This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/532f41-2e3b-47eb-bed5-0e1c4ad03956/1/HCUB8Ne_omF1mtWINXAY-a2Vkyg.roa File: HCUB8Ne_omF1mtWINXAY-a2Vkyg.roa (raw, json) Hash identifier: EPSlRz71ev+kfUwClC5OWx5tsHjYK1rbuqi7kFkvbgg= Subject key identifier: 1C:25:01:F0:D7:BF:A2:61:75:9A:D5:88:35:70:18:F9:AD:95:93:28 Certificate issuer: /CN=e7041e7e7d184d5dbad71429e365b9f0ac76ca52 Certificate serial: 019AB23DF13BEEE8581B7713E9D619880E2D Authority key identifier: E7:04:1E:7E:7D:18:4D:5D:BA:D7:14:29:E3:65:B9:F0:AC:76:CA:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5wQefn0YTV261xQp42W58Kx2ylI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/532f41-2e3b-47eb-bed5-0e1c4ad03956/1/HCUB8Ne_omF1mtWINXAY-a2Vkyg.roa Signing time: Sun 23 Nov 2025 19:43:15 +0000 ROA not before: Sun 23 Nov 2025 19:43:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 206215 IP address blocks: 167.150.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/532f41-2e3b-47eb-bed5-0e1c4ad03956/1/5wQefn0YTV261xQp42W58Kx2ylI.crl rsync://rpki.ripe.net/repository/DEFAULT/20/532f41-2e3b-47eb-bed5-0e1c4ad03956/1/5wQefn0YTV261xQp42W58Kx2ylI.mft rsync://rpki.ripe.net/repository/DEFAULT/5wQefn0YTV261xQp42W58Kx2ylI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b2:3d:f1:3b:ee:e8:58:1b:77:13:e9:d6:19:88:0e:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7041e7e7d184d5dbad71429e365b9f0ac76ca52 Validity Not Before: Nov 23 19:43:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1c2501f0d7bfa261759ad588357018f9ad959328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d4:ec:3e:46:9c:c3:c0:1c:68:1d:00:37:0c: 3f:fb:da:ca:4d:f9:f8:11:c8:d5:d0:1f:c0:9d:5a: 71:52:30:ae:96:44:33:12:2f:ed:3b:f0:62:be:5e: 0b:6a:43:d1:f0:d3:dd:f8:5e:6d:96:4d:fb:50:c1: 32:49:f4:25:3e:75:36:d4:5b:8c:fb:60:b2:fc:87: 5e:e4:1a:cd:17:78:aa:48:79:c5:21:98:74:b7:ca: 72:24:7c:32:44:8c:4f:01:fa:eb:b6:e5:28:b3:d0: 95:81:f3:d6:dc:4d:ff:50:62:49:ff:44:18:2a:9b: e0:11:3b:f7:14:83:e0:eb:1c:77:7f:90:26:2a:de: 72:4f:84:90:3b:b2:a1:87:80:db:8c:dd:4d:c4:8e: 66:05:76:01:82:a3:cf:e3:99:7d:de:af:5f:4c:40: d1:99:3c:05:1c:46:f7:0c:25:45:b0:d3:88:28:6f: 7d:26:91:87:0c:67:7d:69:cf:1f:96:6e:ef:48:7c: d8:a3:76:a5:c7:56:58:ce:01:1c:da:84:69:d8:6b: 2d:57:1e:4e:cf:70:30:e0:3d:20:64:bf:cd:1f:47: 27:c3:9a:f4:a1:c2:e0:ef:a6:43:a5:3a:bb:59:f3: db:1a:79:ff:b6:1c:53:d1:d2:e3:33:4d:31:53:86: 70:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:25:01:F0:D7:BF:A2:61:75:9A:D5:88:35:70:18:F9:AD:95:93:28 X509v3 Authority Key Identifier: keyid:E7:04:1E:7E:7D:18:4D:5D:BA:D7:14:29:E3:65:B9:F0:AC:76:CA:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5wQefn0YTV261xQp42W58Kx2ylI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/532f41-2e3b-47eb-bed5-0e1c4ad03956/1/HCUB8Ne_omF1mtWINXAY-a2Vkyg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/532f41-2e3b-47eb-bed5-0e1c4ad03956/1/5wQefn0YTV261xQp42W58Kx2ylI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 167.150.223.