This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/tHBZ9324JipOSPjUAONyqE_--nA.roa File: tHBZ9324JipOSPjUAONyqE_--nA.roa (raw, json) Hash identifier: jqhNxHLwForLu+IWKodhF2agYcnoaAiyGWAZuk7X5zQ= Subject key identifier: B4:70:59:F7:7D:B8:26:2A:4E:48:F8:D4:00:E3:72:A8:4F:FE:FA:70 Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe Certificate serial: 019C19840D78375F4E7792A8E73C06D79FDA Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/tHBZ9324JipOSPjUAONyqE_--nA.roa Signing time: Sun 01 Feb 2026 14:03:30 +0000 ROA not before: Sun 01 Feb 2026 14:03:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198584 IP address blocks: 185.3.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 04 Feb 2026 03:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:19:84:0d:78:37:5f:4e:77:92:a8:e7:3c:06:d7:9f:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe Validity Not Before: Feb 1 14:03:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b47059f77db8262a4e48f8d400e372a84ffefa70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a6:e8:8e:70:59:d4:c4:12:25:a3:20:d6:86: 29:b1:ef:b5:1f:ff:6f:ae:86:02:37:a7:84:24:48: c0:67:bd:01:ba:b2:a3:67:38:67:ef:2d:e3:35:7b: 12:f5:bb:0e:fa:c9:a8:eb:a0:30:40:84:6d:59:59: c6:56:1b:26:6f:2f:70:6b:ef:20:af:9b:03:6e:40: e3:4f:30:1c:34:da:0a:5b:91:1a:11:cd:da:2b:ab: ad:6c:b1:17:66:9b:6a:46:7b:4a:c3:f4:ee:55:03: f0:a8:8a:41:a6:a3:36:33:71:5a:4a:2d:c2:ff:67: 0b:73:d0:d4:59:2d:f3:83:c5:7e:58:c7:97:6c:21: a8:0b:11:f4:ab:c0:c5:82:48:eb:cf:6d:f5:45:8e: 94:c2:25:14:8f:c7:a2:ca:2b:1b:3c:4a:72:e0:5c: 0c:80:e2:04:ec:27:fe:08:a8:72:ab:c7:67:da:0c: 73:91:91:cc:ee:87:4d:42:40:1f:eb:18:bc:be:71: 52:e2:67:c9:71:91:3b:b1:5e:e2:22:ac:53:0e:eb: ff:b4:03:33:ba:3e:77:24:8e:ea:83:f2:1d:2b:13: bd:23:c3:11:78:62:83:e8:11:3e:98:6f:bb:6f:e4: 7e:7f:dd:8f:59:75:8d:0a:a9:5a:88:f4:ad:42:61: b8:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:70:59:F7:7D:B8:26:2A:4E:48:F8:D4:00:E3:72:A8:4F:FE:FA:70 X509v3 Authority Key Identifier: keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/tHBZ9324JipOSPjUAONyqE_--nA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.3.200.0/24 Signature Algorithm: sha256WithRSAEncryption 83:b6:3d:9a:1e:94:61:9d:9d:e1:bc:3b:99:7b:b5:3f:e6:15: d2:f7:42:6d:ca:19:82:48:53:26:c8:c2:47:00:27:3e:31:4b: 4d:4e:cf:93:98:e7:f3:90:64:e7:1e:7c:30:74:f7:85:99:cc: 87:25:01:83:e5:ff:12:ce:60:31:f3:5e:b0:bb:cf:b0:8e:c0: 7e:b7:0e:20:3e:34:05:99:7b:f8:be:ac:8c:9c:5a:35:04:62: 31:69:7d:62:8e:92:86:d3:05:a7:18:38:59:32:ff:8c:38:ce: 5d:59:3b:e8:f6:f2:9c:bf:0f:70:57:c6:a5:0d:8e:28:2a:5a: aa:63:56:0a:d8:2f:0f:a5:7a:b4:53:ab:e7:fe:24:ca:4e:a6: c5:ce:85:f9:d8:95:fb:aa:4a:d0:f3:99:c6:6a:2c:4e:73:20: 4e:8c:74:42:0c:f2:2f:79:bd:aa:2a:b9:21:43:a9:23:bb:b9: c5:fe:72:d9:60:82:54:75:c5:41:ac:38:b9:fe:62:ef:6a:c8: 9a:76:07:54:be:01:c6:4d:7c:40:dd:71:f9:8a:d7:50:27:fb: a6:48:94:4c:90:d3:dd:c7:bd:bc:4b:f0:25:92:26:1d:9f:7a: 34:53:26:20:a3:a4:45:ce:8d:9f:7b:9b:ea:94:97:63:8a:bd: 4e:2d:85:89 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwZhA14N19Od5Ko5zwG15/aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZGIzOGIzNDNkYTJkMTE5MzA5ZWRhYTE5YzdhNzg4NzAz MjdlYmUwHhcNMjYwMjAxMTQwMzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDcwNTlmNzdkYjgyNjJhNGU0OGY4ZDQwMGUzNzJhODRmZmVmYTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKbojnBZ1MQSJaMg1oYpse+1H/9v roYCN6eEJEjAZ70BurKjZzhn7y3jNXsS9bsO+smo66AwQIRtWVnGVhsmby9wa+8g r5sDbkDjTzAcNNoKW5EaEc3aK6utbLEXZptqRntKw/TuVQPwqIpBpqM2M3FaSi3C /2cLc9DUWS3zg8V+WMeXbCGoCxH0q8DFgkjrz231RY6UwiUUj8eiyisbPEpy4FwM gOIE7Cf+CKhyq8dn2gxzkZHM7odNQkAf6xi8vnFS4mfJcZE7sV7iIqxTDuv/tAMz uj53JI7qg/IdKxO9I8MReGKD6BE+mG+7b+R+f92PWXWNCqlaiPStQmG4wwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLRwWfd9uCYqTkj41ADjcqhP/vpwMB8GA1UdIwQY MBaAFG3bOLND2i0RkwntqhnHp4hwMn6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQt M2RmYTUxMGQ2YjE2LzEvdEhCWjkzMjRKaXBPU1BqVUFPTnlxRV8tLW5BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQtM2RmYTUxMGQ2YjE2 LzEvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQPIMA0G CSqGSIb3DQEBCwUAA4IBAQCDtj2aHpRhnZ3hvDuZe7U/5hXS90JtyhmCSFMmyMJH ACc+MUtNTs+TmOfzkGTnHnwwdPeFmcyHJQGD5f8SzmAx816wu8+wjsB+tw4gPjQF mXv4vqyMnFo1BGIxaX1ijpKG0wWnGDhZMv+MOM5dWTvo9vKcvw9wV8alDY4oKlqq Y1YK2C8PpXq0U6vn/iTKTqbFzoX52JX7qkrQ85nGaixOcyBOjHRCDPIveb2qKrkh Q6kju7nF/nLZYIJUdcVBrDi5/mLvasiadgdUvgHGTXxA3XH5itdQJ/umSJRMkNPd x728S/AlkiYdn3o0UyYgo6RFzo2fe5vqlJdjir1OLYWJ -----END CERTIFICATE-----Generated at Tue Feb 3 12:44:00 2026 by rpki-client