This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/hEKeHB_HwWdm6YwqDL4rLU_ikEo.roa File: hEKeHB_HwWdm6YwqDL4rLU_ikEo.roa (raw, json) Hash identifier: +KO33p55Ic+lVnlR+TIJivqrXb9HN4n63k+7GR880Ng= Subject key identifier: 84:42:9E:1C:1F:C7:C1:67:66:E9:8C:2A:0C:BE:2B:2D:4F:E2:90:4A Certificate issuer: /CN=ca34b13387fab1dcf8b67f16a0a437608600c4c2 Certificate serial: 019B7A5B78C0A4EE87C4E60F325C52AA2B23 Authority key identifier: CA:34:B1:33:87:FA:B1:DC:F8:B6:7F:16:A0:A4:37:60:86:00:C4:C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/hEKeHB_HwWdm6YwqDL4rLU_ikEo.roa Signing time: Thu 01 Jan 2026 16:19:33 +0000 ROA not before: Thu 01 Jan 2026 16:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 185.112.132.0/24 maxlen: 24 185.112.133.0/24 maxlen: 24 185.112.134.0/24 maxlen: 24 185.112.135.0/24 maxlen: 24 213.156.245.0/24 maxlen: 24 213.156.250.0/24 maxlen: 24 213.156.251.0/24 maxlen: 24 213.156.252.0/24 maxlen: 24 213.156.253.0/24 maxlen: 24 213.156.254.0/24 maxlen: 24 213.156.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.crl rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.mft rsync://rpki.ripe.net/repository/DEFAULT/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:78:c0:a4:ee:87:c4:e6:0f:32:5c:52:aa:2b:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca34b13387fab1dcf8b67f16a0a437608600c4c2 Validity Not Before: Jan 1 16:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=84429e1c1fc7c16766e98c2a0cbe2b2d4fe2904a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e0:db:24:70:8f:1d:bd:ca:4a:46:e3:f7:a7: 86:ed:48:f9:4e:37:c8:1b:a1:30:a1:e1:ea:86:59: 42:4c:a3:8c:dc:90:cc:b3:95:dd:e2:a0:45:d7:5a: 5f:3d:34:d6:cc:98:73:11:85:09:5d:6b:24:66:02: 54:25:ae:9d:06:5d:fe:95:5e:39:88:da:fd:7c:e2: b6:f2:e6:fd:90:e5:1a:5e:c4:8c:79:41:84:16:7a: d2:a7:f3:a8:74:4c:7e:0c:9b:eb:05:e0:8c:22:2b: 97:3e:a4:6e:98:71:81:73:4e:79:f6:68:1e:c8:fb: 2d:ac:96:86:93:9c:dc:d6:62:00:cd:f4:0b:ab:84: e4:24:04:9a:d7:32:11:ea:a4:97:97:1b:31:32:8b: 71:a8:7a:9f:8a:f5:54:fe:e3:08:11:28:17:9e:00: 72:3e:eb:55:52:a9:c6:49:14:c6:1c:74:99:39:95: cc:7d:a2:b0:4e:4b:2c:8e:f2:d9:1b:01:7c:f2:e5: 5f:a9:3b:5b:b1:e2:4a:87:7d:4c:51:50:57:76:f5: b6:56:17:6a:71:fa:e2:4e:51:17:92:0d:b2:65:99: e0:f9:fe:a3:da:73:68:44:64:56:db:50:a4:55:8f: 43:7d:ac:11:29:6d:bf:be:6b:c8:6b:6d:4c:02:a5: 28:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:42:9E:1C:1F:C7:C1:67:66:E9:8C:2A:0C:BE:2B:2D:4F:E2:90:4A X509v3 Authority Key Identifier: keyid:CA:34:B1:33:87:FA:B1:DC:F8:B6:7F:16:A0:A4:37:60:86:00:C4:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/hEKeHB_HwWdm6YwqDL4rLU_ikEo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.112.132.0/22 