This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hJF_Qf_RH8PNrcx0oAWzmG_6QvI.roa File: hJF_Qf_RH8PNrcx0oAWzmG_6QvI.roa (raw, json) Hash identifier: ITLAoU923u7FKi0+iXA4NTM9zJ20lGavrZ5Z4X2QkmY= Subject key identifier: 84:91:7F:41:FF:D1:1F:C3:CD:AD:CC:74:A0:05:B3:98:6F:FA:42:F2 Certificate issuer: /CN=864df1128f7d42c6884863b5f273f3eba6596156 Certificate serial: 019B7CEE5F17F47FDCD84D05E93A92631A67 Authority key identifier: 86:4D:F1:12:8F:7D:42:C6:88:48:63:B5:F2:73:F3:EB:A6:59:61:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hk3xEo99QsaISGO18nPz66ZZYVY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hJF_Qf_RH8PNrcx0oAWzmG_6QvI.roa Signing time: Fri 02 Jan 2026 04:19:15 +0000 ROA not before: Fri 02 Jan 2026 04:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31115 IP address blocks: 194.93.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.mft rsync://rpki.ripe.net/repository/DEFAULT/hk3xEo99QsaISGO18nPz66ZZYVY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:5f:17:f4:7f:dc:d8:4d:05:e9:3a:92:63:1a:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=864df1128f7d42c6884863b5f273f3eba6596156 Validity Not Before: Jan 2 04:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=84917f41ffd11fc3cdadcc74a005b3986ffa42f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e7:c9:1b:66:f8:71:60:bf:59:ce:7a:45:9c: 55:45:65:6f:4d:cb:38:4d:50:69:b4:3b:7b:da:01: c3:14:a2:ef:27:9d:7a:ea:3b:b1:6f:31:45:2f:28: 2e:27:b5:b3:6b:3b:75:d9:00:4c:1c:f2:98:e7:ea: 48:d6:ef:c7:36:5c:45:ea:aa:94:cf:de:8f:93:b0: c8:8e:0f:3a:66:f8:04:5b:35:3a:43:81:4d:61:41: 2c:d8:80:de:bc:fe:1a:0e:6e:e0:5e:65:01:54:f1: f6:f3:cc:b0:b5:24:f2:f8:ae:b4:0a:4d:ac:ca:a7: 76:1e:91:b4:93:e9:9e:97:ad:f7:ba:01:4a:91:7a: 2e:49:fa:ba:ee:96:ec:82:80:ee:ce:ec:79:cc:a8: 70:48:12:27:a3:8e:fa:29:80:7f:a2:cb:f4:0c:7b: 03:c8:78:b7:a5:ee:27:36:d6:0b:d1:8b:d3:23:13: 10:a5:ac:bd:85:e2:d8:c4:de:24:51:8a:f8:ed:08: 5f:cd:ee:30:03:18:71:00:71:ce:63:9c:d3:84:bd: 79:55:e5:67:cc:25:ed:a3:e2:5c:30:b4:0e:88:f5: c8:c5:cb:fc:40:0e:8f:d9:61:e7:b4:20:7d:3e:0f: b6:bb:ff:35:49:1d:f7:20:d3:f8:98:2e:c8:82:69: b2:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:91:7F:41:FF:D1:1F:C3:CD:AD:CC:74:A0:05:B3:98:6F:FA:42:F2 X509v3 Authority Key Identifier: keyid:86:4D:F1:12:8F:7D:42:C6:88:48:63:B5:F2:73:F3:EB:A6:59:61:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hk3xEo99QsaISGO18nPz66ZZYVY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hJF_Qf_RH8PNrcx0oAWzmG_6QvI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.93.40.0/22 