This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/4a79a1-3d19-4de4-be89-8a200691f724/1/1-hnniNiqKhghSmVXCidavYogegc.roa File: 1-hnniNiqKhghSmVXCidavYogegc.roa (raw, json) Hash identifier: Jduthbq3o8EtI4RJz3qiljL6aUb5nGCPK55RrxKoNyI= Subject key identifier: FA:19:E7:88:D8:AA:2A:18:21:4A:65:57:0A:27:5A:BD:8A:20:7A:07 Certificate issuer: /CN=bbfa427d42023afda888e8415f4edcf7b7df1b05 Certificate serial: 019B7AC86338832FC3BBF3D0FDA2E68DDE43 Authority key identifier: BB:FA:42:7D:42:02:3A:FD:A8:88:E8:41:5F:4E:DC:F7:B7:DF:1B:05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_pCfUICOv2oiOhBX07c97ffGwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/4a79a1-3d19-4de4-be89-8a200691f724/1/1-hnniNiqKhghSmVXCidavYogegc.roa Signing time: Thu 01 Jan 2026 18:18:31 +0000 ROA not before: Thu 01 Jan 2026 18:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205278 IP address blocks: 195.8.107.0/24 maxlen: 24 2a12:e3c0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/4a79a1-3d19-4de4-be89-8a200691f724/1/u_pCfUICOv2oiOhBX07c97ffGwU.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/4a79a1-3d19-4de4-be89-8a200691f724/1/u_pCfUICOv2oiOhBX07c97ffGwU.mft rsync://rpki.ripe.net/repository/DEFAULT/u_pCfUICOv2oiOhBX07c97ffGwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:63:38:83:2f:c3:bb:f3:d0:fd:a2:e6:8d:de:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbfa427d42023afda888e8415f4edcf7b7df1b05 Validity Not Before: Jan 1 18:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa19e788d8aa2a18214a65570a275abd8a207a07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f7:95:c7:0d:80:50:e5:71:30:03:3c:fa:b7: 31:74:13:5e:0d:c4:e7:f1:27:d2:9a:3f:5e:fe:b3: fb:08:ff:48:66:47:8b:07:f7:dc:a9:78:28:fb:b2: b9:af:fd:bc:84:26:1a:ce:3c:66:25:6e:8d:1c:99: 3c:ab:0a:e2:a9:7c:1a:fe:0f:c2:44:14:d7:c0:99: f0:f5:1e:a8:81:9c:48:dc:fb:99:b2:16:99:bb:5d: c6:0d:e7:2a:91:b6:d6:ea:8c:47:88:32:20:fd:96: 1e:9e:55:bd:1f:d8:1e:43:22:26:62:ef:07:6a:f6: fa:3d:7d:ac:1d:5d:ed:df:1f:f5:9e:9f:f4:39:97: d1:9f:c5:d4:fb:08:29:dc:83:0a:d0:ec:39:65:bf: 78:94:94:c2:e6:ea:16:45:9c:5f:c8:88:c1:17:3b: bc:5b:d9:51:bf:ca:b0:82:0b:f0:a5:45:6a:58:5d: f7:cb:5b:2f:9d:df:5d:5b:cf:57:f8:89:d7:74:70: 1c:d3:71:76:2b:d8:48:c4:c7:36:f6:d6:47:e6:af: b9:0b:91:ee:8c:a7:df:50:10:c2:7a:8e:8c:ed:04: fe:ee:4c:31:79:4c:1b:52:97:cb:97:2e:f0:23:44: 5a:3b:88:e3:72:6e:7b:38:4f:ce:ff:5a:eb:4c:6b: f9:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:19:E7:88:D8:AA:2A:18:21:4A:65:57:0A:27:5A:BD:8A:20:7A:07 X509v3 Authority Key Identifier: keyid:BB:FA:42:7D:42:02:3A:FD:A8:88:E8:41:5F:4E:DC:F7:B7:DF:1B:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_pCfUICOv2oiOhBX07c97ffGwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4a79a1-3d19-4de4-be89-8a200691f724/1/1-hnniNiqKhghSmVXCidavYogegc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4a79a1-3d19-4de4-be89-8a200691f724/1/u_pCfUICOv2oiOhBX07c97ffGwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.8.107.0/24 