This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/hFB_f-BZ_am25TGtg-kLEdIlptA.roa File: hFB_f-BZ_am25TGtg-kLEdIlptA.roa (raw, json) Hash identifier: NoOMHYbmu75DUl11Vo7jX7dGF5BWLAYsxu8ojOU01yk= Subject key identifier: 84:50:7F:7F:E0:59:FD:A9:B6:E5:31:AD:83:E9:0B:11:D2:25:A6:D0 Certificate issuer: /CN=e22d83b78308d09e65d2150eac1623dee96d4c4b Certificate serial: 019B7C8024FD0C43ED452E06487641A3E981 Authority key identifier: E2:2D:83:B7:83:08:D0:9E:65:D2:15:0E:AC:16:23:DE:E9:6D:4C:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4i2Dt4MI0J5l0hUOrBYj3ultTEs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/hFB_f-BZ_am25TGtg-kLEdIlptA.roa Signing time: Fri 02 Jan 2026 02:18:51 +0000 ROA not before: Fri 02 Jan 2026 02:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60952 IP address blocks: 167.94.246.0/24 maxlen: 24 194.110.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/4i2Dt4MI0J5l0hUOrBYj3ultTEs.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/4i2Dt4MI0J5l0hUOrBYj3ultTEs.mft rsync://rpki.ripe.net/repository/DEFAULT/4i2Dt4MI0J5l0hUOrBYj3ultTEs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 17:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:24:fd:0c:43:ed:45:2e:06:48:76:41:a3:e9:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e22d83b78308d09e65d2150eac1623dee96d4c4b Validity Not Before: Jan 2 02:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=84507f7fe059fda9b6e531ad83e90b11d225a6d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:90:79:e5:2f:17:bc:e9:a4:bb:79:9f:97:a2: 0f:32:17:95:9d:a7:3e:00:78:2f:05:f9:f8:57:ca: 88:9a:4a:17:a3:ff:75:40:ee:33:4e:fe:1f:56:89: 87:ca:78:a3:a5:11:24:4d:0d:bb:a2:7c:0b:1e:88: 8a:e6:0c:e6:51:0f:31:36:eb:4a:be:d1:5a:46:a6: 65:83:b9:84:f2:13:7a:ed:9a:fb:cd:d8:93:6e:9a: a8:89:af:64:0c:5b:c6:d3:e2:90:eb:5b:2c:ed:a0: dd:97:d1:fe:44:13:62:b9:d1:ff:1e:0d:a7:f9:b5: 49:4f:83:ff:60:82:fc:e5:f2:c8:17:05:06:8b:9d: ea:ad:a3:1d:62:fc:39:96:56:11:1e:a4:6d:9e:ed: ae:15:62:4f:ed:24:44:2e:34:87:c9:89:68:73:ea: e2:49:65:43:c8:eb:c7:b5:64:c1:21:57:78:93:a5: dd:70:d2:1e:80:50:24:35:e7:41:39:0a:74:4d:17: 41:e9:d8:e8:0a:4c:4d:d3:21:6d:de:3e:4a:42:2f: 29:67:d3:80:80:92:38:e8:f1:7e:38:22:0b:ac:84: 11:a8:ea:b8:c5:0c:7e:11:11:19:da:1e:95:64:58: 53:58:db:19:6a:42:7f:96:85:51:c3:8f:91:90:ab: e4:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:50:7F:7F:E0:59:FD:A9:B6:E5:31:AD:83:E9:0B:11:D2:25:A6:D0 X509v3 Authority Key Identifier: keyid:E2:2D:83:B7:83:08:D0:9E:65:D2:15:0E:AC:16:23:DE:E9:6D:4C:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4i2Dt4MI0J5l0hUOrBYj3ultTEs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/hFB_f-BZ_am25TGtg-kLEdIlptA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/4i2Dt4MI0J5l0hUOrBYj3ultTEs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 