This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/HEYOxnvlLCOWsnSS_6it9qLhNIs.roa File: HEYOxnvlLCOWsnSS_6it9qLhNIs.roa (raw, json) Hash identifier: 6D1EaOUZTiXuJWqZZr2E8iZjtev1Lso+FFHwbrAgIes= Subject key identifier: 1C:46:0E:C6:7B:E5:2C:23:96:B2:74:92:FF:A8:AD:F6:A2:E1:34:8B Certificate issuer: /CN=d5e6733fa239c5fb0c438c82f7c230f55d478cb1 Certificate serial: 019B7AC95998D374B338E252355E6BEA7893 Authority key identifier: D5:E6:73:3F:A2:39:C5:FB:0C:43:8C:82:F7:C2:30:F5:5D:47:8C:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/HEYOxnvlLCOWsnSS_6it9qLhNIs.roa Signing time: Thu 01 Jan 2026 18:19:34 +0000 ROA not before: Thu 01 Jan 2026 18:19:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212853 IP address blocks: 45.81.252.0/24 maxlen: 24 45.81.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 11:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:59:98:d3:74:b3:38:e2:52:35:5e:6b:ea:78:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5e6733fa239c5fb0c438c82f7c230f55d478cb1 Validity Not Before: Jan 1 18:19:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1c460ec67be52c2396b27492ffa8adf6a2e1348b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:cb:fa:86:3e:7a:38:14:a4:49:a6:5b:8f:ac: 18:6e:1c:cb:f7:93:18:ae:e0:c8:4a:6c:c6:07:82: 59:e6:9b:0f:08:87:56:9d:66:ad:a9:d3:93:b4:73: cf:e2:20:af:b6:66:1a:76:00:6d:23:9b:f7:af:dd: e0:ac:e6:86:56:89:c5:8e:dd:b2:a2:7a:14:71:88: 2c:20:7e:2f:03:15:23:eb:50:53:cf:df:34:82:21: 17:a8:64:dc:65:ba:22:cb:08:e0:24:77:98:fa:04: 7e:90:99:6d:62:50:61:2b:34:c0:4b:34:af:b2:e8: 18:dc:28:b9:2f:47:50:45:cb:da:0f:72:40:f4:cc: b6:79:e9:18:7a:a1:ab:b4:0c:5a:51:f2:d4:52:69: 11:b5:25:80:a1:bd:79:4a:43:6a:67:18:39:51:5a: 0b:3b:da:1a:62:72:30:43:99:91:1f:ce:c4:69:8d: 9b:5b:46:c0:97:8b:e8:41:48:75:7a:f3:20:67:4f: e6:10:6b:b7:5c:7b:b3:22:61:aa:50:5f:c3:e8:f1: b3:cf:65:31:69:3b:74:58:e8:c3:c6:aa:57:38:b6: f1:6d:bd:06:fd:80:6f:81:4d:d5:f8:db:d7:8b:be: 01:ac:31:60:35:e1:4a:13:18:28:f1:f6:e1:2a:ba: 38:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:46:0E:C6:7B:E5:2C:23:96:B2:74:92:FF:A8:AD:F6:A2:E1:34:8B X509v3 Authority Key Identifier: keyid:D5:E6:73:3F:A2:39:C5:FB:0C:43:8C:82:F7:C2:30:F5:5D:47:8C:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/HEYOxnvlLCOWsnSS_6it9qLhNIs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.81.252.0/24 45.81.254.