This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/HIeW7jOEPndBeoT23uEj81ZTZBg.roa File: HIeW7jOEPndBeoT23uEj81ZTZBg.roa (raw, json) Hash identifier: JJnVSxNA1ixWdqqkWmZ7PhO+qpLJouZei+s+CRfBSYA= Subject key identifier: 1C:87:96:EE:33:84:3E:77:41:7A:84:F6:DE:E1:23:F3:56:53:64:18 Certificate issuer: /CN=0d55fa2a62837db9afe4423e4c119e9499b21b43 Certificate serial: 019B78A235D62577F54E422191F846960CA2 Authority key identifier: 0D:55:FA:2A:62:83:7D:B9:AF:E4:42:3E:4C:11:9E:94:99:B2:1B:43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DVX6KmKDfbmv5EI-TBGelJmyG0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/HIeW7jOEPndBeoT23uEj81ZTZBg.roa Signing time: Thu 01 Jan 2026 08:17:35 +0000 ROA not before: Thu 01 Jan 2026 08:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215564 IP address blocks: 94.199.3.0/24 maxlen: 24 2a13:b040::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.mft rsync://rpki.ripe.net/repository/DEFAULT/DVX6KmKDfbmv5EI-TBGelJmyG0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:35:d6:25:77:f5:4e:42:21:91:f8:46:96:0c:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d55fa2a62837db9afe4423e4c119e9499b21b43 Validity Not Before: Jan 1 08:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1c8796ee33843e77417a84f6dee123f356536418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:79:13:28:e7:04:1a:cf:db:64:c7:ae:03:47: 3e:ad:3c:9d:43:25:9a:4b:06:22:cf:a5:bb:e0:3c: b2:d8:c5:de:5b:5c:0a:42:e9:df:d6:22:3e:54:fa: 0f:ba:5d:c2:5c:34:7a:91:bd:3c:73:a5:c4:88:67: 52:ce:8a:03:58:4f:1a:77:76:c5:ee:11:af:bf:37: 11:81:6c:1e:34:f8:85:01:8b:20:97:f9:30:ba:49: c8:8b:26:f3:cc:95:b7:70:4c:10:90:25:91:81:86: 1f:6b:15:f8:4c:ca:7a:34:11:2d:5a:3c:64:6c:5e: 87:49:33:2d:89:c9:53:b2:4f:cc:d3:09:d8:ec:ee: 10:b3:d6:cf:7f:65:ae:c8:24:20:78:9d:35:7b:24: 39:30:26:03:5b:b9:aa:0f:ba:e7:fe:81:2d:30:e8: 51:7a:f7:89:1c:c6:c5:82:5b:3b:37:dc:b7:c3:6c: cf:82:be:0f:c5:66:c0:a0:28:4b:e7:9f:22:7c:f7: 11:29:e0:a2:a8:c1:4a:00:11:7c:bb:ba:74:a3:ee: e6:f9:44:55:58:5f:68:0b:78:5a:29:0b:08:00:b9: bf:64:31:e5:78:e6:1f:79:35:e4:0f:2b:6d:fd:8f: 17:c7:36:10:7b:1f:0f:6a:d6:38:be:65:98:6e:9d: 3c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:87:96:EE:33:84:3E:77:41:7A:84:F6:DE:E1:23:F3:56:53:64:18 X509v3 Authority Key Identifier: keyid:0D:55:FA:2A:62:83:7D:B9:AF:E4:42:3E:4C:11:9E:94:99:B2:1B:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DVX6KmKDfbmv5EI-TBGelJmyG0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/HIeW7jOEPndBeoT23uEj81ZTZBg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.199.3.0/24 IPv6: 