This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/hebM_59_tHRwgwIXMubQjV7ZKnA.roa File: hebM_59_tHRwgwIXMubQjV7ZKnA.roa (raw, json) Hash identifier: 67WRXgG1YYYSINNxV4jZ+taQ8P62HynuQpfE/cUxzG0= Subject key identifier: 85:E6:CC:FF:9F:7F:B4:74:70:83:02:17:32:E6:D0:8D:5E:D9:2A:70 Certificate issuer: /CN=0471881778a1e12f6d97c5288efd4cb9563d1d49 Certificate serial: 019B7CECC6D81BA64900D56B3CBD222998A9 Authority key identifier: 04:71:88:17:78:A1:E1:2F:6D:97:C5:28:8E:FD:4C:B9:56:3D:1D:49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BHGIF3ih4S9tl8Uojv1MuVY9HUk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/hebM_59_tHRwgwIXMubQjV7ZKnA.roa Signing time: Fri 02 Jan 2026 04:17:30 +0000 ROA not before: Fri 02 Jan 2026 04:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 185.116.53.0/24 maxlen: 24 185.116.54.0/24 maxlen: 24 185.116.55.0/24 maxlen: 24 2a06:7a40:1::/48 maxlen: 48 2a06:7a40:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.mft rsync://rpki.ripe.net/repository/DEFAULT/BHGIF3ih4S9tl8Uojv1MuVY9HUk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:c6:d8:1b:a6:49:00:d5:6b:3c:bd:22:29:98:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0471881778a1e12f6d97c5288efd4cb9563d1d49 Validity Not Before: Jan 2 04:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=85e6ccff9f7fb4747083021732e6d08d5ed92a70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fb:34:c2:b0:5b:87:3b:46:6a:37:f7:75:6d: 33:c7:e2:ec:3a:f7:bb:40:2c:31:7d:a2:d9:f6:18: 58:68:d7:77:59:72:9f:42:ed:0a:b2:df:27:ea:c7: 99:d8:1a:d2:a7:ec:48:64:a2:5e:5d:2c:94:99:06: 90:3e:92:ab:b4:c6:08:6c:d0:04:67:35:be:95:d3: f0:67:a0:f8:e2:e1:0a:c9:c1:fe:af:ba:b9:33:45: 07:87:fe:e4:21:7a:22:c6:0a:bc:14:84:30:a6:c8: 49:e2:2d:77:c1:01:d7:68:78:05:ed:69:de:81:bd: 66:8b:f4:e5:93:a0:80:f2:65:05:33:4e:72:82:22: 4e:14:2c:10:2b:9b:74:5e:23:66:10:a4:e9:66:ab: 72:6c:6d:42:87:a0:e0:c5:cb:85:f5:56:2f:78:3e: 57:a0:6c:77:48:cb:76:f8:ec:fe:b9:d8:d9:c3:7d: 88:57:9e:d1:44:22:c4:62:3c:d7:a9:92:fc:be:a6: 4f:d8:78:22:f2:64:2f:30:a0:b9:11:4a:1f:1d:9a: 53:7f:64:ad:4b:c1:8e:4b:9b:6a:16:ab:a9:bb:bf: 88:4d:27:8b:05:a2:97:d8:0f:a2:d7:d0:ec:b7:da: f6:22:c0:e1:10:42:6b:ba:89:f8:f6:d2:f8:9e:4e: 1c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:E6:CC:FF:9F:7F:B4:74:70:83:02:17:32:E6:D0:8D:5E:D9:2A:70 X509v3 Authority Key Identifier: keyid:04:71:88:17:78:A1:E1:2F:6D:97:C5:28:8E:FD:4C:B9:56:3D:1D:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BHGIF3ih4S9tl8Uojv1MuVY9HUk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/hebM_59_tHRwgwIXMubQjV7ZKnA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.116.53.0-185.116.55.255 IPv6: 