This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/1-hmrhpQc9qm7AoafWIyNhR3ED1Y.roa File: 1-hmrhpQc9qm7AoafWIyNhR3ED1Y.roa (raw, json) Hash identifier: V7/89jWIsWgE5VYj0PiaT+PidNKfZz1SVPLmNchZNk8= Subject key identifier: FA:19:AB:86:94:1C:F6:A9:BB:02:86:9F:58:8C:8D:85:1D:C4:0F:56 Certificate issuer: /CN=9c92aa53d3290aa80379935335db9fcc3ffd29aa Certificate serial: 019B7F838C959F98005C21E51F672CAEC7B1 Authority key identifier: 9C:92:AA:53:D3:29:0A:A8:03:79:93:53:35:DB:9F:CC:3F:FD:29:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJKqU9MpCqgDeZNTNdufzD_9Kao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/1-hmrhpQc9qm7AoafWIyNhR3ED1Y.roa Signing time: Fri 02 Jan 2026 16:21:26 +0000 ROA not before: Fri 02 Jan 2026 16:21:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201548 IP address blocks: 185.71.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.mft rsync://rpki.ripe.net/repository/DEFAULT/nJKqU9MpCqgDeZNTNdufzD_9Kao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:8c:95:9f:98:00:5c:21:e5:1f:67:2c:ae:c7:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c92aa53d3290aa80379935335db9fcc3ffd29aa Validity Not Before: Jan 2 16:21:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa19ab86941cf6a9bb02869f588c8d851dc40f56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f8:db:04:81:56:11:73:f3:1a:60:6b:8d:bb: 9d:c7:c3:a7:32:4f:2a:82:45:cb:08:71:58:36:09: 4e:bd:56:60:4f:0d:d6:26:21:16:0c:00:25:f2:b9: 64:ca:9f:65:1b:ce:a8:58:d4:52:02:25:0e:ea:34: ec:28:dc:38:75:e3:ce:16:93:20:57:7a:de:70:dc: 65:3c:fc:d7:b4:8c:fb:c1:2d:1d:8f:f9:f2:31:a6: 24:b0:c0:c5:05:26:94:a0:c5:d9:38:20:08:2e:d8: 26:ed:f8:85:d0:3e:ba:34:5a:18:ce:ac:61:0e:9e: a2:77:ea:9d:e4:63:ba:69:ed:1c:da:18:25:1d:0b: f7:69:9b:f5:a4:db:37:c3:46:f0:ad:f0:cf:99:9b: e8:1a:69:2a:97:03:10:16:e3:c7:7e:13:08:d6:46: 61:1a:04:e3:91:36:dc:a7:d9:21:25:06:a7:d8:8e: 41:93:66:0b:f0:8e:18:d2:c6:57:b6:3d:54:dc:69: 6c:9b:b9:54:c9:9c:7d:1e:28:eb:e3:ce:17:5c:61: 4a:56:d3:86:44:3a:f4:a9:09:35:a8:c3:c6:48:a4: 7a:74:ec:65:83:c2:8a:43:8f:e9:48:d0:d9:7a:e7: 0b:76:b7:eb:d1:10:b6:02:60:74:0e:97:c2:1c:3d: 2a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:19:AB:86:94:1C:F6:A9:BB:02:86:9F:58:8C:8D:85:1D:C4:0F:56 X509v3 Authority Key Identifier: keyid:9C:92:AA:53:D3:29:0A:A8:03:79:93:53:35:DB:9F:CC:3F:FD:29:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJKqU9MpCqgDeZNTNdufzD_9Kao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/1-hmrhpQc9qm7AoafWIyNhR3ED1Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.71.40.0/22 Signature