This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/409949-f229-498d-9315-34b67df7cb03/1/HhdRECwGtf8A3NBDu_5syyNXfBQ.roa File: HhdRECwGtf8A3NBDu_5syyNXfBQ.roa (raw, json) Hash identifier: VHWQk1B41SoUiuUSEd1z1p7GG+SVW0TQvROydr+k8Vg= Subject key identifier: 1E:17:51:10:2C:06:B5:FF:00:DC:D0:43:BB:FE:6C:CB:23:57:7C:14 Certificate issuer: /CN=465ef7bd2eb3dcdbab04908380d48a8f2febc62c Certificate serial: 019B7EA6DF65C5C84FDC9B5E30E63C5ECC64 Authority key identifier: 46:5E:F7:BD:2E:B3:DC:DB:AB:04:90:83:80:D4:8A:8F:2F:EB:C6:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rl73vS6z3NurBJCDgNSKjy_rxiw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/409949-f229-498d-9315-34b67df7cb03/1/HhdRECwGtf8A3NBDu_5syyNXfBQ.roa Signing time: Fri 02 Jan 2026 12:20:23 +0000 ROA not before: Fri 02 Jan 2026 12:20:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210955 IP address blocks: 194.113.61.0/24 maxlen: 24 194.113.70.0/24 maxlen: 24 194.113.92.0/24 maxlen: 24 194.113.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/409949-f229-498d-9315-34b67df7cb03/1/Rl73vS6z3NurBJCDgNSKjy_rxiw.crl rsync://rpki.ripe.net/repository/DEFAULT/84/409949-f229-498d-9315-34b67df7cb03/1/Rl73vS6z3NurBJCDgNSKjy_rxiw.mft rsync://rpki.ripe.net/repository/DEFAULT/Rl73vS6z3NurBJCDgNSKjy_rxiw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:df:65:c5:c8:4f:dc:9b:5e:30:e6:3c:5e:cc:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=465ef7bd2eb3dcdbab04908380d48a8f2febc62c Validity Not Before: Jan 2 12:20:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1e1751102c06b5ff00dcd043bbfe6ccb23577c14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:53:2a:38:bf:fe:ee:72:50:31:48:37:13:48: 85:2d:0f:a0:6e:ff:78:3b:7c:4f:e9:5a:07:23:5c: ec:aa:34:95:c1:b7:ac:88:ad:25:be:14:8a:5a:ad: 60:aa:5c:a8:b5:14:e3:a6:46:94:dd:2d:c1:b9:f7: c0:20:3a:6a:26:c3:46:15:92:4a:19:b3:0d:97:35: 08:78:75:f8:5f:aa:ee:39:63:88:d1:68:28:d4:c5: 59:02:f7:63:03:31:e4:6a:f3:52:87:e6:23:da:94: 7e:5f:e9:76:ae:bc:ff:70:e2:07:0e:de:d9:c5:7a: cb:25:53:e4:ae:cd:a5:0e:c2:51:44:19:b9:7d:0c: 19:2c:dc:41:83:21:3f:8b:9a:32:b4:f7:8c:f4:10: 34:16:67:4f:32:e0:15:d8:0a:37:fe:23:14:45:8c: 00:33:bd:9c:a7:5e:3b:8b:4f:dc:b4:67:33:17:ab: ad:e3:51:ab:e4:3c:ec:cb:e4:92:8d:03:a6:64:48: a8:a6:96:4d:73:19:02:6c:55:f0:59:20:2c:a9:90: 52:16:f4:03:d3:b0:ab:ee:ed:7e:af:84:d0:c1:96: a1:cd:7f:4d:e9:94:14:6b:aa:9c:a0:71:51:f1:45: d1:9d:cb:b6:08:10:0a:7c:65:39:ed:81:19:76:e4: 48:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:17:51:10:2C:06:B5:FF:00:DC:D0:43:BB:FE:6C:CB:23:57:7C:14 X509v3 Authority Key Identifier: keyid:46:5E:F7:BD:2E:B3:DC:DB:AB:04:90:83:80:D4:8A:8F:2F:EB:C6:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rl73vS6z3NurBJCDgNSKjy_rxiw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/409949-f229-498d-9315-34b67df7cb03/1/HhdRECwGtf8A3NBDu_5syyNXfBQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/409949-f229-498d-9315-34b67df7cb03/1/Rl73vS6z3NurBJCDgNSKjy_rxiw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.113.61.0/24 