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:da:02:99:48:5d:20:fd:f5:ed:99:45:70:16:b9:1c:58:e6: 44:ff:4d:6a:d2:2d:fc:31:f9:b0:f9:49:83:9b:fb:4e:92:26: fc:a3:14:a9:3e:b4:36:f4:31:b2:9c:44:f9:ed:8d:7f:f4:3b: 73:0c:17:ea:6a:4f:3b:60:7b:4d:f4:aa:4d:f6:44:2d:94:0d: 9d:66:55:74:fd:de:4f:dc:39:59:27:f3:ad:05:f4:c9:69:1e: 92:5c:a5:80:d7:4b:3d:b1:5d:bc:09:db:d2:82:65:8f:b0:13: b2:50:23:4e:b8:a5:6f:40:67:91:21:bd:ef:32:fe:3a:be:2c: b9:6a:9d:51:91:9a:63:ac:ed:26:53:a1:57:54:2c:04:b7:46: 94:68:fb:f7:e3:7a:11:ac:51:62:23:5b:14:20:eb:5e:b3:32: 18:74:03:21:29:91:cb:69:16:b2:7c:34:1f:c9:84:d3:fa:59: 59:e4:fe:f8:03:78:9c:13:81:09:ee:f3:1e:4a:b2:80:6e:8e: 6e:4b:76:a7:02:16:fb:bb:2f:e6:af:2b:70:c9:47:8c:db:9f: 5f:5a:d2:89:b2:b8:48:13:71:74:27:26:6d:6d:aa:3b:10:e6: c0:f2:22:47:21:03:61:ec:53:7e:27:48:b8:b5:c6:3f:1b:02: 1d:6a:d5:8a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqyPfE77uhYG3cT6dYZiA4tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3MDQxZTdlN2QxODRkNWRiYWQ3MTQyOWUzNjViOWYwYWM3 NmNhNTIwHhcNMjUxMTIzMTk0MzE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzI1MDFmMGQ3YmZhMjYxNzU5YWQ1ODgzNTcwMThmOWFkOTU5MzI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtTsPkacw8AcaB0ANww/+9rKTfn4 EcjV0B/AnVpxUjCulkQzEi/tO/Bivl4LakPR8NPd+F5tlk37UMEySfQlPnU21FuM +2Cy/Ide5BrNF3iqSHnFIZh0t8pyJHwyRIxPAfrrtuUos9CVgfPW3E3/UGJJ/0QY KpvgETv3FIPg6xx3f5AmKt5yT4SQO7Khh4DbjN1NxI5mBXYBgqPP45l93q9fTEDR mTwFHEb3DCVFsNOIKG99JpGHDGd9ac8flm7vSHzYo3alx1ZYzgEc2oRp2GstVx5O z3Aw4D0gZL/NH0cnw5r0ocLg76ZDpTq7WfPbGnn/thxT0dLjM00xU4ZwCwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBwlAfDXv6JhdZrViDVwGPmtlZMoMB8GA1UdIwQY MBaAFOcEHn59GE1dutcUKeNlufCsdspSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXdRZWZuMFlUVjI2MXhRcDQyVzU4S3gyeWxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC81MzJmNDEtMmUzYi00N2ViLWJlZDUt MGUxYzRhZDAzOTU2LzEvSENVQjhOZV9vbUYxbXRXSU5YQVktYTJWa3lnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC81MzJmNDEtMmUzYi00N2ViLWJlZDUtMGUxYzRhZDAzOTU2 LzEvNXdRZWZuMFlUVjI2MXhRcDQyVzU4S3gyeWxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp5bfMA0G CSqGSIb3DQEBCwUAA4IBAQBc2gKZSF0g/fXtmUVwFrkcWOZE/01q0i38Mfmw+UmD m/tOkib8oxSpPrQ29DGynET57Y1/9DtzDBfqak87YHtN9KpN9kQtlA2dZlV0/d5P 3DlZJ/OtBfTJaR6SXKWA10s9sV28CdvSgmWPsBOyUCNOuKVvQGeRIb3vMv46viy5 ap1RkZpjrO0mU6FXVCwEt0aUaPv343oRrFFiI1sUIOteszIYdAMhKZHLaRayfDQf yYTT+llZ5P74A3icE4EJ7vMeSrKAbo5uS3anAhb7uy/mrytwyUeM259fWtKJsrhI E3F0JyZtbao7EObA8iJHIQNh7FN+J0i4tcY/GwIdatWK -----END CERTIFICATE-----Generated at Sat Dec 6 12:53:23 2025 by rpki-client