Algorithm: sha256WithRSAEncryption 3f:e3:b7:41:76:c0:74:d7:d0:fb:7e:a3:0b:bf:c1:6d:80:96: d3:90:28:2a:55:79:5a:4c:d0:12:ef:9a:de:06:34:62:dd:17: e0:8f:7c:63:fe:c8:ab:12:f2:cd:0e:78:2e:87:a6:8a:d3:fb: 6b:4c:8e:9c:1b:2b:27:39:d3:dd:9f:a6:0d:54:06:70:8b:c5: 3d:b8:68:0f:74:e9:e1:b5:4b:82:81:b4:76:50:8c:4b:b0:16: 99:1a:c6:6e:30:14:63:d2:c8:40:24:7a:75:f4:22:81:0f:29: e0:15:34:2b:ab:0c:1d:1e:07:b4:eb:d1:14:f8:60:30:00:dc: 3b:fc:ba:d7:b9:c8:6a:7b:e6:55:ee:92:c6:70:fa:e2:20:2e: 33:9f:60:6a:d1:43:a2:10:3d:4b:ff:f5:0d:3a:b2:5f:ad:f0: 6c:ed:83:c4:6f:83:b4:6e:01:dd:69:2c:10:d8:52:da:ed:30: 4c:85:7c:ea:56:6e:30:23:5b:74:c0:d4:95:8d:85:46:7c:47: 69:d6:d3:af:63:37:5a:64:5a:81:cb:c8:19:c4:ac:b7:37:e7: ec:61:e0:9e:ba:cc:be:0d:1d:8a:3b:a8:26:b4:25:5c:69:a2: 28:7a:32:ff:3b:93:3b:e0:2d:75:88:0a:32:c7:c8:ce:1f:40: 45:ef:14:28 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/g4yVn5gAXCHlH2csrsexMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljOTJhYTUzZDMyOTBhYTgwMzc5OTM1MzM1ZGI5ZmNjM2Zm ZDI5YWEwHhcNMjYwMTAyMTYyMTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTE5YWI4Njk0MWNmNmE5YmIwMjg2OWY1ODhjOGQ4NTFkYzQwZjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/jbBIFWEXPzGmBrjbudx8OnMk8q gkXLCHFYNglOvVZgTw3WJiEWDAAl8rlkyp9lG86oWNRSAiUO6jTsKNw4dePOFpMg V3recNxlPPzXtIz7wS0dj/nyMaYksMDFBSaUoMXZOCAILtgm7fiF0D66NFoYzqxh Dp6id+qd5GO6ae0c2hglHQv3aZv1pNs3w0bwrfDPmZvoGmkqlwMQFuPHfhMI1kZh GgTjkTbcp9khJQan2I5Bk2YL8I4Y0sZXtj1U3Glsm7lUyZx9Hijr484XXGFKVtOG RDr0qQk1qMPGSKR6dOxlg8KKQ4/pSNDZeucLdrfr0RC2AmB0DpfCHD0qHQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPoZq4aUHPapuwKGn1iMjYUdxA9WMB8GA1UdIwQY MBaAFJySqlPTKQqoA3mTUzXbn8w//SmqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkpLcVU5TXBDcWdEZVpOVE5kdWZ6RF85S2FvLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9lYWE0ZDAtOGQxZC00Y2MxLThiMjIt NDUwMzk1ZmI4OGZhLzEvMS1obXJocFFjOXFtN0FvYWZXSXlOaFIzRUQxWS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNGMvZWFhNGQwLThkMWQtNGNjMS04YjIyLTQ1MDM5NWZiODhm YS8xL25KS3FVOU1wQ3FnRGVaTlROZHVmekRfOUthby5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArlHKDAN BgkqhkiG9w0BAQsFAAOCAQEAP+O3QXbAdNfQ+36jC7/BbYCW05AoKlV5WkzQEu+a 3gY0Yt0X4I98Y/7IqxLyzQ54LoemitP7a0yOnBsrJznT3Z+mDVQGcIvFPbhoD3Tp 4bVLgoG0dlCMS7AWmRrGbjAUY9LIQCR6dfQigQ8p4BU0K6sMHR4HtOvRFPhgMADc O/y617nIanvmVe6SxnD64iAuM59gatFDohA9S//1DTqyX63wbO2DxG+DtG4B3Wks ENhS2u0wTIV86lZuMCNbdMDUlY2FRnxHadbTr2M3WmRagcvIGcSstzfn7GHgnrrM vg0dijuoJrQlXGmiKHoy/zuTO+AtdYgKMsfIzh9ARe8UKA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:22 2026 by rpki-client