This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/ee7C17z44PBk9L2IeWk75tNQvkE.roa File: ee7C17z44PBk9L2IeWk75tNQvkE.roa (raw, json) Hash identifier: l6wUWVLkEPx/52hcpvIMbd1VKcbtnHiSYX8Z/R+2pas= Subject key identifier: 79:EE:C2:D7:BC:F8:E0:F0:64:F4:BD:88:79:69:3B:E6:D3:50:BE:41 Certificate issuer: /CN=1cc451fbdfaa12efc352a59b007b0a8823b8e65d Certificate serial: 019B7C7FD52BBEBDC5291297703BB418C397 Authority key identifier: 1C:C4:51:FB:DF:AA:12:EF:C3:52:A5:9B:00:7B:0A:88:23:B8:E6:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HMRR-9-qEu_DUqWbAHsKiCO45l0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/ee7C17z44PBk9L2IeWk75tNQvkE.roa Signing time: Fri 02 Jan 2026 02:18:30 +0000 ROA not before: Fri 02 Jan 2026 02:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13041 IP address blocks: 84.88.0.0/15 maxlen: 18 192.94.163.0/24 maxlen: 24 193.242.98.0/24 maxlen: 24 2001:7f8:2a::/48 maxlen: 48 2001:40b0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/HMRR-9-qEu_DUqWbAHsKiCO45l0.crl rsync://rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/HMRR-9-qEu_DUqWbAHsKiCO45l0.mft rsync://rpki.ripe.net/repository/DEFAULT/HMRR-9-qEu_DUqWbAHsKiCO45l0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:d5:2b:be:bd:c5:29:12:97:70:3b:b4:18:c3:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cc451fbdfaa12efc352a59b007b0a8823b8e65d Validity Not Before: Jan 2 02:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=79eec2d7bcf8e0f064f4bd8879693be6d350be41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:1a:b1:54:56:f1:97:94:16:3e:b6:e2:f4:81: 0e:ef:b8:65:19:51:6f:a9:dd:b0:f6:fb:92:79:00: 7b:40:f0:1e:fb:5e:e6:d8:00:6b:f6:28:19:33:82: 11:5c:1a:47:00:8c:7a:2b:41:02:6c:87:6e:02:d6: 6f:3a:e0:a7:a4:7b:a4:26:c3:46:0c:63:63:bf:85: 1c:f3:61:63:71:a6:27:bd:43:d4:9e:6e:d5:1a:e2: a8:21:25:04:ce:37:0c:38:f9:a7:04:eb:ab:2f:b1: 15:8d:07:60:8b:f6:ad:42:3d:33:e0:35:e8:70:cf: 1c:8b:73:84:9e:41:1b:1a:79:3c:86:69:c0:3b:a5: 39:a2:ac:d0:05:61:a8:3f:28:70:3a:ce:c4:54:21: 46:fa:2a:ef:26:17:c9:ff:12:51:4e:7e:c8:86:6e: 67:c9:b1:78:0d:37:e8:f6:24:81:9b:08:f8:8b:5e: eb:f7:c3:b6:40:f8:90:81:81:8f:42:fa:83:5a:8c: ac:2b:d0:c3:ee:39:70:64:d9:d5:86:5c:1f:fe:ab: 62:5d:67:b0:f5:e6:a9:96:c7:d2:7f:98:26:9f:fa: 70:6e:f0:01:b3:ac:3c:7e:01:5b:f5:4c:62:03:31: 36:68:1a:82:25:64:ad:0c:2f:b3:03:bf:6a:d9:73: be:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:EE:C2:D7:BC:F8:E0:F0:64:F4:BD:88:79:69:3B:E6:D3:50:BE:41 X509v3 Authority Key Identifier: keyid:1C:C4:51:FB:DF:AA:12:EF:C3:52:A5:9B:00:7B:0A:88:23:B8:E6:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HMRR-9-qEu_DUqWbAHsKiCO45l0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/ee7C17z44PBk9L2IeWk75tNQvkE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/HMRR-9-qEu_DUqWbAHsKiCO45l0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.88.0.0/15 