This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/8106c6-96e3-4856-8e53-69ebed17814a/1/HBecOjtWbDhPtARPUUTLEgbUp6g.roa File: HBecOjtWbDhPtARPUUTLEgbUp6g.roa (raw, json) Hash identifier: ZUGOFV89K06s4uTeXxt/3j8cGsfgNWnfAk2/FK+XmzA= Subject key identifier: 1C:17:9C:3A:3B:56:6C:38:4F:B4:04:4F:51:44:CB:12:06:D4:A7:A8 Certificate issuer: /CN=7274b5ee2aa0778af1304358225ac67e55170a88 Certificate serial: 019B7EA513B7644A72B91E04E2FAA78C3FD2 Authority key identifier: 72:74:B5:EE:2A:A0:77:8A:F1:30:43:58:22:5A:C6:7E:55:17:0A:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cnS17iqgd4rxMENYIlrGflUXCog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/8106c6-96e3-4856-8e53-69ebed17814a/1/HBecOjtWbDhPtARPUUTLEgbUp6g.roa Signing time: Fri 02 Jan 2026 12:18:26 +0000 ROA not before: Fri 02 Jan 2026 12:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205115 IP address blocks: 87.120.56.0/23 maxlen: 24 87.120.70.0/23 maxlen: 24 87.120.82.0/23 maxlen: 24 87.120.94.0/23 maxlen: 24 87.120.188.0/23 maxlen: 24 87.120.238.0/23 maxlen: 24 87.121.80.0/23 maxlen: 24 94.156.38.0/23 maxlen: 24 178.249.236.0/22 maxlen: 24 185.134.108.0/22 maxlen: 24 2a06:eb40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/8106c6-96e3-4856-8e53-69ebed17814a/1/cnS17iqgd4rxMENYIlrGflUXCog.crl rsync://rpki.ripe.net/repository/DEFAULT/32/8106c6-96e3-4856-8e53-69ebed17814a/1/cnS17iqgd4rxMENYIlrGflUXCog.mft rsync://rpki.ripe.net/repository/DEFAULT/cnS17iqgd4rxMENYIlrGflUXCog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:13:b7:64:4a:72:b9:1e:04:e2:fa:a7:8c:3f:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7274b5ee2aa0778af1304358225ac67e55170a88 Validity Not Before: Jan 2 12:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1c179c3a3b566c384fb4044f5144cb1206d4a7a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:49:d5:67:a5:1d:91:c9:8c:9e:ba:7f:52:e5: 03:98:de:bd:d1:2b:15:aa:7b:4c:3d:1b:ca:b7:13: b8:44:71:09:2f:9d:bb:ab:d5:44:86:90:94:34:b1: fc:18:ee:a0:0f:0b:33:eb:33:03:47:3d:05:bf:13: 4b:e8:49:3b:ee:74:7a:3e:0b:19:65:83:4f:8b:a5: 7c:f9:4d:2a:c6:d3:75:e3:9f:bd:06:ea:7b:2d:55: f4:ab:89:84:a3:1c:64:a7:71:75:47:47:c4:1b:87: c6:cc:2c:82:5b:7f:fc:6b:df:e8:fb:00:f6:41:13: 9a:34:a9:73:0b:b5:7f:66:c0:a2:67:80:f7:91:e9: 10:e0:9f:1a:88:e8:66:4c:0e:bd:e6:65:4a:f6:fc: c0:5d:b9:d1:28:5e:74:12:98:da:34:e1:04:aa:de: 5f:6c:51:e1:0f:80:26:ae:51:18:66:89:16:24:f2: b5:4b:f5:a3:0c:8a:ae:c8:9f:ee:c7:d8:76:1c:dd: 16:08:fb:b5:99:03:65:61:82:67:15:e6:18:79:ba: 75:a2:25:b1:44:3a:3f:d1:a2:72:61:41:32:a3:f9: 49:ee:9d:41:88:66:e6:f3:a1:3c:75:c3:92:72:7d: b8:75:7b:3c:5e:1d:30:d1:ef:41:86:34:04:ae:e3: ad:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:17:9C:3A:3B:56:6C:38:4F:B4:04:4F:51:44:CB:12:06:D4:A7:A8 X509v3 Authority Key Identifier: keyid:72:74:B5:EE:2A:A0:77:8A:F1:30:43:58:22:5A:C6:7E:55:17:0A:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnS17iqgd4rxMENYIlrGflUXCog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8106c6-96e3-4856-8e53-69ebed17814a/1/HBecOjtWbDhPtARPUUTLEgbUp6g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8106c6-96e3-4856-8e53-69ebed17814a/1/cnS17iqgd4rxMENYIlrGflUXCog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.120.56.0/23 