This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/HeIDI7yWmckcG1zV0KhzrSK8Vmc.roa File: HeIDI7yWmckcG1zV0KhzrSK8Vmc.roa (raw, json) Hash identifier: GFNEMZ7WA1uMS1R9uNab5giImHYRdz7pCsvuE9ixotI= Subject key identifier: 1D:E2:03:23:BC:96:99:C9:1C:1B:5C:D5:D0:A8:73:AD:22:BC:56:67 Certificate issuer: /CN=b862b85a1d2c51d99069ca3a5aff52ecc6a9aab4 Certificate serial: 019B7EA730870DC62AA7C96FCB1389134455 Authority key identifier: B8:62:B8:5A:1D:2C:51:D9:90:69:CA:3A:5A:FF:52:EC:C6:A9:AA:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/HeIDI7yWmckcG1zV0KhzrSK8Vmc.roa Signing time: Fri 02 Jan 2026 12:20:44 +0000 ROA not before: Fri 02 Jan 2026 12:20:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29404 IP address blocks: 217.73.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:30:87:0d:c6:2a:a7:c9:6f:cb:13:89:13:44:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b862b85a1d2c51d99069ca3a5aff52ecc6a9aab4 Validity Not Before: Jan 2 12:20:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1de20323bc9699c91c1b5cd5d0a873ad22bc5667 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:d8:8e:b2:35:37:99:94:12:39:ca:f0:d6:c2: 1d:40:87:e4:ac:69:8d:ed:00:c8:6f:15:4e:93:19: 04:57:1f:7b:53:fa:7f:bf:26:8b:e5:2a:2f:1f:89: ab:f0:1e:73:ac:d8:1e:3d:30:34:da:5e:a2:68:53: d7:59:6c:95:ca:bd:c0:bd:24:6b:6f:b7:3c:3d:b3: 41:6b:4c:9f:66:75:3b:bd:ff:67:46:15:22:72:8c: 7f:01:7e:f6:1c:d2:50:c9:78:21:bd:64:ac:39:14: 99:c3:9a:e7:1d:ee:10:61:c0:22:9c:aa:25:a0:09: eb:d5:0b:ea:f0:63:08:e9:89:06:79:43:18:74:be: df:45:be:43:80:f6:38:91:87:dd:33:e7:b2:06:8e: ff:99:98:55:c0:ad:10:07:a6:ff:7c:96:a5:39:86: 46:d5:8d:ea:22:8f:4b:76:ea:98:72:a4:62:e4:b2: 57:9f:2d:07:a2:a6:13:54:72:ba:0d:00:94:17:84: 8b:ee:49:c6:fc:69:b8:2a:66:de:ca:38:aa:30:03: 73:68:57:bc:0b:ff:6d:a6:5b:f1:71:03:35:ff:dd: c3:93:3d:2b:3e:c7:4c:25:86:17:0e:bb:aa:c0:a3: c1:7a:3d:4e:d6:ce:b7:00:b2:1d:16:aa:47:90:9f: df:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:E2:03:23:BC:96:99:C9:1C:1B:5C:D5:D0:A8:73:AD:22:BC:56:67 X509v3 Authority Key Identifier: keyid:B8:62:B8:5A:1D:2C:51:D9:90:69:CA:3A:5A:FF:52:EC:C6:A9:AA:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/HeIDI7yWmckcG1zV0KhzrSK8Vmc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.73.144.0/22 Signature Algorithm: sha256WithRSAEncryption 13:e7:5c:75:3d:20:04:a9:ad:ad:c7:cc:42:09:5b:ef:d7:80: d5:06:02:cb:62:08:ab:fe:c2:3f:a3:a9:70:4e:f6:3c:94:1e: 