This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/1-HV_se_LfFqz35hXIE-8tE-z0RM.roa File: 1-HV_se_LfFqz35hXIE-8tE-z0RM.roa (raw, json) Hash identifier: stwCsy3sx44tIixznBeQeE2qFxr/d55zZce3o/IjoOI= Subject key identifier: F8:75:7F:B1:EF:CB:7C:5A:B3:DF:98:57:20:4F:BC:B4:4F:B3:D1:13 Certificate issuer: /CN=bbf4e1fdb424a9120223b3a75c6ccc31b6f6224a Certificate serial: 019A9276E8F0992C873042883081FD3CB5E5 Authority key identifier: BB:F4:E1:FD:B4:24:A9:12:02:23:B3:A7:5C:6C:CC:31:B6:F6:22:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_Th_bQkqRICI7OnXGzMMbb2Iko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/1-HV_se_LfFqz35hXIE-8tE-z0RM.roa Signing time: Mon 17 Nov 2025 15:37:37 +0000 ROA not before: Mon 17 Nov 2025 15:37:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 197561 IP address blocks: 91.223.103.0/24 maxlen: 24 176.111.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.crl rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.mft rsync://rpki.ripe.net/repository/DEFAULT/u_Th_bQkqRICI7OnXGzMMbb2Iko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:92:76:e8:f0:99:2c:87:30:42:88:30:81:fd:3c:b5:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbf4e1fdb424a9120223b3a75c6ccc31b6f6224a Validity Not Before: Nov 17 15:37:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f8757fb1efcb7c5ab3df9857204fbcb44fb3d113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:cf:17:70:3c:41:d4:a0:2d:ce:72:1c:18:4e: 71:00:66:ed:8e:2f:f0:7c:0d:1c:dd:c7:e2:d1:fd: 40:97:42:05:f0:2f:88:4d:26:c9:3c:11:31:f9:ff: 4a:c2:cd:6f:cd:6a:76:53:20:95:ab:ac:8a:11:82: a0:c6:21:94:ee:00:f3:d0:ad:05:19:80:4a:88:2a: c1:71:6e:e8:24:f9:98:b6:9b:b9:14:23:de:e0:97: e6:f5:ca:0c:6b:5d:c4:ac:96:c9:4b:4c:b8:16:21: 80:1b:59:92:1a:c7:c5:69:ad:33:05:a2:04:4f:54: ca:d3:79:d7:47:40:b9:26:86:9b:a9:05:2c:44:b6: 63:94:87:0e:51:f2:e3:d2:e8:20:f4:9d:0f:90:47: 83:13:10:36:91:18:fe:67:b4:28:d4:8c:f5:62:ba: 95:4d:41:2a:a0:7f:e9:ba:82:22:9f:04:79:22:80: 39:b5:44:aa:63:04:51:4b:c6:ff:e7:79:ff:8b:84: 4e:05:25:9f:01:9a:9a:53:58:1b:d6:43:e5:07:b6: 74:c5:bd:ec:83:88:a7:d7:fa:be:92:8b:35:bd:b5: 33:46:d1:dc:6c:e9:96:29:dd:16:2e:b7:09:a5:a0: cd:e8:3c:9a:72:5c:ce:80:0c:57:82:e1:ed:ad:3c: 16:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:75:7F:B1:EF:CB:7C:5A:B3:DF:98:57:20:4F:BC:B4:4F:B3:D1:13 X509v3 Authority Key Identifier: keyid:BB:F4:E1:FD:B4:24:A9:12:02:23:B3:A7:5C:6C:CC:31:B6:F6:22:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_Th_bQkqRICI7OnXGzMMbb2Iko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/1-HV_se_LfFqz35hXIE-8tE-z0RM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.223.103.0/24 176.111.46.