This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/HJM8ar8o7Ms178YqtLEfQB0QhN4.roa File: HJM8ar8o7Ms178YqtLEfQB0QhN4.roa (raw, json) Hash identifier: zeFiOMksTar7c+X+HOnRK9Kyf2IXPD5S69TV2amNtAY= Subject key identifier: 1C:93:3C:6A:BF:28:EC:CB:35:EF:C6:2A:B4:B1:1F:40:1D:10:84:DE Certificate issuer: /CN=4e5ecfec9f54e4ec39c2005ef4e63e70b51faed4 Certificate serial: 019B775897E6CD58212E566D9385C8CE1D51 Authority key identifier: 4E:5E:CF:EC:9F:54:E4:EC:39:C2:00:5E:F4:E6:3E:70:B5:1F:AE:D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/HJM8ar8o7Ms178YqtLEfQB0QhN4.roa Signing time: Thu 01 Jan 2026 02:17:33 +0000 ROA not before: Thu 01 Jan 2026 02:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48960 IP address blocks: 95.173.194.0/24 maxlen: 24 95.173.195.0/24 maxlen: 24 95.173.196.0/24 maxlen: 24 95.173.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:97:e6:cd:58:21:2e:56:6d:93:85:c8:ce:1d:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e5ecfec9f54e4ec39c2005ef4e63e70b51faed4 Validity Not Before: Jan 1 02:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1c933c6abf28eccb35efc62ab4b11f401d1084de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:17:8a:1a:7f:69:65:f0:aa:3a:44:33:67:97: 95:6c:3b:10:b0:2c:50:bc:73:0f:1a:f3:58:f6:5e: 63:b9:b9:49:39:77:02:75:28:08:29:54:9e:e4:32: 94:94:45:f4:24:ef:87:4c:84:db:72:3c:d9:22:73: 25:b4:c5:12:89:6b:a0:f7:1d:a0:71:b2:9c:8b:19: 3a:cf:6b:16:3f:fd:4a:98:16:fd:1a:cf:a1:d7:27: 13:60:0b:8f:f9:97:19:0e:d3:2f:ca:d6:f8:3f:4e: 89:bf:4c:eb:82:45:ac:88:37:db:37:4d:11:9e:66: e1:35:7c:4c:bc:b3:90:26:0d:89:31:4c:9a:52:81: 85:b4:ae:e2:01:a3:65:59:4d:8d:7f:7f:d5:23:88: 57:3c:d3:10:3e:ec:e7:a6:f2:0b:86:ed:af:0b:9c: 00:f9:93:f1:0e:71:af:c1:73:7f:8e:9b:f5:29:34: 82:ca:57:bb:79:fe:a7:78:89:ed:c5:86:54:cd:49: 21:ba:97:04:ec:f3:43:a4:52:73:5b:f0:60:40:2c: 41:e4:d5:eb:d1:c7:e7:da:47:21:8e:81:c9:49:e1: a3:7e:f5:5b:c5:fe:34:dc:31:16:aa:ba:db:23:ef: eb:e7:91:05:90:81:14:a1:70:22:d3:c6:d6:6d:9d: 4a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:93:3C:6A:BF:28:EC:CB:35:EF:C6:2A:B4:B1:1F:40:1D:10:84:DE X509v3 Authority Key Identifier: keyid:4E:5E:CF:EC:9F:54:E4:EC:39:C2:00:5E:F4:E6:3E:70:B5:1F:AE:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/HJM8ar8o7Ms178YqtLEfQB0QhN4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.173.194.0-95.173.196.255 95.173.198.