This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/HkESZav4s-gaBhayorEKTs_dvWY.roa File: HkESZav4s-gaBhayorEKTs_dvWY.roa (raw, json) Hash identifier: 4pdtiZ94ktcZKGQXEiN4JbBohEK0TkGQ1CIQ5Piq3Ns= Subject key identifier: 1E:41:12:65:AB:F8:B3:E8:1A:06:16:B2:A2:B1:0A:4E:CF:DD:BD:66 Certificate issuer: /CN=bf4fcb64aeb3455fb39897e31295dde83add4d0e Certificate serial: 019B7911294F845CC59CBDBE76170F240B6A Authority key identifier: BF:4F:CB:64:AE:B3:45:5F:B3:98:97:E3:12:95:DD:E8:3A:DD:4D:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/HkESZav4s-gaBhayorEKTs_dvWY.roa Signing time: Thu 01 Jan 2026 10:18:46 +0000 ROA not before: Thu 01 Jan 2026 10:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48200 IP address blocks: 193.36.46.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.mft rsync://rpki.ripe.net/repository/DEFAULT/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:29:4f:84:5c:c5:9c:bd:be:76:17:0f:24:0b:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf4fcb64aeb3455fb39897e31295dde83add4d0e Validity Not Before: Jan 1 10:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1e411265abf8b3e81a0616b2a2b10a4ecfddbd66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b1:9d:b3:ec:06:ef:a2:5c:2a:34:7c:0e:df: 01:ee:94:92:98:16:06:88:2d:64:7d:5a:2a:12:bb: 57:ea:04:05:20:14:21:63:72:92:24:c6:b2:da:d4: 2c:62:48:bb:a1:4c:b1:cc:9c:fb:e2:72:b3:53:86: 55:91:ef:a8:5b:6d:79:dd:7b:a1:f6:75:dd:ed:a0: 6c:0b:a4:fd:4d:06:2e:79:aa:37:aa:fb:3a:bd:6e: 4f:d6:fc:50:6d:d7:b4:71:81:ab:87:56:89:e9:f3: 9b:ff:ef:e6:df:cc:bb:ae:91:9e:4f:5a:6d:bc:13: 2e:c9:76:4c:ec:df:1e:a6:cf:68:a5:af:2e:26:49: 89:b1:5c:7a:d5:26:b8:da:3a:08:aa:a4:96:d3:5c: 99:3e:57:bc:35:ff:7f:89:03:43:15:a2:7e:e9:5f: 11:26:5c:ed:fc:d7:15:1e:80:ef:c3:25:d5:87:e7: 87:87:25:d8:da:c2:e8:67:f7:24:83:71:e6:cb:3e: 1f:53:a2:c6:94:d2:59:fc:ec:ac:1f:26:f5:13:bb: 3e:33:2d:cd:4c:90:4b:c0:95:f7:41:63:77:87:1a: 01:96:f2:4a:3d:85:5e:03:12:b8:26:d9:1f:42:0c: 2a:48:5d:50:21:0a:5b:a5:5b:44:c3:f5:8f:f7:93: e7:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:41:12:65:AB:F8:B3:E8:1A:06:16:B2:A2:B1:0A:4E:CF:DD:BD:66 X509v3 Authority Key Identifier: keyid:BF:4F:CB:64:AE:B3:45:5F:B3:98:97:E3:12:95:DD:E8:3A:DD:4D:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/HkESZav4s-gaBhayorEKTs_dvWY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.36.46.