This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/hhB0IeJBwNyXofg4mPvSau-d9JU.roa File: hhB0IeJBwNyXofg4mPvSau-d9JU.roa (raw, json) Hash identifier: rSR4VGaBwGTXWCnhcTMFNg3NGbcBK7CKNCSrlO5fp2g= Subject key identifier: 86:10:74:21:E2:41:C0:DC:97:A1:F8:38:98:FB:D2:6A:EF:9D:F4:95 Certificate issuer: /CN=cabe6ea6ef33089e5259d249c5b0dfaa13a94d78 Certificate serial: 019B76EAE8F507A76E62704AD4B098DF14BE Authority key identifier: CA:BE:6E:A6:EF:33:08:9E:52:59:D2:49:C5:B0:DF:AA:13:A9:4D:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yr5upu8zCJ5SWdJJxbDfqhOpTXg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/hhB0IeJBwNyXofg4mPvSau-d9JU.roa Signing time: Thu 01 Jan 2026 00:17:45 +0000 ROA not before: Thu 01 Jan 2026 00:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205375 IP address blocks: 185.220.84.0/24 maxlen: 24 185.220.85.0/24 maxlen: 24 185.220.86.0/24 maxlen: 24 185.220.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.crl rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft rsync://rpki.ripe.net/repository/DEFAULT/yr5upu8zCJ5SWdJJxbDfqhOpTXg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:e8:f5:07:a7:6e:62:70:4a:d4:b0:98:df:14:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cabe6ea6ef33089e5259d249c5b0dfaa13a94d78 Validity Not Before: Jan 1 00:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=86107421e241c0dc97a1f83898fbd26aef9df495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c3:48:3f:ec:3f:d1:a3:12:84:24:b5:08:cc: 6b:71:e3:75:cc:10:dc:38:b8:5a:15:8e:88:f6:05: f3:40:c9:43:e2:c7:49:1c:e4:25:62:5d:fb:bb:09: c1:e8:56:db:4c:94:6b:d9:ca:85:bb:3a:4b:4a:05: 6d:16:a9:98:14:56:24:6f:a8:3b:07:5c:1f:0b:05: d6:20:c0:20:7d:ae:fb:db:62:71:8b:70:d0:6b:94: f2:10:4b:f3:fd:cc:55:f3:32:a6:db:ba:1a:62:97: 8e:fc:ef:da:25:0f:01:4a:7d:66:ba:16:f9:13:f1: eb:f0:a1:24:b5:d0:7c:51:f1:c7:28:9d:33:4b:a2: 13:71:35:54:95:75:64:71:c6:39:53:72:0d:2d:96: bc:bb:df:d1:a2:bf:3a:04:c0:9b:82:97:83:00:fa: a1:2f:ba:59:cf:70:72:dd:f2:a2:2c:01:f9:ba:6a: 8d:b5:af:35:64:8e:b8:6f:e4:c1:1e:75:46:97:fe: 04:15:f2:3d:10:f9:80:d3:4e:2b:29:3d:7c:62:5c: f1:e7:95:fa:4f:e0:f8:cc:6b:44:42:9c:78:bd:5d: c8:f5:5a:76:b9:66:a2:5b:0f:93:10:34:7c:9c:76: 08:47:69:07:38:34:6b:66:c4:fc:5d:e6:c1:b6:58: ad:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:10:74:21:E2:41:C0:DC:97:A1:F8:38:98:FB:D2:6A:EF:9D:F4:95 X509v3 Authority Key Identifier: keyid:CA:BE:6E:A6:EF:33:08:9E:52:59:D2:49:C5:B0:DF:AA:13:A9:4D:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yr5upu8zCJ5SWdJJxbDfqhOpTXg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/hhB0IeJBwNyXofg4mPvSau-d9JU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.220.84.0/22 