IPv6: 2a12:e3c0::/29 Signature Algorithm: sha256WithRSAEncryption ad:06:40:b0:0b:e9:e1:85:ff:2e:b3:76:50:9e:49:72:5e:dd: 8b:55:2b:be:04:73:12:db:b5:c9:1d:55:b3:06:8a:40:e3:89: 27:56:61:f3:3b:c8:02:4c:c3:a2:57:a6:25:b7:60:97:e1:db: 25:05:ed:6d:35:17:49:a3:d5:bf:b9:d4:15:fd:ca:92:87:43: 10:ed:82:ac:02:24:52:18:1c:54:15:35:16:43:4e:2d:5c:b1: b2:d8:09:67:b2:ed:8b:07:4d:4f:4e:81:b9:bc:ed:96:fb:63: e2:bb:de:00:bc:1e:1e:95:53:2e:4f:cd:a4:bb:a0:42:fb:33: 8c:2b:52:2e:91:98:f5:3d:53:0e:54:0f:dd:cd:9a:57:fb:fc: 63:cf:f7:d0:82:20:6b:d6:e9:17:2a:10:97:e3:0a:e0:ef:cd: 35:e2:b7:47:8f:c6:99:1c:1b:fc:b2:f6:21:bd:b0:77:82:ac: 5a:a6:3c:d9:1c:e1:4f:36:1c:b1:38:85:d1:62:e8:53:f1:a6: 3f:e4:ce:49:59:5d:eb:a4:f2:7a:07:96:f7:6a:e2:22:f8:84: 85:1e:5b:de:c0:4f:8f:0b:fa:05:5c:d1:37:d8:8e:0b:fa:db: 10:e8:b1:9b:48:40:b9:e2:fe:83:83:7a:a8:ed:92:2f:f3:f8: 39:08:8b:34 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt6yGM4gy/Du/PQ/aLmjd5DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZmE0MjdkNDIwMjNhZmRhODg4ZTg0MTVmNGVkY2Y3Yjdk ZjFiMDUwHhcNMjYwMTAxMTgxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTE5ZTc4OGQ4YWEyYTE4MjE0YTY1NTcwYTI3NWFiZDhhMjA3YTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/eVxw2AUOVxMAM8+rcxdBNeDcTn 8SfSmj9e/rP7CP9IZkeLB/fcqXgo+7K5r/28hCYazjxmJW6NHJk8qwriqXwa/g/C RBTXwJnw9R6ogZxI3PuZshaZu13GDecqkbbW6oxHiDIg/ZYenlW9H9geQyImYu8H avb6PX2sHV3t3x/1np/0OZfRn8XU+wgp3IMK0Ow5Zb94lJTC5uoWRZxfyIjBFzu8 W9lRv8qwggvwpUVqWF33y1svnd9dW89X+InXdHAc03F2K9hIxMc29tZH5q+5C5Hu jKffUBDCeo6M7QT+7kwxeUwbUpfLly7wI0RaO4jjcm57OE/O/1rrTGv5SwIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFPoZ54jYqioYIUplVwonWr2KIHoHMB8GA1UdIwQY MBaAFLv6Qn1CAjr9qIjoQV9O3Pe33xsFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdV9wQ2ZVSUNPdjJvaU9oQlgwN2M5N2ZmR3dVLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS80YTc5YTEtM2QxOS00ZGU0LWJlODkt OGEyMDA2OTFmNzI0LzEvMS1obm5pTmlxS2hnaFNtVlhDaWRhdllvZ2VnYy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZmUvNGE3OWExLTNkMTktNGRlNC1iZTg5LThhMjAwNjkxZjcy NC8xL3VfcENmVUlDT3Yyb2lPaEJYMDdjOTdmZkd3VS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAMMIazAN BAIAAjAHAwUDKhLjwDANBgkqhkiG9w0BAQsFAAOCAQEArQZAsAvp4YX/LrN2UJ5J cl7di1UrvgRzEtu1yR1VswaKQOOJJ1Zh8zvIAkzDolemJbdgl+HbJQXtbTUXSaPV v7nUFf3KkodDEO2CrAIkUhgcVBU1FkNOLVyxstgJZ7LtiwdNT06Bubztlvtj4rve ALweHpVTLk/NpLugQvszjCtSLpGY9T1TDlQP3c2aV/v8Y8/30IIga9bpFyoQl+MK 4O/NNeK3R4/GmRwb/LL2Ib2wd4KsWqY82RzhTzYcsTiF0WLoU/GmP+TOSVld66Ty egeW92riIviEhR5b3sBPjwv6BVzRN9iOC/rbEOixm0hAueL+g4N6qO2SL/P4OQiL NA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:55:28 2026 by rpki-client