This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/772440-876c-42d0-80f5-b4aee8c5d48e/1/hfejHEq9BfnHeerfr4ZvzfyMdD8.roa File: hfejHEq9BfnHeerfr4ZvzfyMdD8.roa (raw, json) Hash identifier: YVFjuu53xMs5opB7mdVNS/KtKWd8kSn9JmJ6kqdpWl0= Subject key identifier: 85:F7:A3:1C:4A:BD:05:F9:C7:79:EA:DF:AF:86:6F:CD:FC:8C:74:3F Certificate issuer: /CN=b3b77e52cc777a1eafe69a517f95d2c219c19080 Certificate serial: 019B7EA4D94479FBBED23A3293A74DA3039C Authority key identifier: B3:B7:7E:52:CC:77:7A:1E:AF:E6:9A:51:7F:95:D2:C2:19:C1:90:80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7d-Usx3eh6v5ppRf5XSwhnBkIA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/772440-876c-42d0-80f5-b4aee8c5d48e/1/hfejHEq9BfnHeerfr4ZvzfyMdD8.roa Signing time: Fri 02 Jan 2026 12:18:11 +0000 ROA not before: Fri 02 Jan 2026 12:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3303 IP address blocks: 91.220.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/772440-876c-42d0-80f5-b4aee8c5d48e/1/s7d-Usx3eh6v5ppRf5XSwhnBkIA.crl rsync://rpki.ripe.net/repository/DEFAULT/73/772440-876c-42d0-80f5-b4aee8c5d48e/1/s7d-Usx3eh6v5ppRf5XSwhnBkIA.mft rsync://rpki.ripe.net/repository/DEFAULT/s7d-Usx3eh6v5ppRf5XSwhnBkIA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:d9:44:79:fb:be:d2:3a:32:93:a7:4d:a3:03:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3b77e52cc777a1eafe69a517f95d2c219c19080 Validity Not Before: Jan 2 12:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=85f7a31c4abd05f9c779eadfaf866fcdfc8c743f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:1b:5c:bd:a3:5a:14:6d:9d:3e:47:6f:ed:a7: 36:78:ce:53:e8:17:91:00:1f:6a:7b:e5:b3:9b:ad: 35:4d:bf:41:07:e3:54:47:a7:ab:1b:4c:a3:73:4f: 12:20:87:d0:28:4f:9e:63:f7:1e:8d:30:db:9e:9c: c4:18:12:e0:0f:cd:9f:33:c5:a9:e4:07:f1:45:80: 92:a8:9d:7b:0a:02:43:2e:21:17:53:3f:b5:30:84: 52:73:4a:c2:b7:f1:cd:f6:be:af:24:bd:98:b3:c6: ad:11:ec:19:94:90:60:57:73:dc:8e:60:6a:56:78: 38:3b:79:54:98:39:43:7d:36:4f:df:a4:15:8a:a0: a8:9a:31:eb:fd:e4:0e:4b:44:c8:42:7b:4d:55:26: 89:86:de:b3:15:95:d5:20:b5:ef:94:d9:f7:05:11: 01:60:9d:b2:88:ce:ee:e8:4c:6f:d2:29:37:be:b2: 3f:50:14:84:92:bb:db:39:86:a7:db:ec:8b:cf:02: a3:54:97:52:76:9a:b5:75:7c:d2:d3:98:dc:0b:28: 6c:3c:7b:85:c2:58:50:a2:8f:16:06:3a:ad:16:c7: be:ee:c2:b1:8f:38:7e:3d:b3:a0:e8:d8:22:6b:b3: 8e:5a:93:c7:83:a8:9e:e0:1d:87:1f:7f:5d:17:5e: 67:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:F7:A3:1C:4A:BD:05:F9:C7:79:EA:DF:AF:86:6F:CD:FC:8C:74:3F X509v3 Authority Key Identifier: keyid:B3:B7:7E:52:CC:77:7A:1E:AF:E6:9A:51:7F:95:D2:C2:19:C1:90:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7d-Usx3eh6v5ppRf5XSwhnBkIA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/772440-876c-42d0-80f5-b4aee8c5d48e/1/hfejHEq9BfnHeerfr4ZvzfyMdD8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/772440-876c-42d0-80f5-b4aee8c5d48e/1/s7d-Usx3eh6v5ppRf5XSwhnBkIA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.220.40.0/24 