This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/hJR5NdWu4-Lv4WFC0Lu_BxFdjI8.roa File: hJR5NdWu4-Lv4WFC0Lu_BxFdjI8.roa (raw, json) Hash identifier: N6VCG9vXtUWHshJ3njO134sBkm0kEo7esti0M/kqZCQ= Subject key identifier: 84:94:79:35:D5:AE:E3:E2:EF:E1:61:42:D0:BB:BF:07:11:5D:8C:8F Certificate issuer: /CN=db14e7a6be97cec6f5bc1a678a76ea6d1619c306 Certificate serial: 019B7F153CE21F826718C5D91C8EF8E1822F Authority key identifier: DB:14:E7:A6:BE:97:CE:C6:F5:BC:1A:67:8A:76:EA:6D:16:19:C3:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2xTnpr6Xzsb1vBpninbqbRYZwwY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/hJR5NdWu4-Lv4WFC0Lu_BxFdjI8.roa Signing time: Fri 02 Jan 2026 14:20:56 +0000 ROA not before: Fri 02 Jan 2026 14:20:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209839 IP address blocks: 94.154.152.0/22 maxlen: 22 94.154.152.0/24 maxlen: 24 94.154.153.0/24 maxlen: 24 94.154.154.0/24 maxlen: 24 94.154.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.mft rsync://rpki.ripe.net/repository/DEFAULT/2xTnpr6Xzsb1vBpninbqbRYZwwY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:3c:e2:1f:82:67:18:c5:d9:1c:8e:f8:e1:82:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db14e7a6be97cec6f5bc1a678a76ea6d1619c306 Validity Not Before: Jan 2 14:20:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=84947935d5aee3e2efe16142d0bbbf07115d8c8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:79:dd:92:ae:26:32:ac:00:a8:51:d8:e4:41: 25:2c:18:5e:65:25:df:86:7c:4c:77:de:2a:5d:65: 1e:57:95:b6:b5:ae:95:6e:b1:8e:b8:0e:26:f8:fe: a6:a0:a3:83:3e:32:38:e5:21:af:03:68:80:c6:59: 5d:de:87:85:af:4c:ed:74:f4:cc:a1:76:ac:03:4b: b4:a5:d8:5d:db:02:4f:ba:86:32:e8:9c:f0:be:69: e9:3f:c8:98:9f:bf:b9:fe:a6:ee:f9:de:a8:dd:f8: a6:a7:90:00:c3:d9:18:ac:63:f3:a5:76:3f:66:aa: b2:66:c6:8e:1f:84:1e:a5:bd:77:78:59:14:66:12: c5:b0:c3:1d:ec:a3:d1:b1:ea:28:3e:c4:fc:fd:be: 44:83:cb:a7:af:da:8e:25:e1:68:95:6d:0a:5e:be: b4:e0:d6:ab:53:a9:7d:d0:0e:bb:b8:0f:0d:62:13: a1:32:aa:82:10:f9:5e:49:40:f5:cb:66:bd:fe:cb: c4:82:84:b0:94:75:85:2e:94:0b:1a:59:8f:e6:25: b0:ce:96:1d:80:93:36:5a:23:10:76:c1:1f:40:7b: 86:d1:95:e5:db:c0:17:3a:88:2f:e0:fd:39:87:12: db:38:9d:14:52:e8:a6:2b:f0:4f:70:7a:c6:95:f5: a8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:94:79:35:D5:AE:E3:E2:EF:E1:61:42:D0:BB:BF:07:11:5D:8C:8F X509v3 Authority Key Identifier: keyid:DB:14:E7:A6:BE:97:CE:C6:F5:BC:1A:67:8A:76:EA:6D:16:19:C3:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2xTnpr6Xzsb1vBpninbqbRYZwwY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/hJR5NdWu4-Lv4WFC0Lu_BxFdjI8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.154.152.0/22 