This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/HFbNCHkvFA8jkd2sknvleLz36Tg.roa File: HFbNCHkvFA8jkd2sknvleLz36Tg.roa (raw, json) Hash identifier: fi2cqyuRcru8EJ7IltLtB/qriwTw+zg8CNvhM51ultA= Subject key identifier: 1C:56:CD:08:79:2F:14:0F:23:91:DD:AC:92:7B:E5:78:BC:F7:E9:38 Certificate issuer: /CN=f3ba90c71eb4cb0169c94843e5c72fd777501906 Certificate serial: 019B76EAF250A9879C88EF04E34A3DBA728A Authority key identifier: F3:BA:90:C7:1E:B4:CB:01:69:C9:48:43:E5:C7:2F:D7:77:50:19:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87qQxx60ywFpyUhD5ccv13dQGQY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/HFbNCHkvFA8jkd2sknvleLz36Tg.roa Signing time: Thu 01 Jan 2026 00:17:47 +0000 ROA not before: Thu 01 Jan 2026 00:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209651 IP address blocks: 193.104.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.mft rsync://rpki.ripe.net/repository/DEFAULT/87qQxx60ywFpyUhD5ccv13dQGQY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:f2:50:a9:87:9c:88:ef:04:e3:4a:3d:ba:72:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3ba90c71eb4cb0169c94843e5c72fd777501906 Validity Not Before: Jan 1 00:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1c56cd08792f140f2391ddac927be578bcf7e938 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:42:70:81:1b:04:05:9e:4f:d0:1a:04:00:e6: 4c:a3:25:3e:27:4e:0f:81:97:d9:20:28:63:4a:62: 82:af:32:f2:a1:94:6c:4b:27:d2:1a:14:59:72:3a: 74:08:70:61:27:b1:22:f4:0b:60:a8:b2:22:96:33: fe:fb:0c:b4:ac:32:dc:23:ce:00:32:13:a3:f7:ce: d5:62:6e:4d:b6:75:cc:51:f8:b5:58:39:13:a7:32: 6c:42:4b:ab:65:30:0a:57:75:d4:52:ab:49:e5:0b: 2a:4b:c9:13:ff:30:62:ce:b9:29:3e:87:5c:96:01: c3:30:c6:b7:5e:d9:79:94:ad:48:b0:8c:d9:2a:f2: 98:f0:e9:5b:27:ce:b2:f2:d1:58:f6:08:38:7c:c5: c1:15:64:5e:32:07:74:84:d6:d3:d2:fa:5a:ab:88: 70:10:40:72:80:2a:bb:03:05:38:07:ff:20:7b:ac: 40:4a:74:42:d7:4d:f7:1e:c4:1e:ba:31:79:e6:77: 51:95:b0:f1:45:79:92:ca:c3:ff:9b:e5:d0:8a:b6: 9d:11:bc:6a:d0:2f:3a:5b:7a:03:7b:b3:d6:3b:84: d7:53:42:22:7b:0d:de:e2:34:89:d9:86:a0:cf:bc: bc:97:0e:ef:8c:7a:c0:3f:81:5c:82:31:b9:f0:05: c1:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:56:CD:08:79:2F:14:0F:23:91:DD:AC:92:7B:E5:78:BC:F7:E9:38 X509v3 Authority Key Identifier: keyid:F3:BA:90:C7:1E:B4:CB:01:69:C9:48:43:E5:C7:2F:D7:77:50:19:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87qQxx60ywFpyUhD5ccv13dQGQY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/HFbNCHkvFA8jkd2sknvleLz36Tg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.104.133.