This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/HVeaPRGScqoeTxasRC7FtT7Oevw.roa File: HVeaPRGScqoeTxasRC7FtT7Oevw.roa (raw, json) Hash identifier: ZQiBIa09vjaeX5NqaOpdrBAiwYMoL3wpAhEDSy6DOE8= Subject key identifier: 1D:57:9A:3D:11:92:72:AA:1E:4F:16:AC:44:2E:C5:B5:3E:CE:7A:FC Certificate issuer: /CN=de456cdb4d140345c3dcaebfc7634d4e7cdcb913 Certificate serial: 019B79EBBDED565E8B504080E0807700755E Authority key identifier: DE:45:6C:DB:4D:14:03:45:C3:DC:AE:BF:C7:63:4D:4E:7C:DC:B9:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3kVs200UA0XD3K6_x2NNTnzcuRM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/HVeaPRGScqoeTxasRC7FtT7Oevw.roa Signing time: Thu 01 Jan 2026 14:17:31 +0000 ROA not before: Thu 01 Jan 2026 14:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6696 IP address blocks: 109.69.218.0/24 maxlen: 24 128.127.180.0/24 maxlen: 24 185.99.48.0/24 maxlen: 24 185.99.49.0/24 maxlen: 24 185.99.50.0/24 maxlen: 24 185.192.44.0/24 maxlen: 24 185.192.45.0/24 maxlen: 24 193.105.133.0/24 maxlen: 24 193.138.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.mft rsync://rpki.ripe.net/repository/DEFAULT/3kVs200UA0XD3K6_x2NNTnzcuRM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:bd:ed:56:5e:8b:50:40:80:e0:80:77:00:75:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de456cdb4d140345c3dcaebfc7634d4e7cdcb913 Validity Not Before: Jan 1 14:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1d579a3d119272aa1e4f16ac442ec5b53ece7afc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:f6:a3:f4:d3:c6:2c:ec:97:db:b6:67:f3:d5: 25:31:5e:48:cf:8e:b7:e5:dd:29:9f:b3:4b:ca:d4: b5:e1:da:ac:34:4d:e5:55:0c:50:10:34:d9:59:e6: 35:7e:0d:49:38:48:c5:12:d8:74:ec:37:b3:ba:e9: de:cb:3f:9e:33:56:8c:82:ba:98:5d:d0:29:64:ea: 37:af:cb:6f:2d:84:9c:0e:51:65:ec:40:42:06:86: 56:f2:65:2e:05:c2:f8:74:b9:20:c9:c0:75:94:a8: bf:51:c8:16:91:ad:2a:92:5a:25:b3:e2:21:57:90: 74:93:25:94:b8:ff:ac:24:6d:a0:55:39:1a:b0:ac: 44:4d:84:01:78:20:d0:a8:64:5a:b6:a4:be:95:b4: cc:09:63:53:5f:30:9d:46:19:3c:69:5a:20:11:f5: d9:00:bf:26:21:43:b2:85:fe:71:d5:8a:0a:d5:65: 2d:45:7d:6b:e2:22:53:44:9e:50:4b:81:c1:05:b5: 54:58:2c:1a:a0:4c:31:15:21:c0:5e:5e:41:4f:41: 80:72:fa:ad:86:3b:85:fc:46:bf:56:54:8e:59:8a: b1:ac:20:33:f6:ec:4f:7a:8f:6f:f7:4a:1d:ba:a1: 1c:9a:59:f9:fb:4b:d7:d0:54:4d:2c:c3:fd:7f:76: d1:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:57:9A:3D:11:92:72:AA:1E:4F:16:AC:44:2E:C5:B5:3E:CE:7A:FC X509v3 Authority Key Identifier: keyid:DE:45:6C:DB:4D:14:03:45:C3:DC:AE:BF:C7:63:4D:4E:7C:DC:B9:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3kVs200UA0XD3K6_x2NNTnzcuRM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/HVeaPRGScqoeTxasRC7FtT7Oevw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.69.218.0/24 128.127.180.0/24 185.99.48.0-185.99.50.255 185.192.44.0/23 193.105.133.0/24 193.138.101.