This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/1-YhcIhEEArw6IoG9b79g8foLA58.roa File: 1-YhcIhEEArw6IoG9b79g8foLA58.roa (raw, json) Hash identifier: pZFDtYibY4f6p1KpnyYKR++X/1rjAASd4QgMl9sz5X0= Subject key identifier: F9:88:5C:22:11:04:02:BC:3A:22:81:BD:6F:BF:60:F1:FA:0B:03:9F Certificate issuer: /CN=864df1128f7d42c6884863b5f273f3eba6596156 Certificate serial: 019B7CEE5EDD7D7BE9958C101D4285E3D9FC Authority key identifier: 86:4D:F1:12:8F:7D:42:C6:88:48:63:B5:F2:73:F3:EB:A6:59:61:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hk3xEo99QsaISGO18nPz66ZZYVY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/1-YhcIhEEArw6IoG9b79g8foLA58.roa Signing time: Fri 02 Jan 2026 04:19:15 +0000 ROA not before: Fri 02 Jan 2026 04:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28716 IP address blocks: 194.93.40.0/22 maxlen: 24 194.93.40.0/24 maxlen: 24 194.93.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.mft rsync://rpki.ripe.net/repository/DEFAULT/hk3xEo99QsaISGO18nPz66ZZYVY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:5e:dd:7d:7b:e9:95:8c:10:1d:42:85:e3:d9:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=864df1128f7d42c6884863b5f273f3eba6596156 Validity Not Before: Jan 2 04:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f9885c22110402bc3a2281bd6fbf60f1fa0b039f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d4:f4:ab:cd:74:c6:21:bb:c0:c0:f2:41:87: 65:64:24:6a:ff:e6:fe:54:3b:3c:43:b1:56:d6:0f: 3f:ae:7b:60:a0:39:57:68:6e:d6:de:db:64:e0:d7: d8:f8:cd:57:1d:49:26:c8:4d:0f:3e:56:69:ce:3d: 41:8b:8c:df:d0:51:30:56:67:bc:77:8a:cb:27:0b: 17:8d:91:a7:c8:98:13:d0:57:e9:d0:bb:a4:c0:8e: 84:4a:b3:b4:8d:4c:b4:a9:9c:16:a9:9b:af:c8:40: 81:99:02:f3:ad:c4:d6:e3:7a:fc:fd:0f:3e:75:61: 76:fd:e2:a0:45:14:a7:6e:66:bc:07:aa:f0:75:5e: 7a:71:cc:40:96:7b:61:ca:00:cf:39:c0:e8:55:2e: 0a:fd:3c:ab:1e:45:bb:6e:54:39:3f:c6:b8:64:b9: 5b:4f:dd:dd:93:cd:31:09:25:24:50:dd:cc:06:bd: 9a:50:23:90:22:a7:2e:08:55:9e:f7:f3:2e:0b:55: 98:43:1f:3a:03:03:32:25:02:fc:c8:18:88:51:b2: ec:9b:7c:a7:0e:26:eb:d9:99:f7:93:1d:44:da:44: 9e:05:57:65:e1:f6:d2:94:00:53:f3:d0:02:47:8d: 4c:f6:56:ba:f9:e7:03:14:fe:06:57:8f:17:eb:eb: 0b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:88:5C:22:11:04:02:BC:3A:22:81:BD:6F:BF:60:F1:FA:0B:03:9F X509v3 Authority Key Identifier: keyid:86:4D:F1:12:8F:7D:42:C6:88:48:63:B5:F2:73:F3:EB:A6:59:61:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hk3xEo99QsaISGO18nPz66ZZYVY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/1-YhcIhEEArw6IoG9b79g8foLA58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.93.40.0/22 