This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/hxpDIvDSUNYIW-RymDBwexWB-8g.roa File: hxpDIvDSUNYIW-RymDBwexWB-8g.roa (raw, json) Hash identifier: Jv5BRt+QxxWpqyESuYnWjL1CPNaN/TrtWzKi1FkPja0= Subject key identifier: 87:1A:43:22:F0:D2:50:D6:08:5B:E4:72:98:30:70:7B:15:81:FB:C8 Certificate issuer: /CN=03cbdb0595fc48902938a78f42c1eaf0a159bf46 Certificate serial: 019ADF1C50C6A1D6D39FCE8B1FAF0C83BBEB Authority key identifier: 03:CB:DB:05:95:FC:48:90:29:38:A7:8F:42:C1:EA:F0:A1:59:BF:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/hxpDIvDSUNYIW-RymDBwexWB-8g.roa Signing time: Tue 02 Dec 2025 12:49:26 +0000 ROA not before: Tue 02 Dec 2025 12:49:26 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203936 IP address blocks: 185.237.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:df:1c:50:c6:a1:d6:d3:9f:ce:8b:1f:af:0c:83:bb:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03cbdb0595fc48902938a78f42c1eaf0a159bf46 Validity Not Before: Dec 2 12:49:26 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=871a4322f0d250d6085be4729830707b1581fbc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:76:4a:63:db:51:a1:c3:5a:01:49:9d:da:6a: 01:1d:8b:65:86:30:e9:c8:53:bd:1f:9a:1a:3b:8a: 3a:ed:0d:1f:be:10:4f:30:12:64:db:65:88:d2:93: 6d:d6:bc:3b:68:69:03:47:a2:18:c6:50:23:0c:22: d7:f9:e3:d4:b8:6b:76:ca:52:44:37:27:f9:07:47: 45:f0:be:9e:ab:ae:c3:f7:de:ab:dc:7e:5a:6e:61: b9:f8:55:3e:48:db:3f:2b:24:8e:11:e2:b9:2d:b4: 85:9f:87:da:71:4c:bb:b5:a8:b2:95:25:f3:a1:ee: 0a:1d:13:47:47:07:85:5d:f3:4e:dc:34:97:8b:ae: 66:3d:f1:d7:90:51:eb:0f:09:d4:3b:0e:7a:9f:40: f1:bd:69:27:ef:cf:41:8a:95:4e:97:c6:f0:2a:53: d4:18:0a:09:fe:70:17:14:1b:6f:84:f1:b8:cc:e3: 5a:b6:e0:fe:a1:24:33:61:71:c9:ed:56:f9:e4:00: 7b:1a:5a:a4:14:91:fd:ac:18:e2:60:c0:a9:64:ec: 22:29:f3:47:1e:9b:d7:c2:63:ab:91:e7:ad:d7:80: ed:62:70:18:b9:a1:04:f7:1f:19:5b:44:12:1c:f6: d3:99:0f:ac:70:05:79:ec:1a:d0:8e:07:4e:e9:c8: 23:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:1A:43:22:F0:D2:50:D6:08:5B:E4:72:98:30:70:7B:15:81:FB:C8 X509v3 Authority Key Identifier: keyid:03:CB:DB:05:95:FC:48:90:29:38:A7:8F:42:C1:EA:F0:A1:59:BF:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/hxpDIvDSUNYIW-RymDBwexWB-8g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.237.136.0/22 Signature Algorithm: sha256WithRSAEncryption 5d:ff:ba:82:c9:d9:76:d7:38:92:1a:34:4b:47:23:5d:b6:6f: 1d:bb:3b:9d:87:df:3e:0d:f0:74:26:e8:60:b3:9b:aa:e2:3a: 