This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/d8b6ea-730c-4639-94fa-457272837aa6/1/hI-jnnS3K55j-eknFjBJaxLRTu0.roa File: hI-jnnS3K55j-eknFjBJaxLRTu0.roa (raw, json) Hash identifier: 3Vu6bhRvnbfCA2LT3WLEQlNZ5FlCb+6L2WSCvsxWkC0= Subject key identifier: 84:8F:A3:9E:74:B7:2B:9E:63:F9:E9:27:16:30:49:6B:12:D1:4E:ED Certificate issuer: /CN=1a92e37dc8cf45634b2cdbcf3f10054a1c611697 Certificate serial: 019B7AC7DA91FFE54ECF743008BE1D74F213 Authority key identifier: 1A:92:E3:7D:C8:CF:45:63:4B:2C:DB:CF:3F:10:05:4A:1C:61:16:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GpLjfcjPRWNLLNvPPxAFShxhFpc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/d8b6ea-730c-4639-94fa-457272837aa6/1/hI-jnnS3K55j-eknFjBJaxLRTu0.roa Signing time: Thu 01 Jan 2026 18:17:56 +0000 ROA not before: Thu 01 Jan 2026 18:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 196948 IP address blocks: 193.105.155.0/24 maxlen: 24 2001:67c:2980::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/d8b6ea-730c-4639-94fa-457272837aa6/1/GpLjfcjPRWNLLNvPPxAFShxhFpc.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/d8b6ea-730c-4639-94fa-457272837aa6/1/GpLjfcjPRWNLLNvPPxAFShxhFpc.mft rsync://rpki.ripe.net/repository/DEFAULT/GpLjfcjPRWNLLNvPPxAFShxhFpc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:da:91:ff:e5:4e:cf:74:30:08:be:1d:74:f2:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a92e37dc8cf45634b2cdbcf3f10054a1c611697 Validity Not Before: Jan 1 18:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=848fa39e74b72b9e63f9e9271630496b12d14eed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:fe:48:bb:98:dd:60:59:04:47:ca:df:8f:c1: 65:d8:40:df:2b:65:31:2e:3f:c1:2e:e0:80:9f:4a: 0b:62:0d:ae:bb:36:32:b8:8c:2a:fb:07:a5:32:d6: a9:92:6f:5f:19:1f:e7:e9:45:8a:32:da:02:d5:09: 26:7c:37:d4:71:38:d0:f5:90:a5:fa:d8:36:35:b1: cc:b2:ae:90:45:07:88:c9:ee:3d:37:8b:2c:fd:34: 6d:57:00:de:f4:3d:3b:93:78:0a:df:24:59:a6:cb: 13:9d:9f:9c:f1:a4:57:2b:ea:86:2a:c3:56:f1:88: b9:2a:a2:92:02:c9:8d:c7:c6:f6:81:8c:85:c3:5e: 64:04:25:5c:b1:0c:63:17:fe:64:02:e9:cb:f0:b4: 83:fb:95:78:32:1e:72:b9:ba:46:cc:35:00:fd:e5: 1f:fd:97:97:45:80:bd:44:7a:a0:27:59:a5:b8:7b: 23:6d:aa:c8:42:ad:72:79:22:35:4f:71:09:22:e0: 24:d5:c7:78:07:9d:0a:73:a9:49:a2:7d:2a:a1:0e: e9:ea:40:18:f1:4c:f8:c7:c3:db:9d:fd:8e:c7:7e: e6:6a:93:d8:86:02:6f:e7:76:3b:93:cc:66:95:af: 72:1b:98:4a:f4:d6:8b:23:ee:53:42:b7:08:24:22: d4:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:8F:A3:9E:74:B7:2B:9E:63:F9:E9:27:16:30:49:6B:12:D1:4E:ED X509v3 Authority Key Identifier: keyid:1A:92:E3:7D:C8:CF:45:63:4B:2C:DB:CF:3F:10:05:4A:1C:61:16:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpLjfcjPRWNLLNvPPxAFShxhFpc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d8b6ea-730c-4639-94fa-457272837aa6/1/hI-jnnS3K55j-eknFjBJaxLRTu0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d8b6ea-730c-4639-94fa-457272837aa6/1/GpLjfcjPRWNLLNvPPxAFShxhFpc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.105.155.0/24 