This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/Hjn8Up8P_vK-DmnIPxZuo9-8c6o.roa File: Hjn8Up8P_vK-DmnIPxZuo9-8c6o.roa (raw, json) Hash identifier: 4IG2rPSclxVb9yuX8BnAS143KaJ4+m9FFie+h4KMN4U= Subject key identifier: 1E:39:FC:52:9F:0F:FE:F2:BE:0E:69:C8:3F:16:6E:A3:DF:BC:73:AA Certificate issuer: /CN=21698c1cdc66dc285d0f807629c46261a88b2de7 Certificate serial: 019AB5732D1255F1277F151BAB92AC1C1C0C Authority key identifier: 21:69:8C:1C:DC:66:DC:28:5D:0F:80:76:29:C4:62:61:A8:8B:2D:E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/Hjn8Up8P_vK-DmnIPxZuo9-8c6o.roa Signing time: Mon 24 Nov 2025 10:40:15 +0000 ROA not before: Mon 24 Nov 2025 10:40:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 8434 IP address blocks: 193.164.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.crl rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.mft rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b5:73:2d:12:55:f1:27:7f:15:1b:ab:92:ac:1c:1c:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21698c1cdc66dc285d0f807629c46261a88b2de7 Validity Not Before: Nov 24 10:40:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1e39fc529f0ffef2be0e69c83f166ea3dfbc73aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:1d:88:8a:59:ce:d6:3d:3c:83:f5:81:cb:e6: 02:7d:47:47:b4:81:30:c8:58:10:97:0a:c3:e4:00: f9:90:b3:61:91:c1:b4:3f:20:da:24:f9:0b:2e:a9: 72:a2:f9:c5:72:ef:bb:4a:90:36:42:10:e8:b6:a5: 4d:05:55:20:cb:dd:eb:69:6f:e2:0b:2e:b4:70:c5: 5e:08:1f:53:3c:dd:1c:80:50:05:70:d3:78:95:2a: 24:c8:30:0c:c8:4b:e5:2a:8b:bb:a3:9d:5c:c4:44: d3:a1:2d:c9:2e:79:87:ef:c7:f7:8b:94:10:78:0f: dd:fb:26:e8:91:7a:cc:a7:0f:eb:c3:62:1e:0e:4b: dc:7d:fc:f0:ef:23:cb:86:cf:ec:2a:f7:f8:5d:e5: 86:21:54:33:43:f5:22:2a:75:0b:62:69:d0:b2:6f: 53:b4:cf:ce:17:d0:3c:38:60:42:27:6d:2a:7f:a8: b7:b1:ee:ea:60:d1:ab:76:94:b0:b1:31:39:e3:c8: 00:46:5e:f0:7f:c4:06:bf:7a:fc:e0:c1:86:d3:d2: 22:7d:2d:9f:cc:84:75:eb:81:63:ed:3f:4e:bc:b2: a0:14:64:8a:a6:fe:c2:33:0b:07:0d:36:72:2f:41: 34:3e:4e:76:7e:9e:63:c4:63:e7:90:02:18:82:73: 91:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:39:FC:52:9F:0F:FE:F2:BE:0E:69:C8:3F:16:6E:A3:DF:BC:73:AA X509v3 Authority Key Identifier: keyid:21:69:8C:1C:DC:66:DC:28:5D:0F:80:76:29:C4:62:61:A8:8B:2D:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/Hjn8Up8P_vK-DmnIPxZuo9-8c6o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.164.89.