167.94.246.0/24 194.110.0.0/24 Signature Algorithm: sha256WithRSAEncryption e5:00:64:7e:45:0a:3a:9a:b9:a3:2e:08:b6:6e:8d:8d:31:6e: f7:bd:27:94:e6:43:3c:6e:4b:e7:78:7a:4b:51:91:77:e2:6f: e2:8c:10:28:36:d2:10:93:38:b6:45:a5:d5:92:72:26:16:18: 57:0e:e8:de:4e:14:a4:da:73:f1:82:1d:47:96:17:11:13:56: ab:84:99:7e:d5:1a:ce:9b:11:19:af:61:bb:7d:af:62:db:01: f0:54:28:d7:cd:c8:e2:12:d5:06:3a:0f:08:e6:f1:5e:c2:fe: 98:66:fd:5a:fe:c6:7f:b0:85:2f:6d:9d:13:63:41:f0:ba:46: 70:c0:71:a2:33:e3:e0:6a:58:46:9a:de:13:14:bf:b9:00:0c: 97:9b:09:3a:67:8a:59:c8:a0:fc:12:72:e6:53:b7:7c:e6:f7: 7e:86:2a:6d:10:0b:63:fc:f2:7c:0f:af:ef:32:de:7e:f3:9d: e9:b9:43:eb:0e:22:5b:5c:6b:3c:0a:d8:91:99:5d:36:af:f8: 38:d2:5b:0a:5f:19:33:92:ff:fc:ac:fe:65:47:0f:d2:13:f9: 52:cd:0f:95:c5:3a:9a:be:de:80:1c:27:84:0a:9a:02:29:3f: 9f:d6:53:c5:f4:73:83:7b:3b:b1:4e:fe:51:79:d7:9d:68:9c: 13:0a:d5:55 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8gCT9DEPtRS4GSHZBo+mBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyMmQ4M2I3ODMwOGQwOWU2NWQyMTUwZWFjMTYyM2RlZTk2 ZDRjNGIwHhcNMjYwMTAyMDIxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDUwN2Y3ZmUwNTlmZGE5YjZlNTMxYWQ4M2U5MGIxMWQyMjVhNmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5B55S8XvOmku3mfl6IPMheVnac+ AHgvBfn4V8qImkoXo/91QO4zTv4fVomHynijpREkTQ27onwLHoiK5gzmUQ8xNutK vtFaRqZlg7mE8hN67Zr7zdiTbpqoia9kDFvG0+KQ61ss7aDdl9H+RBNiudH/Hg2n +bVJT4P/YIL85fLIFwUGi53qraMdYvw5llYRHqRtnu2uFWJP7SRELjSHyYloc+ri SWVDyOvHtWTBIVd4k6XdcNIegFAkNedBOQp0TRdB6djoCkxN0yFt3j5KQi8pZ9OA gJI46PF+OCILrIQRqOq4xQx+EREZ2h6VZFhTWNsZakJ/loVRw4+RkKvk0QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIRQf3/gWf2ptuUxrYPpCxHSJabQMB8GA1UdIwQY MBaAFOItg7eDCNCeZdIVDqwWI97pbUxLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGkyRHQ0TUkwSjVsMGhVT3JCWWozdWx0VEVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8xOGZjMTQtMDg3Ny00ZmE4LWE0YTQt NjAzYjI5ZmQxYTA4LzEvaEZCX2YtQlpfYW0yNVRHdGcta0xFZElscHRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy8xOGZjMTQtMDg3Ny00ZmE4LWE0YTQtNjAzYjI5ZmQxYTA4 LzEvNGkyRHQ0TUkwSjVsMGhVT3JCWWozdWx0VEVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAp172AwQA wm4AMA0GCSqGSIb3DQEBCwUAA4IBAQDlAGR+RQo6mrmjLgi2bo2NMW73vSeU5kM8 bkvneHpLUZF34m/ijBAoNtIQkzi2RaXVknImFhhXDujeThSk2nPxgh1HlhcRE1ar hJl+1RrOmxEZr2G7fa9i2wHwVCjXzcjiEtUGOg8I5vFewv6YZv1a/sZ/sIUvbZ0T Y0HwukZwwHGiM+PgalhGmt4TFL+5AAyXmwk6Z4pZyKD8EnLmU7d85vd+hiptEAtj /PJ8D6/vMt5+853puUPrDiJbXGs8CtiRmV02r/g40lsKXxkzkv/8rP5lRw/SE/lS zQ+VxTqavt6AHCeECpoCKT+f1lPF9HODezuxTv5RededaJwTCtVV -----END CERTIFICATE-----Generated at Tue Jan 20 00:00:00 2026 by rpki-client