This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/heTwjl-CUNz4CrSRx6rxtwNZTCs.roa File: heTwjl-CUNz4CrSRx6rxtwNZTCs.roa (raw, json) Hash identifier: Hf0bsmCPYmQIIToSzl7+MCCp7mwoqzg/S6GOXmlkt2w= Subject key identifier: 85:E4:F0:8E:5F:82:50:DC:F8:0A:B4:91:C7:AA:F1:B7:03:59:4C:2B Certificate issuer: /CN=ee370985f83f41330111c350cd6b1e1eead526aa Certificate serial: 019BA247D14B3C528E66E5220669B3E393EF Authority key identifier: EE:37:09:85:F8:3F:41:33:01:11:C3:50:CD:6B:1E:1E:EA:D5:26:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jcJhfg_QTMBEcNQzWseHurVJqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/heTwjl-CUNz4CrSRx6rxtwNZTCs.roa Signing time: Fri 09 Jan 2026 10:22:54 +0000 ROA not before: Fri 09 Jan 2026 10:22:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7768 IP address blocks: 185.140.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.mft rsync://rpki.ripe.net/repository/DEFAULT/7jcJhfg_QTMBEcNQzWseHurVJqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a2:47:d1:4b:3c:52:8e:66:e5:22:06:69:b3:e3:93:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee370985f83f41330111c350cd6b1e1eead526aa Validity Not Before: Jan 9 10:22:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=85e4f08e5f8250dcf80ab491c7aaf1b703594c2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:93:ef:ac:84:9a:1b:22:9b:da:6c:59:59:30: b9:6f:89:3b:b1:19:a0:2a:69:9b:89:e6:49:06:84: 9f:e2:c1:7f:48:8e:2e:3c:57:31:6d:6c:49:89:0f: 3e:36:04:99:1d:35:14:41:12:1f:16:e0:1d:0a:ab: 45:39:a7:cc:15:d8:8b:b1:27:fc:98:7b:e5:7c:5d: 77:1f:f2:65:33:cd:58:6b:56:41:5d:05:3a:99:45: 60:30:6e:c7:a9:12:a7:d9:45:27:d5:27:c3:0b:12: 7c:05:b3:d5:e6:b6:a0:72:6f:0e:eb:dd:41:1a:04: b4:b5:7d:ce:72:b4:dc:a1:79:85:49:e6:fe:88:4e: 18:f9:ee:c1:c5:b6:b5:76:84:43:9c:bc:bb:fe:45: c9:4d:cb:39:e3:94:fa:2a:dc:bf:cc:21:4c:69:9a: 43:a6:5b:1a:9a:ee:5f:06:71:b0:a8:23:e7:ff:49: e7:05:44:8b:e6:9a:d4:ed:ee:3c:5e:2c:84:ca:ca: 82:38:97:5e:d9:18:18:62:dd:8a:b9:f6:a8:f8:28: e3:bf:47:0a:c6:b0:08:cd:ca:8b:d0:68:e8:ae:6a: b9:4d:83:43:cc:b7:ec:01:9c:b7:28:8b:a5:8b:5d: 65:6f:c2:07:3f:a6:5c:c9:da:e0:36:99:d7:6c:7d: 28:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:E4:F0:8E:5F:82:50:DC:F8:0A:B4:91:C7:AA:F1:B7:03:59:4C:2B X509v3 Authority Key Identifier: keyid:EE:37:09:85:F8:3F:41:33:01:11:C3:50:CD:6B:1E:1E:EA:D5:26:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jcJhfg_QTMBEcNQzWseHurVJqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/heTwjl-CUNz4CrSRx6rxtwNZTCs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.140.125.0/24 