87.120.70.0/23 87.120.82.0/23 87.120.94.0/23 87.120.188.0/23 87.120.238.0/23 87.121.80.0/23 94.156.38.0/23 178.249.236.0/22 185.134.108.0/22 IPv6: 2a06:eb40::/29 Signature Algorithm: sha256WithRSAEncryption 0e:57:a0:a9:85:be:4c:2e:15:c9:8c:b2:cc:f6:51:57:f8:c0: ac:1e:4d:d9:91:1d:93:f9:40:12:b8:4b:74:c3:b1:81:0a:f5: 81:1f:05:26:97:a5:d8:b7:65:59:1d:31:f1:1c:96:e4:dc:c4: 10:9d:31:0d:fe:8a:c1:3f:b1:a9:d3:0f:f9:84:cf:ad:cb:c3: 20:69:02:72:c9:d9:4b:31:c1:8b:c7:e3:fa:97:d7:49:d4:67: cb:b0:fc:3b:c4:b4:66:b1:de:96:c2:d7:a1:c9:57:fe:84:0d: a0:d5:c4:2e:9b:5c:09:26:5f:39:dc:cd:a6:b6:67:94:e2:d0: bd:d0:ba:44:0f:de:cb:48:d2:be:be:d4:88:7e:33:4a:9c:73: b6:28:95:0b:27:32:c2:d4:e2:3d:b0:80:d6:21:7d:dc:1f:b5: 90:a7:48:40:72:20:5c:ee:6b:4c:0a:50:f4:78:1d:20:82:da: f6:68:d8:d2:0a:8e:8c:84:66:ef:aa:4d:cf:50:c3:15:ea:c0: f8:28:d9:7e:91:a8:b5:8c:1c:26:30:c4:b6:85:2e:90:76:2f: 8f:49:89:8f:25:35:fc:14:2d:cc:af:b6:b0:3f:c8:0b:68:14: a9:32:41:92:38:e1:7f:06:e9:44:58:c7:b1:fe:ba:e5:6b:d3: c5:e0:f3:ba -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgISAZt+pRO3ZEpyuR4E4vqnjD/SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyNzRiNWVlMmFhMDc3OGFmMTMwNDM1ODIyNWFjNjdlNTUx NzBhODgwHhcNMjYwMTAyMTIxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzE3OWMzYTNiNTY2YzM4NGZiNDA0NGY1MTQ0Y2IxMjA2ZDRhN2E4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2UnVZ6UdkcmMnrp/UuUDmN690SsV qntMPRvKtxO4RHEJL527q9VEhpCUNLH8GO6gDwsz6zMDRz0FvxNL6Ek77nR6PgsZ ZYNPi6V8+U0qxtN145+9Bup7LVX0q4mEoxxkp3F1R0fEG4fGzCyCW3/8a9/o+wD2 QROaNKlzC7V/ZsCiZ4D3kekQ4J8aiOhmTA695mVK9vzAXbnRKF50EpjaNOEEqt5f bFHhD4AmrlEYZokWJPK1S/WjDIquyJ/ux9h2HN0WCPu1mQNlYYJnFeYYebp1oiWx RDo/0aJyYUEyo/lJ7p1BiGbm86E8dcOScn24dXs8Xh0w0e9BhjQEruOtmwIDAQAB o4ICTjCCAkowHQYDVR0OBBYEFBwXnDo7Vmw4T7QET1FEyxIG1KeoMB8GA1UdIwQY MBaAFHJ0te4qoHeK8TBDWCJaxn5VFwqIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY25TMTdpcWdkNHJ4TUVOWUlsckdmbFVYQ29nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi84MTA2YzYtOTZlMy00ODU2LThlNTMt NjllYmVkMTc4MTRhLzEvSEJlY09qdFdiRGhQdEFSUFVVVExFZ2JVcDZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi84MTA2YzYtOTZlMy00ODU2LThlNTMtNjllYmVkMTc4MTRh LzEvY25TMTdpcWdkNHJ4TUVOWUlsckdmbFVYQ29nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGQGCCsGAQUFBwEHAQH/BFUwUzBCBAIAATA8AwQBV3g4AwQB V3hGAwQBV3hSAwQBV3heAwQBV3i8AwQBV3juAwQBV3lQAwQBXpwmAwQCsvnsAwQC uYZsMA0EAgACMAcDBQMqButAMA0GCSqGSIb3DQEBCwUAA4IBAQAOV6Cphb5MLhXJ jLLM9lFX+MCsHk3ZkR2T+UASuEt0w7GBCvWBHwUml6XYt2VZHTHxHJbk3MQQnTEN /orBP7Gp0w/5hM+ty8MgaQJyydlLMcGLx+P6l9dJ1GfLsPw7xLRmsd6WwtehyVf+ hA2g1cQum1wJJl853M2mtmeU4tC90LpED97LSNK+vtSIfjNKnHO2KJULJzLC1OI9 sIDWIX3cH7WQp0hAciBc7mtMClD0eB0ggtr2aNjSCo6MhGbvqk3PUMMV6sD4KNl+ kai1jBwmMMS2hS6Qdi+PSYmPJTX8FC3Mr7awP8gLaBSpMkGSOOF/BulEWMex/rrl a9PF4PO6 -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:59 2026 by rpki-client