This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/tHXmZPRwP6sMV9_KYXMh4sQnG6Y.roa File: tHXmZPRwP6sMV9_KYXMh4sQnG6Y.roa (raw, json) Hash identifier: 7gY8dXbcuLnz/aurj7sZhEM4B4UgqNVCaRvNBitbi/g= Subject key identifier: B4:75:E6:64:F4:70:3F:AB:0C:57:DF:CA:61:73:21:E2:C4:27:1B:A6 Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4 Certificate serial: 019AE24B7AF5B46585651AAD4E3725F17A87 Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/tHXmZPRwP6sMV9_KYXMh4sQnG6Y.roa Signing time: Wed 03 Dec 2025 03:39:48 +0000 ROA not before: Wed 03 Dec 2025 03:39:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 31566 IP address blocks: 188.130.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e2:4b:7a:f5:b4:65:85:65:1a:ad:4e:37:25:f1:7a:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4 Validity Not Before: Dec 3 03:39:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b475e664f4703fab0c57dfca617321e2c4271ba6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:8e:45:7f:ec:21:8e:1c:e6:b6:72:63:be:f7: bd:be:92:ca:49:3c:0e:68:cb:34:c4:cb:30:d9:bb: 6a:81:4f:5e:b0:b5:73:9b:de:01:bb:da:7e:2b:be: 3e:89:56:4c:af:b1:ce:a9:4c:11:bd:95:70:ab:7e: 94:d9:7f:68:de:8f:12:0e:14:3c:9e:1d:b8:0f:b9: 1e:ab:1a:85:8a:d5:02:ba:6b:b8:68:70:83:b2:ac: b8:1d:48:79:11:f7:8d:15:b7:c9:89:d5:45:29:13: 49:2f:5b:da:eb:8c:0d:68:3a:54:56:b1:35:0b:65: c5:59:b6:78:fa:bc:bd:e6:87:5e:9a:0e:4b:5e:50: ce:66:fd:ad:e3:14:89:5f:36:1d:cb:c2:60:be:fd: bc:15:26:3c:51:30:e1:27:bc:30:eb:b5:43:4a:01: 5e:62:7b:20:a6:41:60:b6:03:6a:5b:94:5f:39:34: 44:64:32:aa:e6:ae:d5:52:84:50:fd:99:7c:bb:87: ed:0d:1c:20:15:b5:55:d8:15:50:5a:0e:52:b0:bf: 5c:1b:6d:0c:0b:32:3c:04:4a:7e:76:94:f6:22:3e: 0f:d8:63:d7:4b:cd:94:8c:45:51:29:e4:77:51:bf: 64:a8:ea:ad:62:7f:b9:00:23:92:52:21:0d:29:c2: 8e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:75:E6:64:F4:70:3F:AB:0C:57:DF:CA:61:73:21:E2:C4:27:1B:A6 X509v3 Authority Key Identifier: keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/tHXmZPRwP6sMV9_KYXMh4sQnG6Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.130.174.0/24 Signature Algorithm: sha256WithRSAEncryption 24:7b:81:7c:d5:bf:f8:c8:40:7f:26:43:18:b8:41:c9:e6:14: 19:76:11:25:6c:8f:85:22:90:e4:c5:e9:b8:2d:84:39:8b:2f: 1c:2f:09:a5:21:3b:d6:d2:06:b6:04:0f:1b:87:5d:24:9a:04: 98:24:16:e8:df:d4:98:ab:cd:0c:04:06:9a:6b:df:90:c4:ac: 0a:89:b0:49:c8:fc:aa:4d:97:27:a4:a3:11:5a:72:d9:a2:9a: d1:25:17:0e:58:53:c3:30:1a:ef:a1:d4:68:19:58:59:f5:0d: c7:ce:a2:c4:b6:7a:55:bc:76:84:cf:cf:a7:f1:20:94:3f:a6: 61:6e:2b:77:fd:6c:71:ec:d3:a8:84:7e:1f:6f:80:3d:bc:d7: 8a:5d:a3:20:77:80:27:44:68:43:3d:bf:2f:e1:47:84:0c:3d: bd:dc:56:cb:24:08:c9:e6:79:55:8e:d1:87:cb:da:50:b6:f8: 9c:5c:9f:f4:1f:29:11:23:0b:59:72:07:af:8f:ca:8b:26:55: f5:ff:24:c2:18:39:e2:5e:29:6d:51:90:a5:69:b7:c7:e4:b8: 8f:83:a0:a3:b4:b7:6f:c0:63:af:d6:f1:bb:ad:bd:43:22:0f: 35:83:15:65:86:a3:34:b9:d1:8c:25:92:86:28:94:79:e6:0f: 41:82:18:3b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZriS3r1tGWFZRqtTjcl8XqHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4NWI4NTc3MDZkYWM1NGUyMGNhMGQxMWJkNjQxNmNiNjM0 MjAzYjQwHhcNMjUxMjAzMDMzOTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDc1ZTY2NGY0NzAzZmFiMGM1N2RmY2E2MTczMjFlMmM0MjcxYmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1o5Ff+whjhzmtnJjvve9vpLKSTwO aMs0xMsw2btqgU9esLVzm94Bu9p+K74+iVZMr7HOqUwRvZVwq36U2X9o3o8SDhQ8 nh24D7keqxqFitUCumu4aHCDsqy4HUh5EfeNFbfJidVFKRNJL1va64wNaDpUVrE1 C2XFWbZ4+ry95odemg5LXlDOZv2t4xSJXzYdy8Jgvv28FSY8UTDhJ7ww67VDSgFe YnsgpkFgtgNqW5RfOTREZDKq5q7VUoRQ/Zl8u4ftDRwgFbVV2BVQWg5SsL9cG20M CzI8BEp+dpT2Ij4P2GPXS82UjEVRKeR3Ub9kqOqtYn+5ACOSUiENKcKOgQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLR15mT0cD+rDFffymFzIeLEJxumMB8GA1UdIwQY MBaAFIhbhXcG2sVOIMoNEb1kFstjQgO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMt MTY2OTljOTZkZDVlLzEvdEhYbVpQUndQNnNNVjlfS1lYTWg0c1FuRzZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMtMTY2OTljOTZkZDVl LzEvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvIKuMA0G CSqGSIb3DQEBCwUAA4IBAQAke4F81b/4yEB/JkMYuEHJ5hQZdhElbI+FIpDkxem4 LYQ5iy8cLwmlITvW0ga2BA8bh10kmgSYJBbo39SYq80MBAaaa9+QxKwKibBJyPyq TZcnpKMRWnLZoprRJRcOWFPDMBrvodRoGVhZ9Q3HzqLEtnpVvHaEz8+n8SCUP6Zh bit3/Wxx7NOohH4fb4A9vNeKXaMgd4AnRGhDPb8v4UeEDD293FbLJAjJ5nlVjtGH y9pQtvicXJ/0HykRIwtZcgevj8qLJlX1/yTCGDniXiltUZClabfH5LiPg6CjtLdv wGOv1vG7rb1DIg81gxVlhqM0udGMJZKGKJR55g9Bghg7 -----END CERTIFICATE-----Generated at Sun Dec 7 04:11:18 2025 by rpki-client