Signature Algorithm: sha256WithRSAEncryption 66:76:07:0b:e3:d8:a0:d1:b6:06:d8:7a:11:36:35:91:dc:2c: 84:e6:a9:1f:d6:c0:2e:f0:78:42:65:68:c6:6c:de:a8:f1:e7: 31:7e:87:1e:ba:c6:b2:47:2b:a3:d3:11:78:93:7d:02:b5:0f: b5:c8:bb:ef:ba:b1:0d:7d:a4:4d:5a:2f:d3:e5:ee:45:11:90: 65:ae:82:81:80:35:c7:f8:1c:d3:32:82:50:b1:2e:03:cf:e8: 1e:0c:43:d8:14:fd:a8:55:f5:a2:91:a5:00:9e:89:57:89:4b: 07:e0:ce:85:69:61:b8:c4:ef:95:a2:c0:d5:86:34:f6:b2:a5: 93:b2:6f:34:cc:84:d0:29:1e:77:9e:2f:04:b7:11:1d:e7:7f: b7:f3:f6:55:21:78:31:da:68:e5:57:29:06:db:a1:4f:a3:f4: 7c:70:21:ce:a4:90:99:e6:bb:de:59:ba:fd:0d:b3:48:2e:86: cd:8a:15:7b:bb:52:6d:bc:75:5f:14:89:ae:8f:6e:a5:92:7d: 4e:e9:36:95:b3:78:14:e0:ad:f6:15:ca:65:cd:88:6e:89:8c: 64:68:db:c8:93:e9:94:9c:cd:d0:0c:27:60:6b:d3:1d:04:d4: ef:ee:91:ae:4d:2e:6d:07:35:b8:90:35:5c:d0:55:75:04:07: 70:a2:6b:ee -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pNlEefu+0joyk6dNowOcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzYjc3ZTUyY2M3NzdhMWVhZmU2OWE1MTdmOTVkMmMyMTlj MTkwODAwHhcNMjYwMTAyMTIxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NWY3YTMxYzRhYmQwNWY5Yzc3OWVhZGZhZjg2NmZjZGZjOGM3NDNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BtcvaNaFG2dPkdv7ac2eM5T6BeR AB9qe+Wzm601Tb9BB+NUR6erG0yjc08SIIfQKE+eY/cejTDbnpzEGBLgD82fM8Wp 5AfxRYCSqJ17CgJDLiEXUz+1MIRSc0rCt/HN9r6vJL2Ys8atEewZlJBgV3PcjmBq Vng4O3lUmDlDfTZP36QViqComjHr/eQOS0TIQntNVSaJht6zFZXVILXvlNn3BREB YJ2yiM7u6Exv0ik3vrI/UBSEkrvbOYan2+yLzwKjVJdSdpq1dXzS05jcCyhsPHuF wlhQoo8WBjqtFse+7sKxjzh+PbOg6Ngia7OOWpPHg6ie4B2HH39dF15nMwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIX3oxxKvQX5x3nq36+Gb838jHQ/MB8GA1UdIwQY MBaAFLO3flLMd3oer+aaUX+V0sIZwZCAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczdkLVVzeDNlaDZ2NXBwUmY1WFN3aG5Ca0lBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My83NzI0NDAtODc2Yy00MmQwLTgwZjUt YjRhZWU4YzVkNDhlLzEvaGZlakhFcTlCZm5IZWVyZnI0WnZ6ZnlNZEQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My83NzI0NDAtODc2Yy00MmQwLTgwZjUtYjRhZWU4YzVkNDhl LzEvczdkLVVzeDNlaDZ2NXBwUmY1WFN3aG5Ca0lBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9woMA0G CSqGSIb3DQEBCwUAA4IBAQBmdgcL49ig0bYG2HoRNjWR3CyE5qkf1sAu8HhCZWjG bN6o8ecxfoceusayRyuj0xF4k30CtQ+1yLvvurENfaRNWi/T5e5FEZBlroKBgDXH +BzTMoJQsS4Dz+geDEPYFP2oVfWikaUAnolXiUsH4M6FaWG4xO+VosDVhjT2sqWT sm80zITQKR53ni8EtxEd53+38/ZVIXgx2mjlVykG26FPo/R8cCHOpJCZ5rveWbr9 DbNILobNihV7u1JtvHVfFImuj26lkn1O6TaVs3gU4K32FcplzYhuiYxkaNvIk+mU nM3QDCdga9MdBNTv7pGuTS5tBzW4kDVc0FV1BAdwomvu -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:26 2026 by rpki-client