2a06:7a40:1::-2a06:7a40:2:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 9c:3e:8d:e9:5b:c6:96:2e:75:85:ce:14:92:1d:25:d7:64:20: 9e:8d:47:cd:74:6b:9d:1a:b6:d2:8a:88:cb:1b:63:1e:de:34: 83:c8:f2:43:40:6e:ff:46:e0:1a:92:df:e2:14:87:a2:09:49: 5a:03:8f:0d:2b:e1:b4:23:85:03:50:41:e8:da:e7:ec:00:dc: 1c:be:52:b6:c5:29:c7:9f:0e:12:29:9c:67:7f:bf:58:45:33: f0:fb:bd:7c:7e:97:c6:e6:20:e6:29:1d:92:70:fb:32:3b:65: aa:3e:eb:8d:74:3b:20:f3:00:c8:1d:38:15:49:46:de:d4:06: 4c:38:22:79:89:0d:aa:24:89:8a:89:09:fa:8b:96:02:d2:c6: 64:61:db:26:d0:19:aa:57:60:ad:df:dc:45:84:77:e6:52:30: 54:a5:63:d6:7a:d5:72:a4:4c:7f:6e:bb:96:03:f7:28:c0:34: b9:70:01:86:91:6b:db:bd:b4:30:86:bb:ea:93:4b:06:4f:0f: 43:32:ca:fc:e9:8d:a9:eb:69:63:68:05:e8:5e:74:81:63:d8: 83:13:2d:a9:a0:fc:11:45:f8:74:33:28:5d:5b:f5:2a:76:aa: 2b:04:8b:94:cd:38:19:1d:da:2c:68:46:93:19:a8:2c:5f:ef: e1:3f:e3:5c -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt87MbYG6ZJANVrPL0iKZipMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0NzE4ODE3NzhhMWUxMmY2ZDk3YzUyODhlZmQ0Y2I5NTYz ZDFkNDkwHhcNMjYwMTAyMDQxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NWU2Y2NmZjlmN2ZiNDc0NzA4MzAyMTczMmU2ZDA4ZDVlZDkyYTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/s0wrBbhztGajf3dW0zx+LsOve7 QCwxfaLZ9hhYaNd3WXKfQu0Kst8n6seZ2BrSp+xIZKJeXSyUmQaQPpKrtMYIbNAE ZzW+ldPwZ6D44uEKycH+r7q5M0UHh/7kIXoixgq8FIQwpshJ4i13wQHXaHgF7Wne gb1mi/Tlk6CA8mUFM05ygiJOFCwQK5t0XiNmEKTpZqtybG1Ch6DgxcuF9VYveD5X oGx3SMt2+Oz+udjZw32IV57RRCLEYjzXqZL8vqZP2Hgi8mQvMKC5EUofHZpTf2St S8GOS5tqFqupu7+ITSeLBaKX2A+i19Dst9r2IsDhEEJruon49tL4nk4c9wIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFIXmzP+ff7R0cIMCFzLm0I1e2SpwMB8GA1UdIwQY MBaAFARxiBd4oeEvbZfFKI79TLlWPR1JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkhHSUYzaWg0Uzl0bDhVb2p2MU11Vlk5SFVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy80YThjZmEtNTQyYi00MGIyLThhMDgt NDJlYTQ3YjEyNTM3LzEvaGViTV81OV90SFJ3Z3dJWE11YlFqVjdaS25BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy80YThjZmEtNTQyYi00MGIyLThhMDgtNDJlYTQ3YjEyNTM3 LzEvQkhHSUYzaWg0Uzl0bDhVb2p2MU11Vlk5SFVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAUBAIAATAOMAwDBAC5dDUD BAO5dDAwGgQCAAIwFDASAwcAKgZ6QAABAwcAKgZ6QAACMA0GCSqGSIb3DQEBCwUA A4IBAQCcPo3pW8aWLnWFzhSSHSXXZCCejUfNdGudGrbSiojLG2Me3jSDyPJDQG7/ RuAakt/iFIeiCUlaA48NK+G0I4UDUEHo2ufsANwcvlK2xSnHnw4SKZxnf79YRTPw +718fpfG5iDmKR2ScPsyO2WqPuuNdDsg8wDIHTgVSUbe1AZMOCJ5iQ2qJImKiQn6 i5YC0sZkYdsm0BmqV2Ct39xFhHfmUjBUpWPWetVypEx/bruWA/cowDS5cAGGkWvb vbQwhrvqk0sGTw9DMsr86Y2p62ljaAXoXnSBY9iDEy2poPwRRfh0MyhdW/Uqdqor BIuUzTgZHdosaEaTGagsX+/hP+Nc -----END CERTIFICATE-----Generated at Tue Jan 20 01:19:48 2026 by rpki-client