This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/HNj3awdWSpdbaAsidPiHwTrpk-w.roa File: HNj3awdWSpdbaAsidPiHwTrpk-w.roa (raw, json) Hash identifier: +1Q8zqw8FDmKfGP2AXog0DN3Zr+uSl/yie6I0H2SVv4= Subject key identifier: 1C:D8:F7:6B:07:56:4A:97:5B:68:0B:22:74:F8:87:C1:3A:E9:93:EC Certificate issuer: /CN=99e7209a8c9b176fbf623edf3ee0b82007fc2c40 Certificate serial: 019B7E38A809FAB5C374411ADCC2C57D427E Authority key identifier: 99:E7:20:9A:8C:9B:17:6F:BF:62:3E:DF:3E:E0:B8:20:07:FC:2C:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mecgmoybF2-_Yj7fPuC4IAf8LEA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/HNj3awdWSpdbaAsidPiHwTrpk-w.roa Signing time: Fri 02 Jan 2026 10:20:00 +0000 ROA not before: Fri 02 Jan 2026 10:20:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47686 IP address blocks: 94.100.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/mecgmoybF2-_Yj7fPuC4IAf8LEA.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/mecgmoybF2-_Yj7fPuC4IAf8LEA.mft rsync://rpki.ripe.net/repository/DEFAULT/mecgmoybF2-_Yj7fPuC4IAf8LEA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:a8:09:fa:b5:c3:74:41:1a:dc:c2:c5:7d:42:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99e7209a8c9b176fbf623edf3ee0b82007fc2c40 Validity Not Before: Jan 2 10:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1cd8f76b07564a975b680b2274f887c13ae993ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:bc:43:35:98:76:b9:2b:b9:c4:dd:c5:60:ee: a7:d8:9c:86:9c:ee:6c:71:26:fe:9a:7d:83:43:3c: 52:38:ce:fa:ea:78:2b:77:e0:90:77:71:76:35:b9: 64:74:ab:db:74:99:34:a5:3e:29:eb:ec:d4:29:16: 1d:f2:da:3d:61:bc:f3:0e:97:73:51:92:45:f6:f7: 02:9f:50:72:da:a2:ef:41:24:7b:96:b0:5a:ed:a4: db:4f:da:af:95:1d:0b:b2:60:6f:79:da:b8:07:dd: 42:3b:3c:aa:0e:52:4a:14:e1:87:b5:1e:14:8b:f0: be:1a:28:73:a5:d9:77:c7:1e:cd:cf:1e:58:78:2a: 82:97:1f:3d:c8:d1:8b:23:15:9c:c7:27:42:ee:7a: 4f:38:4d:63:bf:ad:9c:63:6f:63:9f:2f:06:0a:8c: 88:d0:0d:bc:46:21:4c:51:d1:09:14:92:db:9d:8b: 86:cd:c4:77:31:c6:7c:81:3f:4c:8a:35:ca:08:80: 36:ca:04:04:43:b2:40:2a:28:8d:52:ac:22:1a:32: 91:83:f8:09:8d:a0:e7:c5:8a:d2:a1:a9:5c:1b:e6: 93:c4:5f:bb:ff:10:f8:62:6c:2b:16:59:59:34:a2: 5c:47:1c:62:19:25:86:9b:1e:d4:09:92:65:e2:c6: 50:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:D8:F7:6B:07:56:4A:97:5B:68:0B:22:74:F8:87:C1:3A:E9:93:EC X509v3 Authority Key Identifier: keyid:99:E7:20:9A:8C:9B:17:6F:BF:62:3E:DF:3E:E0:B8:20:07:FC:2C:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mecgmoybF2-_Yj7fPuC4IAf8LEA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/HNj3awdWSpdbaAsidPiHwTrpk-w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/mecgmoybF2-_Yj7fPuC4IAf8LEA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.100.104.0/24 