This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/HEgUCqwNNPF2Q09uNy1z0SF2eHk.roa File: HEgUCqwNNPF2Q09uNy1z0SF2eHk.roa (raw, json) Hash identifier: nQkhhNw6S8PZEQHevPsGMLpoMsMwEk7juRVeNkbr0JM= Subject key identifier: 1C:48:14:0A:AC:0D:34:F1:76:43:4F:6E:37:2D:73:D1:21:76:78:79 Certificate issuer: /CN=a982f3d0e66429b685b1850a9dff25c7aa37a0c6 Certificate serial: 019B7BA4ED20AC51C773E266989FFA3F43B4 Authority key identifier: A9:82:F3:D0:E6:64:29:B6:85:B1:85:0A:9D:FF:25:C7:AA:37:A0:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYLz0OZkKbaFsYUKnf8lx6o3oMY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/HEgUCqwNNPF2Q09uNy1z0SF2eHk.roa Signing time: Thu 01 Jan 2026 22:19:24 +0000 ROA not before: Thu 01 Jan 2026 22:19:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 45.13.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft rsync://rpki.ripe.net/repository/DEFAULT/qYLz0OZkKbaFsYUKnf8lx6o3oMY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 10:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:ed:20:ac:51:c7:73:e2:66:98:9f:fa:3f:43:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a982f3d0e66429b685b1850a9dff25c7aa37a0c6 Validity Not Before: Jan 1 22:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1c48140aac0d34f176434f6e372d73d121767879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:2d:6e:85:2f:fc:7f:81:f7:1a:41:88:54:ae: a8:46:91:b1:61:eb:ff:bd:ad:51:5c:52:88:6c:a4: 34:9a:42:31:8a:ea:e3:38:5b:a6:18:48:27:5e:c7: b1:75:98:06:d2:bf:41:a0:37:c2:34:c9:c6:48:1a: fa:93:89:11:d7:c4:ea:db:62:10:d0:31:e8:07:4e: b4:33:95:85:78:54:c7:62:f2:ba:00:3b:56:3b:f9: 19:07:dd:04:47:7b:40:bf:ce:5b:a7:95:db:b8:86: 71:14:b0:d4:9a:77:34:d6:35:bb:f5:77:35:12:c1: e2:36:23:e1:40:ac:9d:cd:ae:31:f3:e9:6b:b0:73: c8:e3:ab:6c:90:c7:55:be:5c:f4:3d:b9:b1:46:9f: 1d:1d:13:d2:77:d1:d7:c8:42:9e:20:76:54:5f:ed: d6:b2:4e:4d:32:0e:73:49:88:02:53:2e:62:e2:04: 97:9a:ea:5e:9a:f3:50:6a:e8:86:db:77:26:92:80: b9:b3:1c:8c:bc:11:a7:10:01:b5:85:15:61:ac:fa: 7f:52:4a:7c:d0:70:e8:04:8d:a3:59:e7:6e:5d:63: 65:77:51:be:0b:23:af:6e:93:4e:2f:3a:ab:9e:a3: 2b:a8:e2:4f:e3:69:c3:00:17:59:7e:5e:75:00:9b: b3:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:48:14:0A:AC:0D:34:F1:76:43:4F:6E:37:2D:73:D1:21:76:78:79 X509v3 Authority Key Identifier: keyid:A9:82:F3:D0:E6:64:29:B6:85:B1:85:0A:9D:FF:25:C7:AA:37:A0:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYLz0OZkKbaFsYUKnf8lx6o3oMY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/HEgUCqwNNPF2Q09uNy1z0SF2eHk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.13.100.0/22 