This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/HeTj1rlCLTtvBYW1onGZ7LauPQY.roa File: HeTj1rlCLTtvBYW1onGZ7LauPQY.roa (raw, json) Hash identifier: weFl57AveWg1aEff8nmfajyotthwbCTL0U0EBzxk8Zk= Subject key identifier: 1D:E4:E3:D6:B9:42:2D:3B:6F:05:85:B5:A2:71:99:EC:B6:AE:3D:06 Certificate issuer: /CN=761e791f3ae83ae8b263e3cdb682a3475b5707df Certificate serial: 019B7D5CD875FCC6BE6D3C2CC8BFB94B05D4 Authority key identifier: 76:1E:79:1F:3A:E8:3A:E8:B2:63:E3:CD:B6:82:A3:47:5B:57:07:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dh55HzroOuiyY-PNtoKjR1tXB98.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/HeTj1rlCLTtvBYW1onGZ7LauPQY.roa Signing time: Fri 02 Jan 2026 06:19:55 +0000 ROA not before: Fri 02 Jan 2026 06:19:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43341 IP address blocks: 77.83.176.0/22 maxlen: 22 2a09:8580::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft rsync://rpki.ripe.net/repository/DEFAULT/dh55HzroOuiyY-PNtoKjR1tXB98.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:d8:75:fc:c6:be:6d:3c:2c:c8:bf:b9:4b:05:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=761e791f3ae83ae8b263e3cdb682a3475b5707df Validity Not Before: Jan 2 06:19:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1de4e3d6b9422d3b6f0585b5a27199ecb6ae3d06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:28:00:04:de:f1:6b:55:14:8d:c4:d4:b2:fa: 03:03:64:f2:e4:97:92:28:ac:97:7c:6b:10:9f:ea: 45:bf:5f:99:49:38:a6:ad:20:cb:e0:2a:1c:13:d6: 95:39:c5:66:bd:63:e0:1c:5a:17:50:42:04:03:e6: 93:82:4f:4d:b8:52:c8:f9:83:54:1f:f3:90:d0:7e: a3:76:5d:f3:f2:1a:ba:61:f2:76:5a:8c:4b:56:94: f3:0c:8c:46:0b:1d:35:7d:e4:1c:0a:d5:d5:29:be: 3f:b3:5d:10:06:36:6f:4a:42:2c:e9:bc:f9:b4:34: 4e:b7:78:b6:00:f5:29:f9:a9:e1:75:0d:b5:3a:1a: d1:28:36:11:65:b6:a5:ea:61:c7:db:a9:9c:74:bd: 03:f7:82:fe:19:59:83:4b:ca:f9:e7:76:42:61:76: d4:dc:e6:eb:fc:51:34:f3:c3:f4:63:b7:87:37:49: f9:57:7b:f2:61:be:7d:33:88:e3:7b:5c:1b:53:0b: 0b:80:be:c3:f9:6d:75:04:cf:01:a0:74:4f:91:7c: c0:ce:0e:c2:38:18:39:e9:ce:38:97:3c:49:12:99: 3e:37:af:0f:70:b3:df:5f:38:40:1b:85:ae:6c:43: d0:e1:ce:05:70:6e:4c:c3:b8:96:8f:51:66:f2:dd: 43:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:E4:E3:D6:B9:42:2D:3B:6F:05:85:B5:A2:71:99:EC:B6:AE:3D:06 X509v3 Authority Key Identifier: keyid:76:1E:79:1F:3A:E8:3A:E8:B2:63:E3:CD:B6:82:A3:47:5B:57:07:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dh55HzroOuiyY-PNtoKjR1tXB98.