This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/HM3veogcFYi0WJB7lr909iQ8ZfQ.roa File: HM3veogcFYi0WJB7lr909iQ8ZfQ.roa (raw, json) Hash identifier: rEWeHfmczSgGJR8/ER5dg8E/KF7D8W9GBFoejJSi06I= Subject key identifier: 1C:CD:EF:7A:88:1C:15:88:B4:58:90:7B:96:BF:74:F6:24:3C:65:F4 Certificate issuer: /CN=1bf14e8d0b3defb0304270130d1147ae0dd92d8b Certificate serial: 019B7AC7A3D20BA1B6A98B4BB79E80E9E054 Authority key identifier: 1B:F1:4E:8D:0B:3D:EF:B0:30:42:70:13:0D:11:47:AE:0D:D9:2D:8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/HM3veogcFYi0WJB7lr909iQ8ZfQ.roa Signing time: Thu 01 Jan 2026 18:17:42 +0000 ROA not before: Thu 01 Jan 2026 18:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33846 IP address blocks: 141.91.0.0/16 maxlen: 24 185.223.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:a3:d2:0b:a1:b6:a9:8b:4b:b7:9e:80:e9:e0:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bf14e8d0b3defb0304270130d1147ae0dd92d8b Validity Not Before: Jan 1 18:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1ccdef7a881c1588b458907b96bf74f6243c65f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c2:a1:a3:db:94:a6:8a:12:46:24:fb:13:99: 60:10:97:08:da:73:a6:41:2e:bb:ce:65:d3:d5:24: 27:61:1d:9b:82:04:b5:d3:c8:3e:dd:2e:bb:f4:a4: 6e:c6:34:ac:7d:19:50:97:1b:98:e0:9f:b4:79:04: af:57:d5:89:e0:e9:23:e2:31:71:b8:0e:11:3a:48: 84:44:16:68:a8:37:f0:f0:11:63:de:39:79:52:bb: e2:d1:0d:54:29:da:04:d7:32:42:ca:a4:73:20:ae: ec:a8:9c:12:f0:55:50:62:1c:91:73:d5:f2:d8:5d: 56:39:49:dd:a6:3d:35:4d:85:6f:87:83:02:f1:23: a8:c9:d6:02:c2:e9:19:ae:af:8f:86:6f:5c:e2:3b: 1d:20:60:f9:77:36:79:b8:28:b0:92:69:ba:53:17: 20:66:69:37:93:70:d2:48:83:ae:2a:df:4c:72:ee: 65:23:b6:d9:63:83:75:6f:3c:4e:f4:1b:a3:d8:80: ae:75:fd:05:fa:e0:7f:62:63:90:3a:13:a2:c2:5c: 78:67:5b:6f:b7:f2:e0:84:5e:07:5f:f7:d4:d4:f8: 0b:f7:3d:5c:7e:19:23:da:62:2a:e2:72:ee:25:c4: c4:62:b7:28:c1:63:a3:65:8f:fc:e5:6a:42:4d:4c: 04:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:CD:EF:7A:88:1C:15:88:B4:58:90:7B:96:BF:74:F6:24:3C:65:F4 X509v3 Authority Key Identifier: keyid:1B:F1:4E:8D:0B:3D:EF:B0:30:42:70:13:0D:11:47:AE:0D:D9:2D:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/HM3veogcFYi0WJB7lr909iQ8ZfQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.91.0.0/16 185.223.104.0/22 Signature Algorithm: sha256WithRSAEncryption 39:9f:15:a9:5e:f0:f1:7b:9e:f6:6a:98:c8:0c:e2:ab:60:78: 