Signature Algorithm: sha256WithRSAEncryption 61:68:5b:ad:a9:55:b1:56:d5:39:fd:78:36:f5:a8:5c:f2:71: 1e:b0:8d:65:6c:84:2d:e1:a5:4f:40:98:9c:8c:01:31:42:ec: 6a:72:95:83:89:73:d9:a8:24:56:c6:e3:fb:6e:cf:db:04:07: 5d:31:79:27:f4:11:0c:59:fc:02:3c:f3:7c:4b:9b:a8:9e:56: ea:0f:ca:87:f8:43:07:c3:a6:4e:a3:20:8e:d6:cd:5a:f1:74: 3b:fb:02:bf:61:8f:58:7e:0d:45:57:ca:c9:9b:1e:52:8a:9e: b5:0f:29:74:ef:81:6a:85:43:35:22:95:58:80:88:d2:7d:f4: 1f:d1:4b:64:4d:c5:7b:bd:7c:72:da:1e:c7:d8:bc:11:b3:01: 2f:b2:f7:a8:77:32:e5:e5:7d:e1:7e:26:8e:43:2d:97:fc:e7: e8:2a:4b:f8:0a:5f:42:27:0f:3b:84:b0:be:8d:44:a7:f5:35: 04:ca:02:f3:b9:5b:28:d4:1b:2f:32:a4:31:76:96:48:66:1d: 44:a6:30:03:5a:be:4c:4e:46:d7:55:26:7c:53:1b:0b:e5:64: ee:f8:26:b0:59:a3:fd:e4:0d:92:1f:62:43:9b:7a:6a:f3:a3: b8:bc:21:f9:2e:ed:aa:46:0d:ff:cf:1e:3b:1a:6c:09:c2:62: bf:83:f4:dc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuiR9FLPFKOZuUiBmmz45PvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMzcwOTg1ZjgzZjQxMzMwMTExYzM1MGNkNmIxZTFlZWFk NTI2YWEwHhcNMjYwMTA5MTAyMjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NWU0ZjA4ZTVmODI1MGRjZjgwYWI0OTFjN2FhZjFiNzAzNTk0YzJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA95PvrISaGyKb2mxZWTC5b4k7sRmg KmmbieZJBoSf4sF/SI4uPFcxbWxJiQ8+NgSZHTUUQRIfFuAdCqtFOafMFdiLsSf8 mHvlfF13H/JlM81Ya1ZBXQU6mUVgMG7HqRKn2UUn1SfDCxJ8BbPV5ragcm8O691B GgS0tX3OcrTcoXmFSeb+iE4Y+e7Bxba1doRDnLy7/kXJTcs545T6Kty/zCFMaZpD plsamu5fBnGwqCPn/0nnBUSL5prU7e48XiyEysqCOJde2RgYYt2Kufao+Cjjv0cK xrAIzcqL0Gjormq5TYNDzLfsAZy3KIuli11lb8IHP6ZcydrgNpnXbH0ofwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIXk8I5fglDc+Aq0kceq8bcDWUwrMB8GA1UdIwQY MBaAFO43CYX4P0EzARHDUM1rHh7q1SaqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2pjSmhmZ19RVE1CRWNOUXpXc2VIdXJWSnFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8yNzQ0ZDAtNDFhMC00NDM0LWI2OTAt MzI0NDU0NmY4Y2JmLzEvaGVUd2psLUNVTno0Q3JTUng2cnh0d05aVENzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC8yNzQ0ZDAtNDFhMC00NDM0LWI2OTAtMzI0NDU0NmY4Y2Jm LzEvN2pjSmhmZ19RVE1CRWNOUXpXc2VIdXJWSnFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYx9MA0G CSqGSIb3DQEBCwUAA4IBAQBhaFutqVWxVtU5/Xg29ahc8nEesI1lbIQt4aVPQJic jAExQuxqcpWDiXPZqCRWxuP7bs/bBAddMXkn9BEMWfwCPPN8S5uonlbqD8qH+EMH w6ZOoyCO1s1a8XQ7+wK/YY9Yfg1FV8rJmx5Sip61Dyl074FqhUM1IpVYgIjSffQf 0UtkTcV7vXxy2h7H2LwRswEvsveodzLl5X3hfiaOQy2X/OfoKkv4Cl9CJw87hLC+ jUSn9TUEygLzuVso1BsvMqQxdpZIZh1EpjADWr5MTkbXVSZ8UxsL5WTu+CawWaP9 5A2SH2JDm3pq86O4vCH5Lu2qRg3/zx47GmwJwmK/g/Tc -----END CERTIFICATE-----Generated at Mon Jan 26 07:09:56 2026 by rpki-client