This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/HSSEA9Em0ptRddp4bZHLYz47Pwc.roa File: HSSEA9Em0ptRddp4bZHLYz47Pwc.roa (raw, json) Hash identifier: tCTQJ4a04Vb+F29LJgpWJiZhzVqLIw989oQi9ddJVUQ= Subject key identifier: 1D:24:84:03:D1:26:D2:9B:51:75:DA:78:6D:91:CB:63:3E:3B:3F:07 Certificate issuer: /CN=f17f6957fc23b8d46b9d3dc8bc7db122859876f0 Certificate serial: 019B7F155278BA3B75E3DA16C9C30B5DFD1E Authority key identifier: F1:7F:69:57:FC:23:B8:D4:6B:9D:3D:C8:BC:7D:B1:22:85:98:76:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8X9pV_wjuNRrnT3IvH2xIoWYdvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/HSSEA9Em0ptRddp4bZHLYz47Pwc.roa Signing time: Fri 02 Jan 2026 14:21:02 +0000 ROA not before: Fri 02 Jan 2026 14:21:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64445 IP address blocks: 91.199.211.0/24 maxlen: 24 91.199.223.0/24 maxlen: 24 91.199.248.0/24 maxlen: 24 91.203.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/8X9pV_wjuNRrnT3IvH2xIoWYdvA.crl rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/8X9pV_wjuNRrnT3IvH2xIoWYdvA.mft rsync://rpki.ripe.net/repository/DEFAULT/8X9pV_wjuNRrnT3IvH2xIoWYdvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:52:78:ba:3b:75:e3:da:16:c9:c3:0b:5d:fd:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f17f6957fc23b8d46b9d3dc8bc7db122859876f0 Validity Not Before: Jan 2 14:21:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1d248403d126d29b5175da786d91cb633e3b3f07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:eb:d1:31:82:cd:6f:64:5e:3a:b9:b0:6a:d0: 7e:d4:e1:a0:30:35:76:57:2d:97:92:bd:6b:27:56: c2:59:75:c7:af:c3:63:d4:19:9f:f8:ae:82:14:55: 47:9a:37:e9:f3:67:e5:65:d8:57:d5:40:0b:f2:39: f8:fc:97:12:66:83:e6:83:d6:b1:7d:47:01:38:65: 60:01:19:d7:c0:27:2f:3a:d8:e5:8e:cb:84:e1:dd: 4f:60:85:8e:ec:95:16:c2:e2:e8:5d:27:41:73:22: 2f:3d:92:42:cb:eb:23:a2:1d:53:30:fe:36:0b:74: af:1d:cd:d0:69:01:ca:31:d2:cf:17:da:02:5b:a2: c8:8a:ef:cd:a1:94:be:9e:21:bf:42:9c:92:f0:4e: 61:fd:43:3e:d6:18:d8:28:de:e0:35:c4:a0:4d:69: 04:e6:0b:fe:84:ce:83:6d:f6:0e:36:ca:f6:d9:58: 1d:22:22:9e:23:a4:d5:0a:0d:22:f3:40:98:6f:be: 04:8b:37:10:e7:06:ac:0d:c2:46:12:2e:70:5e:2d: 2c:05:6c:47:d1:d6:0c:b7:57:e0:65:7f:1e:de:74: 2f:9a:9a:d0:a8:95:d3:e6:71:f9:95:a2:23:98:28: e8:8d:f1:c7:b8:91:ea:3a:9f:e4:f4:1d:f4:bf:b6: e9:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:24:84:03:D1:26:D2:9B:51:75:DA:78:6D:91:CB:63:3E:3B:3F:07 X509v3 Authority Key Identifier: keyid:F1:7F:69:57:FC:23:B8:D4:6B:9D:3D:C8:BC:7D:B1:22:85:98:76:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8X9pV_wjuNRrnT3IvH2xIoWYdvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/HSSEA9Em0ptRddp4bZHLYz47Pwc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/8X9pV_wjuNRrnT3IvH2xIoWYdvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.199.211.0/24 