6e:78:1a:24:24:99:65:b8:82:66:e7:e8:60:38:51:e7:95:b1: 5a:d9:08:cd:a2:91:50:ac:0e:ab:15:69:33:9e:3b:e0:93:63: 6c:b3:76:b2:39:b2:35:33:3b:55:77:20:07:43:eb:7e:d5:fb: 5c:33:7c:02:c9:e8:44:63:cd:dc:5a:a8:3e:9d:bb:30:1e:72: 42:fa:84:75:69:35:f7:73:8d:96:73:5e:a4:c4:06:97:de:30: 9d:b8:6f:8e:a5:d1:40:8d:e7:32:cf:37:0d:5e:02:7e:44:7e: 6e:c4:dd:06:05:3c:71:8a:3c:83:63:86:f6:6e:65:7e:e2:e1: f7:5b:08:d5:1a:55:2d:b8:f4:b6:df:e6:a4:02:0c:14:c9:e3: 8a:1c:19:15:91:cd:3b:8c:6a:62:5e:10:dd:04:7a:cc:21:50: ce:1d:ad:d2:a4:aa:03:89:99:f6:38:f8:c1:19:82:86:6f:b5: 08:11:f1:53:d5:17:03:a7:bb:7b:8e:e6:d7:f8:4e:02:08:cf: 12:a3:72:24:57:e3:bd:35:b8:c8:16:18:4b:ae:1b:15:73:b1: f8:98:01:80:c9:cd:30:e0:32:14:d1:7f:28:2f:f2:61:39:47: 90:12:4c:04 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgISAZt6x6PSC6G2qYtLt56A6eBUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiZjE0ZThkMGIzZGVmYjAzMDQyNzAxMzBkMTE0N2FlMGRk OTJkOGIwHhcNMjYwMTAxMTgxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxY2NkZWY3YTg4MWMxNTg4YjQ1ODkwN2I5NmJmNzRmNjI0M2M2NWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMKho9uUpooSRiT7E5lgEJcI2nOm QS67zmXT1SQnYR2bggS108g+3S679KRuxjSsfRlQlxuY4J+0eQSvV9WJ4Okj4jFx uA4ROkiERBZoqDfw8BFj3jl5Urvi0Q1UKdoE1zJCyqRzIK7sqJwS8FVQYhyRc9Xy 2F1WOUndpj01TYVvh4MC8SOoydYCwukZrq+Phm9c4jsdIGD5dzZ5uCiwkmm6Uxcg Zmk3k3DSSIOuKt9Mcu5lI7bZY4N1bzxO9Buj2ICudf0F+uB/YmOQOhOiwlx4Z1tv t/LghF4HX/fU1PgL9z1cfhkj2mIq4nLuJcTEYrcowWOjZY/85WpCTUwEgQIDAQAB o4ICDjCCAgowHQYDVR0OBBYEFBzN73qIHBWItFiQe5a/dPYkPGX0MB8GA1UdIwQY MBaAFBvxTo0LPe+wMEJwEw0RR64N2S2LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR19GT2pRczk3N0F3UW5BVERSRkhyZzNaTFlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9lYWRhZmUtNmM5ZC00YWUwLTg3MzMt ODE5YTI1MzIyNWNjLzEvSE0zdmVvZ2NGWWkwV0pCN2xyOTA5aVE4WmZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9lYWRhZmUtNmM5ZC00YWUwLTg3MzMtODE5YTI1MzIyNWNj LzEvR19GT2pRczk3N0F3UW5BVERSRkhyZzNaTFlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAATALAwMAjVsDBAK5 32gwDQYJKoZIhvcNAQELBQADggEBADmfFale8PF7nvZqmMgM4qtgeG54GiQkmWW4 gmbn6GA4UeeVsVrZCM2ikVCsDqsVaTOeO+CTY2yzdrI5sjUzO1V3IAdD637V+1wz fALJ6ERjzdxaqD6duzAeckL6hHVpNfdzjZZzXqTEBpfeMJ24b46l0UCN5zLPNw1e An5Efm7E3QYFPHGKPINjhvZuZX7i4fdbCNUaVS249Lbf5qQCDBTJ44ocGRWRzTuM amJeEN0EeswhUM4drdKkqgOJmfY4+MEZgoZvtQgR8VPVFwOnu3uO5tf4TgIIzxKj ciRX4701uMgWGEuuGxVzsfiYAYDJzTDgMhTRfygv8mE5R5ASTAQ= -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:48 2026 by rpki-client