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:d4:3d:8c:fd:d3:b8:21:a6:63:fc:74:a6:37:09:e5:dd:ef: 6f:5b:fd:aa:3a:5f:e6:32:cf:e4:79:ed:2e:a9:ac:b3:6e:b0: b7:45:f0:d5:54:14:a6:49:91:6a:9f:66:92:b0:69:94:66:e4: 25:ba:5a:64:2b:fb:8b:75:d1:e3:94:9e:5d:93:97:8d:92:4d: 1a:e1:2f:ba:62:df:7a:37:35:25:34:53:87:7e:1f:63:bd:b8: 5d:eb:04:eb:67:ba:d5:8d:3e:6c:d7:99:48:fc:ff:d5:58:85: 27:dc:1e:36:3a:59:77:b4:8e:85:f1:aa:b5:d3:1c:40:cf:9a: c1:c0:f2:a6:69:2c:52:9f:aa:8f:18:06:50:32:90:47:e7:d2: c9:59:44:76:07:25:48:45:98:9d:12:e0:09:80:de:19:0c:18: 2c:4b:37:09:03:bd:a2:ba:81:e7:c5:86:54:53:8f:4a:9e:25: cd:89:11:22:40:91:b1:88:07:57:58:ee:58:b0:b3:7b:91:8e: 11:6a:df:3b:87:24:63:c1:0b:62:24:02:68:ca:7d:13:e2:27: dc:51:7c:d5:a6:ed:2f:07:75:3c:fd:9e:7a:23:64:2b:2b:af: f2:31:8d:96:02:ec:7e:96:ae:c1:1a:d1:9d:05:21:e0:56:c4: ec:da:ee:e1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26vJQqYeciO8E40o9unKKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzYmE5MGM3MWViNGNiMDE2OWM5NDg0M2U1YzcyZmQ3Nzc1 MDE5MDYwHhcNMjYwMTAxMDAxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzU2Y2QwODc5MmYxNDBmMjM5MWRkYWM5MjdiZTU3OGJjZjdlOTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEJwgRsEBZ5P0BoEAOZMoyU+J04P gZfZIChjSmKCrzLyoZRsSyfSGhRZcjp0CHBhJ7Ei9AtgqLIiljP++wy0rDLcI84A MhOj987VYm5NtnXMUfi1WDkTpzJsQkurZTAKV3XUUqtJ5QsqS8kT/zBizrkpPodc lgHDMMa3Xtl5lK1IsIzZKvKY8OlbJ86y8tFY9gg4fMXBFWReMgd0hNbT0vpaq4hw EEBygCq7AwU4B/8ge6xASnRC1033HsQeujF55ndRlbDxRXmSysP/m+XQiradEbxq 0C86W3oDe7PWO4TXU0Iiew3e4jSJ2Yagz7y8lw7vjHrAP4FcgjG58AXBUwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBxWzQh5LxQPI5HdrJJ75Xi89+k4MB8GA1UdIwQY MBaAFPO6kMcetMsBaclIQ+XHL9d3UBkGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODdxUXh4NjB5d0ZweVVoRDVjY3YxM2RRR1FZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9hYmNjMDctOWE2MC00OWY2LWExZWYt OGQ1MjkwMmFjODMwLzEvSEZiTkNIa3ZGQThqa2Qyc2tudmxlTHozNlRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9hYmNjMDctOWE2MC00OWY2LWExZWYtOGQ1MjkwMmFjODMw LzEvODdxUXh4NjB5d0ZweVVoRDVjY3YxM2RRR1FZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWiFMA0G CSqGSIb3DQEBCwUAA4IBAQAN1D2M/dO4IaZj/HSmNwnl3e9vW/2qOl/mMs/kee0u qayzbrC3RfDVVBSmSZFqn2aSsGmUZuQlulpkK/uLddHjlJ5dk5eNkk0a4S+6Yt96 NzUlNFOHfh9jvbhd6wTrZ7rVjT5s15lI/P/VWIUn3B42Oll3tI6F8aq10xxAz5rB wPKmaSxSn6qPGAZQMpBH59LJWUR2ByVIRZidEuAJgN4ZDBgsSzcJA72iuoHnxYZU U49KniXNiREiQJGxiAdXWO5YsLN7kY4Rat87hyRjwQtiJAJoyn0T4ifcUXzVpu0v B3U8/Z56I2QrK6/yMY2WAux+lq7BGtGdBSHgVsTs2u7h -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:05 2026 by rpki-client