Signature Algorithm: sha256WithRSAEncryption 28:29:6e:62:97:9b:0e:c8:36:ce:de:e0:f2:31:84:3a:62:db: 57:55:8b:b7:e0:d4:9d:d1:66:cf:cd:9f:04:fb:93:82:69:34: cf:d8:60:9f:59:36:c5:ee:92:75:a2:39:7b:93:06:0c:3a:75: af:5c:ee:09:e6:78:1f:c5:81:f6:20:b5:82:4d:be:5b:b2:c4: 37:17:56:31:e1:83:24:2d:1e:6f:a7:0a:85:34:b8:74:79:04: ab:75:25:02:c5:46:a5:ba:61:5f:9c:e0:4b:97:d9:0e:ea:a0: c0:70:84:90:a8:84:53:d6:ce:e3:bf:52:59:74:4d:95:ed:be: 16:c0:d5:ec:e3:93:d2:2d:40:9c:fa:9e:01:46:c4:fc:85:c5: e2:9b:f4:06:69:a2:a2:77:cd:19:cf:1b:00:fd:68:95:76:1d: 5b:b0:0d:ee:9d:d0:d1:5d:59:f9:a1:6d:fc:19:f4:8d:07:0d: ae:ed:5a:c9:8e:10:b3:d2:23:f6:f3:7a:32:19:19:33:5f:2c: d6:2e:4f:d1:73:d1:39:e6:72:86:dd:63:4c:43:5c:2e:46:6e: 7b:7c:fe:85:39:ef:78:2f:e1:de:6c:6b:86:e7:fd:49:95:da: 83:14:9f:20:61:eb:0f:5e:8a:c1:c6:4f:2d:fa:a1:ed:4d:2e: 8b:94:92:75 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OKgJ+rXDdEEa3MLFfUJ+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ZTcyMDlhOGM5YjE3NmZiZjYyM2VkZjNlZTBiODIwMDdm YzJjNDAwHhcNMjYwMTAyMTAyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxY2Q4Zjc2YjA3NTY0YTk3NWI2ODBiMjI3NGY4ODdjMTNhZTk5M2VjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLxDNZh2uSu5xN3FYO6n2JyGnO5s cSb+mn2DQzxSOM766ngrd+CQd3F2NblkdKvbdJk0pT4p6+zUKRYd8to9YbzzDpdz UZJF9vcCn1By2qLvQSR7lrBa7aTbT9qvlR0LsmBvedq4B91COzyqDlJKFOGHtR4U i/C+Gihzpdl3xx7Nzx5YeCqClx89yNGLIxWcxydC7npPOE1jv62cY29jny8GCoyI 0A28RiFMUdEJFJLbnYuGzcR3McZ8gT9MijXKCIA2ygQEQ7JAKiiNUqwiGjKRg/gJ jaDnxYrSoalcG+aTxF+7/xD4YmwrFllZNKJcRxxiGSWGmx7UCZJl4sZQFQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBzY92sHVkqXW2gLInT4h8E66ZPsMB8GA1UdIwQY MBaAFJnnIJqMmxdvv2I+3z7guCAH/CxAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWVjZ21veWJGMi1fWWo3ZlB1QzRJQWY4TEVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9lZjU4NTYtYmJjMC00NWE0LTg5MWUt YjJkY2MxODYzZThiLzEvSE5qM2F3ZFdTcGRiYUFzaWRQaUh3VHJway13LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi9lZjU4NTYtYmJjMC00NWE0LTg5MWUtYjJkY2MxODYzZThi LzEvbWVjZ21veWJGMi1fWWo3ZlB1QzRJQWY4TEVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXmRoMA0G CSqGSIb3DQEBCwUAA4IBAQAoKW5il5sOyDbO3uDyMYQ6YttXVYu34NSd0WbPzZ8E +5OCaTTP2GCfWTbF7pJ1ojl7kwYMOnWvXO4J5ngfxYH2ILWCTb5bssQ3F1Yx4YMk LR5vpwqFNLh0eQSrdSUCxUalumFfnOBLl9kO6qDAcISQqIRT1s7jv1JZdE2V7b4W wNXs45PSLUCc+p4BRsT8hcXim/QGaaKid80ZzxsA/WiVdh1bsA3undDRXVn5oW38 GfSNBw2u7VrJjhCz0iP283oyGRkzXyzWLk/Rc9E55nKG3WNMQ1wuRm57fP6FOe94 L+HebGuG5/1JldqDFJ8gYesPXorBxk8t+qHtTS6LlJJ1 -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:09 2026 by rpki-client