Signature Algorithm: sha256WithRSAEncryption 3b:d3:33:aa:c2:b6:45:2a:01:47:2e:ef:c9:cc:a5:bf:27:93: bf:5d:18:5e:cf:8f:8e:2d:23:fa:44:50:a5:c4:32:76:e3:d4: 8a:69:5b:92:a7:d6:ce:53:f6:09:23:fd:a1:b6:42:78:e7:77: 2c:61:2e:ad:a7:48:a2:26:4f:15:9e:80:4b:f5:fb:61:c8:ca: a3:7d:4f:b4:b1:e4:87:4d:d8:3a:97:54:27:43:80:6e:56:33: b9:0f:f5:86:ae:31:5e:9e:e7:d0:2e:78:cb:a9:16:72:16:ea: ae:fd:e2:14:08:ef:ba:4a:eb:68:37:a5:fa:b3:e7:05:3d:a9: 46:03:ae:db:83:97:e0:fe:ed:91:42:7a:30:5e:d1:93:5c:b2: 1f:5f:80:46:b9:81:f1:f3:57:31:4e:8a:45:90:49:c2:36:32: b7:72:47:c7:56:8d:49:d0:f1:fd:fb:42:79:6e:dd:85:b2:46: b7:af:57:68:19:1d:e8:5c:f7:4e:53:b8:93:d1:96:a1:47:71: 69:a0:7c:d0:2a:a2:88:57:86:1e:c7:31:78:20:37:52:dc:db: f6:e7:d2:bf:68:78:9e:c4:54:0d:75:1d:43:2e:f2:ee:ed:9d: f6:d6:c3:27:69:a1:f1:a2:b7:5b:c8:78:f2:6f:d5:13:de:33: 42:dc:35:a4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87l8X9H/c2E0F6TqSYxpnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2NGRmMTEyOGY3ZDQyYzY4ODQ4NjNiNWYyNzNmM2ViYTY1 OTYxNTYwHhcNMjYwMTAyMDQxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDkxN2Y0MWZmZDExZmMzY2RhZGNjNzRhMDA1YjM5ODZmZmE0MmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtefJG2b4cWC/Wc56RZxVRWVvTcs4 TVBptDt72gHDFKLvJ5166juxbzFFLyguJ7Wzazt12QBMHPKY5+pI1u/HNlxF6qqU z96Pk7DIjg86ZvgEWzU6Q4FNYUEs2IDevP4aDm7gXmUBVPH288ywtSTy+K60Ck2s yqd2HpG0k+mel633ugFKkXouSfq67pbsgoDuzux5zKhwSBIno476KYB/osv0DHsD yHi3pe4nNtYL0YvTIxMQpay9heLYxN4kUYr47Qhfze4wAxhxAHHOY5zThL15VeVn zCXto+JcMLQOiPXIxcv8QA6P2WHntCB9Pg+2u/81SR33INP4mC7IgmmyAwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFISRf0H/0R/Dza3MdKAFs5hv+kLyMB8GA1UdIwQY MBaAFIZN8RKPfULGiEhjtfJz8+umWWFWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGszeEVvOTlRc2FJU0dPMThuUHo2NlpaWVZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy85YjVkMDItMTZmOC00Mjg0LTk0M2Ut ODBkN2ZhNWRmYmI0LzEvaEpGX1FmX1JIOFBOcmN4MG9BV3ptR182UXZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy85YjVkMDItMTZmOC00Mjg0LTk0M2UtODBkN2ZhNWRmYmI0 LzEvaGszeEVvOTlRc2FJU0dPMThuUHo2NlpaWVZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwl0oMA0G CSqGSIb3DQEBCwUAA4IBAQA70zOqwrZFKgFHLu/JzKW/J5O/XRhez4+OLSP6RFCl xDJ249SKaVuSp9bOU/YJI/2htkJ453csYS6tp0iiJk8VnoBL9fthyMqjfU+0seSH Tdg6l1QnQ4BuVjO5D/WGrjFenufQLnjLqRZyFuqu/eIUCO+6SutoN6X6s+cFPalG A67bg5fg/u2RQnowXtGTXLIfX4BGuYHx81cxTopFkEnCNjK3ckfHVo1J0PH9+0J5 bt2Fska3r1doGR3oXPdOU7iT0ZahR3FpoHzQKqKIV4YexzF4IDdS3Nv259K/aHie xFQNdR1DLvLu7Z321sMnaaHxordbyHjyb9UT3jNC3DWk -----END CERTIFICATE-----Generated at Mon Feb 9 20:47:19 2026 by rpki-client