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:73:94:37:7f:44:d3:81:dc:f4:46:f7:ea:ab:71:0d:72:c1: a0:90:85:b1:22:68:88:12:b4:26:4b:75:41:e8:8b:5b:0b:a0: 1f:e2:24:c4:c0:59:83:9b:ef:8b:c7:63:72:71:0a:cd:0b:30: 7f:a7:2f:12:e0:b7:56:f7:82:4b:35:22:70:28:27:84:e9:05: 17:3f:63:b0:36:0b:13:22:8f:b5:24:0c:dc:fa:80:0e:3d:93: a1:68:97:9d:fb:9b:ed:e7:83:06:3b:eb:47:ae:5e:81:0a:23: 53:f1:9d:35:de:0f:da:e3:1e:27:ec:ff:0b:df:01:cf:e0:57: 01:0c:30:12:af:21:c3:bf:55:73:97:56:df:80:e6:d9:95:e7: df:99:94:97:51:d2:09:be:91:01:ef:6b:3d:36:3b:64:99:37: 51:07:09:62:cb:d4:fb:8a:3e:cf:9a:4f:2f:58:35:8f:b3:8b: 60:26:e6:69:fb:73:65:cf:fe:d8:b1:b3:bf:3e:92:c5:63:66: b4:a1:33:bc:d7:b3:d0:48:2a:52:a6:15:c8:e2:db:5d:7a:73: c1:9b:ad:9a:d4:d5:54:68:96:b8:67:48:67:ad:2b:77:8b:08: f7:c1:46:7e:62:1f:c0:d6:53:4c:50:45:89:bf:77:ee:0f:66: fd:fc:43:a2 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt3WJfmzVghLlZtk4XIzh1RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlNWVjZmVjOWY1NGU0ZWMzOWMyMDA1ZWY0ZTYzZTcwYjUx ZmFlZDQwHhcNMjYwMTAxMDIxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzkzM2M2YWJmMjhlY2NiMzVlZmM2MmFiNGIxMWY0MDFkMTA4NGRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixeKGn9pZfCqOkQzZ5eVbDsQsCxQ vHMPGvNY9l5jublJOXcCdSgIKVSe5DKUlEX0JO+HTITbcjzZInMltMUSiWug9x2g cbKcixk6z2sWP/1KmBb9Gs+h1ycTYAuP+ZcZDtMvytb4P06Jv0zrgkWsiDfbN00R nmbhNXxMvLOQJg2JMUyaUoGFtK7iAaNlWU2Nf3/VI4hXPNMQPuznpvILhu2vC5wA +ZPxDnGvwXN/jpv1KTSCyle7ef6neIntxYZUzUkhupcE7PNDpFJzW/BgQCxB5NXr 0cfn2kchjoHJSeGjfvVbxf403DEWqrrbI+/r55EFkIEUoXAi08bWbZ1KZQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFByTPGq/KOzLNe/GKrSxH0AdEITeMB8GA1UdIwQY MBaAFE5ez+yfVOTsOcIAXvTmPnC1H67UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGw3UDdKOVU1T3c1d2dCZTlPWS1jTFVmcnRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9mZjJhMWMtMThhZi00YmE1LWE0OWYt ZWNhZDNiNzE0OTM4LzEvSEpNOGFyOG83TXMxNzhZcXRMRWZRQjBRaE40LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9mZjJhMWMtMThhZi00YmE1LWE0OWYtZWNhZDNiNzE0OTM4 LzEvVGw3UDdKOVU1T3c1d2dCZTlPWS1jTFVmcnRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAFfrcID BABfrcQDBABfrcYwDQYJKoZIhvcNAQELBQADggEBAI9zlDd/RNOB3PRG9+qrcQ1y waCQhbEiaIgStCZLdUHoi1sLoB/iJMTAWYOb74vHY3JxCs0LMH+nLxLgt1b3gks1 InAoJ4TpBRc/Y7A2CxMij7UkDNz6gA49k6Fol537m+3ngwY760euXoEKI1PxnTXe D9rjHifs/wvfAc/gVwEMMBKvIcO/VXOXVt+A5tmV59+ZlJdR0gm+kQHvaz02O2SZ N1EHCWLL1PuKPs+aTy9YNY+zi2Am5mn7c2XP/tixs78+ksVjZrShM7zXs9BIKlKm Fcji2116c8GbrZrU1VRolrhnSGetK3eLCPfBRn5iH8DWU0xQRYm/d+4PZv38Q6I= -----END CERTIFICATE-----Generated at Mon Feb 9 20:45:10 2026 by rpki-client