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:80:7d:9a:0d:21:8a:69:c3:44:cc:b6:e1:37:dc:07:1e:12: 10:ed:97:68:d9:23:4a:20:fb:57:e9:a3:c3:2b:2b:60:e2:7c: 63:29:b9:62:5e:7d:f9:1f:34:02:52:88:a9:b9:05:59:4f:df: a2:ec:77:a0:55:d1:3d:23:13:ce:89:c5:77:46:28:55:86:fc: 54:48:d2:50:00:21:ad:7f:cb:5d:44:6a:ce:94:23:29:16:1d: 1e:15:28:b1:53:de:17:a7:14:e9:ca:3c:30:3d:43:75:21:b6: ca:c7:97:05:49:d2:8a:dc:80:86:a8:a5:12:50:99:78:02:19: 2a:ec:40:7f:83:2c:93:16:45:f3:90:57:b8:ba:5b:c4:73:61: 48:7f:73:e7:ef:f9:85:39:0a:be:03:28:7b:b1:f1:32:ed:d3: 50:ea:cb:3d:a1:09:56:6b:33:b6:e5:3d:f3:3d:41:c5:f0:76: 0e:67:40:b6:42:a4:dd:2b:33:e8:27:7e:9e:92:70:99:96:26: a5:4c:89:e0:ac:96:ff:44:df:04:57:82:b6:82:6e:95:ba:af: a3:f4:6c:77:9d:4e:be:49:50:86:fb:7e:20:a7:1c:5d:56:46: bd:2f:ea:82:4a:05:6f:b2:13:2e:dd:0e:62:ce:e1:1c:d0:8c: c7:c8:5f:a6 -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgISAZqSdujwmSyHMEKIMIH9PLXlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZjRlMWZkYjQyNGE5MTIwMjIzYjNhNzVjNmNjYzMxYjZm NjIyNGEwHhcNMjUxMTE3MTUzNzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODc1N2ZiMWVmY2I3YzVhYjNkZjk4NTcyMDRmYmNiNDRmYjNkMTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA588XcDxB1KAtznIcGE5xAGbtji/w fA0c3cfi0f1Al0IF8C+ITSbJPBEx+f9Kws1vzWp2UyCVq6yKEYKgxiGU7gDz0K0F GYBKiCrBcW7oJPmYtpu5FCPe4Jfm9coMa13ErJbJS0y4FiGAG1mSGsfFaa0zBaIE T1TK03nXR0C5JoabqQUsRLZjlIcOUfLj0ugg9J0PkEeDExA2kRj+Z7Qo1Iz1YrqV TUEqoH/puoIinwR5IoA5tUSqYwRRS8b/53n/i4ROBSWfAZqaU1gb1kPlB7Z0xb3s g4in1/q+kos1vbUzRtHcbOmWKd0WLrcJpaDN6DyaclzOgAxXguHtrTwWhQIDAQAB o4ICEDCCAgwwHQYDVR0OBBYEFPh1f7Hvy3xas9+YVyBPvLRPs9ETMB8GA1UdIwQY MBaAFLv04f20JKkSAiOzp1xszDG29iJKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdV9UaF9iUWtxUklDSTdPblhHek1NYmIySWtvLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8xMWNkMTAtM2VmNy00MTA1LTgyNDgt YmE1MTMyM2RiNGU1LzEvMS1IVl9zZV9MZkZxejM1aFhJRS04dEUtejBSTS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzYvMTFjZDEwLTNlZjctNDEwNS04MjQ4LWJhNTEzMjNkYjRl NS8xL3VfVGhfYlFrcVJJQ0k3T25YR3pNTWJiMklrby5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAFvfZwME ALBvLjANBgkqhkiG9w0BAQsFAAOCAQEADIB9mg0himnDRMy24TfcBx4SEO2XaNkj SiD7V+mjwysrYOJ8Yym5Yl59+R80AlKIqbkFWU/foux3oFXRPSMTzonFd0YoVYb8 VEjSUAAhrX/LXURqzpQjKRYdHhUosVPeF6cU6co8MD1DdSG2yseXBUnSityAhqil ElCZeAIZKuxAf4MskxZF85BXuLpbxHNhSH9z5+/5hTkKvgMoe7HxMu3TUOrLPaEJ VmsztuU98z1BxfB2DmdAtkKk3Ssz6Cd+npJwmZYmpUyJ4KyW/0TfBFeCtoJulbqv o/Rsd51OvklQhvt+IKccXVZGvS/qgkoFb7ITLt0OYs7hHNCMx8hfpg== -----END CERTIFICATE-----Generated at Sat Dec 6 22:01:07 2025 by rpki-client