91.199.223.0/24 91.199.248.0/24 91.203.220.0/24 Signature Algorithm: sha256WithRSAEncryption 04:6c:2e:7b:6a:9d:d6:eb:2d:34:74:a9:ea:48:3f:ae:97:0d: e2:77:a0:7d:7b:aa:0a:c0:42:f0:ed:71:32:8d:c9:8a:ef:fc: 6f:6b:ca:35:79:08:ca:05:91:e3:4e:66:e2:43:37:ab:41:a1: 32:55:20:71:ef:d2:be:de:0b:84:1c:79:a8:6a:d2:43:27:06: 73:1c:34:09:71:84:cd:9a:57:e1:fc:82:5d:74:6e:4b:24:20: 85:94:d7:e1:1b:3a:0a:d2:de:4f:e3:a2:c7:db:da:0b:e3:b8: c3:ba:0e:13:28:3d:3f:d5:c2:48:ed:a4:ce:9f:4e:ed:ef:a0: 37:ca:da:42:a3:fd:c7:55:fa:00:49:25:62:9a:69:52:31:53: e9:a6:48:ec:a8:23:59:36:0c:8c:ac:85:66:6a:5b:22:dd:2a: ba:a9:75:a5:d4:10:50:84:f1:14:0b:d0:58:88:97:8a:12:dc: 69:89:7c:c0:2e:8b:a6:c6:c0:ee:74:f2:6a:54:08:41:48:d1: e1:e6:b5:57:47:0f:79:cc:76:be:a6:bf:fa:45:24:e0:94:8f: 9c:a1:69:3b:be:76:fc:73:0a:c4:db:eb:db:65:ed:17:e0:23: ee:c0:2e:87:a7:06:9d:80:4e:83:bd:a6:3f:dd:42:2e:e9:05: 01:d3:05:a6 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt/FVJ4ujt149oWycMLXf0eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxN2Y2OTU3ZmMyM2I4ZDQ2YjlkM2RjOGJjN2RiMTIyODU5 ODc2ZjAwHhcNMjYwMTAyMTQyMTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZDI0ODQwM2QxMjZkMjliNTE3NWRhNzg2ZDkxY2I2MzNlM2IzZjA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoevRMYLNb2ReOrmwatB+1OGgMDV2 Vy2Xkr1rJ1bCWXXHr8Nj1Bmf+K6CFFVHmjfp82flZdhX1UAL8jn4/JcSZoPmg9ax fUcBOGVgARnXwCcvOtjljsuE4d1PYIWO7JUWwuLoXSdBcyIvPZJCy+sjoh1TMP42 C3SvHc3QaQHKMdLPF9oCW6LIiu/NoZS+niG/QpyS8E5h/UM+1hjYKN7gNcSgTWkE 5gv+hM6DbfYONsr22VgdIiKeI6TVCg0i80CYb74EizcQ5wasDcJGEi5wXi0sBWxH 0dYMt1fgZX8e3nQvmprQqJXT5nH5laIjmCjojfHHuJHqOp/k9B30v7bp6QIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFB0khAPRJtKbUXXaeG2Ry2M+Oz8HMB8GA1UdIwQY MBaAFPF/aVf8I7jUa509yLx9sSKFmHbwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFg5cFZfd2p1TlJyblQzSXZIMnhJb1dZZHZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8yMDI2ZDMtOWYzMy00NjNlLTg0MTAt NzI2ZGE0ZTkzODZiLzEvSFNTRUE5RW0wcHRSZGRwNGJaSExZejQ3UHdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny8yMDI2ZDMtOWYzMy00NjNlLTg0MTAtNzI2ZGE0ZTkzODZi LzEvOFg5cFZfd2p1TlJyblQzSXZIMnhJb1dZZHZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAW8fTAwQA W8ffAwQAW8f4AwQAW8vcMA0GCSqGSIb3DQEBCwUAA4IBAQAEbC57ap3W6y00dKnq SD+ulw3id6B9e6oKwELw7XEyjcmK7/xva8o1eQjKBZHjTmbiQzerQaEyVSBx79K+ 3guEHHmoatJDJwZzHDQJcYTNmlfh/IJddG5LJCCFlNfhGzoK0t5P46LH29oL47jD ug4TKD0/1cJI7aTOn07t76A3ytpCo/3HVfoASSVimmlSMVPppkjsqCNZNgyMrIVm alsi3Sq6qXWl1BBQhPEUC9BYiJeKEtxpiXzALoumxsDudPJqVAhBSNHh5rVXRw95 zHa+pr/6RSTglI+coWk7vnb8cwrE2+vbZe0X4CPuwC6HpwadgE6DvaY/3UIu6QUB 0wWm -----END CERTIFICATE-----Generated at Mon Feb 9 21:23:23 2026 by rpki-client