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/HeTj1rlCLTtvBYW1onGZ7LauPQY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.83.176.0/22 IPv6: 2a09:8580::/29 Signature Algorithm: sha256WithRSAEncryption 37:44:7b:73:5d:d4:a6:56:21:be:87:c1:0f:d2:fe:4d:e0:db: f8:80:12:8c:d7:61:f3:4f:44:fb:09:eb:c1:91:15:ce:a5:90: 48:30:f1:c6:97:ca:1f:7f:9c:d7:e2:9c:7e:27:21:ea:4f:d6: 20:d8:ec:61:0f:b7:b7:05:a8:c0:ee:7e:e6:76:aa:d3:ec:f0: 89:e7:47:fe:e7:a2:24:34:7b:ec:9a:c6:63:c0:64:89:d7:b1: 9e:bb:d2:0a:f6:e0:3e:eb:65:98:ad:cb:aa:12:ae:14:de:1d: 71:cd:3c:6d:e5:28:2c:40:67:5d:c3:f5:10:5b:85:0c:fb:a6: f6:8a:dc:72:44:f6:85:71:d5:30:89:0c:e1:87:f6:49:22:eb: c9:8f:49:24:27:07:c7:f6:60:04:3c:bc:76:aa:a6:87:fa:7b: c3:a3:5f:3f:46:ce:a2:6e:c7:20:e9:07:a9:51:e9:ee:35:a7: 35:25:2a:1f:01:06:2b:82:de:ff:a2:95:5c:0c:11:ef:eb:fb: be:f9:b4:3b:3e:2d:26:d5:68:cf:67:ca:fc:6e:a2:e9:e1:5a: 5a:5c:19:34:3b:ad:04:8f:43:e3:fe:ba:30:47:27:90:35:70: be:68:78:e7:87:00:a0:5c:d2:b9:09:a5:da:63:da:0f:a8:17: cf:8b:b3:52 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9XNh1/Ma+bTwsyL+5SwXUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2MWU3OTFmM2FlODNhZThiMjYzZTNjZGI2ODJhMzQ3NWI1 NzA3ZGYwHhcNMjYwMTAyMDYxOTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZGU0ZTNkNmI5NDIyZDNiNmYwNTg1YjVhMjcxOTllY2I2YWUzZDA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCgABN7xa1UUjcTUsvoDA2Ty5JeS KKyXfGsQn+pFv1+ZSTimrSDL4CocE9aVOcVmvWPgHFoXUEIEA+aTgk9NuFLI+YNU H/OQ0H6jdl3z8hq6YfJ2WoxLVpTzDIxGCx01feQcCtXVKb4/s10QBjZvSkIs6bz5 tDROt3i2APUp+anhdQ21OhrRKDYRZbal6mHH26mcdL0D94L+GVmDS8r553ZCYXbU 3Obr/FE088P0Y7eHN0n5V3vyYb59M4jje1wbUwsLgL7D+W11BM8BoHRPkXzAzg7C OBg56c44lzxJEpk+N68PcLPfXzhAG4WubEPQ4c4FcG5Mw7iWj1Fm8t1D7wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFB3k49a5Qi07bwWFtaJxmey2rj0GMB8GA1UdIwQY MBaAFHYeeR866DrosmPjzbaCo0dbVwffMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGg1NUh6cm9PdWl5WS1QTnRvS2pSMXRYQjk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9mY2Q5OTAtNzJmNC00ZWJkLTg2NGEt OTJlNDUxODc3ZDJjLzEvSGVUajFybENMVHR2QllXMW9uR1o3TGF1UFFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS9mY2Q5OTAtNzJmNC00ZWJkLTg2NGEtOTJlNDUxODc3ZDJj LzEvZGg1NUh6cm9PdWl5WS1QTnRvS2pSMXRYQjk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCTVOwMA0E AgACMAcDBQMqCYWAMA0GCSqGSIb3DQEBCwUAA4IBAQA3RHtzXdSmViG+h8EP0v5N 4Nv4gBKM12HzT0T7CevBkRXOpZBIMPHGl8off5zX4px+JyHqT9Yg2OxhD7e3BajA 7n7mdqrT7PCJ50f+56IkNHvsmsZjwGSJ17Geu9IK9uA+62WYrcuqEq4U3h1xzTxt 5SgsQGddw/UQW4UM+6b2itxyRPaFcdUwiQzhh/ZJIuvJj0kkJwfH9mAEPLx2qqaH +nvDo18/Rs6ibscg6QepUenuNac1JSofAQYrgt7/opVcDBHv6/u++bQ7Pi0m1WjP Z8r8bqLp4VpaXBk0O60Ej0Pj/rowRyeQNXC+aHjnhwCgXNK5CaXaY9oPqBfPi7NS -----END CERTIFICATE-----Generated at Tue Feb 10 05:55:09 2026 by rpki-client