This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/94eafc-56de-43b4-a8da-ac767d4c4c8f/1/_H_5tniV6dHbOCPwrDiKfNRDtb8.roa File: _H_5tniV6dHbOCPwrDiKfNRDtb8.roa (raw, json) Hash identifier: jskBF4cI11f70k6sJJHhYYqgxXe9m3wOfO7FgPOCe8k= Subject key identifier: FC:7F:F9:B6:78:95:E9:D1:DB:38:23:F0:AC:38:8A:7C:D4:43:B5:BF Certificate issuer: /CN=c74f8824d48f43f66e54ba4a42e6d10ed15a4e45 Certificate serial: 019B7E390CF1BF71935ED02CA566BBC6D0DB Authority key identifier: C7:4F:88:24:D4:8F:43:F6:6E:54:BA:4A:42:E6:D1:0E:D1:5A:4E:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0-IJNSPQ_ZuVLpKQubRDtFaTkU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/94eafc-56de-43b4-a8da-ac767d4c4c8f/1/_H_5tniV6dHbOCPwrDiKfNRDtb8.roa Signing time: Fri 02 Jan 2026 10:20:26 +0000 ROA not before: Fri 02 Jan 2026 10:20:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25278 IP address blocks: 194.102.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/94eafc-56de-43b4-a8da-ac767d4c4c8f/1/x0-IJNSPQ_ZuVLpKQubRDtFaTkU.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/94eafc-56de-43b4-a8da-ac767d4c4c8f/1/x0-IJNSPQ_ZuVLpKQubRDtFaTkU.mft rsync://rpki.ripe.net/repository/DEFAULT/x0-IJNSPQ_ZuVLpKQubRDtFaTkU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:0c:f1:bf:71:93:5e:d0:2c:a5:66:bb:c6:d0:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c74f8824d48f43f66e54ba4a42e6d10ed15a4e45 Validity Not Before: Jan 2 10:20:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fc7ff9b67895e9d1db3823f0ac388a7cd443b5bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2d:72:ee:48:49:57:6b:84:45:29:71:b0:35: de:f7:d8:17:98:4f:39:7a:a7:b0:c8:07:42:6e:44: 83:2f:ba:01:44:fe:51:bc:58:5f:cb:e2:a6:08:48: 64:3a:17:6b:f8:11:fa:39:1b:a7:b8:ea:ca:b7:3d: 9c:1b:c6:1c:42:e3:1d:07:65:62:f0:f5:cf:60:9c: df:da:3f:33:77:78:b9:64:90:d3:54:61:3f:08:ef: bf:c7:7a:10:34:57:2e:77:2d:d4:03:b3:43:95:55: 35:1d:50:33:b2:e9:95:c1:ff:86:62:59:63:18:96: ef:4a:76:c6:b3:b5:4d:57:09:89:7e:88:b2:a0:2a: 3f:30:5b:92:bd:2b:52:c5:61:bf:64:20:78:c2:62: da:1b:91:eb:41:03:14:06:56:15:96:92:fc:56:25: 31:ed:45:cc:84:a9:c5:16:c0:de:da:41:10:91:30: 10:66:14:4c:c4:64:12:fd:b9:7c:7e:02:56:3a:49: 33:32:35:c8:28:62:bd:b4:48:41:5c:df:b6:e5:68: de:2a:63:2e:c6:ee:76:e9:92:25:6e:ec:5f:fb:c1: 77:98:44:31:b6:75:2d:e0:61:ec:cd:d4:f0:da:74: d8:ce:89:e4:f5:71:03:7c:6e:55:11:57:e6:c0:b0: 5f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:7F:F9:B6:78:95:E9:D1:DB:38:23:F0:AC:38:8A:7C:D4:43:B5:BF X509v3 Authority Key Identifier: keyid:C7:4F:88:24:D4:8F:43:F6:6E:54:BA:4A:42:E6:D1:0E:D1:5A:4E:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0-IJNSPQ_ZuVLpKQubRDtFaTkU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/94eafc-56de-43b4-a8da-ac767d4c4c8f/1/_H_5tniV6dHbOCPwrDiKfNRDtb8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/94eafc-56de-43b4-a8da-ac767d4c4c8f/1/x0-IJNSPQ_ZuVLpKQubRDtFaTkU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.102.45.0/24 