This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/HUbkLtP-uwBAqaBQMhiCQa9v6TU.roa File: HUbkLtP-uwBAqaBQMhiCQa9v6TU.roa (raw, json) Hash identifier: 3c9QMN5Lp2jJwJ34jy6AEZD7aoQeLurWKfcN2Uqhz/w= Subject key identifier: 1D:46:E4:2E:D3:FE:BB:00:40:A9:A0:50:32:18:82:41:AF:6F:E9:35 Certificate issuer: /CN=70bf553042f1a43827dc034500bbd1068a7297ca Certificate serial: 019ADA39204D583BFE768F13D250A7D21424 Authority key identifier: 70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/HUbkLtP-uwBAqaBQMhiCQa9v6TU.roa Signing time: Mon 01 Dec 2025 14:02:48 +0000 ROA not before: Mon 01 Dec 2025 14:02:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 207137 IP address blocks: 185.135.45.0/24 maxlen: 24 2a13:240::/48 maxlen: 48 2a13:240:1::/48 maxlen: 48 2a13:240:2::/48 maxlen: 48 2a13:240:3::/48 maxlen: 48 2a13:240:4::/48 maxlen: 48 2a13:240:5::/48 maxlen: 48 2a13:240:6::/48 maxlen: 48 2a13:240:7::/48 maxlen: 48 2a13:240:8::/48 maxlen: 48 2a13:240:9::/48 maxlen: 48 2a13:240:a::/48 maxlen: 48 2a13:240:b::/48 maxlen: 48 2a13:240:c::/48 maxlen: 48 2a13:240:d::/48 maxlen: 48 2a13:240:e::/48 maxlen: 48 2a13:240:f::/48 maxlen: 48 2a13:240:10::/48 maxlen: 48 2a13:240:4200::/40 maxlen: 40 2a13:240:4300::/40 maxlen: 40 2a13:240:4400::/40 maxlen: 40 2a13:240:4500::/40 maxlen: 40 2a13:240:4600::/40 maxlen: 40 2a13:240:4700::/40 maxlen: 40 2a13:240:4800::/40 maxlen: 40 2a13:240:4900::/40 maxlen: 40 2a13:240:4a00::/40 maxlen: 40 2a13:240:4b00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:da:39:20:4d:58:3b:fe:76:8f:13:d2:50:a7:d2:14:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70bf553042f1a43827dc034500bbd1068a7297ca Validity Not Before: Dec 1 14:02:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1d46e42ed3febb0040a9a05032188241af6fe935 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:34:42:dc:a1:33:15:8b:53:50:d4:98:a6:d0: 9a:0d:74:30:50:07:a9:b9:b2:b7:2b:52:62:a2:7f: c6:d8:f4:99:62:1c:70:e9:ca:fd:ca:e2:07:04:7b: d8:98:83:dd:0b:c4:4d:a2:d4:34:8b:cd:d5:c1:c7: 4d:38:83:fc:a5:57:46:87:58:50:09:1e:02:25:59: 5c:b5:39:f5:9f:be:d2:c9:81:17:07:7e:80:03:17: bc:9e:89:bb:fb:3b:e3:b4:11:75:fe:b0:6f:5e:3b: e7:e1:81:52:88:7a:b3:c4:24:d1:aa:29:e2:3f:26: 12:76:6a:c7:0d:63:70:2d:04:6c:ea:84:5a:7b:9a: 40:cf:3f:ce:ef:37:e4:e3:19:3f:8e:63:2b:02:9b: 33:05:62:e9:01:0e:fc:8a:63:2f:73:2c:96:d0:8d: 24:06:b7:73:6d:70:ab:e0:f4:60:97:93:37:32:2c: 92:19:5a:9d:14:20:4f:ae:0a:ef:4d:1e:e3:db:59: 9d:93:bd:a0:7b:8d:6d:fb:fe:36:fd:90:0a:df:4a: f1:2e:d7:95:82:4a:be:39:02:17:c4:5c:9b:84:6d: 54:52:f0:7f:27:1b:f3:01:6c:07:82:7c:79:70:d9: d7:98:e3:2e:03:e2:f2:58:a3:d2:23:3c:2b:43:73: cc:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:46:E4:2E:D3:FE:BB:00:40:A9:A0:50:32:18:82:41:AF:6F:E9:35 X509v3 Authority Key Identifier: keyid:70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/HUbkLtP-uwBAqaBQMhiCQa9v6TU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.135.45.0/24 IPv6: 2a13:240::-2a13:240:10:ffff:ffff:ffff:ffff:ffff 2a13:240:4200::-2a13:240:4bff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption b6:72:1b:35:5b:e9:96:15:fb:3e:1e:cf:e8:b4:06:9c:c1:93: d6:54:a9:9a:f8:f9:30:3f:d4:ae:9a:f2:49:02:37:53:9d:9c: ed:2f:a7:45:59:55:f0:d9:01:d6:1d:3a:5b:97:c1:ff:6d:44: 82:3b:8d:b9:0c:df:20:1c:60:56:7a:d9:e1:96:f0:2e:32:8b: e6:60:1b:06:56:b9:a8:31:3a:24:3b:a0:02:00:4d:9a:dd:88: 1f:77:ed:5c:02:d3:3c:a4:09:7b:11:94:c6:1c:aa:56:f2:b5: 30:d0:0f:df:72:b0:d7:44:b9:e7:44:c0:64:7f:d8:86:9d:5a: fe:43:e0:8c:9e:83:30:04:ec:14:bc:18:21:0e:2c:31:7b:0b: 05:44:e0:5b:69:a1:20:f7:36:de:0b:2b:90:10:a2:8b:0b:78: 33:c4:9e:18:be:90:4f:da:53:35:1e:55:0b:11:6f:66:f0:ac: 82:1a:ed:89:9e:4f:ba:9b:b9:07:c0:fb:7b:45:50:b4:f1:04: 0d:dd:7f:8b:f9:e0:38:e9:98:a7:8f:39:0b:bb:51:74:27:0a: 65:53:82:7a:26:fb:62:a2:e8:f1:0b:7b:45:27:b1:5f:d7:14: be:a2:ec:65:f3:fb:fc:0f:dc:3d:61:cc:01:46:25:99:1c:ba: 48:e4:b0:2b -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgISAZraOSBNWDv+do8T0lCn0hQkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwYmY1NTMwNDJmMWE0MzgyN2RjMDM0NTAwYmJkMTA2OGE3 Mjk3Y2EwHhcNMjUxMjAxMTQwMjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZDQ2ZTQyZWQzZmViYjAwNDBhOWEwNTAzMjE4ODI0MWFmNmZlOTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDRC3KEzFYtTUNSYptCaDXQwUAep ubK3K1Jion/G2PSZYhxw6cr9yuIHBHvYmIPdC8RNotQ0i83VwcdNOIP8pVdGh1hQ CR4CJVlctTn1n77SyYEXB36AAxe8nom7+zvjtBF1/rBvXjvn4YFSiHqzxCTRqini PyYSdmrHDWNwLQRs6oRae5pAzz/O7zfk4xk/jmMrApszBWLpAQ78imMvcyyW0I0k BrdzbXCr4PRgl5M3MiySGVqdFCBPrgrvTR7j21mdk72ge41t+/42/ZAK30rxLteV gkq+OQIXxFybhG1UUvB/JxvzAWwHgnx5cNnXmOMuA+LyWKPSIzwrQ3PM9wIDAQAB o4ICNTCCAjEwHQYDVR0OBBYEFB1G5C7T/rsAQKmgUDIYgkGvb+k1MB8GA1UdIwQY MBaAFHC/VTBC8aQ4J9wDRQC70QaKcpfKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0w5Vk1FTHhwRGduM0FORkFMdlJCb3B5bDhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9kZjc5NDQtMjU4OS00N2NiLWFiNTYt NTM1ODQwMWZiNzk2LzEvSFVia0x0UC11d0JBcWFCUU1oaUNRYTl2NlRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9kZjc5NDQtMjU4OS00N2NiLWFiNTYtNTM1ODQwMWZiNzk2 LzEvY0w5Vk1FTHhwRGduM0FORkFMdlJCb3B5bDhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjAMBAIAATAGAwQAuYctMCoE AgACMCQwEAMFBioTAkADBwAqEwJAABAwEAMGASoTAkBCAwYCKhMCQEgwDQYJKoZI hvcNAQELBQADggEBALZyGzVb6ZYV+z4ez+i0BpzBk9ZUqZr4+TA/1K6a8kkCN1Od nO0vp0VZVfDZAdYdOluXwf9tRII7jbkM3yAcYFZ62eGW8C4yi+ZgGwZWuagxOiQ7 oAIATZrdiB937VwC0zykCXsRlMYcqlbytTDQD99ysNdEuedEwGR/2IadWv5D4Iye gzAE7BS8GCEOLDF7CwVE4FtpoSD3Nt4LK5AQoosLeDPEnhi+kE/aUzUeVQsRb2bw rIIa7YmeT7qbuQfA+3tFULTxBA3df4v54DjpmKePOQu7UXQnCmVTgnom+2Ki6PEL e0UnsV/XFL6i7GXz+/wP3D1hzAFGJZkcukjksCs= -----END CERTIFICATE-----Generated at Sat Dec 6 18:45:53 2025 by rpki-client