213.156.245.0/24 213.156.250.0-213.156.255.255 Signature Algorithm: sha256WithRSAEncryption 7f:21:5f:11:c0:81:00:44:ae:16:02:d4:b6:7b:22:a4:24:36: 7a:05:71:21:d4:42:40:d3:f3:11:fe:a3:3a:b8:44:bf:ef:af: 86:0b:cc:10:08:90:3b:5e:9b:f8:99:65:1a:5a:28:16:01:44: a0:fd:95:e5:36:c2:ba:32:e7:a5:ed:9c:fa:0e:d7:4e:85:6a: 60:f6:7b:8c:e9:e1:f3:cb:cb:59:71:bc:b4:37:aa:f5:02:c8: d4:90:ae:a2:91:fb:85:9d:cc:e5:ea:01:9e:89:e9:e0:a3:b0: f3:f1:66:9d:ef:8a:c2:1f:f0:9e:f5:ab:08:53:80:dc:5c:d4: 64:f8:1c:12:b1:e0:b4:7d:1f:53:95:cf:6d:0f:4c:d4:7b:18: ad:38:bc:df:7e:b2:03:cd:62:a8:4f:77:da:8a:2f:66:5f:49: cd:88:26:fc:90:bb:c1:f3:a1:e9:83:9e:0f:0d:21:8f:22:6b: 7d:1c:e9:af:8a:18:0e:27:38:c4:f1:ff:14:f4:5e:85:15:d0: 28:3b:8c:ae:35:c7:5e:f7:8a:ca:fd:fd:06:96:61:0e:29:83: 3e:86:b5:7d:91:d9:6e:eb:50:9c:88:a1:43:3f:6f:c0:92:f7: e6:f7:02:f8:4a:ed:84:64:c2:9f:12:d7:c7:7d:9e:50:e1:d9: f7:f1:0a:8b -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgISAZt6W3jApO6HxOYPMlxSqisjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhMzRiMTMzODdmYWIxZGNmOGI2N2YxNmEwYTQzNzYwODYw MGM0YzIwHhcNMjYwMTAxMTYxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDQyOWUxYzFmYzdjMTY3NjZlOThjMmEwY2JlMmIyZDRmZTI5MDRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2uDbJHCPHb3KSkbj96eG7Uj5TjfI G6EwoeHqhllCTKOM3JDMs5Xd4qBF11pfPTTWzJhzEYUJXWskZgJUJa6dBl3+lV45 iNr9fOK28ub9kOUaXsSMeUGEFnrSp/OodEx+DJvrBeCMIiuXPqRumHGBc0559mge yPstrJaGk5zc1mIAzfQLq4TkJASa1zIR6qSXlxsxMotxqHqfivVU/uMIESgXngBy PutVUqnGSRTGHHSZOZXMfaKwTkssjvLZGwF88uVfqTtbseJKh31MUVBXdvW2Vhdq cfriTlEXkg2yZZng+f6j2nNoRGRW21CkVY9DfawRKW2/vmvIa21MAqUomwIDAQAB o4ICHDCCAhgwHQYDVR0OBBYEFIRCnhwfx8FnZumMKgy+Ky1P4pBKMB8GA1UdIwQY MBaAFMo0sTOH+rHc+LZ/FqCkN2CGAMTCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWpTeE00ZjZzZHo0dG44V29LUTNZSVlBeE1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8xMTdjYTMtYjYwMy00ZGI4LTk2MjYt MDQwNTIzNGFiM2YxLzEvaEVLZUhCX0h3V2RtNll3cURMNHJMVV9pa0VvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8xMTdjYTMtYjYwMy00ZGI4LTk2MjYtMDQwNTIzNGFiM2Yx LzEveWpTeE00ZjZzZHo0dG44V29LUTNZSVlBeE1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDIGCCsGAQUFBwEHAQH/BCMwITAfBAIAATAZAwQCuXCEAwQA 1Zz1MAsDBAHVnPoDAwDVnDANBgkqhkiG9w0BAQsFAAOCAQEAfyFfEcCBAESuFgLU tnsipCQ2egVxIdRCQNPzEf6jOrhEv++vhgvMEAiQO16b+JllGlooFgFEoP2V5TbC ujLnpe2c+g7XToVqYPZ7jOnh88vLWXG8tDeq9QLI1JCuopH7hZ3M5eoBnonp4KOw 8/Fmne+Kwh/wnvWrCFOA3FzUZPgcErHgtH0fU5XPbQ9M1HsYrTi8336yA81iqE93 2oovZl9JzYgm/JC7wfOh6YOeDw0hjyJrfRzpr4oYDic4xPH/FPRehRXQKDuMrjXH XveKyv39BpZhDimDPoa1fZHZbutQnIihQz9vwJL35vcC+ErthGTCnxLXx32eUOHZ 9/EKiw== -----END CERTIFICATE-----Generated at Wed Jan 7 23:48:00 2026 by rpki-client