This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/HBLeoJ5HV2A7BH9UBwn9Vdgr4Yw.roa File: HBLeoJ5HV2A7BH9UBwn9Vdgr4Yw.roa (raw, json) Hash identifier: 9ATrc+ZVJvkVfcX7Yz5oTBczA3YjIkUbhjl4XH/CTB4= Subject key identifier: 1C:12:DE:A0:9E:47:57:60:3B:04:7F:54:07:09:FD:55:D8:2B:E1:8C Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019B7910512C5D6A29B512B7F6E572A0BAEA Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/HBLeoJ5HV2A7BH9UBwn9Vdgr4Yw.roa Signing time: Thu 01 Jan 2026 10:17:51 +0000 ROA not before: Thu 01 Jan 2026 10:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48678 IP address blocks: 31.210.48.0/24 maxlen: 24 31.210.50.0/24 maxlen: 24 77.92.143.0/24 maxlen: 24 77.92.145.0/24 maxlen: 24 77.92.146.0/24 maxlen: 24 78.135.66.0/24 maxlen: 24 78.135.72.0/24 maxlen: 24 78.135.81.0/24 maxlen: 24 78.135.92.0/24 maxlen: 24 78.135.93.0/24 maxlen: 24 78.135.100.0/24 maxlen: 24 78.135.104.0/24 maxlen: 24 185.17.139.0/24 maxlen: 24 188.132.129.0/24 maxlen: 24 188.132.130.0/24 maxlen: 24 188.132.146.0/24 maxlen: 24 188.132.152.0/24 maxlen: 24 188.132.153.0/24 maxlen: 24 188.132.165.0/24 maxlen: 24 188.132.168.0/24 maxlen: 24 188.132.183.0/24 maxlen: 24 188.132.184.0/24 maxlen: 24 188.132.185.0/24 maxlen: 24 188.132.186.0/24 maxlen: 24 188.132.189.0/24 maxlen: 24 188.132.199.0/24 maxlen: 24 188.132.201.0/24 maxlen: 24 188.132.202.0/24 maxlen: 24 188.132.209.0/24 maxlen: 24 188.132.212.0/24 maxlen: 24 188.132.213.0/24 maxlen: 24 188.132.234.0/24 maxlen: 24 188.132.235.0/24 maxlen: 24 212.68.58.0/24 maxlen: 24 212.68.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:51:2c:5d:6a:29:b5:12:b7:f6:e5:72:a0:ba:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Jan 1 10:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1c12dea09e4757603b047f540709fd55d82be18c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:86:ca:3b:75:c9:1c:8a:36:1c:87:f2:44:c2: e9:12:7e:24:cb:18:6d:27:39:e6:a0:8f:4a:d7:7c: f7:f0:da:ba:6c:f6:54:b3:2a:c2:ad:ad:87:dd:9c: ef:39:0e:39:75:9d:55:cb:e9:9b:17:fc:7c:e3:de: bf:e5:06:24:be:b6:23:45:c2:3c:97:a1:69:ec:e1: 94:49:2b:83:00:7c:39:ed:1f:4b:32:52:46:d2:09: 73:ee:e1:6f:db:a7:d0:f0:24:53:05:8d:81:fa:33: 0e:14:f8:41:34:31:f0:ad:f4:7e:07:ab:2b:ce:d8: f6:21:59:c3:81:55:67:bf:81:7b:d0:4a:7e:1a:ef: 2c:ae:db:4a:23:52:22:fc:8e:b8:1e:7f:bd:b9:dc: 6d:44:1d:31:49:bc:d2:1a:4c:46:e3:63:ea:5f:17: bd:ae:5c:66:fb:e0:25:f1:0e:4f:22:df:e4:f9:7d: 9e:18:5d:45:68:97:20:9c:f7:39:7c:90:b9:71:d1: 67:70:ae:a8:54:ee:59:15:6b:72:90:c7:8b:c4:d0: 7c:ff:ea:04:94:ef:af:0c:d2:bc:61:3a:4d:5e:54: db:95:35:f7:e2:4c:a5:6d:dd:0d:1e:d5:ba:a6:5b: a6:a5:5a:98:17:19:cc:69:2f:6a:25:40:09:d8:7c: aa:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:12:DE:A0:9E:47:57:60:3B:04:7F:54:07:09:FD:55:D8:2B:E1:8C X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/HBLeoJ5HV2A7BH9UBwn9Vdgr4Yw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.210.48.0/24 