This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/hTmIMsN8pe8sQU0SwIxsfBi3GcU.roa File: hTmIMsN8pe8sQU0SwIxsfBi3GcU.roa (raw, json) Hash identifier: ttcJOAS1WcGjOT0yu9MyYEJRBfsRH/eTyer+Lnq0PdI= Subject key identifier: 85:39:88:32:C3:7C:A5:EF:2C:41:4D:12:C0:8C:6C:7C:18:B7:19:C5 Certificate issuer: /CN=6beb6094bcab4bd3b1f6f56c5182ba1220e22b6f Certificate serial: 019B7C11636C2CA1DC0C6C9FE738DCE5B395 Authority key identifier: 6B:EB:60:94:BC:AB:4B:D3:B1:F6:F5:6C:51:82:BA:12:20:E2:2B:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-tglLyrS9Ox9vVsUYK6EiDiK28.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/hTmIMsN8pe8sQU0SwIxsfBi3GcU.roa Signing time: Fri 02 Jan 2026 00:17:52 +0000 ROA not before: Fri 02 Jan 2026 00:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28928 IP address blocks: 194.11.172.0/22 maxlen: 22 194.11.176.0/21 maxlen: 21 194.11.179.0/24 maxlen: 24 194.11.181.0/24 maxlen: 24 194.11.184.0/23 maxlen: 23 194.11.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.mft rsync://rpki.ripe.net/repository/DEFAULT/a-tglLyrS9Ox9vVsUYK6EiDiK28.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:63:6c:2c:a1:dc:0c:6c:9f:e7:38:dc:e5:b3:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6beb6094bcab4bd3b1f6f56c5182ba1220e22b6f Validity Not Before: Jan 2 00:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=85398832c37ca5ef2c414d12c08c6c7c18b719c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:43:d9:5e:ba:ec:6a:1d:ad:85:2e:7b:06:dd: 09:fa:15:aa:45:20:4d:17:f6:3b:6e:87:5f:c3:c6: 61:a1:22:45:1e:06:c0:7d:b3:8a:6d:a8:75:0a:40: a8:45:7a:82:4a:cf:ae:46:8f:ee:b2:ab:dd:5f:71: ff:40:c3:8e:d6:6a:46:18:37:2e:e1:45:17:26:73: 04:11:5a:91:5d:0f:96:03:de:c5:c0:0e:85:49:43: ca:ee:df:b4:28:71:87:28:c4:17:ce:ac:44:2e:ff: 78:99:57:b2:d4:76:e8:4d:f8:66:bc:de:2f:6b:08: 1d:58:9c:8f:45:01:ea:da:58:85:2b:85:f0:4c:51: 83:40:15:23:d9:73:da:19:33:c2:42:9d:ed:c8:e1: b0:b7:b2:5a:24:55:1d:a0:1a:a3:45:e0:b8:62:06: fd:7f:fd:ab:05:9a:07:67:9a:3c:d4:ce:45:ba:32: 72:76:69:59:94:9e:20:94:5a:34:e0:d5:fc:9f:40: 4f:cd:01:e8:88:5c:3e:c7:7f:41:45:2c:64:d6:e9: 5c:2a:a6:5a:b7:d3:39:de:70:b6:63:15:a8:a6:d8: c1:90:26:ef:8f:9f:65:18:71:f4:a3:0b:90:3d:29: 22:89:f8:f9:ab:03:25:98:b3:d1:65:3e:9a:af:11: 36:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:39:88:32:C3:7C:A5:EF:2C:41:4D:12:C0:8C:6C:7C:18:B7:19:C5 X509v3 Authority Key Identifier: keyid:6B:EB:60:94:BC:AB:4B:D3:B1:F6:F5:6C:51:82:BA:12:20:E2:2B:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-tglLyrS9Ox9vVsUYK6EiDiK28.