Signature Algorithm: sha256WithRSAEncryption 05:92:aa:47:f1:46:8f:56:ca:0a:a6:87:b3:dd:05:bd:e2:1d: 18:f3:c5:3d:8b:9f:da:96:ff:1f:d5:f1:af:1c:60:5f:d7:90: a2:24:eb:38:82:ab:73:bf:11:20:ca:c1:31:28:b5:cc:33:c3: 7e:fa:36:9b:a3:5a:0b:f3:6a:33:09:a0:d2:4d:0e:e9:91:07: 05:30:0c:a0:96:3b:04:79:e0:6e:5c:67:ce:9a:00:78:ce:ce: 72:32:eb:60:9c:7f:50:9c:d5:4e:0b:33:5b:0f:e3:a2:fe:7c: a1:57:90:90:88:02:7e:59:b8:ee:18:d7:56:1a:24:2c:e2:9d: b9:46:6e:df:24:ac:93:71:76:20:bc:d1:9e:cc:6b:8f:25:0a: e5:ef:d7:ab:59:55:08:76:04:d3:77:a7:61:58:8a:5c:f4:dc: ec:da:85:60:3b:1c:3c:e5:02:01:3a:2d:7b:fe:20:91:51:12: 9a:29:23:e8:ef:b6:0f:93:f1:b0:9f:1a:a2:52:68:e6:2f:ff: d7:7e:3a:69:fe:c6:73:df:fe:20:dd:6d:89:e4:3a:89:fa:7a: d5:ad:c5:ed:45:f5:e5:37:a8:34:b8:e1:b3:cc:00:21:1c:49: a2:5c:b4:8b:7c:b8:cd:e4:a7:9e:00:09:90:6c:97:e6:cd:12: 9e:c7:2c:98 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OQzxv3GTXtAspWa7xtDbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NGY4ODI0ZDQ4ZjQzZjY2ZTU0YmE0YTQyZTZkMTBlZDE1 YTRlNDUwHhcNMjYwMTAyMTAyMDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYzdmZjliNjc4OTVlOWQxZGIzODIzZjBhYzM4OGE3Y2Q0NDNiNWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwS1y7khJV2uERSlxsDXe99gXmE85 eqewyAdCbkSDL7oBRP5RvFhfy+KmCEhkOhdr+BH6ORunuOrKtz2cG8YcQuMdB2Vi 8PXPYJzf2j8zd3i5ZJDTVGE/CO+/x3oQNFcudy3UA7NDlVU1HVAzsumVwf+GYllj GJbvSnbGs7VNVwmJfoiyoCo/MFuSvStSxWG/ZCB4wmLaG5HrQQMUBlYVlpL8ViUx 7UXMhKnFFsDe2kEQkTAQZhRMxGQS/bl8fgJWOkkzMjXIKGK9tEhBXN+25WjeKmMu xu526ZIlbuxf+8F3mEQxtnUt4GHszdTw2nTYzonk9XEDfG5VEVfmwLBfrQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPx/+bZ4lenR2zgj8Kw4inzUQ7W/MB8GA1UdIwQY MBaAFMdPiCTUj0P2blS6SkLm0Q7RWk5FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDAtSUpOU1BRX1p1VkxwS1F1YlJEdEZhVGtVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS85NGVhZmMtNTZkZS00M2I0LWE4ZGEt YWM3NjdkNGM0YzhmLzEvX0hfNXRuaVY2ZEhiT0NQd3JEaUtmTlJEdGI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS85NGVhZmMtNTZkZS00M2I0LWE4ZGEtYWM3NjdkNGM0Yzhm LzEveDAtSUpOU1BRX1p1VkxwS1F1YlJEdEZhVGtVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwmYtMA0G CSqGSIb3DQEBCwUAA4IBAQAFkqpH8UaPVsoKpoez3QW94h0Y88U9i5/alv8f1fGv HGBf15CiJOs4gqtzvxEgysExKLXMM8N++jabo1oL82ozCaDSTQ7pkQcFMAygljsE eeBuXGfOmgB4zs5yMutgnH9QnNVOCzNbD+Oi/nyhV5CQiAJ+WbjuGNdWGiQs4p25 Rm7fJKyTcXYgvNGezGuPJQrl79erWVUIdgTTd6dhWIpc9Nzs2oVgOxw85QIBOi17 /iCRURKaKSPo77YPk/GwnxqiUmjmL//Xfjpp/sZz3/4g3W2J5DqJ+nrVrcXtRfXl N6g0uOGzzAAhHEmiXLSLfLjN5KeeAAmQbJfmzRKexyyY -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:36 2026 by rpki-client