194.113.70.0/24 194.113.92.0/24 194.113.114.0/24 Signature Algorithm: sha256WithRSAEncryption 10:cc:0a:1f:da:4b:25:95:7f:ee:31:e5:7a:c0:c6:de:03:03: 65:37:81:eb:47:a4:e5:69:ad:08:ef:ab:5a:49:bf:97:14:1b: ea:45:bb:c0:00:36:0e:8a:27:d9:b9:e2:23:6a:15:db:74:b6: 5c:90:30:65:de:2d:1c:67:c2:3e:60:6c:6a:72:5f:a1:60:b6: 29:f9:db:cf:5c:fa:b7:fe:f0:2a:ab:53:0b:73:80:cf:17:de: 8b:c0:2d:eb:d2:c6:b8:3b:51:c3:23:77:c0:72:49:4c:83:5c: 17:ac:4f:70:31:85:b3:b3:61:3e:4c:9b:42:d5:b7:f2:9f:3c: f4:44:b7:3f:13:27:63:81:6c:eb:96:a5:58:03:ae:9a:5f:67: 64:60:99:b3:ee:9b:2d:72:e7:23:ab:a9:d6:6f:30:be:ee:84: 4c:e9:2b:88:92:cc:9e:8a:af:76:ce:f5:57:c7:96:d4:4f:04: cd:71:78:e2:12:b8:8c:fa:c1:ab:9e:5b:01:bb:e5:d5:78:14: 1d:fa:74:e1:08:58:f4:5a:79:24:a1:60:49:0e:e1:91:3d:6f: 3b:1e:46:8c:e6:6d:d1:03:61:45:68:d9:25:8c:4f:fa:bf:ef: 03:a2:16:71:93:a4:9f:10:f0:a7:82:e6:59:6d:4f:9e:77:9f: 81:6a:09:26 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt+pt9lxchP3JteMOY8XsxkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NWVmN2JkMmViM2RjZGJhYjA0OTA4MzgwZDQ4YThmMmZl YmM2MmMwHhcNMjYwMTAyMTIyMDIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZTE3NTExMDJjMDZiNWZmMDBkY2QwNDNiYmZlNmNjYjIzNTc3YzE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFMqOL/+7nJQMUg3E0iFLQ+gbv94 O3xP6VoHI1zsqjSVwbesiK0lvhSKWq1gqlyotRTjpkaU3S3BuffAIDpqJsNGFZJK GbMNlzUIeHX4X6ruOWOI0Wgo1MVZAvdjAzHkavNSh+Yj2pR+X+l2rrz/cOIHDt7Z xXrLJVPkrs2lDsJRRBm5fQwZLNxBgyE/i5oytPeM9BA0FmdPMuAV2Ao3/iMURYwA M72cp147i0/ctGczF6ut41Gr5Dzsy+SSjQOmZEioppZNcxkCbFXwWSAsqZBSFvQD 07Cr7u1+r4TQwZahzX9N6ZQUa6qcoHFR8UXRncu2CBAKfGU57YEZduRICwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFB4XURAsBrX/ANzQQ7v+bMsjV3wUMB8GA1UdIwQY MBaAFEZe970us9zbqwSQg4DUio8v68YsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmw3M3ZTNnozTnVyQkpDRGdOU0tqeV9yeGl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC80MDk5NDktZjIyOS00OThkLTkzMTUt MzRiNjdkZjdjYjAzLzEvSGhkUkVDd0d0ZjhBM05CRHVfNXN5eU5YZkJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC80MDk5NDktZjIyOS00OThkLTkzMTUtMzRiNjdkZjdjYjAz LzEvUmw3M3ZTNnozTnVyQkpDRGdOU0tqeV9yeGl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAwnE9AwQA wnFGAwQAwnFcAwQAwnFyMA0GCSqGSIb3DQEBCwUAA4IBAQAQzAof2ksllX/uMeV6 wMbeAwNlN4HrR6Tlaa0I76taSb+XFBvqRbvAADYOiifZueIjahXbdLZckDBl3i0c Z8I+YGxqcl+hYLYp+dvPXPq3/vAqq1MLc4DPF96LwC3r0sa4O1HDI3fAcklMg1wX rE9wMYWzs2E+TJtC1bfynzz0RLc/EydjgWzrlqVYA66aX2dkYJmz7pstcucjq6nW bzC+7oRM6SuIksyeiq92zvVXx5bUTwTNcXjiEriM+sGrnlsBu+XVeBQd+nThCFj0 WnkkoWBJDuGRPW87HkaM5m3RA2FFaNkljE/6v+8DohZxk6SfEPCnguZZbU+ed5+B agkm -----END CERTIFICATE-----Generated at Mon Feb 9 21:26:57 2026 by rpki-client