This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/hdTOmW-s8Aq7ZbUJ5FYuRf6D-a8.roa File: hdTOmW-s8Aq7ZbUJ5FYuRf6D-a8.roa (raw, json) Hash identifier: t8JOCBuigJZ1UrPSe5WnaZHvUrwjsZNK9IFBhrH2Jds= Subject key identifier: 85:D4:CE:99:6F:AC:F0:0A:BB:65:B5:09:E4:56:2E:45:FE:83:F9:AF Certificate issuer: /CN=9f0743496c7ff3effb870601139cad9d2f271e10 Certificate serial: 019AF28B58306719D3128C8B55C256D36099 Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/hdTOmW-s8Aq7ZbUJ5FYuRf6D-a8.roa Signing time: Sat 06 Dec 2025 07:23:29 +0000 ROA not before: Sat 06 Dec 2025 07:23:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203144 IP address blocks: 185.89.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:8b:58:30:67:19:d3:12:8c:8b:55:c2:56:d3:60:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10 Validity Not Before: Dec 6 07:23:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=85d4ce996facf00abb65b509e4562e45fe83f9af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:16:03:68:6d:c0:33:49:50:66:2e:88:a4:fe: 9c:33:5c:ef:5d:43:68:47:4a:08:f5:4a:e8:31:d8: a0:ae:0b:42:f1:23:78:27:d1:3e:c9:25:c0:ee:98: 87:49:e6:84:ac:54:1e:a9:d4:71:9a:5b:18:ee:21: 4a:81:03:92:77:54:a8:a7:b0:d3:9d:2a:cb:84:83: bd:e7:97:82:bd:e6:b9:d4:2e:f5:57:61:54:96:bf: ae:b2:f6:fc:fc:2e:2f:98:1e:ab:25:8c:80:45:04: bb:c2:3e:56:dc:b8:64:35:e0:11:58:ee:b5:30:06: 98:9f:d2:4d:07:e8:f2:42:fd:7f:62:2d:e5:14:ec: 46:7a:7e:95:7d:bc:2a:76:36:85:29:e7:e0:e0:6a: 2d:54:52:c8:e5:36:73:b5:c1:f9:df:9c:de:3a:b0: b5:fd:e5:1f:9f:23:c1:33:da:2e:c2:29:46:99:2d: cf:45:31:cd:40:7f:86:5d:99:94:ad:73:95:ec:21: a5:cf:9a:37:2f:40:a9:f1:1f:c9:91:bf:5a:2b:d7: 80:3c:e4:65:90:f0:4f:78:75:76:26:a0:ab:00:07: 3f:1d:cc:b3:8a:7e:ce:5f:69:a6:05:e2:ac:06:99: 21:96:93:6b:df:a7:71:e7:e1:09:31:3a:16:42:13: 68:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D4:CE:99:6F:AC:F0:0A:BB:65:B5:09:E4:56:2E:45:FE:83:F9:AF X509v3 Authority Key Identifier: keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/hdTOmW-s8Aq7ZbUJ5FYuRf6D-a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.89.249.0/24 Signature Algorithm: sha256WithRSAEncryption 01:59:6e:e0:f6:24:2f:1e:f0:ad:53:5e:9b:70:78:d7:4b:1e: 6f:71:e1:c1:4c:f2:33:a1:f3:6e:fe:3c:eb:92:48:fe:5f:d2: 55:72:73:9f:da:c3:5d:16:c5:65:16:5c:59:a1:20:7c:1a:13: bd:f2:f6:0a:2e:b6:4d:07:9b:ed:c4:50:6d:49:31:71:bc:42: 8d:1c:19:d3:78:08:6b:18:a5:55:7b:29:b2:51:9c:6d:fe:a0: 0d:d6:f7:00:28:fc:80:63:f4:7a:5d:92:a4:64:c1:4a:1e:18: 25:06:de:a4:0f:07:38:4e:a0:02:e0:71:d8:b8:36:e4:a0:88: 0d:5c:f1:db:df:ab:98:a2:f6:31:3c:e7:a9:8b:16:24:c9:03: 6f:b2:93:0c:ef:a4:5a:69:f7:9b:c0:fd:1e:87:65:de:1d:ed: a5:48:60:b2:27:0f:83:bc:a8:8d:74:ee:5e:14:87:a6:92:32: 28:4b:54:ee:ec:a2:24:e9:c2:30:63:74:42:c7:70:a8:ca:0f: 7b:5b:1e:b6:13:6e:3e:a8:68:84:8e:bc:ff:df:ed:8a:00:86: e2:2a:24:d4:00:ed:69:a1:8e:ac:4c:bf:ea:32:7c:7f:f6:e9: 98:a0:fd:80:4a:39:c5:10:ca:35:34:f0:65:6a:1d:b8:d9:6d: 03:fc:93:95 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZryi1gwZxnTEoyLVcJW02CZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMDc0MzQ5NmM3ZmYzZWZmYjg3MDYwMTEzOWNhZDlkMmYy NzFlMTAwHhcNMjUxMjA2MDcyMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NWQ0Y2U5OTZmYWNmMDBhYmI2NWI1MDllNDU2MmU0NWZlODNmOWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRYDaG3AM0lQZi6IpP6cM1zvXUNo R0oI9UroMdigrgtC8SN4J9E+ySXA7piHSeaErFQeqdRxmlsY7iFKgQOSd1Sop7DT nSrLhIO955eCvea51C71V2FUlr+usvb8/C4vmB6rJYyARQS7wj5W3LhkNeARWO61 MAaYn9JNB+jyQv1/Yi3lFOxGen6VfbwqdjaFKefg4GotVFLI5TZztcH535zeOrC1 /eUfnyPBM9ouwilGmS3PRTHNQH+GXZmUrXOV7CGlz5o3L0Cp8R/Jkb9aK9eAPORl kPBPeHV2JqCrAAc/Hcyzin7OX2mmBeKsBpkhlpNr36dx5+EJMToWQhNoXwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIXUzplvrPAKu2W1CeRWLkX+g/mvMB8GA1UdIwQY MBaAFJ8HQ0lsf/Pv+4cGAROcrZ0vJx4QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8yMmI3YWItZmMxMS00MDdhLWJkM2Mt NjM0MTEzNjdkOTBhLzEvaGRUT21XLXM4QXE3WmJVSjVGWXVSZjZELWE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS8yMmI3YWItZmMxMS00MDdhLWJkM2MtNjM0MTEzNjdkOTBh LzEvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVn5MA0G CSqGSIb3DQEBCwUAA4IBAQABWW7g9iQvHvCtU16bcHjXSx5vceHBTPIzofNu/jzr kkj+X9JVcnOf2sNdFsVlFlxZoSB8GhO98vYKLrZNB5vtxFBtSTFxvEKNHBnTeAhr GKVVeymyUZxt/qAN1vcAKPyAY/R6XZKkZMFKHhglBt6kDwc4TqAC4HHYuDbkoIgN XPHb36uYovYxPOepixYkyQNvspMM76RaafebwP0eh2XeHe2lSGCyJw+DvKiNdO5e FIemkjIoS1Tu7KIk6cIwY3RCx3Coyg97Wx62E24+qGiEjrz/3+2KAIbiKiTUAO1p oY6sTL/qMnx/9umYoP2ASjnFEMo1NPBlah242W0D/JOV -----END CERTIFICATE-----Generated at Sat Dec 6 12:03:34 2025 by rpki-client