This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/bd59d9-690a-4fe2-b295-7ec5123be162/1/hEHeb8OuF9xUk8MiJaqaoIXUxyM.roa File: hEHeb8OuF9xUk8MiJaqaoIXUxyM.roa (raw, json) Hash identifier: cMPtLwG20T+Oxfp5dF/gVvhKkmvpYnxVK+DxJa36bGQ= Subject key identifier: 84:41:DE:6F:C3:AE:17:DC:54:93:C3:22:25:AA:9A:A0:85:D4:C7:23 Certificate issuer: /CN=977b8aa063fc4f2bb84a9f56a3bfa38b2abedf9b Certificate serial: 019B7B35E0CBEE5BC859985566349E75FEFD Authority key identifier: 97:7B:8A:A0:63:FC:4F:2B:B8:4A:9F:56:A3:BF:A3:8B:2A:BE:DF:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3uKoGP8Tyu4Sp9Wo7-jiyq-35s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/bd59d9-690a-4fe2-b295-7ec5123be162/1/hEHeb8OuF9xUk8MiJaqaoIXUxyM.roa Signing time: Thu 01 Jan 2026 20:18:06 +0000 ROA not before: Thu 01 Jan 2026 20:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50815 IP address blocks: 178.216.56.0/21 maxlen: 21 194.0.174.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/bd59d9-690a-4fe2-b295-7ec5123be162/1/l3uKoGP8Tyu4Sp9Wo7-jiyq-35s.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/bd59d9-690a-4fe2-b295-7ec5123be162/1/l3uKoGP8Tyu4Sp9Wo7-jiyq-35s.mft rsync://rpki.ripe.net/repository/DEFAULT/l3uKoGP8Tyu4Sp9Wo7-jiyq-35s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:e0:cb:ee:5b:c8:59:98:55:66:34:9e:75:fe:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=977b8aa063fc4f2bb84a9f56a3bfa38b2abedf9b Validity Not Before: Jan 1 20:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8441de6fc3ae17dc5493c32225aa9aa085d4c723 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:5e:3e:7c:9c:15:9d:49:d8:bf:3f:8c:99:bb: 62:46:4f:68:c9:b0:5a:5a:28:21:97:ea:1c:81:1d: 43:15:1d:b4:76:41:38:77:6a:4e:b0:d2:35:7b:3e: 5a:29:0e:a0:fe:20:c3:d1:fa:ef:40:ee:5a:42:03: 5b:a2:df:26:55:4a:2a:88:5d:c3:ea:c5:81:d1:73: f4:29:2c:31:aa:32:79:0a:04:0b:5e:4c:22:98:5d: 2e:1a:5a:34:7a:4d:a5:ce:92:b6:40:3f:8d:5a:6b: 5e:7a:46:86:60:4c:6c:89:0a:30:e9:85:0b:0e:f3: 33:21:a6:44:02:d9:c3:4d:8d:35:cd:28:97:c8:2d: 9b:e1:76:4e:5d:a1:48:98:e2:86:35:7c:27:0e:77: 04:a8:46:8d:6c:31:12:1b:9f:cf:a7:14:5a:f1:3c: 69:cf:11:52:c2:49:24:9b:80:8a:c1:b1:82:09:e3: 21:6a:57:ab:8a:14:9e:3f:d5:f9:c7:91:31:33:2b: 07:65:39:9b:d3:4f:f9:60:7d:7a:b9:6a:69:2b:9e: 89:eb:0b:00:4c:e7:69:02:88:c8:03:a6:a4:e5:2d: a0:28:0d:90:50:63:be:3f:6f:5a:2d:b7:b4:56:15: b2:6b:ae:9b:2b:57:22:66:bb:74:10:37:b1:41:87: 06:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:41:DE:6F:C3:AE:17:DC:54:93:C3:22:25:AA:9A:A0:85:D4:C7:23 X509v3 Authority Key Identifier: keyid:97:7B:8A:A0:63:FC:4F:2B:B8:4A:9F:56:A3:BF:A3:8B:2A:BE:DF:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3uKoGP8Tyu4Sp9Wo7-jiyq-35s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/bd59d9-690a-4fe2-b295-7ec5123be162/1/hEHeb8OuF9xUk8MiJaqaoIXUxyM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/bd59d9-690a-4fe2-b295-7ec5123be162/1/l3uKoGP8Tyu4Sp9Wo7-jiyq-35s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.216.56.0/21 