31.210.50.0/24 77.92.143.0/24 77.92.145.0-77.92.146.255 78.135.66.0/24 78.135.72.0/24 78.135.81.0/24 78.135.92.0/23 78.135.100.0/24 78.135.104.0/24 185.17.139.0/24 188.132.129.0-188.132.130.255 188.132.146.0/24 188.132.152.0/23 188.132.165.0/24 188.132.168.0/24 188.132.183.0-188.132.186.255 188.132.189.0/24 188.132.199.0/24 188.132.201.0-188.132.202.255 188.132.209.0/24 188.132.212.0/23 188.132.234.0/23 212.68.58.0/24 212.68.60.0/24 Signature Algorithm: sha256WithRSAEncryption 57:be:a2:73:f3:10:e7:43:5c:b8:62:71:25:9e:17:36:60:3a: 4f:4c:76:08:3e:2b:cc:85:34:8f:38:f2:d9:3c:c2:12:a7:07: c3:65:fb:48:bd:4f:15:f4:56:ce:d2:45:17:ec:43:69:61:b3: 83:72:91:b0:3b:2d:95:f8:69:91:15:cc:30:63:f4:9a:cc:77: 65:db:6b:ac:e8:82:a0:af:99:b1:40:b7:e5:6b:d1:29:90:76: 4f:a0:09:57:5e:68:43:40:81:91:d8:3b:47:9e:f7:a7:4e:4e: 93:02:59:8e:11:b0:9d:c7:b2:d5:9f:36:e8:0e:77:b2:98:80: a1:0c:e0:d7:3f:80:fb:b3:2c:35:19:0b:30:07:08:d3:35:31: c7:7e:4a:10:3a:d8:9e:10:1e:c3:40:d3:52:ec:ba:d6:b5:70: 97:de:f6:c1:5e:eb:81:c8:21:59:7f:c6:59:7c:24:17:92:28: a6:1e:fe:1d:07:79:18:79:be:08:f1:f5:9a:91:93:33:dc:73: ba:20:15:92:6a:f9:0a:b5:c0:f1:e8:f4:7b:5c:c2:19:6d:0a: 1e:96:8d:37:f8:53:18:40:1f:07:23:22:d3:97:4d:21:aa:05: 20:73:9a:8d:f8:1d:5f:62:4a:81:28:10:f1:44:c7:70:09:ac: 89:18:8f:4f -----BEGIN CERTIFICATE----- MIIFsjCCBJqgAwIBAgISAZt5EFEsXWoptRK39uVyoLrqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjYwMTAxMTAxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzEyZGVhMDllNDc1NzYwM2IwNDdmNTQwNzA5ZmQ1NWQ4MmJlMThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApobKO3XJHIo2HIfyRMLpEn4kyxht JznmoI9K13z38Nq6bPZUsyrCra2H3ZzvOQ45dZ1Vy+mbF/x8496/5QYkvrYjRcI8 l6Fp7OGUSSuDAHw57R9LMlJG0glz7uFv26fQ8CRTBY2B+jMOFPhBNDHwrfR+B6sr ztj2IVnDgVVnv4F70Ep+Gu8srttKI1Ii/I64Hn+9udxtRB0xSbzSGkxG42PqXxe9 rlxm++Al8Q5PIt/k+X2eGF1FaJcgnPc5fJC5cdFncK6oVO5ZFWtykMeLxNB8/+oE lO+vDNK8YTpNXlTblTX34kylbd0NHtW6plumpVqYFxnMaS9qJUAJ2Hyq4wIDAQAB o4ICvjCCArowHQYDVR0OBBYEFBwS3qCeR1dgOwR/VAcJ/VXYK+GMMB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEvSEJMZW9KNUhWMkE3Qkg5VUJ3bjlWZGdyNFl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHTBggrBgEFBQcBBwEB/wSBwzCBwDCBvQQCAAEwgbYDBAAf 0jADBAAf0jIDBABNXI8wDAMEAE1ckQMEAE1ckgMEAE6HQgMEAE6HSAMEAE6HUQME AU6HXAMEAE6HZAMEAE6HaAMEALkRizAMAwQAvISBAwQAvISCAwQAvISSAwQBvISY AwQAvISlAwQAvISoMAwDBAC8hLcDBAC8hLoDBAC8hL0DBAC8hMcwDAMEALyEyQME ALyEygMEALyE0QMEAbyE1AMEAbyE6gMEANREOgMEANREPDANBgkqhkiG9w0BAQsF AAOCAQEAV76ic/MQ50NcuGJxJZ4XNmA6T0x2CD4rzIU0jzjy2TzCEqcHw2X7SL1P FfRWztJFF+xDaWGzg3KRsDstlfhpkRXMMGP0msx3ZdtrrOiCoK+ZsUC35WvRKZB2 T6AJV15oQ0CBkdg7R573p05OkwJZjhGwncey1Z826A53spiAoQzg1z+A+7MsNRkL MAcI0zUxx35KEDrYnhAew0DTUuy61rVwl972wV7rgcghWX/GWXwkF5Ioph7+HQd5 GHm+CPH1mpGTM9xzuiAVkmr5CrXA8ej0e1zCGW0KHpaNN/hTGEAfByMi05dNIaoF IHOajfgdX2JKgSgQ8UTHcAmsiRiPTw== -----END CERTIFICATE-----Generated at Mon Jan 19 16:51:39 2026 by rpki-client