This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/HBEyLxpq6Zjz5sUTBEvkEU0PeDw.roa File: HBEyLxpq6Zjz5sUTBEvkEU0PeDw.roa (raw, json) Hash identifier: uYdJNtH72XeHZSBQgJWsgmqChwbMODpuyEXVyDLkE8Q= Subject key identifier: 1C:11:32:2F:1A:6A:E9:98:F3:E6:C5:13:04:4B:E4:11:4D:0F:78:3C Certificate issuer: /CN=a01a1c7dbb9a1571a5bf4924ab3fc50493145f4f Certificate serial: 019B7835503A903AB0A261CB469667FE476C Authority key identifier: A0:1A:1C:7D:BB:9A:15:71:A5:BF:49:24:AB:3F:C5:04:93:14:5F:4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBocfbuaFXGlv0kkqz_FBJMUX08.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/HBEyLxpq6Zjz5sUTBEvkEU0PeDw.roa Signing time: Thu 01 Jan 2026 06:18:38 +0000 ROA not before: Thu 01 Jan 2026 06:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5582 IP address blocks: 185.113.32.0/23 maxlen: 23 185.182.224.0/22 maxlen: 22 2a0a:fa80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.mft rsync://rpki.ripe.net/repository/DEFAULT/oBocfbuaFXGlv0kkqz_FBJMUX08.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:50:3a:90:3a:b0:a2:61:cb:46:96:67:fe:47:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a01a1c7dbb9a1571a5bf4924ab3fc50493145f4f Validity Not Before: Jan 1 06:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1c11322f1a6ae998f3e6c513044be4114d0f783c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ad:42:44:a6:e7:4a:8c:4e:29:1d:3d:73:c6: ec:7c:7c:11:31:c7:76:14:f2:93:c4:5a:84:ae:93: e5:37:37:ca:e8:e0:50:90:ae:e6:1b:72:1a:b6:a7: 4c:b8:39:d0:88:88:40:59:50:9a:43:31:dd:13:3a: c2:37:64:c3:23:73:fd:50:10:c1:8e:73:72:d9:46: c2:79:a3:ff:77:21:c1:71:08:02:68:cf:d0:08:80: 47:e9:8e:56:61:7b:46:ec:b6:e0:50:ae:ae:e3:a7: a9:29:cb:ed:f0:a4:f8:ef:ae:e5:08:30:39:18:e9: a4:39:af:16:33:66:97:a9:4b:cc:06:1f:b4:62:74: 9f:b4:89:21:58:1d:95:9e:e0:64:88:0c:8f:6b:88: 7c:56:cc:5a:39:39:a3:1e:83:49:80:d0:e5:dd:b7: b6:fa:4e:4c:73:76:56:85:3c:87:79:9d:8d:3a:ca: cc:3d:41:91:73:93:d3:cc:13:f4:42:68:c3:d7:a2: 1a:19:20:cb:58:ec:e9:57:f8:78:0f:1b:9a:81:de: 07:5e:b8:25:5e:e5:0b:f5:84:02:e0:d4:fd:72:33: ee:56:52:3e:e8:49:19:4c:09:26:d2:dd:e1:3e:27: 39:24:1d:63:bb:a5:d9:8b:04:0d:1d:1e:3c:0b:0a: a5:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:11:32:2F:1A:6A:E9:98:F3:E6:C5:13:04:4B:E4:11:4D:0F:78:3C X509v3 Authority Key Identifier: keyid:A0:1A:1C:7D:BB:9A:15:71:A5:BF:49:24:AB:3F:C5:04:93:14:5F:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBocfbuaFXGlv0kkqz_FBJMUX08.