This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/hbw7CN1M4gG53HtCgedPSeioQDk.roa File: hbw7CN1M4gG53HtCgedPSeioQDk.roa (raw, json) Hash identifier: qqvqnZxGjX23cVj2PDJR2X0rMeYrxyRxiXi4RyDzW3U= Subject key identifier: 85:BC:3B:08:DD:4C:E2:01:B9:DC:7B:42:81:E7:4F:49:E8:A8:40:39 Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Certificate serial: 019B7BA4A462FE6D4A235C5390E5143D83EA Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/hbw7CN1M4gG53HtCgedPSeioQDk.roa Signing time: Thu 01 Jan 2026 22:19:06 +0000 ROA not before: Thu 01 Jan 2026 22:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212147 IP address blocks: 85.202.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:a4:62:fe:6d:4a:23:5c:53:90:e5:14:3d:83:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Validity Not Before: Jan 1 22:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=85bc3b08dd4ce201b9dc7b4281e74f49e8a84039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5a:e1:44:09:96:11:6c:59:88:a5:ae:15:1a: 5b:05:0f:62:95:63:d9:25:a1:79:99:8d:01:96:29: 11:2c:c4:c0:0f:26:4c:d9:9f:58:83:3d:ce:39:a4: 21:0d:0a:52:a9:91:e7:5b:00:ba:05:99:a7:0b:d3: 5b:e8:09:e8:7d:3a:ce:a2:8a:5d:92:85:da:e5:91: ec:84:34:b0:be:59:79:ba:30:d7:f3:30:78:e5:70: 5d:a9:98:51:43:82:9c:93:82:c1:19:87:18:9b:cb: 2c:aa:04:7d:14:29:b9:8f:b5:b9:f9:5b:6a:29:b5: df:05:a8:30:53:6e:aa:89:39:04:00:c8:fa:29:75: 4e:4d:a7:d5:f8:fc:ba:9c:ff:49:67:74:b2:85:5b: a7:2a:ad:48:53:51:49:b7:67:fd:3f:16:70:82:66: cb:5b:cc:89:a6:b5:42:2f:b2:f4:68:03:f0:ba:9e: 03:56:59:d3:68:b4:c1:fb:48:50:a5:96:2f:f6:d6: 77:18:4b:25:4e:0f:b2:72:63:26:c1:be:c8:1c:a4: 8a:bb:42:f6:a3:73:c3:a3:97:9a:08:30:ce:71:9e: 32:31:df:b8:7e:af:65:a1:88:b8:e4:26:f7:aa:64: c8:fb:1c:47:00:aa:b4:47:1c:2f:ba:65:ee:33:1f: 1d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:BC:3B:08:DD:4C:E2:01:B9:DC:7B:42:81:E7:4F:49:E8:A8:40:39 X509v3 Authority Key Identifier: keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/hbw7CN1M4gG53HtCgedPSeioQDk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.202.86.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:3c:e4:ef:16:d3:39:e1:3d:18:55:ae:e3:da:f9:6e:46:92: 8d:55:f1:75:47:a4:ac:c5:df:c4:0e:2f:ab:3e:1b:2f:75:46: 14:3b:77:93:a8:5c:76:37:36:14:11:2f:ed:ee:06:bf:c1:3e: 87:c3:82:08:4a:c5:2e:e8:56:4c:1f:30:d5:ce:48:cd:7d:3a: 13:aa:57:90:b0:45:aa:97:8b:25:7e:60:74:a6:79:79:61:2c: a2:07:f2:a4:b5:1d:7a:17:e6:e9:f7:9f:31:0e:2c:68:fa:b4: 2c:61:6e:40:5e:93:fd:ca:e8:67:23:11:94:06:e9:1a:2f:94: 28:8b:47:a9:e9:9c:5d:81:00:17:2e:1e:d7:30:95:0c:e2:57: 90:10:f4:f7:77:4c:f8:80:01:f7:d0:29:12:33:1b:90:bf:1e: e4:fb:34:ee:fb:0a:10:dc:55:33:bb:19:3b:7e:df:9f:6d:74: 9e:ea:1b:51:c8:ec:df:c9:4e:3b:6d:0c:2d:ab:1a:7c:d6:f7: cf:8f:90:c0:a0:1b:22:dd:7b:15:20:b6:ad:ee:50:8c:c1:63: bd:ed:4f:b0:c7:5d:f5:ad:68:5e:a9:13:3c:3a:40:af:64:7d: cb:1b:50:97:23:8a:d8:ef:e4:a5:71:f9:2b:ec:9e:d1:ed:5d: 7e:a3:4f:58 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pKRi/m1KI1xTkOUUPYPqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4 YWJjYzUwHhcNMjYwMTAxMjIxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NWJjM2IwOGRkNGNlMjAxYjlkYzdiNDI4MWU3NGY0OWU4YTg0MDM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1rhRAmWEWxZiKWuFRpbBQ9ilWPZ JaF5mY0BlikRLMTADyZM2Z9Ygz3OOaQhDQpSqZHnWwC6BZmnC9Nb6AnofTrOoopd koXa5ZHshDSwvll5ujDX8zB45XBdqZhRQ4Kck4LBGYcYm8ssqgR9FCm5j7W5+Vtq KbXfBagwU26qiTkEAMj6KXVOTafV+Py6nP9JZ3SyhVunKq1IU1FJt2f9PxZwgmbL W8yJprVCL7L0aAPwup4DVlnTaLTB+0hQpZYv9tZ3GEslTg+ycmMmwb7IHKSKu0L2 o3PDo5eaCDDOcZ4yMd+4fq9loYi45Cb3qmTI+xxHAKq0RxwvumXuMx8d4QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIW8OwjdTOIBudx7QoHnT0noqEA5MB8GA1UdIwQY MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt NmZlOWJmNjA1NjFjLzEvaGJ3N0NOMU00Z0c1M0h0Q2dlZFBTZWlvUURrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVcpWMA0G CSqGSIb3DQEBCwUAA4IBAQBtPOTvFtM54T0YVa7j2vluRpKNVfF1R6Ssxd/EDi+r PhsvdUYUO3eTqFx2NzYUES/t7ga/wT6Hw4IISsUu6FZMHzDVzkjNfToTqleQsEWq l4slfmB0pnl5YSyiB/KktR16F+bp958xDixo+rQsYW5AXpP9yuhnIxGUBukaL5Qo i0ep6ZxdgQAXLh7XMJUM4leQEPT3d0z4gAH30CkSMxuQvx7k+zTu+woQ3FUzuxk7 ft+fbXSe6htRyOzfyU47bQwtqxp81vfPj5DAoBsi3XsVILat7lCMwWO97U+wx131 rWheqRM8OkCvZH3LG1CXI4rY7+Slcfkr7J7R7V1+o09Y -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:52 2026 by rpki-client