This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/hzNlIQcoKwn0_37jGrfuWRGbt1g.roa File: hzNlIQcoKwn0_37jGrfuWRGbt1g.roa (raw, json) Hash identifier: yGgP4/jvKs4NKsaE3O2vHcLj+aOCBWAi35uwjfvRjck= Subject key identifier: 87:33:65:21:07:28:2B:09:F4:FF:7E:E3:1A:B7:EE:59:11:9B:B7:58 Certificate issuer: /CN=34c4956f85671125882c574cd2e2d203aabded05 Certificate serial: 019B78A33B808A8074C2761584D111112E36 Authority key identifier: 34:C4:95:6F:85:67:11:25:88:2C:57:4C:D2:E2:D2:03:AA:BD:ED:05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NMSVb4VnESWILFdM0uLSA6q97QU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/hzNlIQcoKwn0_37jGrfuWRGbt1g.roa Signing time: Thu 01 Jan 2026 08:18:42 +0000 ROA not before: Thu 01 Jan 2026 08:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29042 IP address blocks: 195.68.198.0/24 maxlen: 24 195.68.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.crl rsync://rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.mft rsync://rpki.ripe.net/repository/DEFAULT/NMSVb4VnESWILFdM0uLSA6q97QU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:3b:80:8a:80:74:c2:76:15:84:d1:11:11:2e:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34c4956f85671125882c574cd2e2d203aabded05 Validity Not Before: Jan 1 08:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8733652107282b09f4ff7ee31ab7ee59119bb758 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:3c:e9:cd:12:dd:5d:c9:ba:25:45:1f:6a:ae: 99:48:24:04:73:81:19:e7:54:e1:f7:76:4f:f2:f9: fd:23:09:87:cd:21:46:d9:65:18:f1:ed:dd:21:e2: cb:03:a7:a9:e4:f2:b9:07:f1:f1:37:92:4f:b9:39: 61:45:55:11:60:8c:51:75:d7:45:1a:bd:91:8e:29: 7c:37:7a:ab:64:2d:82:0e:79:a0:37:65:c1:1f:80: 95:9a:87:51:06:43:d9:fa:ef:49:21:96:f9:74:fc: d8:16:d1:a4:77:1e:65:39:4b:ab:d2:09:b9:d7:80: 7c:67:e0:bb:84:91:0e:3c:21:8d:84:f7:01:ac:37: bd:07:61:b1:71:7b:70:81:06:f1:3d:80:2c:bb:1e: 43:4f:15:2b:f6:44:6c:91:42:09:ae:3b:09:53:e0: 44:d1:2d:9e:b9:fd:2f:e8:76:ee:2e:98:e7:fc:ea: e3:36:db:48:33:71:0c:46:f7:86:41:5f:e9:b6:22: 0a:69:58:5d:87:78:d9:25:2a:af:8d:32:99:fd:a5: 11:ee:2c:60:20:ce:f4:9e:75:0d:10:1f:9e:02:31: 79:c7:e4:32:02:82:59:c0:1b:19:30:d0:59:5f:eb: 0f:82:23:6f:51:00:b8:86:bc:b8:c1:ac:26:ee:0f: 0a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:33:65:21:07:28:2B:09:F4:FF:7E:E3:1A:B7:EE:59:11:9B:B7:58 X509v3 Authority Key Identifier: keyid:34:C4:95:6F:85:67:11:25:88:2C:57:4C:D2:E2:D2:03:AA:BD:ED:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NMSVb4VnESWILFdM0uLSA6q97QU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/hzNlIQcoKwn0_37jGrfuWRGbt1g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.68.198.0/23 