Signature Algorithm: sha256WithRSAEncryption 63:4e:ac:f1:cb:61:78:5d:67:42:8e:8f:54:d0:89:26:fc:a7: 67:aa:39:e0:0c:50:74:16:79:98:4c:41:e4:09:d7:bc:14:4f: a4:10:78:0b:ae:6e:9a:3f:ef:86:45:ea:82:f8:86:d6:df:b6: ae:30:8c:fe:36:41:58:b5:fd:e9:dc:de:0a:97:7b:f9:fe:94: 85:0b:9a:4f:42:bd:eb:8e:04:96:e1:d9:ca:33:cd:83:71:f9: 67:81:8d:f4:4b:7e:8f:c8:96:ae:c7:3f:a6:70:6b:0d:14:86: 0a:5a:ce:dc:c6:39:c2:27:5e:0d:a5:3d:e5:ab:e3:e1:41:4c: 81:8b:17:6a:16:5e:7a:4c:a2:c3:f0:05:70:4e:09:fe:d7:b5: b8:94:ad:e1:dd:b3:f0:5f:2e:06:2d:24:57:1d:00:3f:58:97: c3:93:3c:fc:de:e3:18:0c:57:32:e9:f9:13:5f:8f:2d:1a:2c: 55:7e:f2:11:6a:17:58:d5:69:bf:a4:79:e5:d1:c4:18:b4:3d: 0b:11:ef:76:eb:58:aa:f1:22:a6:24:9b:14:54:37:86:0a:d4: 1c:40:ae:30:8f:ab:b4:1c:44:40:13:c3:bd:dc:9e:b9:08:20: bc:4c:43:34:b0:99:43:72:a5:76:58:8f:81:86:2d:b3:25:7d: d7:e4:5d:56 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt87l7dfXvplYwQHUKF49n8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2NGRmMTEyOGY3ZDQyYzY4ODQ4NjNiNWYyNzNmM2ViYTY1 OTYxNTYwHhcNMjYwMTAyMDQxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTg4NWMyMjExMDQwMmJjM2EyMjgxYmQ2ZmJmNjBmMWZhMGIwMzlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdT0q810xiG7wMDyQYdlZCRq/+b+ VDs8Q7FW1g8/rntgoDlXaG7W3ttk4NfY+M1XHUkmyE0PPlZpzj1Bi4zf0FEwVme8 d4rLJwsXjZGnyJgT0Ffp0LukwI6ESrO0jUy0qZwWqZuvyECBmQLzrcTW43r8/Q8+ dWF2/eKgRRSnbma8B6rwdV56ccxAlnthygDPOcDoVS4K/TyrHkW7blQ5P8a4ZLlb T93dk80xCSUkUN3MBr2aUCOQIqcuCFWe9/MuC1WYQx86AwMyJQL8yBiIUbLsm3yn Dibr2Zn3kx1E2kSeBVdl4fbSlABT89ACR41M9la6+ecDFP4GV48X6+sLTQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPmIXCIRBAK8OiKBvW+/YPH6CwOfMB8GA1UdIwQY MBaAFIZN8RKPfULGiEhjtfJz8+umWWFWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGszeEVvOTlRc2FJU0dPMThuUHo2NlpaWVZZLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy85YjVkMDItMTZmOC00Mjg0LTk0M2Ut ODBkN2ZhNWRmYmI0LzEvMS1ZaGNJaEVFQXJ3NklvRzliNzlnOGZvTEE1OC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZDMvOWI1ZDAyLTE2ZjgtNDI4NC05NDNlLTgwZDdmYTVkZmJi NC8xL2hrM3hFbzk5UXNhSVNHTzE4blB6NjZaWllWWS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsJdKDAN BgkqhkiG9w0BAQsFAAOCAQEAY06s8ctheF1nQo6PVNCJJvynZ6o54AxQdBZ5mExB 5AnXvBRPpBB4C65umj/vhkXqgviG1t+2rjCM/jZBWLX96dzeCpd7+f6UhQuaT0K9 644EluHZyjPNg3H5Z4GN9Et+j8iWrsc/pnBrDRSGClrO3MY5wideDaU95avj4UFM gYsXahZeekyiw/AFcE4J/te1uJSt4d2z8F8uBi0kVx0AP1iXw5M8/N7jGAxXMun5 E1+PLRosVX7yEWoXWNVpv6R55dHEGLQ9CxHvdutYqvEipiSbFFQ3hgrUHECuMI+r tBxEQBPDvdyeuQggvExDNLCZQ3KldliPgYYtsyV91+RdVg== -----END CERTIFICATE-----Generated at Tue Jan 27 03:57:54 2026 by rpki-client