This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/jnambI_i1Pq9WfSXzTyJxwNqXTw.roa File: jnambI_i1Pq9WfSXzTyJxwNqXTw.roa (raw, json) Hash identifier: AT3Vk6O1Rxzzj5x8tTjuoggjZ3puukVm8amtuMG/2yU= Subject key identifier: 8E:76:A6:6C:8F:E2:D4:FA:BD:59:F4:97:CD:3C:89:C7:03:6A:5D:3C Certificate issuer: /CN=1d01f4dffd6fba66cdf8c374c9b0f047552705dd Certificate serial: 019BE086361ED4F10AFE064DEF1468663732 Authority key identifier: 1D:01:F4:DF:FD:6F:BA:66:CD:F8:C3:74:C9:B0:F0:47:55:27:05:DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/jnambI_i1Pq9WfSXzTyJxwNqXTw.roa Signing time: Wed 21 Jan 2026 12:27:30 +0000 ROA not before: Wed 21 Jan 2026 12:27:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206509 IP address blocks: 86.54.164.0/24 maxlen: 24 193.108.169.0/24 maxlen: 24 194.164.181.0/24 maxlen: 24 213.254.171.0/24 maxlen: 24 213.254.178.0/24 maxlen: 24 213.254.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.mft rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e0:86:36:1e:d4:f1:0a:fe:06:4d:ef:14:68:66:37:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d01f4dffd6fba66cdf8c374c9b0f047552705dd Validity Not Before: Jan 21 12:27:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e76a66c8fe2d4fabd59f497cd3c89c7036a5d3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f2:d6:25:17:3b:6d:40:ae:ec:2d:49:de:6d: 41:43:47:51:ff:34:7a:52:e7:99:71:3d:b7:58:29: 88:c7:2f:01:dd:c7:df:e3:80:62:3c:66:c5:61:ad: a7:c9:83:22:3a:30:58:a7:7c:16:b9:b4:a6:db:50: 8c:a3:8b:30:b4:a7:0f:c8:dd:6b:e2:c1:21:0f:40: 05:47:3d:6b:77:ec:07:12:71:52:89:1b:aa:35:ce: 8d:36:03:4f:67:30:17:c9:e4:cf:4d:e1:10:2d:42: a4:76:87:21:68:a5:b0:89:8c:c0:4c:35:24:28:b7: 0e:da:5f:4c:01:96:36:02:5e:c7:49:c1:55:87:ce: ee:6d:c8:3f:05:28:ea:e4:ec:f9:78:83:42:fd:9b: df:e1:2c:4c:76:2f:ce:61:77:f5:47:c8:08:7e:a2: 17:ed:d6:f9:56:dd:62:2c:e8:d4:b6:5a:4c:62:fb: b2:92:b2:8a:c3:ea:a1:20:74:d3:63:cc:6f:ba:59: 5b:03:6e:35:c6:15:78:5c:65:d3:55:32:26:4f:49: 12:91:eb:df:1a:3b:50:66:95:80:8b:c2:d0:e5:a9: 9a:eb:8f:88:df:e9:8c:71:b0:de:40:8a:dc:c0:61: 3b:96:eb:5d:9d:ac:31:5f:07:6a:26:99:11:6b:50: 20:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:76:A6:6C:8F:E2:D4:FA:BD:59:F4:97:CD:3C:89:C7:03:6A:5D:3C X509v3 Authority Key Identifier: keyid:1D:01:F4:DF:FD:6F:BA:66:CD:F8:C3:74:C9:B0:F0:47:55:27:05:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/jnambI_i1Pq9WfSXzTyJxwNqXTw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.54.164.0/24 193.108.169.0/24 194.164.181.0/24 213.254.171.0/24 213.254.178.0/24 213.254.185.0/24 Signature Algorithm: sha256WithRSAEncryption 93:f3:d1:45:12:a7:6d:34:ba:c1:d3:4a:7f:78:54:06:a1:23: b5:24:db:8d:5a:c8:e0:06:51:5d:34:62:24:a1:8f:96:af:1a: b4:a3:1d:1d:a1:36:86:d7:d6:28:0d:e8:bc:c0:23:f5:d9:9f: bf:dc:72:f7:3d:5c:5c:a4:6c:bc:8f:4f:e0:81:dc:70:cd:1b: 44:52:20:ec:8c:6d:92:96:8b:f5:c1:01:07:08:da:d4:20:5c: 10:ec:9d:ca:d7:08:67:bd:5e:02:f2:f4:5d:7f:7d:b6:57:ca: 84:05:e1:57:2b:fe:bd:1f:db:dd:35:de:ce:af:b7:b8:dc:bf: f4:0e:49:27:78:fe:24:9f:12:03:36:a0:e6:44:46:77:fb:15: ed:13:da:90:a7:9b:e3:27:d3:f9:b2:d6:72:69:ab:f1:e1:1e: 87:46:29:aa:f8:85:dc:10:83:0f:f4:9f:d1:e4:63:70:80:0f: 98:3d:0c:16:b3:5e:e7:65:4d:fb:ba:1e:3f:f8:75:98:5c:94: 04:1f:2c:42:db:22:5f:ae:0f:1a:6d:6c:86:74:e8:9d:98:6a: d0:e6:17:6e:c5:f8:61:63:1f:07:c2:62:6f:75:cd:15:16:5f: 45:11:3f:b8:43:70:ab:e2:de:93:af:7e:87:85:82:ce:1a:2a: ae:7a:5b:a4 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZvghjYe1PEK/gZN7xRoZjcyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkMDFmNGRmZmQ2ZmJhNjZjZGY4YzM3NGM5YjBmMDQ3NTUy NzA1ZGQwHhcNMjYwMTIxMTIyNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTc2YTY2YzhmZTJkNGZhYmQ1OWY0OTdjZDNjODljNzAzNmE1ZDNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvLWJRc7bUCu7C1J3m1BQ0dR/zR6 UueZcT23WCmIxy8B3cff44BiPGbFYa2nyYMiOjBYp3wWubSm21CMo4swtKcPyN1r 4sEhD0AFRz1rd+wHEnFSiRuqNc6NNgNPZzAXyeTPTeEQLUKkdochaKWwiYzATDUk KLcO2l9MAZY2Al7HScFVh87ubcg/BSjq5Oz5eINC/Zvf4SxMdi/OYXf1R8gIfqIX 7db5Vt1iLOjUtlpMYvuykrKKw+qhIHTTY8xvullbA241xhV4XGXTVTImT0kSkevf GjtQZpWAi8LQ5ama64+I3+mMcbDeQIrcwGE7lutdnawxXwdqJpkRa1AgHwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFI52pmyP4tT6vVn0l808iccDal08MB8GA1UdIwQY MBaAFB0B9N/9b7pmzfjDdMmw8EdVJwXdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFFIMDNfMXZ1bWJOLU1OMHliRHdSMVVuQmQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9iODAzODQtZjJmZS00NDU2LTljYWUt ZmU0YTAyY2FlZjdmLzEvam5hbWJJX2kxUHE5V2ZTWHpUeUp4d05xWFR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9iODAzODQtZjJmZS00NDU2LTljYWUtZmU0YTAyY2FlZjdm LzEvSFFIMDNfMXZ1bWJOLU1OMHliRHdSMVVuQmQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAVjakAwQA wWypAwQAwqS1AwQA1f6rAwQA1f6yAwQA1f65MA0GCSqGSIb3DQEBCwUAA4IBAQCT 89FFEqdtNLrB00p/eFQGoSO1JNuNWsjgBlFdNGIkoY+Wrxq0ox0doTaG19YoDei8 wCP12Z+/3HL3PVxcpGy8j0/ggdxwzRtEUiDsjG2Slov1wQEHCNrUIFwQ7J3K1whn vV4C8vRdf322V8qEBeFXK/69H9vdNd7Or7e43L/0DkkneP4knxIDNqDmREZ3+xXt E9qQp5vjJ9P5stZyaavx4R6HRimq+IXcEIMP9J/R5GNwgA+YPQwWs17nZU37uh4/ +HWYXJQEHyxC2yJfrg8abWyGdOidmGrQ5hduxfhhYx8HwmJvdc0VFl9FET+4Q3Cr 4t6Tr36HhYLOGiqueluk -----END CERTIFICATE-----Generated at Fri Feb 6 13:06:32 2026 by rpki-client