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:76:e5:6b:9b:53:21:0d:7b:51:1b:75:00:fc:1d:c5:eb:36: 53:2d:d9:35:46:66:29:32:9e:d0:b6:7f:7d:4a:a7:20:f0:bb: 73:74:64:37:e1:f4:21:55:b7:4f:75:d6:46:62:cb:53:c7:da: cb:e8:ef:2d:96:74:1d:59:60:28:07:70:f3:0e:2e:d3:59:86: 6d:c2:db:b5:cb:ae:92:ab:a3:d3:bd:c1:ac:ad:77:75:07:82: 88:cf:c2:7b:9d:f3:cb:8d:29:ec:d1:e6:89:61:11:ae:7c:98: 9f:25:c7:73:a9:d7:72:9d:3c:10:a3:2f:cf:c3:44:ab:dc:d1: 77:44:13:c1:db:5e:48:66:93:60:9b:a9:f2:63:6f:99:73:1b: 42:e2:1b:43:24:71:2e:20:9b:7d:d4:14:7f:0d:a1:bf:ea:54: d9:3b:b4:a6:31:22:44:a7:18:d9:d4:9e:f2:ed:f8:12:1e:c5: 2f:0a:e1:e5:1e:f5:63:e2:4f:c4:10:df:ea:39:13:f1:f2:24: 7f:f4:06:7c:c1:f4:92:a3:3c:e9:ed:f6:31:fd:bc:1a:33:99: 53:d8:9d:34:89:ca:f5:3a:57:bd:11:c5:58:26:90:6b:cf:79: cd:ba:3a:0f:19:30:85:f2:7f:17:f0:96:62:aa:ad:b3:be:c3: bf:92:5e:57 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZq1cy0SVfEnfxUbq5KsHBwMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxNjk4YzFjZGM2NmRjMjg1ZDBmODA3NjI5YzQ2MjYxYTg4 YjJkZTcwHhcNMjUxMTI0MTA0MDE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZTM5ZmM1MjlmMGZmZWYyYmUwZTY5YzgzZjE2NmVhM2RmYmM3M2FhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7B2IilnO1j08g/WBy+YCfUdHtIEw yFgQlwrD5AD5kLNhkcG0PyDaJPkLLqlyovnFcu+7SpA2QhDotqVNBVUgy93raW/i Cy60cMVeCB9TPN0cgFAFcNN4lSokyDAMyEvlKou7o51cxETToS3JLnmH78f3i5QQ eA/d+ybokXrMpw/rw2IeDkvcffzw7yPLhs/sKvf4XeWGIVQzQ/UiKnULYmnQsm9T tM/OF9A8OGBCJ20qf6i3se7qYNGrdpSwsTE548gARl7wf8QGv3r84MGG09IifS2f zIR164Fj7T9OvLKgFGSKpv7CMwsHDTZyL0E0Pk52fp5jxGPnkAIYgnOR8QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB45/FKfD/7yvg5pyD8WbqPfvHOqMB8GA1UdIwQY MBaAFCFpjBzcZtwoXQ+AdinEYmGoiy3nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVdtTUhOeG0zQ2hkRDRCMktjUmlZYWlMTGVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8xMWRjNzEtODE3MC00NWI1LThjNWIt NGQ3MzczMGY3ZDMyLzEvSGpuOFVwOFBfdkstRG1uSVB4WnVvOS04YzZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny8xMWRjNzEtODE3MC00NWI1LThjNWItNGQ3MzczMGY3ZDMy LzEvSVdtTUhOeG0zQ2hkRDRCMktjUmlZYWlMTGVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwaRZMA0G CSqGSIb3DQEBCwUAA4IBAQAaduVrm1MhDXtRG3UA/B3F6zZTLdk1RmYpMp7Qtn99 Sqcg8LtzdGQ34fQhVbdPddZGYstTx9rL6O8tlnQdWWAoB3DzDi7TWYZtwtu1y66S q6PTvcGsrXd1B4KIz8J7nfPLjSns0eaJYRGufJifJcdzqddynTwQoy/Pw0Sr3NF3 RBPB215IZpNgm6nyY2+ZcxtC4htDJHEuIJt91BR/DaG/6lTZO7SmMSJEpxjZ1J7y 7fgSHsUvCuHlHvVj4k/EEN/qORPx8iR/9AZ8wfSSozzp7fYx/bwaM5lT2J00icr1 Ole9EcVYJpBrz3nNujoPGTCF8n8X8JZiqq2zvsO/kl5X -----END CERTIFICATE-----Generated at Sat Dec 6 12:54:51 2025 by rpki-client