Signature Algorithm: sha256WithRSAEncryption 86:51:04:d3:44:8e:7e:14:6c:bd:3e:d6:a7:40:51:fc:0c:00: db:fb:22:49:f6:6b:21:1d:6f:0d:61:b5:ea:ec:8e:e3:7a:b4: be:6a:53:b9:69:37:40:91:1d:0f:1b:bf:84:e9:ad:e7:12:30: f5:16:e6:7a:a1:cd:c6:24:43:33:83:ea:13:2f:3e:ee:4b:84: af:a7:09:e4:bb:93:72:c4:df:0a:52:e0:d5:50:36:2d:60:c5: e0:61:1c:81:97:95:bb:1b:50:7c:fa:3c:0a:77:f4:ea:08:c3: 08:5f:22:95:aa:7f:f2:b1:cc:84:03:dc:07:b4:84:76:1d:44: 73:04:c7:76:d6:45:fe:05:c8:a3:96:3d:88:4c:58:22:9e:58: f2:ba:24:cf:24:2d:65:b7:4d:58:df:35:f2:f2:b6:78:a3:94: ac:81:22:35:19:50:d5:a3:32:de:30:6f:bc:06:d3:15:3a:91: c9:06:ab:de:c8:08:c5:69:e4:f1:1b:f3:e9:60:f3:0a:dd:64: 7e:12:70:e4:19:19:2d:0d:7c:95:c9:e4:39:4d:98:85:9c:09: fd:40:fa:7b:76:f7:83:49:8f:c2:d8:b9:0a:09:b8:2c:10:a2: f2:ac:c7:33:fc:d7:f8:87:a2:3d:3d:89:1c:3c:5e:f2:92:67: fa:89:7b:5f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ozuAioB0wnYVhNERES42MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0YzQ5NTZmODU2NzExMjU4ODJjNTc0Y2QyZTJkMjAzYWFi ZGVkMDUwHhcNMjYwMTAxMDgxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NzMzNjUyMTA3MjgyYjA5ZjRmZjdlZTMxYWI3ZWU1OTExOWJiNzU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTzpzRLdXcm6JUUfaq6ZSCQEc4EZ 51Th93ZP8vn9IwmHzSFG2WUY8e3dIeLLA6ep5PK5B/HxN5JPuTlhRVURYIxRdddF Gr2Rjil8N3qrZC2CDnmgN2XBH4CVmodRBkPZ+u9JIZb5dPzYFtGkdx5lOUur0gm5 14B8Z+C7hJEOPCGNhPcBrDe9B2GxcXtwgQbxPYAsux5DTxUr9kRskUIJrjsJU+BE 0S2euf0v6HbuLpjn/OrjNttIM3EMRveGQV/ptiIKaVhdh3jZJSqvjTKZ/aUR7ixg IM70nnUNEB+eAjF5x+QyAoJZwBsZMNBZX+sPgiNvUQC4hry4wawm7g8KAQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIczZSEHKCsJ9P9+4xq37lkRm7dYMB8GA1UdIwQY MBaAFDTElW+FZxEliCxXTNLi0gOqve0FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTk1TVmI0Vm5FU1dJTEZkTTB1TFNBNnE5N1FVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9mM2U2N2EtY2ZkNy00NzQ1LTgyYjct MmQ5MGM3ZmQwZDYwLzEvaHpObElRY29Ld24wXzM3akdyZnVXUkdidDFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC9mM2U2N2EtY2ZkNy00NzQ1LTgyYjctMmQ5MGM3ZmQwZDYw LzEvTk1TVmI0Vm5FU1dJTEZkTTB1TFNBNnE5N1FVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw0TGMA0G CSqGSIb3DQEBCwUAA4IBAQCGUQTTRI5+FGy9PtanQFH8DADb+yJJ9mshHW8NYbXq 7I7jerS+alO5aTdAkR0PG7+E6a3nEjD1FuZ6oc3GJEMzg+oTLz7uS4Svpwnku5Ny xN8KUuDVUDYtYMXgYRyBl5W7G1B8+jwKd/TqCMMIXyKVqn/yscyEA9wHtIR2HURz BMd21kX+Bcijlj2ITFginljyuiTPJC1lt01Y3zXy8rZ4o5SsgSI1GVDVozLeMG+8 BtMVOpHJBqveyAjFaeTxG/PpYPMK3WR+EnDkGRktDXyVyeQ5TZiFnAn9QPp7dveD SY/C2LkKCbgsEKLyrMcz/Nf4h6I9PYkcPF7ykmf6iXtf -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:10 2026 by rpki-client