This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f89c9e-3e9a-41ba-9b45-35614e9178fc/1/hB_chSYrjrugAT_A-KrXYM2hDOo.roa File: hB_chSYrjrugAT_A-KrXYM2hDOo.roa (raw, json) Hash identifier: bObSAygQ33RlHdWKvJJo7WM9/6CgsuzaqEedUPRm6u0= Subject key identifier: 84:1F:DC:85:26:2B:8E:BB:A0:01:3F:C0:F8:AA:D7:60:CD:A1:0C:EA Certificate issuer: /CN=34f59ea2fa47a9d6311b1c8cc5a86a5b9a0e47a7 Certificate serial: 019B76EB6400B928D87B89A42D633B463A60 Authority key identifier: 34:F5:9E:A2:FA:47:A9:D6:31:1B:1C:8C:C5:A8:6A:5B:9A:0E:47:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPWeovpHqdYxGxyMxahqW5oOR6c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f89c9e-3e9a-41ba-9b45-35614e9178fc/1/hB_chSYrjrugAT_A-KrXYM2hDOo.roa Signing time: Thu 01 Jan 2026 00:18:16 +0000 ROA not before: Thu 01 Jan 2026 00:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25089 IP address blocks: 194.107.142.0/24 maxlen: 24 194.107.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/f89c9e-3e9a-41ba-9b45-35614e9178fc/1/NPWeovpHqdYxGxyMxahqW5oOR6c.crl rsync://rpki.ripe.net/repository/DEFAULT/36/f89c9e-3e9a-41ba-9b45-35614e9178fc/1/NPWeovpHqdYxGxyMxahqW5oOR6c.mft rsync://rpki.ripe.net/repository/DEFAULT/NPWeovpHqdYxGxyMxahqW5oOR6c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:64:00:b9:28:d8:7b:89:a4:2d:63:3b:46:3a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34f59ea2fa47a9d6311b1c8cc5a86a5b9a0e47a7 Validity Not Before: Jan 1 00:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=841fdc85262b8ebba0013fc0f8aad760cda10cea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3f:1c:38:c6:8f:38:35:34:32:2f:7b:34:c4: a0:c1:37:c8:2f:e6:e6:1a:2c:ac:5a:ed:ef:c1:10: e3:12:19:1b:19:ee:1c:18:85:99:e8:87:a0:c2:f9: 02:35:43:f9:a9:38:58:e2:a4:a2:d5:f5:a3:65:1c: 9c:09:f2:fc:cf:b7:e0:00:5c:95:cf:bc:6c:8a:1b: c3:b6:d9:f5:1d:06:c6:cb:01:16:14:ba:28:45:1d: 12:f3:b5:b3:63:5c:78:38:f9:4d:ef:61:3f:dd:78: d7:45:f0:4b:ba:0d:53:cd:41:ba:67:67:93:4b:3f: 59:5b:9a:6e:59:bf:df:db:43:ef:3a:f2:af:48:af: f9:bb:90:bd:ca:05:2c:f9:b5:23:35:78:7c:e2:8e: 25:c2:ff:ce:a4:55:4b:96:f1:39:31:93:91:37:6e: 31:59:3e:ae:2b:57:e7:56:88:13:bf:b6:b5:87:15: ef:10:61:71:96:1d:33:e2:97:1f:4e:04:d7:21:5e: 62:52:a3:51:79:48:4c:df:01:4c:c0:45:c2:04:1c: c5:68:d8:67:28:4b:47:e7:16:4d:c1:cf:2f:5b:91: 7b:b9:77:4b:02:21:a1:51:0f:e4:38:95:77:e5:5b: e4:9b:48:58:81:1c:b3:0f:dd:7e:6d:b0:b9:a6:19: 5b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:1F:DC:85:26:2B:8E:BB:A0:01:3F:C0:F8:AA:D7:60:CD:A1:0C:EA X509v3 Authority Key Identifier: keyid:34:F5:9E:A2:FA:47:A9:D6:31:1B:1C:8C:C5:A8:6A:5B:9A:0E:47:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPWeovpHqdYxGxyMxahqW5oOR6c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f89c9e-3e9a-41ba-9b45-35614e9178fc/1/hB_chSYrjrugAT_A-KrXYM2hDOo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f89c9e-3e9a-41ba-9b45-35614e9178fc/1/NPWeovpHqdYxGxyMxahqW5oOR6c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.107.142.0/23 