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/HBEyLxpq6Zjz5sUTBEvkEU0PeDw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.113.32.0/23 185.182.224.0/22 IPv6: 2a0a:fa80::/29 Signature Algorithm: sha256WithRSAEncryption 73:63:bb:43:a2:07:e2:e8:1b:90:3a:e6:32:5b:f0:bf:1a:65: e3:d2:9c:26:81:9f:0a:7b:f0:db:82:a6:41:a9:0b:c6:a3:a7: 6c:f4:22:a9:c7:a7:78:50:06:38:e3:72:d9:e0:d9:de:01:08: bd:b5:d9:be:04:62:11:1b:e0:02:c0:03:ea:50:e2:3c:f7:16: fc:57:68:e7:37:61:88:bd:0b:26:9c:b4:75:10:28:f3:0f:d6: 3f:a6:db:77:a8:74:2a:23:08:fb:68:3d:25:97:dd:46:97:44: d0:5f:7b:bb:d2:30:d1:67:e2:e6:05:f4:60:59:dd:f8:16:f8: 39:99:de:18:94:42:e9:62:b3:bf:0a:07:3c:17:90:47:4d:5e: 80:06:13:ca:78:65:33:98:ce:20:90:98:94:dd:2a:a1:8c:b2: f8:da:b8:3e:77:25:6b:23:e4:78:c0:b8:ae:70:4b:87:9a:59: d9:94:4b:60:1e:1a:35:96:74:c4:1d:fa:63:05:87:b6:7a:ac: 46:b1:82:b4:55:83:e8:2d:29:c7:dc:2c:39:50:ef:b5:4b:6b: 9f:82:ff:62:ec:da:af:2e:fa:c8:75:94:20:34:9c:13:de:fe: f9:20:08:d4:89:a2:82:a7:93:f1:67:0a:a5:9d:ca:80:88:26: b9:3a:dc:1a -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt4NVA6kDqwomHLRpZn/kdsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwMWExYzdkYmI5YTE1NzFhNWJmNDkyNGFiM2ZjNTA0OTMx NDVmNGYwHhcNMjYwMTAxMDYxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzExMzIyZjFhNmFlOTk4ZjNlNmM1MTMwNDRiZTQxMTRkMGY3ODNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq61CRKbnSoxOKR09c8bsfHwRMcd2 FPKTxFqErpPlNzfK6OBQkK7mG3IatqdMuDnQiIhAWVCaQzHdEzrCN2TDI3P9UBDB jnNy2UbCeaP/dyHBcQgCaM/QCIBH6Y5WYXtG7LbgUK6u46epKcvt8KT4767lCDA5 GOmkOa8WM2aXqUvMBh+0YnSftIkhWB2VnuBkiAyPa4h8VsxaOTmjHoNJgNDl3be2 +k5Mc3ZWhTyHeZ2NOsrMPUGRc5PTzBP0QmjD16IaGSDLWOzpV/h4Dxuagd4HXrgl XuUL9YQC4NT9cjPuVlI+6EkZTAkm0t3hPic5JB1ju6XZiwQNHR48CwqlPwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFBwRMi8aaumY8+bFEwRL5BFND3g8MB8GA1UdIwQY MBaAFKAaHH27mhVxpb9JJKs/xQSTFF9PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0JvY2ZidWFGWEdsdjBra3F6X0ZCSk1VWDA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9lODk2YjgtMGVhMC00YmJjLThjMzUt MjI2MmM1YmQ3YTJjLzEvSEJFeUx4cHE2Wmp6NXNVVEJFdmtFVTBQZUR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS9lODk2YjgtMGVhMC00YmJjLThjMzUtMjI2MmM1YmQ3YTJj LzEvb0JvY2ZidWFGWEdsdjBra3F6X0ZCSk1VWDA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBuXEgAwQC ubbgMA0EAgACMAcDBQMqCvqAMA0GCSqGSIb3DQEBCwUAA4IBAQBzY7tDogfi6BuQ OuYyW/C/GmXj0pwmgZ8Ke/DbgqZBqQvGo6ds9CKpx6d4UAY443LZ4NneAQi9tdm+ BGIRG+ACwAPqUOI89xb8V2jnN2GIvQsmnLR1ECjzD9Y/ptt3qHQqIwj7aD0ll91G l0TQX3u70jDRZ+LmBfRgWd34Fvg5md4YlELpYrO/Cgc8F5BHTV6ABhPKeGUzmM4g kJiU3SqhjLL42rg+dyVrI+R4wLiucEuHmlnZlEtgHho1lnTEHfpjBYe2eqxGsYK0 VYPoLSnH3Cw5UO+1S2ufgv9i7NqvLvrIdZQgNJwT3v75IAjUiaKCp5PxZwqlncqA iCa5Otwa -----END CERTIFICATE-----Generated at Mon Feb 9 20:45:41 2026 by rpki-client