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:f3:f7:99:ac:0a:e7:8b:c9:a0:54:7d:1f:97:1d:61:9b:9a: d5:39:b9:86:d9:65:04:e1:d5:93:75:c5:a1:6f:df:e3:c0:9c: 32:e6:ce:bd:e4:92:57:93:92:2b:5e:6b:21:1b:48:c6:6c:ae: ab:a2:63:99:83:63:bb:9b:f2:47:d1:fa:27:76:cc:6e:8c:da: 4a:1e:cd:c6:b2:e2:3f:fb:40:67:7e:32:7d:77:04:f2:a1:79: 5f:42:c3:25:cd:cf:c2:8c:87:11:26:aa:f0:3d:34:e8:85:cc: 5d:ee:7e:25:14:e8:6b:ad:65:9e:88:8d:63:7f:3c:f1:cd:e5: 5d:dc:a6:59:9b:05:f6:43:68:b4:01:5e:2f:63:2e:bc:c5:9b: 18:56:f5:2c:07:74:8c:27:be:ab:f1:72:e5:5d:e7:c7:e3:f3: 30:a0:a4:0a:57:1f:2c:21:31:74:41:75:d2:25:cc:4f:ce:7b: 4f:e2:db:0a:5f:a1:39:a7:32:dd:8b:b7:74:be:b2:d5:65:67: 19:a3:d5:eb:54:6e:43:bc:74:1a:e2:23:50:aa:11:40:c0:4e: d4:74:ad:97:98:cd:7f:02:9d:76:51:3d:38:2e:0c:b2:c3:a7: 5f:ff:b6:0c:64:4c:a4:6b:82:a6:0a:57:6d:c1:3b:92:f5:6f: 92:a2:2d:7e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6yVmY03SzOOJSNV5r6niTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1ZTY3MzNmYTIzOWM1ZmIwYzQzOGM4MmY3YzIzMGY1NWQ0 NzhjYjEwHhcNMjYwMTAxMTgxOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzQ2MGVjNjdiZTUyYzIzOTZiMjc0OTJmZmE4YWRmNmEyZTEzNDhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3sv6hj56OBSkSaZbj6wYbhzL95MY ruDISmzGB4JZ5psPCIdWnWatqdOTtHPP4iCvtmYadgBtI5v3r93grOaGVonFjt2y onoUcYgsIH4vAxUj61BTz980giEXqGTcZboiywjgJHeY+gR+kJltYlBhKzTASzSv sugY3Ci5L0dQRcvaD3JA9My2eekYeqGrtAxaUfLUUmkRtSWAob15SkNqZxg5UVoL O9oaYnIwQ5mRH87EaY2bW0bAl4voQUh1evMgZ0/mEGu3XHuzImGqUF/D6PGzz2Ux aTt0WOjDxqpXOLbxbb0G/YBvgU3V+NvXi74BrDFgNeFKExgo8fbhKro46wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBxGDsZ75SwjlrJ0kv+orfai4TSLMB8GA1UdIwQY MBaAFNXmcz+iOcX7DEOMgvfCMPVdR4yxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWVaelA2STV4ZnNNUTR5Qzk4SXc5VjFIakxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8yNWM5NWUtN2YyNy00ZDY5LTg1NmQt YTM4YjY3OTVmYjI0LzEvSEVZT3hudmxMQ09Xc25TU182aXQ5cUxoTklzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS8yNWM5NWUtN2YyNy00ZDY5LTg1NmQtYTM4YjY3OTVmYjI0 LzEvMWVaelA2STV4ZnNNUTR5Qzk4SXc5VjFIakxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALVH8AwQA LVH+MA0GCSqGSIb3DQEBCwUAA4IBAQAr8/eZrArni8mgVH0flx1hm5rVObmG2WUE 4dWTdcWhb9/jwJwy5s695JJXk5IrXmshG0jGbK6romOZg2O7m/JH0fondsxujNpK Hs3GsuI/+0BnfjJ9dwTyoXlfQsMlzc/CjIcRJqrwPTTohcxd7n4lFOhrrWWeiI1j fzzxzeVd3KZZmwX2Q2i0AV4vYy68xZsYVvUsB3SMJ76r8XLlXefH4/MwoKQKVx8s ITF0QXXSJcxPzntP4tsKX6E5pzLdi7d0vrLVZWcZo9XrVG5DvHQa4iNQqhFAwE7U dK2XmM1/Ap12UT04Lgyyw6df/7YMZEyka4KmCldtwTuS9W+Soi1+ -----END CERTIFICATE-----Generated at Wed Jan 21 20:36:39 2026 by rpki-client