This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/a2eb5a-0962-45bc-a637-f0104ddf2811/1/HEEa4ysM1XA22RFVA0tNIjEfMiA.roa File: HEEa4ysM1XA22RFVA0tNIjEfMiA.roa (raw, json) Hash identifier: x2/fb4V3j3cZr5wvHzV5+fYI9k+vTTuH/CrmPNm7S9g= Subject key identifier: 1C:41:1A:E3:2B:0C:D5:70:36:D9:11:55:03:4B:4D:22:31:1F:32:20 Certificate issuer: /CN=3adfd48a97720cd854029ddb266c51f91f07670d Certificate serial: 019B78A2C692D05AD66A790D3EFA26AA261C Authority key identifier: 3A:DF:D4:8A:97:72:0C:D8:54:02:9D:DB:26:6C:51:F9:1F:07:67:0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ot_UipdyDNhUAp3bJmxR-R8HZw0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/a2eb5a-0962-45bc-a637-f0104ddf2811/1/HEEa4ysM1XA22RFVA0tNIjEfMiA.roa Signing time: Thu 01 Jan 2026 08:18:12 +0000 ROA not before: Thu 01 Jan 2026 08:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51410 IP address blocks: 91.217.137.0/24 maxlen: 24 2001:67c:13e4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/a2eb5a-0962-45bc-a637-f0104ddf2811/1/Ot_UipdyDNhUAp3bJmxR-R8HZw0.crl rsync://rpki.ripe.net/repository/DEFAULT/73/a2eb5a-0962-45bc-a637-f0104ddf2811/1/Ot_UipdyDNhUAp3bJmxR-R8HZw0.mft rsync://rpki.ripe.net/repository/DEFAULT/Ot_UipdyDNhUAp3bJmxR-R8HZw0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:c6:92:d0:5a:d6:6a:79:0d:3e:fa:26:aa:26:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3adfd48a97720cd854029ddb266c51f91f07670d Validity Not Before: Jan 1 08:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1c411ae32b0cd57036d91155034b4d22311f3220 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:79:83:68:3c:ad:40:28:d0:44:98:d1:c7:c8: 83:ea:54:b4:fe:47:c4:5a:91:5b:99:dc:de:c0:5e: 5d:0d:29:7e:3e:eb:ff:4a:e3:2c:60:36:48:6f:b2: 58:60:bd:27:c7:1c:18:92:45:73:f5:e9:ee:5d:95: 91:a9:47:53:9c:f3:17:01:17:a8:c9:7f:22:70:08: 81:ec:4e:35:f5:36:7d:8c:73:36:5e:39:ef:9e:ea: 4e:c9:2f:80:63:13:28:4c:6a:d5:fb:9c:b6:26:0d: 48:dd:6a:be:80:fc:ab:c0:17:6b:54:02:4c:8b:dc: e5:e1:fa:d8:f2:a7:21:f0:42:24:03:4a:0c:5d:a1: 28:ff:93:47:3d:44:67:5a:eb:ad:c7:9f:3a:75:8e: d1:fb:73:0b:1e:84:b0:86:5f:8f:92:5b:4d:31:11: 16:be:95:0c:b9:d9:e5:ac:13:3e:92:e7:e0:ae:3d: 4d:1f:0d:6d:bb:77:65:b7:94:f0:1d:c2:e9:87:59: 30:1c:27:d5:09:78:3c:67:19:87:42:93:4d:11:c0: 9f:e3:73:a8:04:bf:a5:46:f7:35:46:29:0a:ed:cf: 41:65:c4:0e:67:c1:c9:48:88:35:90:20:0a:e8:6c: cd:b4:29:fc:fa:25:9b:7e:bc:16:e0:f5:cf:a0:2f: f6:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:41:1A:E3:2B:0C:D5:70:36:D9:11:55:03:4B:4D:22:31:1F:32:20 X509v3 Authority Key Identifier: keyid:3A:DF:D4:8A:97:72:0C:D8:54:02:9D:DB:26:6C:51:F9:1F:07:67:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot_UipdyDNhUAp3bJmxR-R8HZw0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/a2eb5a-0962-45bc-a637-f0104ddf2811/1/HEEa4ysM1XA22RFVA0tNIjEfMiA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/a2eb5a-0962-45bc-a637-f0104ddf2811/1/Ot_UipdyDNhUAp3bJmxR-R8HZw0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.217.137.0/24 