194.0.174.0/23 Signature Algorithm: sha256WithRSAEncryption b9:d5:e9:e5:93:d4:90:9b:40:f9:9b:5b:a6:d6:af:eb:84:08: 3f:ee:f2:aa:93:2b:dd:0c:3f:6e:10:72:19:18:70:ea:b7:dd: b8:c8:7e:00:3f:0f:eb:f9:fd:32:8d:db:bb:ab:3b:61:4f:63: 30:db:fa:5e:98:b1:4b:df:34:4e:4b:9f:70:31:24:45:f9:07: 4a:db:c2:e0:5f:69:c5:8e:2b:5d:80:26:28:c4:35:54:bb:da: 56:46:9e:98:e3:fb:6d:15:4b:48:b6:fa:30:4f:33:79:81:83: 85:53:32:0a:66:95:07:5d:4b:83:99:29:66:42:74:f9:48:12: 82:db:94:10:36:9a:3f:36:d0:06:81:48:62:66:b3:5f:66:b5: 29:00:83:e3:39:ac:96:76:94:cd:f1:38:ee:32:93:80:7c:3f: 6d:40:7a:65:b5:3f:01:f2:b2:9a:ac:48:e4:44:e7:e0:70:2a: a5:9e:22:34:36:74:b5:c8:ba:75:7e:59:89:d6:23:86:99:a9: 7f:79:35:6e:67:f3:ef:36:1a:75:33:94:63:e4:71:20:fb:01: 0c:f2:0f:50:65:1f:c6:37:d1:71:b1:c8:78:72:8d:04:62:d4: 06:8d:72:f6:6c:cf:c7:80:9b:8c:7c:df:66:a2:99:d8:60:2e: 91:f4:ac:9b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NeDL7lvIWZhVZjSedf79MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3N2I4YWEwNjNmYzRmMmJiODRhOWY1NmEzYmZhMzhiMmFi ZWRmOWIwHhcNMjYwMTAxMjAxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDQxZGU2ZmMzYWUxN2RjNTQ5M2MzMjIyNWFhOWFhMDg1ZDRjNzIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz14+fJwVnUnYvz+MmbtiRk9oybBa Wighl+ocgR1DFR20dkE4d2pOsNI1ez5aKQ6g/iDD0frvQO5aQgNbot8mVUoqiF3D 6sWB0XP0KSwxqjJ5CgQLXkwimF0uGlo0ek2lzpK2QD+NWmteekaGYExsiQow6YUL DvMzIaZEAtnDTY01zSiXyC2b4XZOXaFImOKGNXwnDncEqEaNbDESG5/PpxRa8Txp zxFSwkkkm4CKwbGCCeMhalerihSeP9X5x5ExMysHZTmb00/5YH16uWppK56J6wsA TOdpAojIA6ak5S2gKA2QUGO+P29aLbe0VhWya66bK1ciZrt0EDexQYcGzQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIRB3m/DrhfcVJPDIiWqmqCF1McjMB8GA1UdIwQY MBaAFJd7iqBj/E8ruEqfVqO/o4sqvt+bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDN1S29HUDhUeXU0U3A5V283LWppeXEtMzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9iZDU5ZDktNjkwYS00ZmUyLWIyOTUt N2VjNTEyM2JlMTYyLzEvaEVIZWI4T3VGOXhVazhNaUphcWFvSVhVeHlNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9iZDU5ZDktNjkwYS00ZmUyLWIyOTUtN2VjNTEyM2JlMTYy LzEvbDN1S29HUDhUeXU0U3A5V283LWppeXEtMzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDstg4AwQB wgCuMA0GCSqGSIb3DQEBCwUAA4IBAQC51enlk9SQm0D5m1um1q/rhAg/7vKqkyvd DD9uEHIZGHDqt924yH4APw/r+f0yjdu7qzthT2Mw2/pemLFL3zROS59wMSRF+QdK 28LgX2nFjitdgCYoxDVUu9pWRp6Y4/ttFUtItvowTzN5gYOFUzIKZpUHXUuDmSlm QnT5SBKC25QQNpo/NtAGgUhiZrNfZrUpAIPjOayWdpTN8TjuMpOAfD9tQHpltT8B 8rKarEjkROfgcCqlniI0NnS1yLp1flmJ1iOGmal/eTVuZ/PvNhp1M5Rj5HEg+wEM 8g9QZR/GN9Fxsch4co0EYtQGjXL2bM/HgJuMfN9mopnYYC6R9Kyb -----END CERTIFICATE-----Generated at Tue Feb 10 04:49:03 2026 by rpki-client