IPv6: 2001:67c:2980::/48 Signature Algorithm: sha256WithRSAEncryption 61:af:b9:6c:a7:69:fa:41:55:82:09:11:e1:79:39:18:fe:60: 54:cc:fc:42:e5:e8:66:60:e9:c8:c3:e4:86:11:a8:05:a8:a3: 8b:39:e2:1e:7a:06:e5:db:45:02:03:22:42:91:b5:83:c4:5c: 2b:e4:f3:d8:0e:0a:12:2b:fe:4c:bc:45:da:e8:7e:9d:5a:0c: 6c:ca:f1:4f:95:d0:e9:6d:96:06:b4:b4:1a:4f:a7:c4:f6:a2: e4:74:d4:b1:49:99:7c:1f:f9:69:80:ff:b0:b1:65:df:26:1f: 2e:49:2f:7e:31:88:3c:7c:25:b3:df:ac:7c:e3:66:c4:1d:f8: 21:28:09:95:12:76:45:73:a3:ee:e2:10:4f:77:e3:80:d5:29: 46:bc:e6:ef:95:26:ce:6f:38:23:d4:96:94:0f:00:b5:81:ae: 45:66:28:cd:7f:d5:ff:ef:25:4b:28:31:39:98:18:32:90:05: ae:86:9f:6f:f4:f8:76:6a:1f:0a:97:c9:12:99:d6:fc:24:59: 92:37:e7:78:58:72:c4:27:80:0c:9f:17:a2:70:22:15:cb:61: b8:38:38:b2:e0:a0:8a:62:53:e6:cf:f2:0f:e7:b8:24:28:76: f5:e7:45:79:c2:91:b3:65:94:93:8f:b4:f1:ab:b8:6f:25:72: 4f:cd:a2:e2 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt6x9qR/+VOz3QwCL4ddPITMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhOTJlMzdkYzhjZjQ1NjM0YjJjZGJjZjNmMTAwNTRhMWM2 MTE2OTcwHhcNMjYwMTAxMTgxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDhmYTM5ZTc0YjcyYjllNjNmOWU5MjcxNjMwNDk2YjEyZDE0ZWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxv5Iu5jdYFkER8rfj8Fl2EDfK2Ux Lj/BLuCAn0oLYg2uuzYyuIwq+welMtapkm9fGR/n6UWKMtoC1QkmfDfUcTjQ9ZCl +tg2NbHMsq6QRQeIye49N4ss/TRtVwDe9D07k3gK3yRZpssTnZ+c8aRXK+qGKsNW 8Yi5KqKSAsmNx8b2gYyFw15kBCVcsQxjF/5kAunL8LSD+5V4Mh5yubpGzDUA/eUf /ZeXRYC9RHqgJ1mluHsjbarIQq1yeSI1T3EJIuAk1cd4B50Kc6lJon0qoQ7p6kAY 8Uz4x8Pbnf2Ox37mapPYhgJv53Y7k8xmla9yG5hK9NaLI+5TQrcIJCLUtwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFISPo550tyueY/npJxYwSWsS0U7tMB8GA1UdIwQY MBaAFBqS433Iz0VjSyzbzz8QBUocYRaXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3BMamZjalBSV05MTE52UFB4QUZTaHhoRnBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9kOGI2ZWEtNzMwYy00NjM5LTk0ZmEt NDU3MjcyODM3YWE2LzEvaEktam5uUzNLNTVqLWVrbkZqQkpheExSVHUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS9kOGI2ZWEtNzMwYy00NjM5LTk0ZmEtNDU3MjcyODM3YWE2 LzEvR3BMamZjalBSV05MTE52UFB4QUZTaHhoRnBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwWmbMA8E AgACMAkDBwAgAQZ8KYAwDQYJKoZIhvcNAQELBQADggEBAGGvuWynafpBVYIJEeF5 ORj+YFTM/ELl6GZg6cjD5IYRqAWoo4s54h56BuXbRQIDIkKRtYPEXCvk89gOChIr /ky8Rdrofp1aDGzK8U+V0Oltlga0tBpPp8T2ouR01LFJmXwf+WmA/7CxZd8mHy5J L34xiDx8JbPfrHzjZsQd+CEoCZUSdkVzo+7iEE9344DVKUa85u+VJs5vOCPUlpQP ALWBrkVmKM1/1f/vJUsoMTmYGDKQBa6Gn2/0+HZqHwqXyRKZ1vwkWZI353hYcsQn gAyfF6JwIhXLYbg4OLLgoIpiU+bP8g/nuCQodvXnRXnCkbNllJOPtPGruG8lck/N ouI= -----END CERTIFICATE-----Generated at Mon Feb 9 22:27:58 2026 by rpki-client