Signature Algorithm: sha256WithRSAEncryption 4d:10:64:a0:07:8c:ca:02:03:f8:29:81:a8:c1:18:b5:db:a2: 49:30:ee:60:a5:2d:8e:b0:5f:d9:f5:8f:bb:ff:1a:cd:1b:dc: 0d:d6:c8:39:cd:dc:ba:f0:68:ae:0f:ca:81:6f:df:c9:ff:0e: 51:0f:de:55:a2:57:f0:77:54:11:f2:60:7f:56:3c:9d:51:cc: 0e:22:14:98:52:66:89:cd:9e:4f:7b:79:4d:76:81:2b:29:92: e2:2f:f5:21:87:0e:74:34:4e:a2:cc:7a:99:50:c8:a6:67:13: bd:46:c8:40:c7:09:e8:76:84:e9:b4:e2:f6:ea:4f:d3:8c:81: f8:91:da:6d:ed:58:af:cb:92:30:67:7c:28:30:18:b5:fd:b3: 22:34:c4:af:d1:a3:9b:f8:24:89:84:15:e2:5e:02:7a:0a:dc: 27:a4:d9:0b:26:10:21:b9:35:d0:00:43:34:b6:ca:ad:02:d3: f3:24:e1:66:ee:21:e4:ec:00:f6:bb:a7:eb:1f:b7:56:5b:f8: 98:be:ed:c1:f4:58:5b:27:d5:47:0a:8d:56:32:6e:c7:95:3a: e7:1f:aa:10:86:84:67:4c:51:0b:8f:6d:15:32:c0:ac:ba:1b: 69:ff:7e:42:c2:01:df:7a:85:a7:32:17:21:e2:42:4c:f7:a0: ae:4b:5c:24 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pO0grFHHc+JmmJ/6P0O0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5ODJmM2QwZTY2NDI5YjY4NWIxODUwYTlkZmYyNWM3YWEz N2EwYzYwHhcNMjYwMTAxMjIxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzQ4MTQwYWFjMGQzNGYxNzY0MzRmNmUzNzJkNzNkMTIxNzY3ODc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6C1uhS/8f4H3GkGIVK6oRpGxYev/ va1RXFKIbKQ0mkIxiurjOFumGEgnXsexdZgG0r9BoDfCNMnGSBr6k4kR18Tq22IQ 0DHoB060M5WFeFTHYvK6ADtWO/kZB90ER3tAv85bp5XbuIZxFLDUmnc01jW79Xc1 EsHiNiPhQKydza4x8+lrsHPI46tskMdVvlz0PbmxRp8dHRPSd9HXyEKeIHZUX+3W sk5NMg5zSYgCUy5i4gSXmupemvNQauiG23cmkoC5sxyMvBGnEAG1hRVhrPp/Ukp8 0HDoBI2jWeduXWNld1G+CyOvbpNOLzqrnqMrqOJP42nDABdZfl51AJuzGwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBxIFAqsDTTxdkNPbjctc9Ehdnh5MB8GA1UdIwQY MBaAFKmC89DmZCm2hbGFCp3/JceqN6DGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVlMejBPWmtLYmFGc1lVS25mOGx4Nm8zb01ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9iNDViYTQtYWIzNi00OWFiLTk4ZTQt OGI0NzkzZjkwZjE1LzEvSEVnVUNxd05OUEYyUTA5dU55MXowU0YyZUhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9iNDViYTQtYWIzNi00OWFiLTk4ZTQtOGI0NzkzZjkwZjE1 LzEvcVlMejBPWmtLYmFGc1lVS25mOGx4Nm8zb01ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLQ1kMA0G CSqGSIb3DQEBCwUAA4IBAQBNEGSgB4zKAgP4KYGowRi126JJMO5gpS2OsF/Z9Y+7 /xrNG9wN1sg5zdy68GiuD8qBb9/J/w5RD95Volfwd1QR8mB/VjydUcwOIhSYUmaJ zZ5Pe3lNdoErKZLiL/Uhhw50NE6izHqZUMimZxO9RshAxwnodoTptOL26k/TjIH4 kdpt7Vivy5IwZ3woMBi1/bMiNMSv0aOb+CSJhBXiXgJ6CtwnpNkLJhAhuTXQAEM0 tsqtAtPzJOFm7iHk7AD2u6frH7dWW/iYvu3B9FhbJ9VHCo1WMm7HlTrnH6oQhoRn TFELj20VMsCsuhtp/35CwgHfeoWnMhch4kJM96CuS1wk -----END CERTIFICATE-----Generated at Fri Jan 9 17:06:57 2026 by rpki-client