5e:7d:4c:ee:21:94:fb:dd:db:34:c7:36:c6:11:62:9a:49:15: 84:b5:8f:42:39:1b:24:f4:8d:4e:47:a4:8c:0a:05:6f:27:1a: d3:a0:a2:de:38:25:60:e5:8e:c9:4a:03:1c:a6:ab:6f:ba:7c: 06:dd:74:70:ad:bf:bf:37:e6:c5:55:ac:cd:78:3a:5a:89:4f: ef:bf:7d:58:03:c6:23:1b:0b:e1:03:91:8d:39:d7:c5:90:52: c0:ce:09:a9:5b:77:c0:4f:94:f3:e6:bf:c5:4c:7d:91:83:ae: 56:d3:07:a7:df:3f:1c:60:f7:8c:02:02:e0:66:8a:f9:8e:cf: e4:e2:fd:36:17:54:aa:6c:bf:a7:0e:41:97:5d:37:d9:4b:04: 38:1b:2c:df:86:32:f6:0d:02:30:b6:4a:9c:fb:c2:42:88:a2: ff:48:2f:5d:f2:04:69:16:92:b0:89:2e:74:73:e9:bb:6e:97: 63:48:ac:bf:08:a8:e8:50:32:28:cf:80:dd:d2:04:fa:eb:2b: f4:f5:b0:95:12:e4:98:11:76:12:21:44:e4:92:a9:e5:ce:b3: 84:50:98:4f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pzCHDcYqp8lvyxOJE0RVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4NjJiODVhMWQyYzUxZDk5MDY5Y2EzYTVhZmY1MmVjYzZh OWFhYjQwHhcNMjYwMTAyMTIyMDQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZGUyMDMyM2JjOTY5OWM5MWMxYjVjZDVkMGE4NzNhZDIyYmM1NjY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3NiOsjU3mZQSOcrw1sIdQIfkrGmN 7QDIbxVOkxkEVx97U/p/vyaL5SovH4mr8B5zrNgePTA02l6iaFPXWWyVyr3AvSRr b7c8PbNBa0yfZnU7vf9nRhUicox/AX72HNJQyXghvWSsORSZw5rnHe4QYcAinKol oAnr1Qvq8GMI6YkGeUMYdL7fRb5DgPY4kYfdM+eyBo7/mZhVwK0QB6b/fJalOYZG 1Y3qIo9LduqYcqRi5LJXny0HoqYTVHK6DQCUF4SL7knG/Gm4KmbeyjiqMANzaFe8 C/9tplvxcQM1/93Dkz0rPsdMJYYXDruqwKPBej1O1s63ALIdFqpHkJ/fYQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB3iAyO8lpnJHBtc1dCoc60ivFZnMB8GA1UdIwQY MBaAFLhiuFodLFHZkGnKOlr/UuzGqaq0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUdLNFdoMHNVZG1RYWNvNld2OVM3TWFwcXJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9jYjIyMGYtMWEzYS00Y2JhLTgyY2Yt Mjc4ZmQ0NzVmM2ZiLzEvSGVJREk3eVdtY2tjRzF6VjBLaHpyU0s4Vm1jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9jYjIyMGYtMWEzYS00Y2JhLTgyY2YtMjc4ZmQ0NzVmM2Zi LzEvdUdLNFdoMHNVZG1RYWNvNld2OVM3TWFwcXJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2UmQMA0G CSqGSIb3DQEBCwUAA4IBAQAT51x1PSAEqa2tx8xCCVvv14DVBgLLYgir/sI/o6lw TvY8lB5efUzuIZT73ds0xzbGEWKaSRWEtY9CORsk9I1OR6SMCgVvJxrToKLeOCVg 5Y7JSgMcpqtvunwG3XRwrb+/N+bFVazNeDpaiU/vv31YA8YjGwvhA5GNOdfFkFLA zgmpW3fAT5Tz5r/FTH2Rg65W0wen3z8cYPeMAgLgZor5js/k4v02F1SqbL+nDkGX XTfZSwQ4GyzfhjL2DQIwtkqc+8JCiKL/SC9d8gRpFpKwiS50c+m7bpdjSKy/CKjo UDIoz4Dd0gT66yv09bCVEuSYEXYSIUTkkqnlzrOEUJhP -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:16 2026 by rpki-client