Signature Algorithm: sha256WithRSAEncryption 88:f7:e4:d2:c3:1d:bb:b7:65:1f:fd:bc:62:e9:37:b5:21:90: 35:e5:59:2b:35:c1:73:50:f7:86:04:ab:1d:7b:51:aa:ea:cf: 0d:70:96:e9:71:13:95:91:81:41:2e:9e:fb:b0:21:29:bc:6e: cc:e8:ba:b5:54:cd:dc:36:8b:fe:02:63:dc:e2:fc:83:00:23: e9:9b:66:17:d3:82:08:9c:52:33:5a:be:ce:44:c5:d7:89:90: bc:86:c3:9c:2d:bb:d1:c7:f9:aa:62:59:28:5d:d8:3e:70:c2: 63:cf:b9:b0:99:41:b5:d2:70:8e:5d:bc:8d:49:67:8c:58:3a: 07:e8:71:e9:63:b9:d6:ec:34:1c:89:13:af:fb:ae:b3:57:71: ad:74:29:36:5d:93:b3:62:16:24:09:70:40:00:8e:f6:2b:f6: 8b:e7:1a:d7:4f:95:9b:e5:47:ce:22:0f:8c:8e:c1:b7:ab:be: 78:df:8e:1f:9a:90:db:72:08:95:4f:30:e6:05:81:82:ad:9e: 3b:3d:52:05:bb:0c:50:cc:0f:99:3b:8a:46:11:87:b0:5c:93: 01:2e:6c:64:6d:5b:80:c7:92:f9:15:32:75:b2:ef:c9:9a:de: 6a:4d:62:ae:fa:a3:39:14:23:71:49:ac:a4:c6:7f:b4:fc:4e: d4:af:03:9d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FTziH4JnGMXZHI744YIvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiMTRlN2E2YmU5N2NlYzZmNWJjMWE2NzhhNzZlYTZkMTYx OWMzMDYwHhcNMjYwMTAyMTQyMDU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDk0NzkzNWQ1YWVlM2UyZWZlMTYxNDJkMGJiYmYwNzExNWQ4YzhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3ndkq4mMqwAqFHY5EElLBheZSXf hnxMd94qXWUeV5W2ta6VbrGOuA4m+P6moKODPjI45SGvA2iAxlld3oeFr0ztdPTM oXasA0u0pdhd2wJPuoYy6JzwvmnpP8iYn7+5/qbu+d6o3fimp5AAw9kYrGPzpXY/ ZqqyZsaOH4Qepb13eFkUZhLFsMMd7KPRseooPsT8/b5Eg8unr9qOJeFolW0KXr60 4NarU6l90A67uA8NYhOhMqqCEPleSUD1y2a9/svEgoSwlHWFLpQLGlmP5iWwzpYd gJM2WiMQdsEfQHuG0ZXl28AXOogv4P05hxLbOJ0UUuimK/BPcHrGlfWoiQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFISUeTXVruPi7+FhQtC7vwcRXYyPMB8GA1UdIwQY MBaAFNsU56a+l87G9bwaZ4p26m0WGcMGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnhUbnByNlh6c2IxdkJwbmluYnFiUllad3dZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8xMDY0NWQtMzU0Mi00ZTVkLThlNzAt MTFmOTFkMDczOWM5LzEvaEpSNU5kV3U0LUx2NFdGQzBMdV9CeEZkakk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS8xMDY0NWQtMzU0Mi00ZTVkLThlNzAtMTFmOTFkMDczOWM5 LzEvMnhUbnByNlh6c2IxdkJwbmluYnFiUllad3dZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXpqYMA0G CSqGSIb3DQEBCwUAA4IBAQCI9+TSwx27t2Uf/bxi6Te1IZA15VkrNcFzUPeGBKsd e1Gq6s8NcJbpcROVkYFBLp77sCEpvG7M6Lq1VM3cNov+AmPc4vyDACPpm2YX04II nFIzWr7ORMXXiZC8hsOcLbvRx/mqYlkoXdg+cMJjz7mwmUG10nCOXbyNSWeMWDoH 6HHpY7nW7DQciROv+66zV3GtdCk2XZOzYhYkCXBAAI72K/aL5xrXT5Wb5UfOIg+M jsG3q754344fmpDbcgiVTzDmBYGCrZ47PVIFuwxQzA+ZO4pGEYewXJMBLmxkbVuA x5L5FTJ1su/Jmt5qTWKu+qM5FCNxSaykxn+0/E7UrwOd -----END CERTIFICATE-----Generated at Tue Feb 10 01:29:06 2026 by rpki-client