This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/hWeemcuAMFd0TiPHK8padYtmPOI.roa File: hWeemcuAMFd0TiPHK8padYtmPOI.roa (raw, json) Hash identifier: m4qFC3qaxfb5JeQfmU+wC2Sy0np3M3w+mxPZ3dJbjcI= Subject key identifier: 85:67:9E:99:CB:80:30:57:74:4E:23:C7:2B:CA:5A:75:8B:66:3C:E2 Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d Certificate serial: 019AE98E4FF19B836352A1BC90B30CFDDFCB Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/hWeemcuAMFd0TiPHK8padYtmPOI.roa Signing time: Thu 04 Dec 2025 13:30:09 +0000 ROA not before: Thu 04 Dec 2025 13:30:09 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 209737 IP address blocks: 109.236.49.0/24 maxlen: 24 109.236.51.0/24 maxlen: 24 185.86.6.0/24 maxlen: 24 185.254.28.0/24 maxlen: 24 193.35.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e9:8e:4f:f1:9b:83:63:52:a1:bc:90:b3:0c:fd:df:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d Validity Not Before: Dec 4 13:30:09 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=85679e99cb803057744e23c72bca5a758b663ce2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:6c:e4:eb:15:88:92:de:ec:68:7e:48:10:0c: 09:20:36:20:e1:20:61:0a:79:1d:e2:2a:c6:55:d0: 71:d5:c5:9f:0a:55:bf:92:32:7a:ee:d8:5b:cd:25: 8f:c7:a0:c4:7d:6b:12:cc:81:a5:3c:f9:96:72:15: 17:b9:b7:b8:95:cc:ca:aa:22:76:f8:b8:51:39:3d: b3:a2:9f:9a:67:af:51:96:b3:42:da:0d:cc:57:52: 01:16:5a:c5:c7:6a:98:0a:f0:90:20:05:45:03:4f: 6f:ab:e0:e9:77:54:c2:05:2e:1b:4a:cd:00:28:f0: 5b:d5:c7:ec:f3:a1:82:52:7d:53:13:06:75:82:56: e9:d4:8c:b5:f1:39:81:c5:1c:66:dc:60:66:c6:65: 4a:b6:06:93:5d:3c:bb:cd:1f:61:b7:81:0d:78:88: 95:3a:c0:d7:d6:85:8c:5f:75:9e:04:4e:8a:74:c9: 1e:b7:fb:83:8c:8e:90:b9:3a:cd:d0:ea:f4:da:27: e5:6e:02:af:27:cd:51:0e:35:6e:6b:e9:45:f0:a5: ae:a1:ab:06:b2:a7:44:46:ff:3c:c7:30:d5:71:d2: 3b:e3:94:0e:db:cd:bd:02:45:2a:87:54:c8:c2:25: 3c:c5:ae:85:ca:70:bc:91:0d:e8:ef:0e:f0:c2:dd: 4e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:67:9E:99:CB:80:30:57:74:4E:23:C7:2B:CA:5A:75:8B:66:3C:E2 X509v3 Authority Key Identifier: keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/hWeemcuAMFd0TiPHK8padYtmPOI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.236.49.0/24 109.236.51.0/24 185.86.6.0/24 185.254.28.0/24 193.35.155.0/24 Signature Algorithm: sha256WithRSAEncryption aa:50:ad:06:be:e1:b4:b0:09:d8:4d:f5:a7:51:53:04:12:f9: 91:0d:cc:dc:43:33:33:e5:60:d4:04:cd:68:bd:5b:0b:53:cb: 82:9e:49:fe:fa:e8:dc:9f:d5:40:61:80:19:57:13:e3:fa:f8: c7:87:19:05:9c:99:5c:77:04:f1:16:83:5a:a4:e2:1d:a6:28: ea:48:62:7a:cd:3f:2c:5a:9a:53:76:8e:94:a8:0f:bc:f0:67: f4:c2:28:d6:c5:61:70:38:6c:d9:83:aa:cc:f3:03:7a:ee:0a: de:5b:1e:e6:90:cd:90:2e:46:22:df:4f:8e:43:5a:32:79:96: a9:84:95:0d:ac:d3:1e:98:49:12:1b:51:55:59:66:c4:56:48: f2:4f:4a:64:00:02:53:17:c3:fa:f9:a6:3a:dd:49:63:5a:c5: 94:43:24:d2:d9:87:17:3c:42:6d:3e:c4:ea:3a:a8:4f:59:e8: 31:47:21:a4:bb:10:fc:aa:36:e7:79:a9:d0:f5:1d:6d:e6:7d: 3a:cc:0c:5d:72:6b:f6:1e:59:03:09:04:55:77:63:42:43:8a: fc:3f:c7:c1:05:67:d3:1d:9e:23:1a:76:50:88:d4:cd:08:13: 13:d9:2e:40:cf:68:b1:b8:a9:93:4b:ef:78:f7:cf:ca:4c:92: e6:86:78:ec -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZrpjk/xm4NjUqG8kLMM/d/LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTZjNDE5NTE1MmVmZmVkYmY3YjNhZmVlMmFhNzJlMTkw OTBlNGQwHhcNMjUxMjA0MTMzMDA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTY3OWU5OWNiODAzMDU3NzQ0ZTIzYzcyYmNhNWE3NThiNjYzY2UyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWzk6xWIkt7saH5IEAwJIDYg4SBh Cnkd4irGVdBx1cWfClW/kjJ67thbzSWPx6DEfWsSzIGlPPmWchUXube4lczKqiJ2 +LhROT2zop+aZ69RlrNC2g3MV1IBFlrFx2qYCvCQIAVFA09vq+Dpd1TCBS4bSs0A KPBb1cfs86GCUn1TEwZ1glbp1Iy18TmBxRxm3GBmxmVKtgaTXTy7zR9ht4ENeIiV OsDX1oWMX3WeBE6KdMket/uDjI6QuTrN0Or02iflbgKvJ81RDjVua+lF8KWuoasG sqdERv88xzDVcdI745QO2829AkUqh1TIwiU8xa6FynC8kQ3o7w7wwt1O1QIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFIVnnpnLgDBXdE4jxyvKWnWLZjziMB8GA1UdIwQY MBaAFMYWxBlRUu/+2/ezr+4qpy4ZCQ5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjkt MzlmZGI5ODZmMDU5LzEvaFdlZW1jdUFNRmQwVGlQSEs4cGFkWXRtUE9JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjktMzlmZGI5ODZmMDU5 LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAbewxAwQA bewzAwQAuVYGAwQAuf4cAwQAwSObMA0GCSqGSIb3DQEBCwUAA4IBAQCqUK0GvuG0 sAnYTfWnUVMEEvmRDczcQzMz5WDUBM1ovVsLU8uCnkn++ujcn9VAYYAZVxPj+vjH hxkFnJlcdwTxFoNapOIdpijqSGJ6zT8sWppTdo6UqA+88Gf0wijWxWFwOGzZg6rM 8wN67greWx7mkM2QLkYi30+OQ1oyeZaphJUNrNMemEkSG1FVWWbEVkjyT0pkAAJT F8P6+aY63UljWsWUQyTS2YcXPEJtPsTqOqhPWegxRyGkuxD8qjbneanQ9R1t5n06 zAxdcmv2HlkDCQRVd2NCQ4r8P8fBBWfTHZ4jGnZQiNTNCBMT2S5Az2ixuKmTS+94 98/KTJLmhnjs -----END CERTIFICATE-----Generated at Sat Dec 6 18:07:04 2025 by rpki-client