This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/H8PYtqySoDNKrI0aBTQXz4fja70.roa File: H8PYtqySoDNKrI0aBTQXz4fja70.roa (raw, json) Hash identifier: sYP/ZNst/HsfxFpjhlx6/hVBRuxtTBkDyMinENqQHtI= Subject key identifier: 1F:C3:D8:B6:AC:92:A0:33:4A:AC:8D:1A:05:34:17:CF:87:E3:6B:BD Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Certificate serial: 019B7D5B052AF071A165FDBE98EE59721148 Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/H8PYtqySoDNKrI0aBTQXz4fja70.roa Signing time: Fri 02 Jan 2026 06:17:55 +0000 ROA not before: Fri 02 Jan 2026 06:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24940 IP address blocks: 94.72.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:05:2a:f0:71:a1:65:fd:be:98:ee:59:72:11:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Validity Not Before: Jan 2 06:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1fc3d8b6ac92a0334aac8d1a053417cf87e36bbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0e:ab:aa:2a:77:39:e1:87:41:9f:05:4f:94: 48:28:6d:69:d0:75:cf:f1:75:13:fb:be:59:26:5e: 5d:54:b6:c6:76:01:55:4d:fa:f4:a3:0a:d6:ef:fe: 79:dd:bb:ad:83:a9:6c:4c:3d:fb:1e:37:a8:54:81: ca:71:e6:76:dc:a2:46:a7:3d:63:6c:48:7d:0a:fc: 20:69:8e:56:1a:ec:29:bb:5b:e7:68:56:47:a5:6b: 8b:64:6c:73:79:2a:06:34:20:08:fc:0e:82:b0:f0: 36:3e:eb:cb:42:00:a1:3f:28:ee:e2:9c:8d:4c:fb: f5:48:a9:e4:d2:6b:1f:a7:23:b0:c2:64:46:e6:5b: 99:4e:92:8b:30:3c:b5:34:7a:da:c2:31:de:c4:9a: ca:64:fe:24:64:3d:17:00:8d:60:e0:ce:5a:fe:40: b9:85:3f:ed:8a:ef:ab:fd:72:36:0b:5a:b4:fc:7c: 90:4b:1c:a4:42:d8:b2:f6:b6:6a:88:9b:c8:b1:b3: ab:a3:c3:fc:73:40:29:f2:a9:0a:38:c8:de:68:34: 73:98:b4:03:21:dd:59:b4:17:c0:90:05:18:c6:cd: d2:ac:22:e6:b0:c9:a3:d8:33:26:02:97:69:4f:ae: 9e:73:7f:a2:73:e5:be:62:98:fb:b5:59:5a:0a:b2: 74:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:C3:D8:B6:AC:92:A0:33:4A:AC:8D:1A:05:34:17:CF:87:E3:6B:BD X509v3 Authority Key Identifier: keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/H8PYtqySoDNKrI0aBTQXz4fja70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.72.141.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:f6:94:88:d1:16:1d:8a:6b:b9:6e:95:fd:aa:98:83:bf:6c: af:e7:df:21:8b:52:a0:e4:19:d4:de:ff:63:99:ba:e8:16:49: 9a:63:38:79:e6:12:59:c5:40:5d:64:3e:35:a7:e6:60:45:6a: 40:92:05:2a:d5:75:c1:89:01:10:75:fc:c2:e2:ce:21:5b:bb: 7d:68:fa:24:1f:90:96:1f:bf:af:5b:2f:65:1e:22:b0:cf:e1: a9:04:dd:51:e3:a8:ee:61:10:0a:39:ff:02:44:26:52:f1:af: b9:a1:70:d8:1b:a1:68:55:a5:29:32:47:97:1f:74:8a:f4:cb: 9a:84:d1:15:49:7b:91:66:0f:a0:d4:af:f1:7d:b5:a6:e7:d4: ea:1f:cd:8e:7d:1f:ed:b1:ca:77:53:8c:aa:ad:63:aa:88:11: f2:e8:b4:c5:11:42:5a:38:a7:1b:5c:7e:4e:a9:80:f7:40:3e: e3:0e:85:4d:69:48:0a:e7:3f:05:4d:29:20:75:4d:d0:0c:3c: 03:36:5e:35:93:f3:fc:68:75:f4:22:83:98:28:4e:fe:67:f6: 6b:33:d8:4e:fe:6c:98:ff:32:da:08:97:5c:a8:f0:51:6d:08: 1c:e5:c9:e1:ac:6f:27:5a:98:74:a4:02:ce:61:fb:ae:6e:a4: 8f:ba:61:f5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9WwUq8HGhZf2+mO5ZchFIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1 Y2IyYWEwHhcNMjYwMTAyMDYxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZmMzZDhiNmFjOTJhMDMzNGFhYzhkMWEwNTM0MTdjZjg3ZTM2YmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApw6rqip3OeGHQZ8FT5RIKG1p0HXP 8XUT+75ZJl5dVLbGdgFVTfr0owrW7/553butg6lsTD37HjeoVIHKceZ23KJGpz1j bEh9CvwgaY5WGuwpu1vnaFZHpWuLZGxzeSoGNCAI/A6CsPA2PuvLQgChPyju4pyN TPv1SKnk0msfpyOwwmRG5luZTpKLMDy1NHrawjHexJrKZP4kZD0XAI1g4M5a/kC5 hT/tiu+r/XI2C1q0/HyQSxykQtiy9rZqiJvIsbOro8P8c0Ap8qkKOMjeaDRzmLQD Id1ZtBfAkAUYxs3SrCLmsMmj2DMmApdpT66ec3+ic+W+Ypj7tVlaCrJ0KQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB/D2LaskqAzSqyNGgU0F8+H42u9MB8GA1UdIwQY MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt ZGFjYjVmMzU2ZWEzLzEvSDhQWXRxeVNvRE5LckkwYUJUUVh6NGZqYTcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXkiNMA0G CSqGSIb3DQEBCwUAA4IBAQB99pSI0RYdimu5bpX9qpiDv2yv598hi1Kg5BnU3v9j mbroFkmaYzh55hJZxUBdZD41p+ZgRWpAkgUq1XXBiQEQdfzC4s4hW7t9aPokH5CW H7+vWy9lHiKwz+GpBN1R46juYRAKOf8CRCZS8a+5oXDYG6FoVaUpMkeXH3SK9Mua hNEVSXuRZg+g1K/xfbWm59TqH82OfR/tscp3U4yqrWOqiBHy6LTFEUJaOKcbXH5O qYD3QD7jDoVNaUgK5z8FTSkgdU3QDDwDNl41k/P8aHX0IoOYKE7+Z/ZrM9hO/myY /zLaCJdcqPBRbQgc5cnhrG8nWph0pALOYfuubqSPumH1 -----END CERTIFICATE-----Generated at Tue Jan 20 12:27:24 2026 by rpki-client