This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/yHADJb6BZs2ak9yCDQIwsQB2apk.roa File: yHADJb6BZs2ak9yCDQIwsQB2apk.roa (raw, json) Hash identifier: Qk1v22VZ27KbOG3oqvgp5v/wTns71MuCYehYFMsTHqk= Subject key identifier: C8:70:03:25:BE:81:66:CD:9A:93:DC:82:0D:02:30:B1:00:76:6A:99 Certificate issuer: /CN=8d2ec5b40c7172754255d626bf6c9213a3dafe6f Certificate serial: 019B7C8098D13277A0FB91212789FE618B9C Authority key identifier: 8D:2E:C5:B4:0C:71:72:75:42:55:D6:26:BF:6C:92:13:A3:DA:FE:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/yHADJb6BZs2ak9yCDQIwsQB2apk.roa Signing time: Fri 02 Jan 2026 02:19:21 +0000 ROA not before: Fri 02 Jan 2026 02:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9121 IP address blocks: 213.148.64.0/24 maxlen: 24 213.148.65.0/24 maxlen: 24 213.148.66.0/24 maxlen: 24 213.148.67.0/24 maxlen: 24 213.148.68.0/24 maxlen: 24 213.148.69.0/24 maxlen: 24 213.148.70.0/24 maxlen: 24 213.148.71.0/24 maxlen: 24 213.148.72.0/24 maxlen: 24 213.148.73.0/24 maxlen: 24 213.148.74.0/24 maxlen: 24 213.148.75.0/24 maxlen: 24 213.148.76.0/24 maxlen: 24 213.148.77.0/24 maxlen: 24 213.148.78.0/24 maxlen: 24 213.148.79.0/24 maxlen: 24 213.148.80.0/24 maxlen: 24 213.148.81.0/24 maxlen: 24 213.148.82.0/24 maxlen: 24 213.148.83.0/24 maxlen: 24 213.148.84.0/24 maxlen: 24 213.148.85.0/24 maxlen: 24 213.148.86.0/24 maxlen: 24 213.148.87.0/24 maxlen: 24 213.148.88.0/24 maxlen: 24 213.148.89.0/24 maxlen: 24 213.148.90.0/24 maxlen: 24 213.148.91.0/24 maxlen: 24 213.148.92.0/24 maxlen: 24 213.148.93.0/24 maxlen: 24 213.148.94.0/24 maxlen: 24 213.148.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft rsync://rpki.ripe.net/repository/DEFAULT/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 05:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:98:d1:32:77:a0:fb:91:21:27:89:fe:61:8b:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d2ec5b40c7172754255d626bf6c9213a3dafe6f Validity Not Before: Jan 2 02:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c8700325be8166cd9a93dc820d0230b100766a99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4b:6c:3a:42:5b:dd:c4:25:ea:cb:ed:7e:de: 55:0d:42:c1:f1:08:1a:5a:00:77:a0:0d:ec:a6:77: 0d:d0:71:51:76:be:d1:40:10:63:44:27:8b:01:68: 5a:e4:59:ae:3f:43:ac:72:cc:b6:8f:28:49:16:ba: b6:3f:26:df:15:20:8b:3a:1f:33:c8:2e:3b:ec:1f: 19:03:52:fc:5c:4f:f9:75:f6:49:8d:ab:de:2c:82: 78:c8:33:3d:b2:b4:d8:ae:80:e0:a1:6f:26:70:6b: 21:01:bb:2d:5f:ff:bd:49:17:30:9b:74:b9:ae:85: 3e:fa:a8:b4:7f:9f:5f:f9:38:80:c6:1c:7a:d5:55: 5d:de:56:d6:12:54:7c:01:91:f6:0b:e5:41:e3:e6: f7:ec:c3:47:55:83:7a:48:48:18:85:ba:f1:6f:90: 5a:7a:2e:15:4c:b5:51:f6:cb:71:40:ed:d9:cd:2e: 74:3f:07:05:6b:6b:9d:51:37:87:26:78:bb:ef:50: eb:ba:c3:01:2e:0e:9a:cf:dd:f9:ba:9a:b7:96:81: 66:51:bb:dd:d4:ab:9e:26:bb:35:4e:b1:f0:2c:bc: fc:dd:2a:31:01:58:10:11:87:f5:64:3c:7d:17:0d: e3:19:02:c3:d2:17:0d:a9:dd:26:17:33:26:ad:f9: 25:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:70:03:25:BE:81:66:CD:9A:93:DC:82:0D:02:30:B1:00:76:6A:99 X509v3 Authority Key Identifier: keyid:8D:2E:C5:B4:0C:71:72:75:42:55:D6:26:BF:6C:92:13:A3:DA:FE:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/yHADJb6BZs2ak9yCDQIwsQB2apk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.148.64.0/19 Signature Algorithm: sha256WithRSAEncryption 87:bb:f6:09:78:1e:e3:e6:59:44:f3:be:37:d1:c5:6d:9a:97: c3:4b:10:f1:1b:fb:0d:79:6b:6c:06:be:79:74:17:4e:3f:c0: a1:72:99:74:4e:bb:b2:17:09:8d:a8:ab:8b:8e:a6:3a:62:f2: 91:d6:ad:e9:6f:a3:18:9a:dd:e9:0c:7d:71:13:ba:45:24:da: a0:15:b6:5f:b5:f1:c8:30:e0:12:b2:f8:d0:5b:0b:0c:e7:d6: 9a:c7:1d:8d:61:98:89:29:3b:2f:0b:cf:c8:01:2c:bd:15:45: 72:9a:ec:8b:5d:c5:58:94:e8:d5:6e:17:a7:0f:b2:64:1c:f6: 49:f2:1b:ed:6a:e8:8d:24:8d:22:81:65:29:a1:d6:7b:1f:e8: 6c:7b:d4:7f:68:4c:5a:07:59:f9:f0:31:22:60:a2:d3:75:d7: 9d:ba:cd:aa:2d:c2:df:8d:a5:51:8d:09:c1:95:88:d4:31:96: e1:7d:4d:e4:96:cc:6a:c7:bd:37:07:23:71:91:fa:d3:5a:dc: 9a:27:d7:83:57:e1:3d:79:4f:95:60:2d:d5:c0:dc:a9:e2:04: a5:11:6c:71:d2:ed:7e:3c:c7:a6:65:53:c4:a9:c9:82:36:6e: 98:d1:27:e7:ec:29:5a:4c:69:25:99:8a:7a:41:a4:93:b3:51: c1:57:c9:ac -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gJjRMneg+5EhJ4n+YYucMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMmVjNWI0MGM3MTcyNzU0MjU1ZDYyNmJmNmM5MjEzYTNk YWZlNmYwHhcNMjYwMTAyMDIxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjODcwMDMyNWJlODE2NmNkOWE5M2RjODIwZDAyMzBiMTAwNzY2YTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0tsOkJb3cQl6svtft5VDULB8Qga WgB3oA3spncN0HFRdr7RQBBjRCeLAWha5FmuP0Oscsy2jyhJFrq2PybfFSCLOh8z yC477B8ZA1L8XE/5dfZJjaveLIJ4yDM9srTYroDgoW8mcGshAbstX/+9SRcwm3S5 roU++qi0f59f+TiAxhx61VVd3lbWElR8AZH2C+VB4+b37MNHVYN6SEgYhbrxb5Ba ei4VTLVR9stxQO3ZzS50PwcFa2udUTeHJni771DrusMBLg6az935upq3loFmUbvd 1KueJrs1TrHwLLz83SoxAVgQEYf1ZDx9Fw3jGQLD0hcNqd0mFzMmrfkl6wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMhwAyW+gWbNmpPcgg0CMLEAdmqZMB8GA1UdIwQY MBaAFI0uxbQMcXJ1QlXWJr9skhOj2v5vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalM3RnRBeHhjblZDVmRZbXYyeVNFNlBhX204LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy83NWNmYWEtNTlkYy00ODIxLTg2YjUt NDE1Y2I1ZjBiYTdlLzEveUhBREpiNkJaczJhazl5Q0RRSXdzUUIyYXBrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy83NWNmYWEtNTlkYy00ODIxLTg2YjUtNDE1Y2I1ZjBiYTdl LzEvalM3RnRBeHhjblZDVmRZbXYyeVNFNlBhX204LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF1ZRAMA0G CSqGSIb3DQEBCwUAA4IBAQCHu/YJeB7j5llE87430cVtmpfDSxDxG/sNeWtsBr55 dBdOP8Chcpl0TruyFwmNqKuLjqY6YvKR1q3pb6MYmt3pDH1xE7pFJNqgFbZftfHI MOASsvjQWwsM59aaxx2NYZiJKTsvC8/IASy9FUVymuyLXcVYlOjVbhenD7JkHPZJ 8hvtauiNJI0igWUpodZ7H+hse9R/aExaB1n58DEiYKLTddedus2qLcLfjaVRjQnB lYjUMZbhfU3klsxqx703ByNxkfrTWtyaJ9eDV+E9eU+VYC3VwNyp4gSlEWxx0u1+ PMemZVPEqcmCNm6Y0Sfn7ClaTGklmYp6QaSTs1HBV8ms -----END CERTIFICATE-----Generated at Wed Jan 21 13:17:09 2026 by rpki-client