192.94.163.0/24 193.242.98.0/24 IPv6: 2001:7f8:2a::/48 2001:40b0::/32 Signature Algorithm: sha256WithRSAEncryption 60:aa:32:01:ca:7e:64:f1:b9:e0:f2:2e:f2:e8:b2:6c:ea:e5: f1:3a:f7:aa:24:11:12:82:00:18:e3:92:8d:46:b8:23:6e:64: c7:9f:15:87:5d:91:9d:f5:f0:c4:98:e7:7a:97:62:ec:00:9e: b5:42:24:85:8e:e1:48:19:e1:77:1f:6a:c6:c7:b1:80:4f:ec: 48:a5:9f:13:01:1f:93:87:4b:57:89:af:f3:37:90:7a:0e:5f: e0:b5:83:18:ff:b7:be:54:5b:fc:ec:53:6e:75:21:97:38:fb: 86:57:58:7f:58:fa:e3:c7:82:bb:18:7a:6f:c0:29:a3:0a:28: 3f:3e:2c:60:8c:c6:8d:63:14:73:6e:f3:5d:81:29:1b:7d:a0: d6:d8:d5:6b:be:c1:20:8d:19:bb:e4:50:a3:cd:04:07:e3:c1: a1:3f:cb:f8:19:97:48:aa:e9:86:9d:46:b7:38:10:d4:db:7c: 08:64:09:2b:cc:ef:32:65:ee:0f:fe:3e:e1:82:4f:cf:fc:de: b5:11:41:35:cd:d2:de:46:99:61:ae:c4:8f:2b:ac:52:f0:51: 87:25:e1:56:bd:c4:00:8f:72:4c:23:8a:02:cf:ae:f2:8c:ed: 6c:59:80:1f:49:ab:7f:21:82:91:59:30:f2:8d:3b:97:db:a8: a3:53:cd:69 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt8f9Urvr3FKRKXcDu0GMOXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjYzQ1MWZiZGZhYTEyZWZjMzUyYTU5YjAwN2IwYTg4MjNi OGU2NWQwHhcNMjYwMTAyMDIxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OWVlYzJkN2JjZjhlMGYwNjRmNGJkODg3OTY5M2JlNmQzNTBiZTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6RqxVFbxl5QWPrbi9IEO77hlGVFv qd2w9vuSeQB7QPAe+17m2ABr9igZM4IRXBpHAIx6K0ECbIduAtZvOuCnpHukJsNG DGNjv4Uc82FjcaYnvUPUnm7VGuKoISUEzjcMOPmnBOurL7EVjQdgi/atQj0z4DXo cM8ci3OEnkEbGnk8hmnAO6U5oqzQBWGoPyhwOs7EVCFG+irvJhfJ/xJRTn7Ihm5n ybF4DTfo9iSBmwj4i17r98O2QPiQgYGPQvqDWoysK9DD7jlwZNnVhlwf/qtiXWew 9eaplsfSf5gmn/pwbvABs6w8fgFb9UxiAzE2aBqCJWStDC+zA79q2XO+IQIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFHnuwte8+ODwZPS9iHlpO+bTUL5BMB8GA1UdIwQY MBaAFBzEUfvfqhLvw1KlmwB7CogjuOZdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSE1SUi05LXFFdV9EVXFXYkFIc0tpQ080NWwwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni80ZDljYTMtYWE3My00OTk4LWFlNjMt ODMyZGI5ZWJlYmFmLzEvZWU3QzE3ejQ0UEJrOUwySWVXazc1dE5RdmtFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni80ZDljYTMtYWE3My00OTk4LWFlNjMtODMyZGI5ZWJlYmFm LzEvSE1SUi05LXFFdV9EVXFXYkFIc0tpQ080NWwwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAXBAIAATARAwMBVFgDBADA XqMDBADB8mIwFgQCAAIwEAMHACABB/gAKgMFACABQLAwDQYJKoZIhvcNAQELBQAD ggEBAGCqMgHKfmTxueDyLvLosmzq5fE696okERKCABjjko1GuCNuZMefFYddkZ31 8MSY53qXYuwAnrVCJIWO4UgZ4XcfasbHsYBP7EilnxMBH5OHS1eJr/M3kHoOX+C1 gxj/t75UW/zsU251IZc4+4ZXWH9Y+uPHgrsYem/AKaMKKD8+LGCMxo1jFHNu812B KRt9oNbY1Wu+wSCNGbvkUKPNBAfjwaE/y/gZl0iq6YadRrc4ENTbfAhkCSvM7zJl 7g/+PuGCT8/83rURQTXN0t5GmWGuxI8rrFLwUYcl4Va9xACPckwjigLPrvKM7WxZ gB9Jq38hgpFZMPKNO5fbqKNTzWk= -----END CERTIFICATE-----Generated at Mon Feb 9 20:09:01 2026 by rpki-client