This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/HEYAnN_9hlNawT0gfEq7cBceqz4.roa File: HEYAnN_9hlNawT0gfEq7cBceqz4.roa (raw, json) Hash identifier: I1MGXqqgieCZdZAjgnAyAg80Pf2U7lhaBnlyBhpIJso= Subject key identifier: 1C:46:00:9C:DF:FD:86:53:5A:C1:3D:20:7C:4A:BB:70:17:1E:AB:3E Certificate issuer: /CN=bfaea358aeeeb7d0b9e0f93d23f67d29a7ec62c8 Certificate serial: 019B78A2CBFC41A3C2D4C5944CFCFC748ADA Authority key identifier: BF:AE:A3:58:AE:EE:B7:D0:B9:E0:F9:3D:23:F6:7D:29:A7:EC:62:C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v66jWK7ut9C54Pk9I_Z9KafsYsg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/HEYAnN_9hlNawT0gfEq7cBceqz4.roa Signing time: Thu 01 Jan 2026 08:18:13 +0000 ROA not before: Thu 01 Jan 2026 08:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41540 IP address blocks: 194.246.120.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.mft rsync://rpki.ripe.net/repository/DEFAULT/v66jWK7ut9C54Pk9I_Z9KafsYsg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 09 Feb 2026 03:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:cb:fc:41:a3:c2:d4:c5:94:4c:fc:fc:74:8a:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfaea358aeeeb7d0b9e0f93d23f67d29a7ec62c8 Validity Not Before: Jan 1 08:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1c46009cdffd86535ac13d207c4abb70171eab3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:56:f8:6e:25:94:10:dd:00:2e:fd:5f:9e:7b: 42:85:ad:b0:b4:8a:ea:0c:38:36:1f:38:86:bc:8a: 22:6b:a6:9f:c1:e1:05:93:18:f5:6c:69:16:7d:fe: 10:19:97:be:ac:a5:97:7a:9d:c2:dd:78:c3:40:79: b6:b3:b1:fc:56:82:f4:27:4f:6a:b7:07:c0:ba:22: c7:0d:90:01:9b:c1:9e:0f:10:16:55:4d:ab:75:de: f7:25:c6:4c:55:f6:5a:bb:5e:bc:2d:59:39:6c:0a: 7a:fe:9a:85:c9:94:81:9d:ed:a2:14:25:24:14:db: ed:e1:5b:13:62:73:b9:39:f7:0e:87:10:e3:43:78: ab:3d:bb:f4:69:fa:a4:7c:f7:90:fd:ad:bd:91:c3: 42:47:93:58:af:ee:b8:35:e6:0e:7b:2d:3f:61:3b: fb:22:ad:cd:69:01:42:6f:5d:dc:d0:85:5d:8c:99: 7a:1c:1a:62:4e:56:db:6c:50:d2:df:f6:58:ef:a7: 57:39:80:ee:fa:76:b2:c3:99:27:4f:45:8c:cc:e0: 15:49:bf:88:cb:94:93:98:26:60:f4:2b:90:52:a6: 87:6f:17:77:04:5c:ff:2e:37:51:00:c4:8f:ff:e3: 59:9d:da:f7:f0:f1:69:37:08:e8:78:ae:ac:03:38: 70:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:46:00:9C:DF:FD:86:53:5A:C1:3D:20:7C:4A:BB:70:17:1E:AB:3E X509v3 Authority Key Identifier: keyid:BF:AE:A3:58:AE:EE:B7:D0:B9:E0:F9:3D:23:F6:7D:29:A7:EC:62:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v66jWK7ut9C54Pk9I_Z9KafsYsg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/HEYAnN_9hlNawT0gfEq7cBceqz4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.246.120.0/24 