This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/hZf5u0QbS1XG7PsEyRnhTDo6HjI.roa File: hZf5u0QbS1XG7PsEyRnhTDo6HjI.roa (raw, json) Hash identifier: 3UtzjBeSVvMSTFyNhnUR4ZuKLONPZvV6PMClfmnPEuU= Subject key identifier: 85:97:F9:BB:44:1B:4B:55:C6:EC:FB:04:C9:19:E1:4C:3A:3A:1E:32 Certificate issuer: /CN=345b4f7b4a16db9e924f0908cee3da26f22ad481 Certificate serial: 019B7F15F5E80623882F6286611C3DA4FC53 Authority key identifier: 34:5B:4F:7B:4A:16:DB:9E:92:4F:09:08:CE:E3:DA:26:F2:2A:D4:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/hZf5u0QbS1XG7PsEyRnhTDo6HjI.roa Signing time: Fri 02 Jan 2026 14:21:44 +0000 ROA not before: Fri 02 Jan 2026 14:21:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50869 IP address blocks: 92.119.38.0/24 maxlen: 24 2a0b:dd80:3100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.crl rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:f5:e8:06:23:88:2f:62:86:61:1c:3d:a4:fc:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=345b4f7b4a16db9e924f0908cee3da26f22ad481 Validity Not Before: Jan 2 14:21:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8597f9bb441b4b55c6ecfb04c919e14c3a3a1e32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:fa:34:1a:ea:08:cd:fa:d3:e1:fb:b7:71:16: f3:00:09:80:4f:ec:b0:b0:39:42:da:e2:27:9b:66: 5b:c4:89:5f:9a:14:6d:a3:ea:13:f6:74:22:89:de: f9:5f:02:c2:dd:d9:c0:60:1f:75:9a:09:a4:4f:59: 0a:25:17:b6:af:68:07:99:1b:b6:79:30:7b:6c:aa: 9a:30:7f:60:e2:ea:bd:30:10:87:57:06:21:b4:58: 01:d8:fa:6b:c0:0a:1d:29:65:f1:55:e0:61:1c:04: b5:46:42:c1:6e:e5:83:00:84:4b:76:c7:ee:96:03: d1:0c:a1:94:68:35:03:54:f5:b4:95:74:40:6c:e6: 6f:e4:38:f1:84:52:ee:e3:7d:2a:38:66:f7:14:2d: 78:7d:62:36:d8:62:62:14:a5:ee:f2:c9:d7:0a:ed: c4:d0:d2:54:2e:b3:b7:a1:50:b5:6b:72:b5:09:dc: 46:d3:6c:79:9f:24:fb:e5:c5:1d:26:c3:0e:3b:c8: 68:51:8c:5f:b8:b7:25:74:5d:10:09:82:3f:20:69: 9b:1b:0a:4e:ca:74:be:84:55:17:16:cb:67:6a:31: 10:23:5a:3b:8b:69:cc:d0:72:61:18:4b:9e:33:76: 26:e3:78:db:58:45:8d:2a:5f:67:58:3f:f3:bc:b9: 57:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:97:F9:BB:44:1B:4B:55:C6:EC:FB:04:C9:19:E1:4C:3A:3A:1E:32 X509v3 Authority Key Identifier: keyid:34:5B:4F:7B:4A:16:DB:9E:92:4F:09:08:CE:E3:DA:26:F2:2A:D4:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/hZf5u0QbS1XG7PsEyRnhTDo6HjI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.119.38.0/24 IPv6: 2a0b:dd80:3100::/40 Signature Algorithm: sha256WithRSAEncryption 99:48:a4:62:52:f3:42:b8:89:8d:a1:86:c4:6d:64:5d:38:d4: e9:ce:3e:91:42:46:2a:3e:3c:73:62:b7:0d:7e:77:69:3a:92: 30:b6:7e:73:1c:9d:7b:ba:96:9d:9e:21:47:47:55:6d:55:18: 77:ba:21:45:38:71:1e:7e:16:32:b6:41:d6:e1:6e:08:e1:2b: 0b:86:ef:19:06:a5:e7:bc:28:c0:74:54:2e:13:db:1e:af:2c: 46:00:eb:5c:c9:3c:c9:d0:a2:39:14:24:ee:22:47:12:96:01: eb:77:62:52:53:3f:cd:52:0a:04:f4:4f:86:ba:24:fd:7c:5d: 98:90:a3:e9:ad:79:f2:43:ec:72:8e:0c:72:0f:5f:89:3c:cd: f5:71:a0:59:2f:2f:76:76:ca:38:3d:c2:e7:df:d8:5e:27:ab: 13:d2:4b:fd:97:66:b7:de:0f:c6:dc:2a:ca:0c:3d:fb:5f:0d: ad:31:66:bd:ad:a0:45:21:a0:78:35:e3:76:22:b4:2c:36:52: 00:2a:68:b0:9b:7f:d2:49:bb:a0:8a:d8:10:00:12:e0:ea:1c: 76:2f:06:cb:c4:99:0b:97:68:a1:50:6c:2b:99:07:ca:51:1f: d2:8c:60:02:c1:b6:8a:22:03:05:dd:e8:41:f8:06:dd:58:4a: 76:7e:c5:66 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt/FfXoBiOIL2KGYRw9pPxTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NWI0ZjdiNGExNmRiOWU5MjRmMDkwOGNlZTNkYTI2ZjIy YWQ0ODEwHhcNMjYwMTAyMTQyMTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTk3ZjliYjQ0MWI0YjU1YzZlY2ZiMDRjOTE5ZTE0YzNhM2ExZTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfo0GuoIzfrT4fu3cRbzAAmAT+yw sDlC2uInm2ZbxIlfmhRto+oT9nQiid75XwLC3dnAYB91mgmkT1kKJRe2r2gHmRu2 eTB7bKqaMH9g4uq9MBCHVwYhtFgB2PprwAodKWXxVeBhHAS1RkLBbuWDAIRLdsfu lgPRDKGUaDUDVPW0lXRAbOZv5DjxhFLu430qOGb3FC14fWI22GJiFKXu8snXCu3E 0NJULrO3oVC1a3K1CdxG02x5nyT75cUdJsMOO8hoUYxfuLcldF0QCYI/IGmbGwpO ynS+hFUXFstnajEQI1o7i2nM0HJhGEueM3Ym43jbWEWNKl9nWD/zvLlXpQIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFIWX+btEG0tVxuz7BMkZ4Uw6Oh4yMB8GA1UdIwQY MBaAFDRbT3tKFtuekk8JCM7j2ibyKtSBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkZ0UGUwb1cyNTZTVHdrSXp1UGFKdklxMUlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8zNmE5YWYtMGQ2YS00NWUzLTljYTUt NDA4NThiOTVmY2Y1LzEvaFpmNXUwUWJTMVhHN1BzRXlSbmhURG82SGpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8zNmE5YWYtMGQ2YS00NWUzLTljYTUtNDA4NThiOTVmY2Y1 LzEvTkZ0UGUwb1cyNTZTVHdrSXp1UGFKdklxMUlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAXHcmMA4E AgACMAgDBgAqC92AMTANBgkqhkiG9w0BAQsFAAOCAQEAmUikYlLzQriJjaGGxG1k XTjU6c4+kUJGKj48c2K3DX53aTqSMLZ+cxyde7qWnZ4hR0dVbVUYd7ohRThxHn4W MrZB1uFuCOErC4bvGQal57wowHRULhPbHq8sRgDrXMk8ydCiORQk7iJHEpYB63di UlM/zVIKBPRPhrok/XxdmJCj6a158kPsco4Mcg9fiTzN9XGgWS8vdnbKOD3C59/Y XierE9JL/Zdmt94Pxtwqygw9+18NrTFmva2gRSGgeDXjdiK0LDZSACposJt/0km7 oIrYEAAS4Oocdi8Gy8SZC5dooVBsK5kHylEf0oxgAsG2iiIDBd3oQfgG3VhKdn7F Zg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:15 2026 by rpki-client