This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/b34cb0-2f71-4f59-bd5e-67efcb3d86fe/1/nHPJWlpQPhkaaVBOJpNtCquCP4k.roa File: nHPJWlpQPhkaaVBOJpNtCquCP4k.roa (raw, json) Hash identifier: 6R7C7VrVXxgANNJwPCGx4EfyMD8Vfzknqlkea/LO2ts= Subject key identifier: 9C:73:C9:5A:5A:50:3E:19:1A:69:50:4E:26:93:6D:0A:AB:82:3F:89 Certificate issuer: /CN=421bae989898d9402424aadafbb47c3a6d4c25b3 Certificate serial: 019B7DCA8B65906A1EE4B4DFA5589AAF1EFA Authority key identifier: 42:1B:AE:98:98:98:D9:40:24:24:AA:DA:FB:B4:7C:3A:6D:4C:25:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhuumJiY2UAkJKra-7R8Om1MJbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/b34cb0-2f71-4f59-bd5e-67efcb3d86fe/1/nHPJWlpQPhkaaVBOJpNtCquCP4k.roa Signing time: Fri 02 Jan 2026 08:19:44 +0000 ROA not before: Fri 02 Jan 2026 08:19:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214914 IP address blocks: 83.174.155.0/24 maxlen: 24 185.42.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/b34cb0-2f71-4f59-bd5e-67efcb3d86fe/1/QhuumJiY2UAkJKra-7R8Om1MJbM.crl rsync://rpki.ripe.net/repository/DEFAULT/da/b34cb0-2f71-4f59-bd5e-67efcb3d86fe/1/QhuumJiY2UAkJKra-7R8Om1MJbM.mft rsync://rpki.ripe.net/repository/DEFAULT/QhuumJiY2UAkJKra-7R8Om1MJbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 03:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:8b:65:90:6a:1e:e4:b4:df:a5:58:9a:af:1e:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=421bae989898d9402424aadafbb47c3a6d4c25b3 Validity Not Before: Jan 2 08:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9c73c95a5a503e191a69504e26936d0aab823f89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:15:6f:0e:2b:69:3b:4d:fc:b3:37:33:5a:28: 18:b7:1a:fb:89:23:ba:58:c2:c1:8e:0a:65:e7:18: 71:16:0f:f1:04:a1:c6:91:e5:a5:e8:c1:49:04:c7: f3:b8:52:0b:f8:b8:9d:28:81:b0:a3:eb:48:91:c8: 3d:20:66:16:90:f6:8e:a4:3b:df:75:14:fb:08:40: a3:15:84:f1:42:fe:e3:ee:ba:cf:67:f7:7e:1f:f9: 31:c5:b0:eb:c6:ce:47:9a:d9:89:52:58:72:40:9d: 5c:c7:e3:67:a7:1c:44:d8:95:16:e4:d4:30:51:3f: 63:28:da:44:b1:28:1f:97:1a:4c:c4:2e:6b:f7:f8: 07:b1:93:4a:e1:29:7c:c2:76:4b:ca:11:76:e7:2c: e3:0c:3f:2b:db:db:87:db:72:18:33:99:f0:cd:f8: 85:6f:b2:4a:b2:5b:6e:6b:64:84:f8:92:e4:0e:23: 8c:50:57:f4:17:84:d8:6e:54:be:fd:e1:3e:bd:8e: 75:25:5f:32:85:7f:ae:92:e3:67:b7:1d:0a:75:1c: ec:7a:80:fb:56:e0:4d:32:de:ed:d5:ae:40:72:28: 11:05:f1:f7:91:ba:b5:d6:a7:2d:ec:02:57:6c:a4: 91:32:4a:c2:84:3e:40:36:9d:d1:5d:3c:96:9e:e4: d5:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:73:C9:5A:5A:50:3E:19:1A:69:50:4E:26:93:6D:0A:AB:82:3F:89 X509v3 Authority Key Identifier: keyid:42:1B:AE:98:98:98:D9:40:24:24:AA:DA:FB:B4:7C:3A:6D:4C:25:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhuumJiY2UAkJKra-7R8Om1MJbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/b34cb0-2f71-4f59-bd5e-67efcb3d86fe/1/nHPJWlpQPhkaaVBOJpNtCquCP4k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/b34cb0-2f71-4f59-bd5e-67efcb3d86fe/1/QhuumJiY2UAkJKra-7R8Om1MJbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.174.155.0/24 185.42.211.0/24 Signature Algorithm: sha256WithRSAEncryption 90:5b:99:87:92:34:60:f3:da:c3:e3:03:ae:74:84:cb:bf:7f: 4a:49:a2:18:0b:e1:a4:ac:a0:f3:06:54:ff:f2:de:33:ec:7e: c1:3b:4d:36:66:c4:3e:25:ba:76:34:e8:17:76:48:54:fd:c0: 4b:86:07:bf:07:ba:f8:30:a3:55:3f:cc:bb:e4:64:6d:02:77: 9a:85:b8:6c:00:9b:b1:d1:2f:b6:a7:b8:64:d2:8c:87:76:f3: 8e:ef:b2:ff:18:cc:7e:f0:38:32:a8:73:15:21:31:b8:c5:78: a8:6a:e5:ff:59:d2:2d:78:12:e4:0c:ae:f7:e8:37:ba:2c:17: ab:4e:a2:39:78:08:6b:d1:53:b0:e5:f9:30:53:f6:87:ad:4a: 8f:9c:5a:a7:ff:34:d7:77:36:0a:10:32:c9:9c:42:d4:02:12: f3:29:28:a8:06:2c:ba:ec:f9:fc:75:27:72:bd:f6:15:a7:c6: 8e:ba:a3:e2:5d:8c:77:92:91:7f:f5:3c:56:bb:bd:80:08:3c: 6c:c1:0c:e3:b9:8b:88:f0:89:fc:2a:22:41:ae:51:82:06:86: 1f:28:3f:5c:cf:ae:fa:43:25:d0:1e:ad:4b:5e:6c:04:64:9d: 25:eb:16:43:1b:f2:d2:b3:15:02:08:7c:cf:c6:b1:c4:35:1c: db:11:6e:b8 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9yotlkGoe5LTfpViarx76MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyMWJhZTk4OTg5OGQ5NDAyNDI0YWFkYWZiYjQ3YzNhNmQ0 YzI1YjMwHhcNMjYwMTAyMDgxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YzczYzk1YTVhNTAzZTE5MWE2OTUwNGUyNjkzNmQwYWFiODIzZjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRVvDitpO038szczWigYtxr7iSO6 WMLBjgpl5xhxFg/xBKHGkeWl6MFJBMfzuFIL+LidKIGwo+tIkcg9IGYWkPaOpDvf dRT7CECjFYTxQv7j7rrPZ/d+H/kxxbDrxs5HmtmJUlhyQJ1cx+NnpxxE2JUW5NQw UT9jKNpEsSgflxpMxC5r9/gHsZNK4Sl8wnZLyhF25yzjDD8r29uH23IYM5nwzfiF b7JKsltua2SE+JLkDiOMUFf0F4TYblS+/eE+vY51JV8yhX+ukuNntx0KdRzseoD7 VuBNMt7t1a5AcigRBfH3kbq11qct7AJXbKSRMkrChD5ANp3RXTyWnuTVcwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJxzyVpaUD4ZGmlQTiaTbQqrgj+JMB8GA1UdIwQY MBaAFEIbrpiYmNlAJCSq2vu0fDptTCWzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWh1dW1KaVkyVUFrSktyYS03UjhPbTFNSmJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9iMzRjYjAtMmY3MS00ZjU5LWJkNWUt NjdlZmNiM2Q4NmZlLzEvbkhQSldscFFQaGthYVZCT0pwTnRDcXVDUDRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS9iMzRjYjAtMmY3MS00ZjU5LWJkNWUtNjdlZmNiM2Q4NmZl LzEvUWh1dW1KaVkyVUFrSktyYS03UjhPbTFNSmJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAU66bAwQA uSrTMA0GCSqGSIb3DQEBCwUAA4IBAQCQW5mHkjRg89rD4wOudITLv39KSaIYC+Gk rKDzBlT/8t4z7H7BO002ZsQ+Jbp2NOgXdkhU/cBLhge/B7r4MKNVP8y75GRtAnea hbhsAJux0S+2p7hk0oyHdvOO77L/GMx+8DgyqHMVITG4xXioauX/WdIteBLkDK73 6De6LBerTqI5eAhr0VOw5fkwU/aHrUqPnFqn/zTXdzYKEDLJnELUAhLzKSioBiy6 7Pn8dSdyvfYVp8aOuqPiXYx3kpF/9TxWu72ACDxswQzjuYuI8In8KiJBrlGCBoYf KD9cz676QyXQHq1LXmwEZJ0l6xZDG/LSsxUCCHzPxrHENRzbEW64 -----END CERTIFICATE-----Generated at Thu Feb 5 13:35:56 2026 by rpki-client