This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/NHDyAvAowEpZkYNotB2_FKVnj-U.roa File: NHDyAvAowEpZkYNotB2_FKVnj-U.roa (raw, json) Hash identifier: jzWXVyP83SPdCwETB0N35NVU/yFw45PVeKqRU1Bxi/g= Subject key identifier: 34:70:F2:02:F0:28:C0:4A:59:91:83:68:B4:1D:BF:14:A5:67:8F:E5 Certificate issuer: /CN=1f120d7e49c9f3bf313d96531adfa7eaae805761 Certificate serial: 019B783523FA7669684E36F49430A3365BD8 Authority key identifier: 1F:12:0D:7E:49:C9:F3:BF:31:3D:96:53:1A:DF:A7:EA:AE:80:57:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HxINfknJ878xPZZTGt-n6q6AV2E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/NHDyAvAowEpZkYNotB2_FKVnj-U.roa Signing time: Thu 01 Jan 2026 06:18:26 +0000 ROA not before: Thu 01 Jan 2026 06:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209842 IP address blocks: 94.154.144.0/22 maxlen: 22 2a09:c500::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.mft rsync://rpki.ripe.net/repository/DEFAULT/HxINfknJ878xPZZTGt-n6q6AV2E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:23:fa:76:69:68:4e:36:f4:94:30:a3:36:5b:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f120d7e49c9f3bf313d96531adfa7eaae805761 Validity Not Before: Jan 1 06:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3470f202f028c04a59918368b41dbf14a5678fe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f8:d2:93:46:da:86:86:a6:dd:d4:9b:3a:7c: 72:21:30:1a:69:09:7f:d9:d1:05:40:3d:27:b3:f1: 14:69:0f:b3:b9:ec:42:4e:8c:89:51:46:3e:91:12: 24:2a:98:9f:9a:3d:e8:da:da:dd:3f:5e:2b:4d:71: d0:75:76:45:93:78:88:43:13:36:b7:4c:7c:ee:5c: 35:d9:bc:88:c6:41:49:35:fb:bc:85:0b:aa:5d:b9: 8f:31:f5:6d:f9:ed:b7:9f:d1:b4:8e:9c:7a:b9:38: 21:9e:91:60:65:ce:ef:a6:66:eb:2a:7b:c0:33:47: b1:80:4e:63:53:90:4b:b0:47:4e:8a:38:78:5f:48: bd:70:5f:2f:6a:18:0f:86:f5:e0:f5:27:74:3e:e1: 45:ea:da:07:b5:b6:67:a9:13:ee:bf:9d:95:0b:1b: a3:e7:42:41:e4:7a:04:3f:43:43:4e:27:e2:d5:b0: 27:f2:3a:b0:df:da:5e:42:9e:53:72:5e:84:3d:1e: 12:b2:ec:29:c1:6f:02:9d:dd:56:36:3f:01:df:a0: 94:61:b0:9a:82:64:18:9a:42:55:82:d8:cb:b5:cd: d5:25:d6:03:2e:34:85:50:15:30:c3:3f:ae:f3:fa: c4:f9:55:90:7e:ab:64:e3:d9:a4:3d:3c:a1:26:73: 8d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:70:F2:02:F0:28:C0:4A:59:91:83:68:B4:1D:BF:14:A5:67:8F:E5 X509v3 Authority Key Identifier: keyid:1F:12:0D:7E:49:C9:F3:BF:31:3D:96:53:1A:DF:A7:EA:AE:80:57:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxINfknJ878xPZZTGt-n6q6AV2E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/NHDyAvAowEpZkYNotB2_FKVnj-U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.154.144.0/22 IPv6: 