This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/THoFRGj7we5B4orPSAEMrZc2v9I.roa File: THoFRGj7we5B4orPSAEMrZc2v9I.roa (raw, json) Hash identifier: nx8ZhN2tRi/Vu5vUK7/jsnnIAjWNN0LM5ZVA5cvmy60= Subject key identifier: 4C:7A:05:44:68:FB:C1:EE:41:E2:8A:CF:48:01:0C:AD:97:36:BF:D2 Certificate issuer: /CN=d24adecd84bb1748bd35b99ecea46772e01ec935 Certificate serial: 019B7BA32613E244C0CBCD1EC49942BCCBA9 Authority key identifier: D2:4A:DE:CD:84:BB:17:48:BD:35:B9:9E:CE:A4:67:72:E0:1E:C9:35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0krezYS7F0i9NbmezqRncuAeyTU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/THoFRGj7we5B4orPSAEMrZc2v9I.roa Signing time: Thu 01 Jan 2026 22:17:28 +0000 ROA not before: Thu 01 Jan 2026 22:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8244 IP address blocks: 94.142.192.0/23 maxlen: 23 94.142.194.0/23 maxlen: 24 195.230.192.0/22 maxlen: 22 195.230.200.0/21 maxlen: 21 2a01:ac40:2000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/0krezYS7F0i9NbmezqRncuAeyTU.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/0krezYS7F0i9NbmezqRncuAeyTU.mft rsync://rpki.ripe.net/repository/DEFAULT/0krezYS7F0i9NbmezqRncuAeyTU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:26:13:e2:44:c0:cb:cd:1e:c4:99:42:bc:cb:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d24adecd84bb1748bd35b99ecea46772e01ec935 Validity Not Before: Jan 1 22:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4c7a054468fbc1ee41e28acf48010cad9736bfd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a9:9f:1d:c2:b8:58:01:24:eb:61:ca:d7:0e: e5:8f:e7:dd:1b:12:4a:f1:3f:67:f1:0d:ef:db:a5: f9:ae:6d:92:98:1b:16:5d:4b:13:2a:3d:e1:2d:b1: ed:56:d5:11:e3:f6:96:0d:d5:b4:6c:b4:2b:b3:a4: a1:f7:2c:5e:7e:37:66:b6:db:2d:22:ca:1c:75:10: 2d:d6:63:c4:42:19:b5:cd:cc:a9:82:49:b7:85:d8: 84:23:01:f2:30:2f:c8:09:ef:1a:a1:1c:ab:7d:fa: 63:e0:59:f6:60:f6:8b:a3:a5:e5:96:70:3e:97:81: 80:16:53:63:9a:7c:b4:b5:fe:97:10:a2:51:c6:36: 70:22:fd:d9:2f:74:32:1f:55:79:9a:ac:b1:63:53: 9d:3c:ad:81:f5:12:d9:13:73:47:69:06:09:a1:c5: 3b:51:3c:59:2c:6c:1e:b8:00:c3:87:46:9e:a1:37: d3:f9:e4:56:16:20:c8:4e:a7:c5:71:ea:bf:10:75: 68:25:3c:06:dd:24:c0:2b:8e:19:70:c1:4a:bf:a8: b9:98:d0:86:ca:11:dc:d4:c7:94:3c:ab:45:d6:47: b0:e5:dc:61:12:ad:bd:a8:71:05:1b:eb:bb:bd:89: 2c:d2:a3:37:c6:ae:8b:3e:ac:d2:8a:fc:3b:90:88: c5:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:7A:05:44:68:FB:C1:EE:41:E2:8A:CF:48:01:0C:AD:97:36:BF:D2 X509v3 Authority Key Identifier: keyid:D2:4A:DE:CD:84:BB:17:48:BD:35:B9:9E:CE:A4:67:72:E0:1E:C9:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0krezYS7F0i9NbmezqRncuAeyTU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/THoFRGj7we5B4orPSAEMrZc2v9I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/0krezYS7F0i9NbmezqRncuAeyTU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.142.192.0/22 