Signature Algorithm: sha256WithRSAEncryption 51:bb:51:3c:ca:5f:e7:45:b8:ab:af:98:37:60:44:e6:07:ce: 5c:e8:8e:f5:c4:fe:b3:96:43:53:73:fb:93:72:57:73:6e:49: 6f:fa:ff:25:ea:7e:ad:a5:f0:c9:b6:c2:80:1c:5e:b7:74:60: c9:6e:fd:3f:8e:1a:4a:e5:ec:93:de:05:b5:49:a4:5a:3f:a0: fb:ae:18:4f:1e:16:58:c2:bd:a0:5a:c6:5d:10:48:fc:5e:7a: e5:4a:79:aa:1e:b3:82:d3:5a:8a:96:5b:83:ae:02:94:24:92: ab:bb:1f:e4:ad:b0:20:d9:20:2f:b3:a6:a9:f6:4c:3a:40:37: 64:ce:54:ab:a6:7b:84:53:6a:97:d0:73:87:3e:9f:39:e7:69: 0d:6e:1c:57:ed:2e:53:29:f4:4b:27:7e:ed:56:48:f1:2a:ce: be:47:8e:7d:96:a1:e3:6f:3d:d8:3d:28:0a:fa:73:0b:ef:2f: 8e:bb:51:c3:35:95:cf:af:4a:fc:eb:3d:81:e0:aa:8c:03:7f: 44:89:c0:c3:82:34:17:bd:14:d3:07:b0:11:49:2b:d1:2a:50: 81:8c:4e:e2:c2:d5:1b:d6:f4:e1:18:83:2b:a6:c2:47:1a:57: 6d:11:7e:d6:bd:38:66:3f:10:8d:b8:ed:4b:96:f2:0e:16:30: 17:64:e3:d0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26uj1B6duYnBK1LCY3xS+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhYmU2ZWE2ZWYzMzA4OWU1MjU5ZDI0OWM1YjBkZmFhMTNh OTRkNzgwHhcNMjYwMTAxMDAxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NjEwNzQyMWUyNDFjMGRjOTdhMWY4Mzg5OGZiZDI2YWVmOWRmNDk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMNIP+w/0aMShCS1CMxrceN1zBDc OLhaFY6I9gXzQMlD4sdJHOQlYl37uwnB6FbbTJRr2cqFuzpLSgVtFqmYFFYkb6g7 B1wfCwXWIMAgfa7722Jxi3DQa5TyEEvz/cxV8zKm27oaYpeO/O/aJQ8BSn1muhb5 E/Hr8KEktdB8UfHHKJ0zS6ITcTVUlXVkccY5U3INLZa8u9/Ror86BMCbgpeDAPqh L7pZz3By3fKiLAH5umqNta81ZI64b+TBHnVGl/4EFfI9EPmA004rKT18Ylzx55X6 T+D4zGtEQpx4vV3I9Vp2uWaiWw+TEDR8nHYIR2kHODRrZsT8XebBtlit2QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIYQdCHiQcDcl6H4OJj70mrvnfSVMB8GA1UdIwQY MBaAFMq+bqbvMwieUlnSScWw36oTqU14MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXI1dXB1OHpDSjVTV2RKSnhiRGZxaE9wVFhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8wOGQ2YmYtZWY4Ni00Yzc0LWFhMjMt ZDMzNWMyMDQyNDAzLzEvaGhCMEllSkJ3TnlYb2ZnNG1QdlNhdS1kOUpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy8wOGQ2YmYtZWY4Ni00Yzc0LWFhMjMtZDMzNWMyMDQyNDAz LzEveXI1dXB1OHpDSjVTV2RKSnhiRGZxaE9wVFhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCudxUMA0G CSqGSIb3DQEBCwUAA4IBAQBRu1E8yl/nRbirr5g3YETmB85c6I71xP6zlkNTc/uT cldzbklv+v8l6n6tpfDJtsKAHF63dGDJbv0/jhpK5eyT3gW1SaRaP6D7rhhPHhZY wr2gWsZdEEj8XnrlSnmqHrOC01qKlluDrgKUJJKrux/krbAg2SAvs6ap9kw6QDdk zlSrpnuEU2qX0HOHPp8552kNbhxX7S5TKfRLJ37tVkjxKs6+R459lqHjbz3YPSgK +nML7y+Ou1HDNZXPr0r86z2B4KqMA39EicDDgjQXvRTTB7ARSSvRKlCBjE7iwtUb 1vThGIMrpsJHGldtEX7WvThmPxCNuO1LlvIOFjAXZOPQ -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:12 2026 by rpki-client