82:cf:f6:81:30:e9:66:71:64:eb:d3:49:15:c3:b2:28:98:48: e4:1f:7c:53:7e:7c:5e:b4:0f:ee:86:23:19:f5:7c:fd:24:37: 15:ed:ab:3e:5e:c8:15:d5:08:e6:05:5f:01:6a:68:18:bc:8c: ef:8d:d2:42:2e:68:ae:61:a2:11:e6:de:05:87:9b:d0:f6:37: a4:0e:fa:c7:e7:50:3d:a8:71:3e:5d:bc:7c:25:65:fa:6e:fa: 5b:13:b6:66:05:1d:2c:92:c3:ea:29:a3:1a:d1:f4:68:a1:26: 94:aa:4b:e8:ba:6b:26:1e:95:1e:61:ed:b5:f1:4c:5b:aa:8e: ea:c2:2d:3e:9d:a2:9b:1c:1f:54:ee:d0:40:e5:3d:13:43:15: 69:0c:6a:23:b4:20:2e:89:8b:40:04:c2:d6:a9:66:4f:c4:e2: c5:a5:4c:84:6e:56:95:3f:3f:66:b4:c2:f9:16:5e:f4:0d:38: 0c:55:2b:e1:9a:40:69:b2:36:09:a9:ac:e0:65:78:a0:5d:b0: 59:18:47:4f:8a:c3:db:13:e0:fc:f1:51:d5:78:a0:0f:9d:85: 29:39:16:d8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrfHFDGodbTn86LH68Mg7vrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzY2JkYjA1OTVmYzQ4OTAyOTM4YTc4ZjQyYzFlYWYwYTE1 OWJmNDYwHhcNMjUxMjAyMTI0OTI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NzFhNDMyMmYwZDI1MGQ2MDg1YmU0NzI5ODMwNzA3YjE1ODFmYmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XZKY9tRocNaAUmd2moBHYtlhjDp yFO9H5oaO4o67Q0fvhBPMBJk22WI0pNt1rw7aGkDR6IYxlAjDCLX+ePUuGt2ylJE Nyf5B0dF8L6eq67D996r3H5abmG5+FU+SNs/KySOEeK5LbSFn4facUy7taiylSXz oe4KHRNHRweFXfNO3DSXi65mPfHXkFHrDwnUOw56n0DxvWkn789BipVOl8bwKlPU GAoJ/nAXFBtvhPG4zONatuD+oSQzYXHJ7Vb55AB7GlqkFJH9rBjiYMCpZOwiKfNH HpvXwmOrkeet14DtYnAYuaEE9x8ZW0QSHPbTmQ+scAV57BrQjgdO6cgjNQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIcaQyLw0lDWCFvkcpgwcHsVgfvIMB8GA1UdIwQY MBaAFAPL2wWV/EiQKTinj0LB6vChWb9GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTh2YkJaWDhTSkFwT0tlUFFzSHE4S0ZadjBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My80YTdkN2YtODg2ZC00YmRmLTgzZDYt ZjY2MTM4MDY2MzU4LzEvaHhwREl2RFNVTllJVy1SeW1EQndleFdCLThnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My80YTdkN2YtODg2ZC00YmRmLTgzZDYtZjY2MTM4MDY2MzU4 LzEvQTh2YkJaWDhTSkFwT0tlUFFzSHE4S0ZadjBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCue2IMA0G CSqGSIb3DQEBCwUAA4IBAQBd/7qCydl21ziSGjRLRyNdtm8duzudh98+DfB0Juhg s5uq4jqCz/aBMOlmcWTr00kVw7IomEjkH3xTfnxetA/uhiMZ9Xz9JDcV7as+XsgV 1QjmBV8BamgYvIzvjdJCLmiuYaIR5t4Fh5vQ9jekDvrH51A9qHE+Xbx8JWX6bvpb E7ZmBR0sksPqKaMa0fRooSaUqkvoumsmHpUeYe218Uxbqo7qwi0+naKbHB9U7tBA 5T0TQxVpDGojtCAuiYtABMLWqWZPxOLFpUyEblaVPz9mtML5Fl70DTgMVSvhmkBp sjYJqazgZXigXbBZGEdPisPbE+D88VHVeKAPnYUpORbY -----END CERTIFICATE-----Generated at Sun Dec 7 07:33:50 2025 by rpki-client