195.230.192.0/22 195.230.200.0/21 IPv6: 2a01:ac40:2000::/36 Signature Algorithm: sha256WithRSAEncryption 34:66:e8:1b:be:94:01:ec:e2:e1:10:c2:b9:b2:83:92:03:90: 9f:60:29:e6:b1:f2:c9:33:a0:57:52:2e:c1:3e:57:4e:d7:32: 23:67:fb:04:ac:bc:07:74:ee:82:d8:f0:ad:c4:7c:1b:c4:97: b5:1f:55:8f:30:1a:68:d2:2a:be:f6:54:60:c0:6d:be:89:64: 01:13:5b:1d:3a:48:6b:b6:eb:4a:f8:5c:d8:1c:5e:00:0b:2d: 61:e1:4e:07:c1:ec:d8:85:bf:d4:d3:41:eb:c7:19:6c:17:08: 50:3b:36:3d:c4:ea:2a:c1:bb:93:f6:b4:25:6c:1b:93:44:52: 71:d5:8b:3a:c5:f0:09:f5:98:1a:10:cd:0c:2e:96:aa:17:7f: 63:13:2d:90:ac:ca:1d:23:64:9c:bf:e0:e1:74:b2:be:65:6e: e3:87:33:9e:ec:5d:d5:11:3a:92:d0:49:4a:f8:32:16:cb:41: db:1c:0f:dd:32:97:d8:54:e2:af:a3:8f:77:ee:a0:35:dd:02: 99:92:ae:76:40:4d:7f:64:f3:d7:a8:ea:a3:eb:bb:5b:6b:64: ae:f0:88:72:29:d7:93:eb:9c:a5:8a:be:73:bf:5e:a4:78:42: c0:cc:a8:fd:f3:86:79:40:62:53:e2:33:a2:13:3b:69:2f:42: 13:0f:92:ff -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt7oyYT4kTAy80exJlCvMupMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyNGFkZWNkODRiYjE3NDhiZDM1Yjk5ZWNlYTQ2NzcyZTAx ZWM5MzUwHhcNMjYwMTAxMjIxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YzdhMDU0NDY4ZmJjMWVlNDFlMjhhY2Y0ODAxMGNhZDk3MzZiZmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6mfHcK4WAEk62HK1w7lj+fdGxJK 8T9n8Q3v26X5rm2SmBsWXUsTKj3hLbHtVtUR4/aWDdW0bLQrs6Sh9yxefjdmttst IsocdRAt1mPEQhm1zcypgkm3hdiEIwHyMC/ICe8aoRyrffpj4Fn2YPaLo6XllnA+ l4GAFlNjmny0tf6XEKJRxjZwIv3ZL3QyH1V5mqyxY1OdPK2B9RLZE3NHaQYJocU7 UTxZLGweuADDh0aeoTfT+eRWFiDITqfFceq/EHVoJTwG3STAK44ZcMFKv6i5mNCG yhHc1MeUPKtF1kew5dxhEq29qHEFG+u7vYks0qM3xq6LPqzSivw7kIjFfQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFEx6BURo+8HuQeKKz0gBDK2XNr/SMB8GA1UdIwQY MBaAFNJK3s2EuxdIvTW5ns6kZ3LgHsk1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGtyZXpZUzdGMGk5TmJtZXpxUm5jdUFleVRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS82M2E4NDUtOGMwOS00ZDY5LWE3NzEt NDhhNjA3YmJlMjVlLzEvVEhvRlJHajd3ZTVCNG9yUFNBRU1yWmMydjlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS82M2E4NDUtOGMwOS00ZDY5LWE3NzEtNDhhNjA3YmJlMjVl LzEvMGtyZXpZUzdGMGk5TmJtZXpxUm5jdUFleVRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAYBAIAATASAwQCXo7AAwQC w+bAAwQDw+bIMA4EAgACMAgDBgQqAaxAIDANBgkqhkiG9w0BAQsFAAOCAQEANGbo G76UAezi4RDCubKDkgOQn2Ap5rHyyTOgV1IuwT5XTtcyI2f7BKy8B3TugtjwrcR8 G8SXtR9VjzAaaNIqvvZUYMBtvolkARNbHTpIa7brSvhc2BxeAAstYeFOB8Hs2IW/ 1NNB68cZbBcIUDs2PcTqKsG7k/a0JWwbk0RScdWLOsXwCfWYGhDNDC6Wqhd/YxMt kKzKHSNknL/g4XSyvmVu44cznuxd1RE6ktBJSvgyFstB2xwP3TKX2FTir6OPd+6g Nd0CmZKudkBNf2Tz16jqo+u7W2tkrvCIcinXk+ucpYq+c79epHhCwMyo/fOGeUBi U+IzohM7aS9CEw+S/w== -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:21 2026 by rpki-client