2a09:c500::/29 Signature Algorithm: sha256WithRSAEncryption 10:81:5b:0e:8c:f7:e2:d7:1d:e9:11:1b:6d:dc:7f:a5:dc:8c: 44:32:b1:8b:dc:d0:cf:d9:20:de:19:77:7a:f5:f0:46:12:19: 25:d9:c8:33:3c:73:ec:db:6f:2a:85:c1:fa:cd:d0:04:47:4e: da:39:0d:c0:f7:ac:5a:b5:a3:4e:77:22:4e:01:3f:7b:4d:4a: c2:e7:75:94:34:33:ae:76:20:61:ee:f4:e6:1f:2d:13:64:4c: cb:21:c7:1e:bf:5b:cc:b2:f8:0e:2a:59:c3:11:bc:98:4c:24: 29:93:ee:2e:e4:f8:4c:77:28:6b:14:45:74:a5:d9:d6:d8:aa: cb:31:a1:08:24:b0:b1:66:37:7b:14:a0:ba:d3:8b:6e:2b:a3: 9d:90:67:81:a0:21:83:ab:e6:05:a7:3c:9f:e5:9e:67:53:b2: cc:b3:66:dc:50:50:15:cd:91:83:96:24:ac:ed:4e:f7:82:19: 18:46:d0:e6:93:9a:b3:a7:1d:b0:a7:36:51:b9:9e:19:5c:8c: 42:96:84:63:1b:b7:9f:70:58:d2:1f:8c:28:d3:79:44:c9:e8: 6b:00:19:01:a4:ad:da:5a:ed:8e:ef:16:c4:73:b2:2e:80:d5: a7:37:8b:f4:1f:3a:b5:bc:21:26:22:be:8b:ae:ac:60:f2:31: 57:2e:be:ec -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4NSP6dmloTjb0lDCjNlvYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmMTIwZDdlNDljOWYzYmYzMTNkOTY1MzFhZGZhN2VhYWU4 MDU3NjEwHhcNMjYwMTAxMDYxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDcwZjIwMmYwMjhjMDRhNTk5MTgzNjhiNDFkYmYxNGE1Njc4ZmU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfjSk0bahoam3dSbOnxyITAaaQl/ 2dEFQD0ns/EUaQ+zuexCToyJUUY+kRIkKpifmj3o2trdP14rTXHQdXZFk3iIQxM2 t0x87lw12byIxkFJNfu8hQuqXbmPMfVt+e23n9G0jpx6uTghnpFgZc7vpmbrKnvA M0exgE5jU5BLsEdOijh4X0i9cF8vahgPhvXg9Sd0PuFF6toHtbZnqRPuv52VCxuj 50JB5HoEP0NDTifi1bAn8jqw39peQp5Tcl6EPR4SsuwpwW8Cnd1WNj8B36CUYbCa gmQYmkJVgtjLtc3VJdYDLjSFUBUwwz+u8/rE+VWQfqtk49mkPTyhJnONUQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFDRw8gLwKMBKWZGDaLQdvxSlZ4/lMB8GA1UdIwQY MBaAFB8SDX5JyfO/MT2WUxrfp+qugFdhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHhJTmZrbko4Nzh4UFpaVEd0LW42cTZBVjJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9hYzVmZjktZTE5ZS00YWQwLThjNWEt YjI3Mjc3ODkwOWQ5LzEvTkhEeUF2QW93RXBaa1lOb3RCMl9GS1Zuai1VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9hYzVmZjktZTE5ZS00YWQwLThjNWEtYjI3Mjc3ODkwOWQ5 LzEvSHhJTmZrbko4Nzh4UFpaVEd0LW42cTZBVjJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCXpqQMA0E AgACMAcDBQMqCcUAMA0GCSqGSIb3DQEBCwUAA4IBAQAQgVsOjPfi1x3pERtt3H+l 3IxEMrGL3NDP2SDeGXd69fBGEhkl2cgzPHPs228qhcH6zdAER07aOQ3A96xataNO dyJOAT97TUrC53WUNDOudiBh7vTmHy0TZEzLIccev1vMsvgOKlnDEbyYTCQpk+4u 5PhMdyhrFEV0pdnW2KrLMaEIJLCxZjd7FKC604tuK6OdkGeBoCGDq+YFpzyf5Z5n U7LMs2bcUFAVzZGDliSs7U73ghkYRtDmk5qzpx2wpzZRuZ4ZXIxCloRjG7efcFjS H4wo03lEyehrABkBpK3aWu2O7xbEc7IugNWnN4v0Hzq1vCEmIr6Lrqxg8jFXLr7s -----END CERTIFICATE-----Generated at Mon Feb 9 20:09:08 2026 by rpki-client