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:70:f1:67:c7:03:ac:e8:2f:db:b2:26:a6:0d:f5:87:0c:27: 8b:a9:bc:57:9d:e6:8e:4b:21:37:f2:e7:d4:20:cc:65:95:92: 46:22:17:77:c2:77:22:63:9f:96:c9:d1:d5:ad:c7:aa:d4:ab: 58:e5:57:dd:68:91:7b:86:23:a5:71:27:55:e8:9f:a0:d6:90: 07:00:f9:cd:10:60:52:f7:be:97:36:c4:c2:d9:73:b3:c3:99: e9:03:2b:fb:eb:d5:3e:2e:ba:fc:41:43:6e:be:45:1d:48:ae: ba:73:8e:33:da:ba:21:f6:31:2d:07:63:6a:c7:2d:d1:39:4d: 47:68:dd:b1:2a:64:49:cb:4f:07:db:2c:ad:59:ac:5c:0f:21: 1b:e5:24:1a:59:88:bc:02:c8:18:ca:82:35:9c:94:12:6f:ea: de:e9:8d:10:e6:38:76:af:8b:10:ab:fa:aa:8b:4d:a4:0f:db: 77:b0:b3:5b:29:67:cb:04:23:a5:6b:df:9f:33:40:a0:3e:b7: ef:f6:3d:e8:0c:94:67:d4:af:4d:63:26:e8:72:81:5e:9c:1a: 26:2d:ea:6a:2b:ec:4e:02:13:32:2a:bd:09:ff:23:8d:01:f7: 57:5a:aa:0b:c9:76:7b:c5:c9:21:a5:8e:5d:98:bf:f3:0c:56: ad:15:25:bc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ESlPhFzFnL2+dhcPJAtqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmNGZjYjY0YWViMzQ1NWZiMzk4OTdlMzEyOTVkZGU4M2Fk ZDRkMGUwHhcNMjYwMTAxMTAxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZTQxMTI2NWFiZjhiM2U4MWEwNjE2YjJhMmIxMGE0ZWNmZGRiZDY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrGds+wG76JcKjR8Dt8B7pSSmBYG iC1kfVoqErtX6gQFIBQhY3KSJMay2tQsYki7oUyxzJz74nKzU4ZVke+oW2153Xuh 9nXd7aBsC6T9TQYueao3qvs6vW5P1vxQbde0cYGrh1aJ6fOb/+/m38y7rpGeT1pt vBMuyXZM7N8eps9opa8uJkmJsVx61Sa42joIqqSW01yZPle8Nf9/iQNDFaJ+6V8R Jlzt/NcVHoDvwyXVh+eHhyXY2sLoZ/ckg3Hmyz4fU6LGlNJZ/OysHyb1E7s+My3N TJBLwJX3QWN3hxoBlvJKPYVeAxK4JtkfQgwqSF1QIQpbpVtEw/WP95PnpwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB5BEmWr+LPoGgYWsqKxCk7P3b1mMB8GA1UdIwQY MBaAFL9Py2Sus0Vfs5iX4xKV3eg63U0OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjBfTFpLNnpSVi16bUpmakVwWGQ2RHJkVFE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8zZTc5ODAtN2UzMS00ZmQxLWI3OWQt MGJkNjJjODNlOTJiLzEvSGtFU1phdjRzLWdhQmhheW9yRUtUc19kdldZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8zZTc5ODAtN2UzMS00ZmQxLWI3OWQtMGJkNjJjODNlOTJi LzEvdjBfTFpLNnpSVi16bUpmakVwWGQ2RHJkVFE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSQuMA0G CSqGSIb3DQEBCwUAA4IBAQBacPFnxwOs6C/bsiamDfWHDCeLqbxXneaOSyE38ufU IMxllZJGIhd3wnciY5+WydHVrceq1KtY5VfdaJF7hiOlcSdV6J+g1pAHAPnNEGBS 976XNsTC2XOzw5npAyv769U+Lrr8QUNuvkUdSK66c44z2roh9jEtB2Nqxy3ROU1H aN2xKmRJy08H2yytWaxcDyEb5SQaWYi8AsgYyoI1nJQSb+re6Y0Q5jh2r4sQq/qq i02kD9t3sLNbKWfLBCOla9+fM0CgPrfv9j3oDJRn1K9NYybocoFenBomLepqK+xO AhMyKr0J/yONAfdXWqoLyXZ7xckhpY5dmL/zDFatFSW8 -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:48 2026 by rpki-client