IPv6: 2001:67c:13e4::/48 Signature Algorithm: sha256WithRSAEncryption 51:43:c7:d7:8a:5b:ac:c6:e6:3f:6f:74:ca:80:3f:13:bd:d3: 6d:e0:64:62:1b:98:32:67:c8:31:38:5a:d3:97:5c:2c:3d:be: 5d:97:aa:e4:23:4c:4b:13:9d:37:6b:89:1a:dd:2b:bc:08:ac: d5:96:06:4e:a1:c6:50:5e:63:bc:4d:89:3a:2b:86:90:ef:00: e0:78:6f:9d:50:a5:8c:59:9a:26:10:4d:e0:5e:8e:6e:58:1f: fc:27:9b:63:05:05:2f:b0:0f:b9:ba:79:be:a1:e5:36:61:ce: bc:28:67:ee:3a:fe:e8:7c:5d:c9:4b:da:2f:e9:08:e9:4f:a2: 1f:75:21:f8:ab:ad:a5:cb:ca:6d:56:93:18:c0:82:fb:66:7f: d6:ce:e4:11:95:8d:be:78:cf:7e:38:68:40:60:cd:1f:37:aa: ef:f5:6e:70:a6:b2:df:26:2f:eb:b6:7e:fe:d2:c9:ab:cc:b9: 3a:cf:1d:9d:08:79:91:db:d5:ed:3c:7a:61:11:e5:b1:88:de: af:03:0a:a0:60:71:a4:c9:dc:36:1a:25:de:d2:0d:c6:ec:cc: 19:d9:66:6b:08:20:58:e8:5a:05:f9:21:19:d1:d2:bd:30:38: 01:d4:6b:d9:cb:fd:a7:8a:46:2e:de:48:fe:a7:97:99:7f:60: ef:17:3e:86 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt4osaS0FrWankNPvomqiYcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZGZkNDhhOTc3MjBjZDg1NDAyOWRkYjI2NmM1MWY5MWYw NzY3MGQwHhcNMjYwMTAxMDgxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzQxMWFlMzJiMGNkNTcwMzZkOTExNTUwMzRiNGQyMjMxMWYzMjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnmDaDytQCjQRJjRx8iD6lS0/kfE WpFbmdzewF5dDSl+Puv/SuMsYDZIb7JYYL0nxxwYkkVz9enuXZWRqUdTnPMXAReo yX8icAiB7E419TZ9jHM2XjnvnupOyS+AYxMoTGrV+5y2Jg1I3Wq+gPyrwBdrVAJM i9zl4frY8qch8EIkA0oMXaEo/5NHPURnWuutx586dY7R+3MLHoSwhl+PkltNMREW vpUMudnlrBM+kufgrj1NHw1tu3dlt5TwHcLph1kwHCfVCXg8ZxmHQpNNEcCf43Oo BL+lRvc1RikK7c9BZcQOZ8HJSIg1kCAK6GzNtCn8+iWbfrwW4PXPoC/28wIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFBxBGuMrDNVwNtkRVQNLTSIxHzIgMB8GA1UdIwQY MBaAFDrf1IqXcgzYVAKd2yZsUfkfB2cNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3RfVWlwZHlETmhVQXAzYkpteFItUjhIWncwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9hMmViNWEtMDk2Mi00NWJjLWE2Mzct ZjAxMDRkZGYyODExLzEvSEVFYTR5c00xWEEyMlJGVkEwdE5JakVmTWlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My9hMmViNWEtMDk2Mi00NWJjLWE2MzctZjAxMDRkZGYyODEx LzEvT3RfVWlwZHlETmhVQXAzYkpteFItUjhIWncwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAW9mJMA8E AgACMAkDBwAgAQZ8E+QwDQYJKoZIhvcNAQELBQADggEBAFFDx9eKW6zG5j9vdMqA PxO9023gZGIbmDJnyDE4WtOXXCw9vl2XquQjTEsTnTdriRrdK7wIrNWWBk6hxlBe Y7xNiTorhpDvAOB4b51QpYxZmiYQTeBejm5YH/wnm2MFBS+wD7m6eb6h5TZhzrwo Z+46/uh8XclL2i/pCOlPoh91IfirraXLym1WkxjAgvtmf9bO5BGVjb54z344aEBg zR83qu/1bnCmst8mL+u2fv7SyavMuTrPHZ0IeZHb1e08emER5bGI3q8DCqBgcaTJ 3DYaJd7SDcbszBnZZmsIIFjoWgX5IRnR0r0wOAHUa9nL/aeKRi7eSP6nl5l/YO8X PoY= -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:10 2026 by rpki-client