Signature Algorithm: sha256WithRSAEncryption a8:b8:b0:e4:cf:63:cd:28:11:31:9f:11:f5:41:87:77:41:14: b8:60:99:56:33:74:2b:61:cd:ef:0e:00:cc:f6:52:4a:53:9b: 63:45:07:04:22:96:48:85:1c:1f:ae:e3:45:fb:9c:0c:5a:d3: fd:96:31:37:57:8d:23:22:91:0c:f5:bb:c8:94:10:a5:79:b8: 41:05:a3:83:99:1e:6b:b4:52:80:c8:3c:54:36:68:e3:79:3b: d9:fb:cc:a6:63:06:25:8b:b9:e9:16:fb:a1:fb:b7:1a:84:09: 3b:f1:94:99:c9:cb:1d:9e:33:76:47:65:fa:1f:5f:ff:28:bd: 65:65:20:f9:cc:58:c2:f8:60:c9:27:ec:ff:bb:bd:6b:3f:d5: d7:cb:27:53:2e:7d:8b:28:de:83:f7:f1:21:74:f4:1f:72:46: 7b:40:2d:e3:df:02:e0:6f:1e:90:c3:bd:a5:51:f4:d0:84:ef: b4:68:07:78:c2:5f:10:66:7f:5e:c5:9f:af:44:d2:d7:03:f2: f1:dd:65:c5:a7:01:50:fb:e6:e2:24:1e:38:78:15:76:99:ef: 7c:6a:84:08:70:50:31:db:c2:d5:eb:c4:1c:85:96:e6:4b:5e: 72:7b:22:a6:9e:5a:43:6a:48:64:e7:de:0f:90:80:ff:be:6d: d6:7a:72:9c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4osv8QaPC1MWUTPz8dIraMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmYWVhMzU4YWVlZWI3ZDBiOWUwZjkzZDIzZjY3ZDI5YTdl YzYyYzgwHhcNMjYwMTAxMDgxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzQ2MDA5Y2RmZmQ4NjUzNWFjMTNkMjA3YzRhYmI3MDE3MWVhYjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVb4biWUEN0ALv1fnntCha2wtIrq DDg2HziGvIoia6afweEFkxj1bGkWff4QGZe+rKWXep3C3XjDQHm2s7H8VoL0J09q twfAuiLHDZABm8GeDxAWVU2rdd73JcZMVfZau168LVk5bAp6/pqFyZSBne2iFCUk FNvt4VsTYnO5OfcOhxDjQ3irPbv0afqkfPeQ/a29kcNCR5NYr+64NeYOey0/YTv7 Iq3NaQFCb13c0IVdjJl6HBpiTlbbbFDS3/ZY76dXOYDu+nayw5knT0WMzOAVSb+I y5STmCZg9CuQUqaHbxd3BFz/LjdRAMSP/+NZndr38PFpNwjoeK6sAzhw8wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBxGAJzf/YZTWsE9IHxKu3AXHqs+MB8GA1UdIwQY MBaAFL+uo1iu7rfQueD5PSP2fSmn7GLIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjY2aldLN3V0OUM1NFBrOUlfWjlLYWZzWXNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8yODg0MTYtYTQ2ZS00OWMzLTkzMzct MjQ5Y2UwYzMxMmIzLzEvSEVZQW5OXzlobE5hd1QwZ2ZFcTdjQmNlcXo0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8yODg0MTYtYTQ2ZS00OWMzLTkzMzctMjQ5Y2UwYzMxMmIz LzEvdjY2aldLN3V0OUM1NFBrOUlfWjlLYWZzWXNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwvZ4MA0G CSqGSIb3DQEBCwUAA4IBAQCouLDkz2PNKBExnxH1QYd3QRS4YJlWM3QrYc3vDgDM 9lJKU5tjRQcEIpZIhRwfruNF+5wMWtP9ljE3V40jIpEM9bvIlBClebhBBaODmR5r tFKAyDxUNmjjeTvZ+8ymYwYli7npFvuh+7cahAk78ZSZycsdnjN2R2X6H1//KL1l ZSD5zFjC+GDJJ+z/u71rP9XXyydTLn2LKN6D9/EhdPQfckZ7QC3j3wLgbx6Qw72l UfTQhO+0aAd4wl8QZn9exZ+vRNLXA/Lx3WXFpwFQ++biJB44eBV2me98aoQIcFAx 28LV68QchZbmS15yeyKmnlpDakhk594PkID/vm3WenKc -----END CERTIFICATE-----Generated at Sun Feb 8 08:10:02 2026 by rpki-client