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/hTmIMsN8pe8sQU0SwIxsfBi3GcU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.11.172.0-194.11.186.255 Signature Algorithm: sha256WithRSAEncryption 49:40:ca:12:75:87:26:06:2e:44:8e:76:08:85:1a:3a:12:44: a5:cf:bc:32:ff:41:74:98:dc:dc:16:21:d6:86:23:f7:4d:22: b1:e2:1f:99:d1:f9:dd:81:c2:12:d6:d4:78:b6:bd:68:8d:d8: e6:54:42:51:37:d5:e0:59:dd:40:35:07:b5:ce:e0:cf:ac:e4: 97:c3:48:e5:8b:dc:00:62:26:91:ec:34:0d:f6:6a:4b:c1:00: 6e:a1:45:19:9d:dc:5a:57:46:f5:5d:51:29:ec:eb:2f:62:67: a8:f5:96:6c:86:92:a8:cc:fd:3e:11:a1:87:27:de:60:fb:6e: ef:c4:de:e7:a7:3e:bc:66:2c:c1:ca:e1:19:4b:18:fd:1f:8f: a6:2c:6f:af:35:25:9a:6d:5d:33:41:f8:8e:44:36:00:6f:46: fb:ea:0f:7d:ce:9f:b0:ef:1e:62:20:3c:af:d6:60:f9:34:59: 4e:dd:09:45:47:c3:b9:66:95:0c:8c:b1:14:98:2d:9e:86:87: e9:07:2c:23:f9:84:30:ce:9c:4f:57:e1:9b:53:ff:9c:bc:c1: d9:a1:31:5d:c8:19:50:3f:d7:a1:1a:1b:ff:dd:ec:a5:40:20: b1:96:ab:e5:85:8e:fb:78:cb:af:ac:03:4c:7b:56:d8:50:5a: 29:39:53:13 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt8EWNsLKHcDGyf5zjc5bOVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiZWI2MDk0YmNhYjRiZDNiMWY2ZjU2YzUxODJiYTEyMjBl MjJiNmYwHhcNMjYwMTAyMDAxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTM5ODgzMmMzN2NhNWVmMmM0MTRkMTJjMDhjNmM3YzE4YjcxOWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEPZXrrsah2thS57Bt0J+hWqRSBN F/Y7bodfw8ZhoSJFHgbAfbOKbah1CkCoRXqCSs+uRo/usqvdX3H/QMOO1mpGGDcu 4UUXJnMEEVqRXQ+WA97FwA6FSUPK7t+0KHGHKMQXzqxELv94mVey1HboTfhmvN4v awgdWJyPRQHq2liFK4XwTFGDQBUj2XPaGTPCQp3tyOGwt7JaJFUdoBqjReC4Ygb9 f/2rBZoHZ5o81M5FujJydmlZlJ4glFo04NX8n0BPzQHoiFw+x39BRSxk1ulcKqZa t9M53nC2YxWoptjBkCbvj59lGHH0owuQPSkiifj5qwMlmLPRZT6arxE2xwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFIU5iDLDfKXvLEFNEsCMbHwYtxnFMB8GA1UdIwQY MBaAFGvrYJS8q0vTsfb1bFGCuhIg4itvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYS10Z2xMeXJTOU94OXZWc1VZSzZFaURpSzI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9iYTQ2NDAtMTYzZS00NjVmLTkwZjkt ZWE1ODdmZDY1OGIyLzEvaFRtSU1zTjhwZThzUVUwU3dJeHNmQmkzR2NVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC9iYTQ2NDAtMTYzZS00NjVmLTkwZjktZWE1ODdmZDY1OGIy LzEvYS10Z2xMeXJTOU94OXZWc1VZSzZFaURpSzI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBALCC6wD BADCC7owDQYJKoZIhvcNAQELBQADggEBAElAyhJ1hyYGLkSOdgiFGjoSRKXPvDL/ QXSY3NwWIdaGI/dNIrHiH5nR+d2BwhLW1Hi2vWiN2OZUQlE31eBZ3UA1B7XO4M+s 5JfDSOWL3ABiJpHsNA32akvBAG6hRRmd3FpXRvVdUSns6y9iZ6j1lmyGkqjM/T4R oYcn3mD7bu/E3uenPrxmLMHK4RlLGP0fj6Ysb681JZptXTNB+I5ENgBvRvvqD33O n7DvHmIgPK/WYPk0WU7dCUVHw7lmlQyMsRSYLZ6Gh+kHLCP5hDDOnE9X4ZtT/5y8 wdmhMV3IGVA/16EaG//d7KVAILGWq+WFjvt4y6+sA0x7VthQWik5UxM= -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:59 2026 by rpki-client