This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/HlDrFhE-0fmgWal__tHIEXBrV6Y.roa File: HlDrFhE-0fmgWal__tHIEXBrV6Y.roa (raw, json) Hash identifier: 0n+iwbGZ5id6XfahOr8AcTWOIpNGaPq/75qxuHkAIik= Subject key identifier: 1E:50:EB:16:11:3E:D1:F9:A0:59:A9:7F:FE:D1:C8:11:70:6B:57:A6 Certificate issuer: /CN=3edf7b2d68ba76a0bd1ba7e9d29fac5852316b9c Certificate serial: 019B78A3092C54F49A710D1A498E6ABD962E Authority key identifier: 3E:DF:7B:2D:68:BA:76:A0:BD:1B:A7:E9:D2:9F:AC:58:52:31:6B:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pt97LWi6dqC9G6fp0p-sWFIxa5w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/HlDrFhE-0fmgWal__tHIEXBrV6Y.roa Signing time: Thu 01 Jan 2026 08:18:29 +0000 ROA not before: Thu 01 Jan 2026 08:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51420 IP address blocks: 109.164.64.0/19 maxlen: 19 109.164.64.0/20 maxlen: 20 109.164.80.0/20 maxlen: 20 109.164.83.0/24 maxlen: 24 109.164.84.0/24 maxlen: 24 109.164.85.0/24 maxlen: 24 109.164.87.0/24 maxlen: 24 109.164.88.0/24 maxlen: 24 109.164.89.0/24 maxlen: 24 109.164.90.0/24 maxlen: 24 109.164.91.0/24 maxlen: 24 109.164.92.0/24 maxlen: 24 109.164.93.0/24 maxlen: 24 109.164.94.0/24 maxlen: 24 109.164.95.0/24 maxlen: 24 109.164.96.0/24 maxlen: 24 109.164.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/Pt97LWi6dqC9G6fp0p-sWFIxa5w.crl rsync://rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/Pt97LWi6dqC9G6fp0p-sWFIxa5w.mft rsync://rpki.ripe.net/repository/DEFAULT/Pt97LWi6dqC9G6fp0p-sWFIxa5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:09:2c:54:f4:9a:71:0d:1a:49:8e:6a:bd:96:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3edf7b2d68ba76a0bd1ba7e9d29fac5852316b9c Validity Not Before: Jan 1 08:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1e50eb16113ed1f9a059a97ffed1c811706b57a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:3a:db:58:a4:8b:4d:f0:3f:92:4b:d6:8f:1d: 5a:76:8f:65:91:a0:62:25:5e:3b:8a:7a:44:ca:1f: 90:9a:06:ef:45:62:b4:9c:73:8d:9b:1b:62:1d:18: da:a5:86:ec:0f:01:04:51:4c:97:65:28:97:ae:60: a7:5e:1a:c5:c2:b0:23:ee:d1:2d:10:bb:82:d4:f0: 52:73:64:db:b2:a5:fd:27:ce:2d:fb:05:31:1d:68: 3b:38:9d:56:8b:29:22:13:0c:30:fb:c9:74:20:32: 15:3a:bd:15:0b:2e:c9:f1:78:b3:f0:3f:0d:1e:df: a3:c1:b5:31:b3:8c:88:9b:df:fa:42:34:65:bd:6a: a3:63:b6:f1:07:3e:05:35:a3:c1:11:32:5d:7b:52: 64:73:4c:ab:1d:73:f3:da:a6:eb:ed:ac:d7:d8:a8: 27:b1:5a:e7:1b:a7:30:59:c7:aa:c3:fa:f2:f1:8b: 37:81:cb:c6:f0:0f:fe:b1:d9:df:86:cd:48:c5:4b: 67:6c:ab:8e:3d:59:e9:7e:75:e1:29:03:1c:4d:f9: b4:0e:51:5c:95:63:b8:97:77:67:01:cf:30:b4:81: b6:80:8b:37:17:69:57:56:4e:6e:8b:db:03:22:80: 8c:4d:b0:18:9f:b7:c9:1d:c9:5c:fb:b3:45:d1:12: 80:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:50:EB:16:11:3E:D1:F9:A0:59:A9:7F:FE:D1:C8:11:70:6B:57:A6 X509v3 Authority Key Identifier: keyid:3E:DF:7B:2D:68:BA:76:A0:BD:1B:A7:E9:D2:9F:AC:58:52:31:6B:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pt97LWi6dqC9G6fp0p-sWFIxa5w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/HlDrFhE-0fmgWal__tHIEXBrV6Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/Pt97LWi6dqC9G6fp0p-sWFIxa5w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.164.64.0-109.164.97.255 Signature Algorithm: sha256WithRSAEncryption 09:0e:05:6e:ab:e9:b6:d9:3b:8f:f0:d2:a9:8d:db:e4:1c:43: ad:ab:7d:96:23:2b:6b:72:f9:3f:55:a2:06:59:7d:6b:8a:a1: 19:29:77:b7:4a:ce:90:0d:8c:d9:0a:15:b5:6c:f7:7e:60:44: c5:9d:ea:57:1f:18:f3:03:65:ae:7f:3b:65:9e:11:6d:25:72: 12:d5:1f:ee:af:78:9d:94:33:23:75:e6:ca:3c:8e:13:b5:71: 2d:6f:6f:25:b8:91:0f:0b:3a:e5:a0:f3:51:3b:c3:df:be:7b: a0:25:af:f4:aa:3c:21:f7:2d:24:42:08:ca:03:f1:29:f3:71: e7:f5:35:9a:1a:3b:f2:40:9d:6f:0a:2c:de:49:00:b6:ac:57: 32:d0:3f:84:33:a1:77:6c:91:67:1b:c8:24:f5:7a:13:7d:44: 3a:5a:21:4b:1d:50:ff:9e:e0:f5:d3:f4:9c:09:74:86:da:86: 22:ae:f7:82:0c:d9:f7:43:54:fc:75:3b:71:99:7f:87:bf:5e: 4f:34:9a:95:c6:ae:95:4d:32:ea:39:7b:7d:d4:50:8e:42:86: cc:04:27:9e:a2:1c:95:f8:d3:80:9d:46:df:fd:fe:5d:bb:e8: 53:34:b0:31:9d:44:3d:e6:24:4c:05:a6:1a:56:7e:07:49:3e: 1a:a0:a7:37 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt4owksVPSacQ0aSY5qvZYuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlZGY3YjJkNjhiYTc2YTBiZDFiYTdlOWQyOWZhYzU4NTIz MTZiOWMwHhcNMjYwMTAxMDgxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZTUwZWIxNjExM2VkMWY5YTA1OWE5N2ZmZWQxYzgxMTcwNmI1N2E2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzrbWKSLTfA/kkvWjx1ado9lkaBi JV47inpEyh+QmgbvRWK0nHONmxtiHRjapYbsDwEEUUyXZSiXrmCnXhrFwrAj7tEt ELuC1PBSc2TbsqX9J84t+wUxHWg7OJ1WiykiEwww+8l0IDIVOr0VCy7J8Xiz8D8N Ht+jwbUxs4yIm9/6QjRlvWqjY7bxBz4FNaPBETJde1Jkc0yrHXPz2qbr7azX2Kgn sVrnG6cwWceqw/ry8Ys3gcvG8A/+sdnfhs1IxUtnbKuOPVnpfnXhKQMcTfm0DlFc lWO4l3dnAc8wtIG2gIs3F2lXVk5ui9sDIoCMTbAYn7fJHclc+7NF0RKARQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFB5Q6xYRPtH5oFmpf/7RyBFwa1emMB8GA1UdIwQY MBaAFD7fey1ounagvRun6dKfrFhSMWucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHQ5N0xXaTZkcUM5RzZmcDBwLXNXRkl4YTV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9mZTlkMWQtNGFkZS00NjMwLThhYmEt ZjhmMGM3ZDY2MmU3LzEvSGxEckZoRS0wZm1nV2FsX190SElFWEJyVjZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9mZTlkMWQtNGFkZS00NjMwLThhYmEtZjhmMGM3ZDY2MmU3 LzEvUHQ5N0xXaTZkcUM5RzZmcDBwLXNXRkl4YTV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAZtpEAD BAFtpGAwDQYJKoZIhvcNAQELBQADggEBAAkOBW6r6bbZO4/w0qmN2+QcQ62rfZYj K2ty+T9VogZZfWuKoRkpd7dKzpANjNkKFbVs935gRMWd6lcfGPMDZa5/O2WeEW0l chLVH+6veJ2UMyN15so8jhO1cS1vbyW4kQ8LOuWg81E7w9++e6Alr/SqPCH3LSRC CMoD8Snzcef1NZoaO/JAnW8KLN5JALasVzLQP4QzoXdskWcbyCT1ehN9RDpaIUsd UP+e4PXT9JwJdIbahiKu94IM2fdDVPx1O3GZf4e/Xk80mpXGrpVNMuo5e33UUI5C hswEJ56iHJX404CdRt/9/l276FM0sDGdRD3mJEwFphpWfgdJPhqgpzc= -----END CERTIFICATE-----Generated at Mon Feb 9 18:44:30 2026 by rpki-client