This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/he4JY2N5j1RFVekn19UcBublhH4.roa File: he4JY2N5j1RFVekn19UcBublhH4.roa (raw, json) Hash identifier: zGU9xsq9X0zM4oIz4ddypQ8oes1HfykPzY/Z6pokZvs= Subject key identifier: 85:EE:09:63:63:79:8F:54:45:55:E9:27:D7:D5:1C:06:E6:E5:84:7E Certificate issuer: /CN=dafb645f134f4fdada45e70bcfcd93b897dbd725 Certificate serial: 019B7B3669F53B4995AE37D5F50A1AC73AB5 Authority key identifier: DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/he4JY2N5j1RFVekn19UcBublhH4.roa Signing time: Thu 01 Jan 2026 20:18:42 +0000 ROA not before: Thu 01 Jan 2026 20:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35766 IP address blocks: 31.184.166.0/23 maxlen: 24 31.184.172.0/24 maxlen: 24 31.184.175.0/24 maxlen: 24 37.130.204.0/22 maxlen: 24 37.130.204.0/24 maxlen: 24 37.130.205.0/24 maxlen: 24 37.130.206.0/24 maxlen: 24 37.130.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:69:f5:3b:49:95:ae:37:d5:f5:0a:1a:c7:3a:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dafb645f134f4fdada45e70bcfcd93b897dbd725 Validity Not Before: Jan 1 20:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=85ee096363798f544555e927d7d51c06e6e5847e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b2:c3:81:84:9a:b1:f0:fa:c3:64:7f:6b:cd: bd:0a:d5:f7:94:53:41:34:ba:52:c7:92:8e:93:0f: 9a:dc:51:cf:e0:0b:46:df:72:91:73:cb:f6:fe:59: 4c:a5:48:5e:a6:ef:29:1f:94:3d:32:ad:9e:2a:af: 34:7a:bc:0b:4b:08:11:de:94:35:f8:de:d1:c0:ac: 4c:99:a1:6b:a6:10:f9:62:b1:d0:6b:bf:9e:4c:f3: 3f:c3:bd:88:b0:cc:8b:e6:e9:e0:93:37:ab:3b:6a: 51:2c:c3:b7:73:75:27:54:18:09:ab:c9:9a:8e:63: fc:cc:c7:b1:50:8d:e1:c2:96:07:7a:bf:ec:8c:c7: 56:87:d3:30:31:e8:54:d7:f4:1c:e9:48:c4:ed:90: 1a:da:33:2f:3c:f5:ec:37:fc:16:68:56:9c:a9:6c: a6:9c:24:de:85:ea:e3:92:fb:ad:fa:10:c4:44:1d: c1:a1:4a:47:dc:82:e7:0b:38:c6:5d:4f:b3:c6:b4: e2:3e:a8:37:ff:4b:f0:1b:ef:1c:a6:7c:96:87:e1: 4a:21:b8:16:2a:7b:65:17:f0:3d:fc:7b:ea:c1:91: 65:93:cf:75:3c:9d:59:21:3c:0c:f8:18:be:c9:aa: 6e:38:3f:79:79:a8:d4:ac:0f:1f:f9:25:7a:c4:ee: a0:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:EE:09:63:63:79:8F:54:45:55:E9:27:D7:D5:1C:06:E6:E5:84:7E X509v3 Authority Key Identifier: keyid:DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/he4JY2N5j1RFVekn19UcBublhH4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.184.166.0/23 31.184.172.0/24 31.184.175.0/24 37.130.204.0/22 Signature Algorithm: sha256WithRSAEncryption 44:41:3c:d7:b6:f5:a3:1a:7d:bd:ef:59:b6:5b:4a:92:76:6d: f1:3f:ec:e8:1c:f3:f5:39:d8:fe:d8:a3:fd:40:47:11:de:67: cd:43:0f:03:8b:d5:84:12:cd:89:2d:0a:8d:af:73:38:85:91: 60:49:43:05:f8:61:a4:b9:ce:7a:5e:bc:2e:fc:e3:12:29:f8: a5:eb:2e:5a:67:99:62:71:8b:61:1a:2b:bf:15:59:00:7f:13: ce:da:d2:da:1b:a9:a4:1f:8d:59:0f:0a:7a:41:13:56:f6:fa: c0:65:56:66:ed:0a:dd:02:6e:a5:6b:76:50:40:01:ab:cc:ea: 58:93:90:1f:eb:d7:14:ea:c7:f3:ed:97:a3:46:22:94:58:e5: 18:6f:d0:05:20:53:4a:ef:6b:f6:b5:02:c1:8c:af:4b:c7:b7: b6:bf:6c:91:32:fd:7b:f5:84:ff:18:b4:14:39:33:23:ae:26: ba:9b:88:2e:f9:7b:4d:0e:ca:bf:f8:1c:c3:aa:c2:36:69:aa: c7:1a:1e:06:c8:66:c3:91:e7:c3:43:03:46:1f:99:32:28:a6: 73:24:60:d6:ea:0a:97:ca:a3:b0:6a:a3:22:4d:3b:a4:67:84: 02:71:63:6c:8c:95:9a:8e:ef:18:86:72:76:65:51:28:dd:c0: 6c:3d:1f:87 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt7Nmn1O0mVrjfV9Qoaxzq1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhZmI2NDVmMTM0ZjRmZGFkYTQ1ZTcwYmNmY2Q5M2I4OTdk YmQ3MjUwHhcNMjYwMTAxMjAxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NWVlMDk2MzYzNzk4ZjU0NDU1NWU5MjdkN2Q1MWMwNmU2ZTU4NDdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbLDgYSasfD6w2R/a829CtX3lFNB NLpSx5KOkw+a3FHP4AtG33KRc8v2/llMpUhepu8pH5Q9Mq2eKq80erwLSwgR3pQ1 +N7RwKxMmaFrphD5YrHQa7+eTPM/w72IsMyL5ungkzerO2pRLMO3c3UnVBgJq8ma jmP8zMexUI3hwpYHer/sjMdWh9MwMehU1/Qc6UjE7ZAa2jMvPPXsN/wWaFacqWym nCTeherjkvut+hDERB3BoUpH3ILnCzjGXU+zxrTiPqg3/0vwG+8cpnyWh+FKIbgW KntlF/A9/HvqwZFlk891PJ1ZITwM+Bi+yapuOD95eajUrA8f+SV6xO6glwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFIXuCWNjeY9URVXpJ9fVHAbm5YR+MB8GA1UdIwQY MBaAFNr7ZF8TT0/a2kXnC8/Nk7iX29clMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnZ0a1h4TlBUOXJhUmVjTHo4MlR1SmZiMXlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi83YTQ4ZjUtYmQyNC00ZGM0LThjY2Et NmJhMGEwY2UwMWVkLzEvaGU0SlkyTjVqMVJGVmVrbjE5VWNCdWJsaEg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi83YTQ4ZjUtYmQyNC00ZGM0LThjY2EtNmJhMGEwY2UwMWVk LzEvMnZ0a1h4TlBUOXJhUmVjTHo4MlR1SmZiMXlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBH7imAwQA H7isAwQAH7ivAwQCJYLMMA0GCSqGSIb3DQEBCwUAA4IBAQBEQTzXtvWjGn2971m2 W0qSdm3xP+zoHPP1Odj+2KP9QEcR3mfNQw8Di9WEEs2JLQqNr3M4hZFgSUMF+GGk uc56Xrwu/OMSKfil6y5aZ5licYthGiu/FVkAfxPO2tLaG6mkH41ZDwp6QRNW9vrA ZVZm7QrdAm6la3ZQQAGrzOpYk5Af69cU6sfz7ZejRiKUWOUYb9AFIFNK72v2tQLB jK9Lx7e2v2yRMv179YT/GLQUOTMjria6m4gu+XtNDsq/+BzDqsI2aarHGh4GyGbD kefDQwNGH5kyKKZzJGDW6gqXyqOwaqMiTTukZ4QCcWNsjJWaju8YhnJ2ZVEo3cBs PR+H -----END CERTIFICATE-----Generated at Mon Jan 26 07:51:39 2026 by rpki-client