Signature Algorithm: sha256WithRSAEncryption 38:76:5e:9d:d7:be:63:15:f8:53:f4:06:ed:f7:bb:e7:52:75: bb:0d:df:3f:b3:b8:3e:a3:3e:1f:9f:ec:d5:53:14:40:97:f9: 6f:f9:cb:e1:04:f8:77:86:a6:a3:4b:b6:43:08:69:ff:18:82: 82:7d:9f:8c:21:bd:e2:40:92:21:39:08:b7:51:8c:e1:e0:76: 43:2d:6c:d8:89:57:cb:56:8e:53:13:bb:42:1d:8f:86:4b:6e: 6d:ca:cf:24:af:9b:f4:bc:b9:7f:fb:a9:0e:ab:6f:65:36:ae: 2e:29:49:61:f3:1d:10:db:5e:8e:0b:f4:cd:60:02:6c:14:b2: 51:11:92:58:04:96:b5:c2:cc:83:ea:54:55:61:bc:99:d4:c0: 5f:c4:fc:75:7c:0f:6b:f7:f8:cb:02:8a:7c:a0:eb:e8:d8:f3: 23:3c:8c:3d:16:a5:0a:27:76:ec:8f:c1:9c:8d:43:5b:71:67: 72:bc:c9:72:51:ae:ed:c0:be:55:58:e9:f0:87:71:7b:d4:b7: d2:22:1f:b2:39:c9:36:9a:aa:a9:13:a5:26:72:72:39:11:5a: 6a:8c:80:2a:c3:f9:58:f4:45:dc:6b:73:a4:b9:42:a9:01:ab: a6:39:97:79:ce:c4:0a:85:d1:8f:16:17:d7:c1:eb:46:29:9b: 65:7d:b3:91 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt262QAuSjYe4mkLWM7RjpgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZjU5ZWEyZmE0N2E5ZDYzMTFiMWM4Y2M1YTg2YTViOWEw ZTQ3YTcwHhcNMjYwMTAxMDAxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDFmZGM4NTI2MmI4ZWJiYTAwMTNmYzBmOGFhZDc2MGNkYTEwY2VhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwj8cOMaPODU0Mi97NMSgwTfIL+bm GiysWu3vwRDjEhkbGe4cGIWZ6IegwvkCNUP5qThY4qSi1fWjZRycCfL8z7fgAFyV z7xsihvDttn1HQbGywEWFLooRR0S87WzY1x4OPlN72E/3XjXRfBLug1TzUG6Z2eT Sz9ZW5puWb/f20PvOvKvSK/5u5C9ygUs+bUjNXh84o4lwv/OpFVLlvE5MZORN24x WT6uK1fnVogTv7a1hxXvEGFxlh0z4pcfTgTXIV5iUqNReUhM3wFMwEXCBBzFaNhn KEtH5xZNwc8vW5F7uXdLAiGhUQ/kOJV35Vvkm0hYgRyzD91+bbC5phlbdwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIQf3IUmK467oAE/wPiq12DNoQzqMB8GA1UdIwQY MBaAFDT1nqL6R6nWMRscjMWoaluaDkenMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlBXZW92cEhxZFl4R3h5TXhhaHFXNW9PUjZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9mODljOWUtM2U5YS00MWJhLTliNDUt MzU2MTRlOTE3OGZjLzEvaEJfY2hTWXJqcnVnQVRfQS1LclhZTTJoRE9vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9mODljOWUtM2U5YS00MWJhLTliNDUtMzU2MTRlOTE3OGZj LzEvTlBXZW92cEhxZFl4R3h5TXhhaHFXNW9PUjZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwmuOMA0G CSqGSIb3DQEBCwUAA4IBAQA4dl6d175jFfhT9Abt97vnUnW7Dd8/s7g+oz4fn+zV UxRAl/lv+cvhBPh3hqajS7ZDCGn/GIKCfZ+MIb3iQJIhOQi3UYzh4HZDLWzYiVfL Vo5TE7tCHY+GS25tys8kr5v0vLl/+6kOq29lNq4uKUlh8x0Q216OC/TNYAJsFLJR EZJYBJa1wsyD6lRVYbyZ1MBfxPx1fA9r9/jLAop8oOvo2PMjPIw9FqUKJ3bsj8Gc jUNbcWdyvMlyUa7twL5VWOnwh3F71LfSIh+yOck2mqqpE6UmcnI5EVpqjIAqw/lY 9EXca3OkuUKpAaumOZd5zsQKhdGPFhfXwetGKZtlfbOR -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:21 2026 by rpki-client