2a13:b040::/29 Signature Algorithm: sha256WithRSAEncryption 6d:71:a0:76:24:1e:47:af:71:17:9e:95:fa:88:63:fc:7f:a8: 15:d1:17:29:c4:cc:e2:bf:6c:56:6d:18:56:d8:52:5e:51:a5: 9b:6c:a5:9e:70:d3:3a:8a:eb:d3:84:c0:cb:a9:d2:d4:26:74: 94:92:86:90:52:43:57:5b:41:84:3a:6a:63:a5:82:d0:e4:29: d3:f7:6b:f0:ed:8b:a5:8d:f8:f6:7c:a6:34:52:51:58:9e:fd: bd:8f:82:84:45:07:7c:6a:a2:ca:c3:a4:e0:6d:09:e4:39:39: 2c:d6:46:81:35:0d:eb:74:a4:e2:4c:88:8d:ad:92:4c:e4:5c: bf:70:c8:2d:b1:99:0b:a8:90:c0:ba:79:ce:43:42:da:4b:71: b9:9b:29:23:ac:a0:c8:00:bf:4d:ac:1c:fc:49:99:1c:86:5d: 99:01:a5:31:ab:80:77:f3:34:71:ab:f5:7d:ff:66:b2:9b:9c: 6b:33:27:ee:ab:6e:91:53:97:33:e7:4d:10:d4:7d:42:e1:75: 5a:83:52:fb:f6:50:29:73:9d:fb:f5:f3:0c:fa:55:be:17:e2: 4c:5c:6a:db:95:7e:2e:20:91:e7:22:e5:2c:fe:90:9f:a1:c9: b8:51:48:8a:c6:58:e0:5e:27:90:c7:8a:7c:2e:f5:bf:04:fa: eb:6b:da:ac -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4ojXWJXf1TkIhkfhGlgyiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNTVmYTJhNjI4MzdkYjlhZmU0NDIzZTRjMTE5ZTk0OTli MjFiNDMwHhcNMjYwMTAxMDgxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzg3OTZlZTMzODQzZTc3NDE3YTg0ZjZkZWUxMjNmMzU2NTM2NDE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnkTKOcEGs/bZMeuA0c+rTydQyWa SwYiz6W74Dyy2MXeW1wKQunf1iI+VPoPul3CXDR6kb08c6XEiGdSzooDWE8ad3bF 7hGvvzcRgWweNPiFAYsgl/kwuknIiybzzJW3cEwQkCWRgYYfaxX4TMp6NBEtWjxk bF6HSTMticlTsk/M0wnY7O4Qs9bPf2WuyCQgeJ01eyQ5MCYDW7mqD7rn/oEtMOhR eveJHMbFgls7N9y3w2zPgr4PxWbAoChL558ifPcRKeCiqMFKABF8u7p0o+7m+URV WF9oC3haKQsIALm/ZDHleOYfeTXkDytt/Y8XxzYQex8PatY4vmWYbp08HQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFByHlu4zhD53QXqE9t7hI/NWU2QYMB8GA1UdIwQY MBaAFA1V+ipig325r+RCPkwRnpSZshtDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFZYNkttS0RmYm12NUVJLVRCR2VsSm15RzBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9lNjk5YTMtNGQzNy00OTFhLWI0NjMt ZWYzNmEzMjE3NDlhLzEvSEllVzdqT0VQbmRCZW9UMjN1RWo4MVpUWkJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC9lNjk5YTMtNGQzNy00OTFhLWI0NjMtZWYzNmEzMjE3NDlh LzEvRFZYNkttS0RmYm12NUVJLVRCR2VsSm15RzBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAXscDMA0E AgACMAcDBQMqE7BAMA0GCSqGSIb3DQEBCwUAA4IBAQBtcaB2JB5Hr3EXnpX6iGP8 f6gV0RcpxMziv2xWbRhW2FJeUaWbbKWecNM6iuvThMDLqdLUJnSUkoaQUkNXW0GE OmpjpYLQ5CnT92vw7Yuljfj2fKY0UlFYnv29j4KERQd8aqLKw6TgbQnkOTks1kaB NQ3rdKTiTIiNrZJM5Fy/cMgtsZkLqJDAunnOQ0LaS3G5mykjrKDIAL9NrBz8SZkc hl2ZAaUxq4B38zRxq/V9/2aym5xrMyfuq26RU5cz500Q1H1C4XVag1L79lApc537 9fMM+lW+F+JMXGrblX4uIJHnIuUs/pCfocm4UUiKxljgXieQx4p8LvW/BPrra9qs -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:42 2026 by rpki-client