63:82:41:c8:ad:01:c7:04:d3:4b:7d:b5: b6:58:38:3a:02:75:1b:54:7d:8f:e3:df:2a:19:3f: 43:c4:cc:f9:0e:de:5d:e7:e5:d5:bc:e7:b7:0b:1f: 19:6a:ee:70:d3:1a:fe:a8:c5:e6:3b:6a:58:98:5f: 7c:8a:15:73:7e:a8:bd:3b:8a:1c:a6:f2:1e:89:c2: 30:47:ba:28:60:57:04:f8:a2:9f:72:2d:98:20:a9: 76:91:07:5c:0d:2f:5b:bb:43:a1:2f:30:6a:71:f5: b4:8e:27:e4:bb:fb:4f:a6:b9:eb:5e:ad:7b:b2:ce: 67:29:dd:ba:fe:d1:c3:09:8c:e8:84:30:3a:bb:15: 22:99:c4:9d:3c:0c:9b:49:4d:ff:81:65:b5:9d:e3: 2d:3f:c3:a1:e9:6b:39:e3:7c:9e:c8:21:08:c6:44: 2e:72:60:98:fd:b3:58:f0:88:bc:45:ea:4d:9a:60: 05:ac:85:f6:66:9c:56:38:ec:2d:cd:96:37:13:f7: 22:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:32:31:A2:2F:16:C8:54:AB:1D:E5:0E:5B:3C:D4:88:42:21:CC:39 X509v3 Authority Key Identifier: keyid:B6:F3:DB:35:65:91:33:31:5D:2F:CF:93:05:8D:CE:35:0A:4C:B1:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/HTIxoi8WyFSrHeUOWzzUiEIhzDk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.44.235.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:a0:81:75:4d:76:2b:cc:7f:59:6d:d8:7f:28:41:92:87:56: f3:9f:e9:87:e5:e8:d0:18:40:15:ad:a2:6e:2b:19:ea:5d:1e: d3:96:9f:69:47:44:18:f5:31:c3:68:c7:5a:c0:82:dd:6e:5b: 79:81:27:40:bc:5e:c8:e9:44:86:44:d0:17:8e:d5:f0:37:21: 15:64:b1:fa:fb:06:8e:d6:4a:f3:52:57:68:95:94:38:22:4b: 44:cd:6c:65:70:85:f5:f6:c7:cc:99:db:d2:1e:7b:a1:0d:09: 6c:4d:44:09:83:02:2f:13:0f:18:fc:6a:8b:b2:ff:e9:3e:49: ef:c7:6a:5f:d1:8f:dc:81:f5:44:5d:f7:c9:31:83:dd:3a:38: 64:ed:5b:90:32:04:26:19:17:b9:39:cd:03:12:77:71:d9:b6: 30:00:a1:20:07:7a:89:00:c6:56:61:bb:b0:62:a3:d9:05:48: 75:18:12:33:c1:44:95:ec:5d:31:9b:3d:c2:b9:52:85:ce:c7: f8:fc:d6:c7:9f:e4:95:62:3d:5e:97:5c:dd:46:d3:c5:ac:c9: f9:f2:87:d9:51:2b:70:7a:1b:78:78:49:e3:07:90:84:bf:f5: 9a:a4:69:07:f0:e0:73:a6:2d:07:93:be:eb:6c:fd:40:50:7e: dc:23:3a:73 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OI5bpVSC54Y2gTZCMrjNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2ZjNkYjM1NjU5MTMzMzE1ZDJmY2Y5MzA1OGRjZTM1MGE0 Y2IxN2EwHhcNMjYwMTAyMTAxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZDMyMzFhMjJmMTZjODU0YWIxZGU1MGU1YjNjZDQ4ODQyMjFjYzM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3B7pfSVOohwVSxn0NWcx9tQl6DNi GVsh7HjcOjqWoKsOPhY1opAvSFaEOCSXDhxC/h1w+0lIaFgb3C9SsTZjgkHIrQHH BNNLfbW2WDg6AnUbVH2P498qGT9DxMz5Dt5d5+XVvOe3Cx8Zau5w0xr+qMXmO2pY mF98ihVzfqi9O4ocpvIeicIwR7ooYFcE+KKfci2YIKl2kQdcDS9bu0OhLzBqcfW0 jifku/tPprnrXq17ss5nKd26/tHDCYzohDA6uxUimcSdPAybSU3/gWW1neMtP8Oh 6Ws543yeyCEIxkQucmCY/bNY8Ii8RepNmmAFrIX2ZpxWOOwtzZY3E/ciFwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB0yMaIvFshUqx3lDls81IhCIcw5MB8GA1UdIwQY MBaAFLbz2zVlkTMxXS/PkwWNzjUKTLF6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHZQYk5XV1JNekZkTDgtVEJZM09OUXBNc1hvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC83MGJmZmUtYjRmMy00NDllLTgxZWQt NTQ5ZWU2ZDMwZmI2LzEvSFRJeG9pOFd5RlNySGVVT1d6elVpRUloekRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC83MGJmZmUtYjRmMy00NDllLTgxZWQtNTQ5ZWU2ZDMwZmI2 LzEvdHZQYk5XV1JNekZkTDgtVEJZM09OUXBNc1hvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwizrMA0G CSqGSIb3DQEBCwUAA4IBAQBsoIF1TXYrzH9Zbdh/KEGSh1bzn+mH5ejQGEAVraJu KxnqXR7Tlp9pR0QY9THDaMdawILdblt5gSdAvF7I6USGRNAXjtXwNyEVZLH6+waO 1krzUldolZQ4IktEzWxlcIX19sfMmdvSHnuhDQlsTUQJgwIvEw8Y/GqLsv/pPknv x2pf0Y/cgfVEXffJMYPdOjhk7VuQMgQmGRe5Oc0DEndx2bYwAKEgB3qJAMZWYbuw YqPZBUh1GBIzwUSV7F0xmz3CuVKFzsf4/NbHn+SVYj1el1zdRtPFrMn58ofZUStw eht4eEnjB5CEv/WapGkH8OBzpi0Hk77rbP1AUH7cIzpz -----END CERTIFICATE-----Generated at Sun Jan 18 16:37:46 2026 by rpki-client