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:93:f5:62:d5:fc:8b:af:4e:2e:52:2e:9c:ec:c0:bb:65:09: 84:8c:7a:d0:80:3e:6c:42:20:97:c2:81:eb:0b:98:0a:38:7a: c6:fd:1e:f0:c5:3d:29:76:59:a9:45:ae:34:d8:f1:64:3c:34: 60:ec:a4:47:19:22:1c:93:7a:0c:49:85:3c:92:e2:4c:b5:d7: 3c:0f:c3:a8:af:db:18:d7:7d:b8:51:e0:12:d4:f1:96:c6:b8: 2b:48:49:50:ee:9b:9b:c3:30:01:86:17:c5:dc:f8:3a:a5:a7: 29:e3:65:9e:49:96:8d:8e:cf:a2:82:43:8a:5c:a6:3d:82:aa: 34:f6:9a:0b:25:9c:c2:9c:e5:00:97:46:ef:79:6e:cb:2c:4a: f5:aa:28:26:d1:cf:8c:8e:df:d8:19:3f:4a:4a:ea:59:f4:35: e1:2a:58:b9:26:c8:9e:9c:3a:ec:c8:75:b5:d7:41:de:db:0f: 49:08:8e:48:d8:a7:7a:66:27:88:cd:fe:0c:86:62:e9:d0:2d: dd:a4:84:1f:4f:67:0b:c9:f9:8d:22:81:c1:86:c0:41:89:8f: 46:80:0f:c1:0c:98:3a:e5:34:d8:74:3e:c7:db:5b:4f:cd:79: e8:f0:39:0d:c6:f1:2d:a2:f5:f3:ca:4a:89:df:aa:83:34:7c: 5b:01:9a:66 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISAZt5673tVl6LUECA4IB3AHVeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlNDU2Y2RiNGQxNDAzNDVjM2RjYWViZmM3NjM0ZDRlN2Nk Y2I5MTMwHhcNMjYwMTAxMTQxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZDU3OWEzZDExOTI3MmFhMWU0ZjE2YWM0NDJlYzViNTNlY2U3YWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Paj9NPGLOyX27Zn89UlMV5Iz463 5d0pn7NLytS14dqsNE3lVQxQEDTZWeY1fg1JOEjFEth07Dezuuneyz+eM1aMgrqY XdApZOo3r8tvLYScDlFl7EBCBoZW8mUuBcL4dLkgycB1lKi/UcgWka0qklols+Ih V5B0kyWUuP+sJG2gVTkasKxETYQBeCDQqGRatqS+lbTMCWNTXzCdRhk8aVogEfXZ AL8mIUOyhf5x1YoK1WUtRX1r4iJTRJ5QS4HBBbVUWCwaoEwxFSHAXl5BT0GAcvqt hjuF/Ea/VlSOWYqxrCAz9uxPeo9v90oduqEcmln5+0vX0FRNLMP9f3bR5QIDAQAB o4ICLzCCAiswHQYDVR0OBBYEFB1Xmj0RknKqHk8WrEQuxbU+znr8MB8GA1UdIwQY MBaAFN5FbNtNFANFw9yuv8djTU583LkTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2tWczIwMFVBMFhEM0s2X3gyTk5UbnpjdVJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8yMGNiMzMtZTJiZi00NmFhLWFiZmEt OTI4ZTdiYzY5NTcwLzEvSFZlYVBSR1NjcW9lVHhhc1JDN0Z0VDdPZXZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC8yMGNiMzMtZTJiZi00NmFhLWFiZmEtOTI4ZTdiYzY5NTcw LzEvM2tWczIwMFVBMFhEM0s2X3gyTk5UbnpjdVJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQAbUXaAwQA gH+0MAwDBAS5YzADBAC5YzIDBAG5wCwDBADBaYUDBADBimUwDQYJKoZIhvcNAQEL BQADggEBAB2T9WLV/IuvTi5SLpzswLtlCYSMetCAPmxCIJfCgesLmAo4esb9HvDF PSl2WalFrjTY8WQ8NGDspEcZIhyTegxJhTyS4ky11zwPw6iv2xjXfbhR4BLU8ZbG uCtISVDum5vDMAGGF8Xc+DqlpynjZZ5Jlo2Oz6KCQ4pcpj2CqjT2mgslnMKc5QCX Ru95bsssSvWqKCbRz4yO39gZP0pK6ln0NeEqWLkmyJ6cOuzIdbXXQd7bD0kIjkjY p3pmJ4jN/gyGYunQLd2khB9PZwvJ+Y0igcGGwEGJj0aAD8EMmDrlNNh0PsfbW0/N eejwOQ3G8S2i9fPKSonfqoM0fFsBmmY= -----END CERTIFICATE-----Generated at Tue Feb 10 03:57:25 2026 by rpki-client