This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/hckzBAd7c5OdJzko7QFybqCZwYk.roa File: hckzBAd7c5OdJzko7QFybqCZwYk.roa (raw, json) Hash identifier: sGh3rXUv0CgU2j2PKVvWAydBIfq8Jsvx7anLkpH+JJs= Subject key identifier: 85:C9:33:04:07:7B:73:93:9D:27:39:28:ED:01:72:6E:A0:99:C1:89 Certificate issuer: /CN=0910af10067f5301fc8f60848f55b3c33c180f53 Certificate serial: 019B7B3543379D8F3F15A7E50A93EA6E3E1E Authority key identifier: 09:10:AF:10:06:7F:53:01:FC:8F:60:84:8F:55:B3:C3:3C:18:0F:53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/hckzBAd7c5OdJzko7QFybqCZwYk.roa Signing time: Thu 01 Jan 2026 20:17:26 +0000 ROA not before: Thu 01 Jan 2026 20:17:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205201 IP address blocks: 188.120.121.0/24 maxlen: 24 188.120.122.0/23 maxlen: 23 188.120.122.0/24 maxlen: 24 188.120.123.0/24 maxlen: 24 188.120.126.0/24 maxlen: 24 194.28.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft rsync://rpki.ripe.net/repository/DEFAULT/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:43:37:9d:8f:3f:15:a7:e5:0a:93:ea:6e:3e:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0910af10067f5301fc8f60848f55b3c33c180f53 Validity Not Before: Jan 1 20:17:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=85c93304077b73939d273928ed01726ea099c189 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fe:3b:00:63:03:c9:c3:6f:51:b3:7c:fe:2b: fe:56:8f:fb:50:5c:cd:19:7b:e7:09:0e:af:f4:35: 7e:db:4b:2f:5b:79:9f:65:42:ec:14:cd:cf:a8:6b: 75:e2:c2:1d:ba:49:24:f7:0e:6c:11:3e:77:bf:7f: 3f:19:ca:01:3c:dc:18:10:92:96:18:6f:40:05:2f: 13:4c:36:05:20:3b:7f:bd:28:b4:a3:30:43:d3:f2: 91:fe:3e:25:13:ad:06:3e:ac:fe:51:4b:c4:8a:ce: da:23:c0:3a:43:2a:99:78:bf:43:25:60:35:b5:04: bf:83:02:3b:5f:5e:1a:60:9e:90:20:36:70:dc:f7: 6e:8c:d8:1d:71:4e:ee:e0:de:8a:28:aa:d1:0d:72: e9:61:a4:5e:1f:40:69:fc:3c:27:de:7d:85:96:07: 1e:3c:bb:fb:bf:a1:ce:0b:e9:39:23:e1:23:c2:de: cd:20:24:df:90:85:67:77:a3:3d:3c:cf:6d:d8:4e: ff:7e:91:f1:a2:86:89:28:9d:da:d7:28:a7:f5:d5: ec:25:c1:6a:a1:69:cd:f5:2f:23:2f:b3:bd:89:af: 8e:8b:08:ca:ed:ac:26:50:21:76:df:44:70:c4:4d: d4:9f:c7:c5:71:b7:57:7f:8b:ed:06:18:3c:02:ed: a0:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:C9:33:04:07:7B:73:93:9D:27:39:28:ED:01:72:6E:A0:99:C1:89 X509v3 Authority Key Identifier: keyid:09:10:AF:10:06:7F:53:01:FC:8F:60:84:8F:55:B3:C3:3C:18:0F:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/hckzBAd7c5OdJzko7QFybqCZwYk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.120.121.0-188.120.123.255 188.120.126.0/24 194.28.130.0/24 Signature Algorithm: sha256WithRSAEncryption 51:13:24:eb:d7:98:54:11:18:ce:62:9d:f9:d4:3d:31:aa:66: 95:36:33:e2:07:80:a3:07:de:16:f2:af:22:b9:9a:7a:4a:5e: 6c:ee:43:ce:ed:9c:21:30:ab:4f:c9:89:34:5f:5c:f1:8d:af: 27:4d:54:10:04:0c:42:fb:da:b8:e3:17:99:b1:b5:19:85:8c: 72:be:e6:9b:ff:a1:3d:bc:0f:1d:3c:f1:cd:af:d8:8d:f7:3c: 34:6f:e6:ad:c7:2d:91:c0:48:65:e6:86:b9:c2:aa:43:04:5b: 1b:c3:c1:e0:95:44:0d:2e:5d:a4:9e:f1:fc:c8:ff:f1:1f:e5: 2c:c3:fc:9e:ee:07:a9:cb:28:07:85:df:16:9a:c5:b9:c7:3f: 34:80:6c:b7:39:97:1b:6b:dd:df:87:b9:d4:de:c6:00:b5:17: 6b:00:11:64:f5:45:8f:8f:b7:a2:a0:2d:89:3b:0e:ff:ed:8c: 0b:06:28:5d:a8:28:02:23:92:b8:db:5e:44:40:20:24:36:1c: b0:61:41:6b:37:ff:5f:e4:5f:ad:14:bb:1b:e6:06:56:10:5b: a7:de:ed:d8:55:0d:ca:9e:58:e3:13:4d:a9:85:ef:23:4c:a4: 31:fc:f5:6c:40:26:6a:75:21:71:e8:b2:87:ca:ec:13:47:17: 24:f1:92:12 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt7NUM3nY8/FaflCpPqbj4eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MTBhZjEwMDY3ZjUzMDFmYzhmNjA4NDhmNTViM2MzM2Mx ODBmNTMwHhcNMjYwMTAxMjAxNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NWM5MzMwNDA3N2I3MzkzOWQyNzM5MjhlZDAxNzI2ZWEwOTljMTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvf47AGMDycNvUbN8/iv+Vo/7UFzN GXvnCQ6v9DV+20svW3mfZULsFM3PqGt14sIdukkk9w5sET53v38/GcoBPNwYEJKW GG9ABS8TTDYFIDt/vSi0ozBD0/KR/j4lE60GPqz+UUvEis7aI8A6QyqZeL9DJWA1 tQS/gwI7X14aYJ6QIDZw3PdujNgdcU7u4N6KKKrRDXLpYaReH0Bp/Dwn3n2Flgce PLv7v6HOC+k5I+Ejwt7NICTfkIVnd6M9PM9t2E7/fpHxooaJKJ3a1yin9dXsJcFq oWnN9S8jL7O9ia+OiwjK7awmUCF230RwxE3Un8fFcbdXf4vtBhg8Au2gQQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFIXJMwQHe3OTnSc5KO0Bcm6gmcGJMB8GA1UdIwQY MBaAFAkQrxAGf1MB/I9ghI9Vs8M8GA9TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1JDdkVBWl9Vd0g4ajJDRWoxV3p3endZRDFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9iZWIwNzAtZTEyOS00NGI2LWE3N2Mt MmU3YThhMzk0YzQ1LzEvaGNrekJBZDdjNU9kSnprbzdRRnlicUNad1lrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9iZWIwNzAtZTEyOS00NGI2LWE3N2MtMmU3YThhMzk0YzQ1 LzEvQ1JDdkVBWl9Vd0g4ajJDRWoxV3p3endZRDFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAC8eHkD BAK8eHgDBAC8eH4DBADCHIIwDQYJKoZIhvcNAQELBQADggEBAFETJOvXmFQRGM5i nfnUPTGqZpU2M+IHgKMH3hbyryK5mnpKXmzuQ87tnCEwq0/JiTRfXPGNrydNVBAE DEL72rjjF5mxtRmFjHK+5pv/oT28Dx088c2v2I33PDRv5q3HLZHASGXmhrnCqkME WxvDweCVRA0uXaSe8fzI//Ef5SzD/J7uB6nLKAeF3xaaxbnHPzSAbLc5lxtr3d+H udTexgC1F2sAEWT1RY+Pt6KgLYk7Dv/tjAsGKF2oKAIjkrjbXkRAICQ2HLBhQWs3 /1/kX60UuxvmBlYQW6fe7dhVDcqeWOMTTamF7yNMpDH89WxAJmp1IXHosofK7BNH FyTxkhI= -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:21 2026 by rpki-client