This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/h0eSfkza-H_c9JvgbhHPoKH2Bgw.roa File: h0eSfkza-H_c9JvgbhHPoKH2Bgw.roa (raw, json) Hash identifier: WUtARf8LK4lZ8dw2cgDxjtBK8fSN7ru6JZnk40MFFSw= Subject key identifier: 87:47:92:7E:4C:DA:F8:7F:DC:F4:9B:E0:6E:11:CF:A0:A1:F6:06:0C Certificate issuer: /CN=f17f6957fc23b8d46b9d3dc8bc7db122859876f0 Certificate serial: 019B2788B66194C235D7E3D2759BC36E4795 Authority key identifier: F1:7F:69:57:FC:23:B8:D4:6B:9D:3D:C8:BC:7D:B1:22:85:98:76:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8X9pV_wjuNRrnT3IvH2xIoWYdvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/h0eSfkza-H_c9JvgbhHPoKH2Bgw.roa Signing time: Tue 16 Dec 2025 14:20:29 +0000 ROA not before: Tue 16 Dec 2025 14:20:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 64445 IP address blocks: 91.199.211.0/24 maxlen: 24 91.199.248.0/24 maxlen: 24 91.203.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/8X9pV_wjuNRrnT3IvH2xIoWYdvA.crl rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/8X9pV_wjuNRrnT3IvH2xIoWYdvA.mft rsync://rpki.ripe.net/repository/DEFAULT/8X9pV_wjuNRrnT3IvH2xIoWYdvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:88:b6:61:94:c2:35:d7:e3:d2:75:9b:c3:6e:47:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f17f6957fc23b8d46b9d3dc8bc7db122859876f0 Validity Not Before: Dec 16 14:20:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8747927e4cdaf87fdcf49be06e11cfa0a1f6060c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:31:8b:45:ef:33:3b:4a:9c:42:3c:d8:20:e4: 2d:d1:b6:3c:5d:43:d8:68:7d:14:38:da:6f:3c:d0: 9a:c0:b0:17:36:91:95:cb:fc:b3:dd:de:ef:a4:d0: cc:37:f0:0c:40:df:7b:d3:8a:e7:35:eb:51:ed:d1: 3d:61:8c:13:30:0f:fb:9f:96:30:54:87:b9:8c:20: d9:e6:fc:4a:47:17:f9:47:12:37:b7:60:43:d9:13: 81:bb:b5:5f:1b:a0:78:c9:bf:6e:7f:cf:5f:60:08: 5c:e4:8e:50:99:39:47:9a:41:f0:ae:27:5c:31:16: 5a:95:94:79:d2:d4:f0:24:24:16:18:30:3b:03:c2: ff:92:8b:89:66:1f:20:17:57:b5:b6:de:a8:c6:74: 4d:de:26:60:81:7b:f9:23:5c:77:2a:b5:61:cb:24: 33:dc:ba:66:b5:41:8d:96:13:cb:bd:49:a9:6f:97: 6c:e8:41:73:60:ae:90:fd:6a:76:f7:f7:42:ff:9a: 78:c4:88:8e:56:d6:39:fe:2a:d3:f8:b9:28:c6:a6: 51:20:09:84:bf:c1:95:6e:4d:b1:39:98:f4:ac:49: 8c:ca:67:1c:8f:d0:19:7d:41:6d:1d:e2:d5:5c:30: c7:fe:57:92:7b:36:dc:ee:d3:77:ee:d0:e9:17:2d: 5e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:47:92:7E:4C:DA:F8:7F:DC:F4:9B:E0:6E:11:CF:A0:A1:F6:06:0C X509v3 Authority Key Identifier: keyid:F1:7F:69:57:FC:23:B8:D4:6B:9D:3D:C8:BC:7D:B1:22:85:98:76:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8X9pV_wjuNRrnT3IvH2xIoWYdvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/h0eSfkza-H_c9JvgbhHPoKH2Bgw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/8X9pV_wjuNRrnT3IvH2xIoWYdvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.199.211.0/24 91.199.248.0/24 91.203.220.0/24 Signature Algorithm: sha256WithRSAEncryption bb:1d:d3:0f:30:b7:66:09:60:2c:a9:b5:cc:4a:79:62:d1:af: 79:59:04:18:93:53:64:fc:19:68:b7:f0:ac:59:e8:be:1d:c8: 51:7b:e3:f8:b2:15:c7:8c:78:79:e3:fe:5c:bf:83:5b:05:e4: 7b:fc:cf:60:dc:96:c6:78:cf:53:41:ae:3e:3c:d9:ec:2b:fe: bd:08:eb:52:95:dc:8c:61:e4:2b:29:ae:2d:9a:b6:ea:3d:7a: 32:b8:e9:87:c0:b3:c2:f4:52:ac:1a:b2:6d:76:d9:ca:f2:9c: 95:9d:bc:16:28:2d:fa:c4:8a:f2:01:24:a5:47:1b:0f:5d:97: 71:cd:2d:c2:d7:e0:0b:45:6f:ab:e8:dc:89:ae:a1:e8:42:36: 1f:cb:e1:0e:3e:82:a6:44:1c:95:78:32:fc:80:de:07:0a:eb: f5:1d:8f:f5:8a:29:77:c3:6d:f4:70:67:78:63:70:88:fa:38: 74:30:60:c5:03:b4:2a:d7:e5:4b:95:97:37:53:c7:82:21:11: a5:4e:4a:bf:5d:82:6a:c0:a2:41:b9:94:9e:b2:9d:c8:0b:f0: 88:16:6a:6c:bb:b5:b4:64:a2:09:e0:a6:79:f9:55:4f:be:30: e2:6c:f9:41:22:67:8c:ef:5e:6d:54:61:41:80:b1:af:e4:9c: 8c:41:98:67 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZsniLZhlMI11+PSdZvDbkeVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxN2Y2OTU3ZmMyM2I4ZDQ2YjlkM2RjOGJjN2RiMTIyODU5 ODc2ZjAwHhcNMjUxMjE2MTQyMDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NzQ3OTI3ZTRjZGFmODdmZGNmNDliZTA2ZTExY2ZhMGExZjYwNjBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzGLRe8zO0qcQjzYIOQt0bY8XUPY aH0UONpvPNCawLAXNpGVy/yz3d7vpNDMN/AMQN9704rnNetR7dE9YYwTMA/7n5Yw VIe5jCDZ5vxKRxf5RxI3t2BD2ROBu7VfG6B4yb9uf89fYAhc5I5QmTlHmkHwridc MRZalZR50tTwJCQWGDA7A8L/kouJZh8gF1e1tt6oxnRN3iZggXv5I1x3KrVhyyQz 3LpmtUGNlhPLvUmpb5ds6EFzYK6Q/Wp29/dC/5p4xIiOVtY5/irT+LkoxqZRIAmE v8GVbk2xOZj0rEmMymccj9AZfUFtHeLVXDDH/leSezbc7tN37tDpFy1eOwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFIdHkn5M2vh/3PSb4G4Rz6Ch9gYMMB8GA1UdIwQY MBaAFPF/aVf8I7jUa509yLx9sSKFmHbwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFg5cFZfd2p1TlJyblQzSXZIMnhJb1dZZHZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8yMDI2ZDMtOWYzMy00NjNlLTg0MTAt NzI2ZGE0ZTkzODZiLzEvaDBlU2ZremEtSF9jOUp2Z2JoSFBvS0gyQmd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny8yMDI2ZDMtOWYzMy00NjNlLTg0MTAtNzI2ZGE0ZTkzODZi LzEvOFg5cFZfd2p1TlJyblQzSXZIMnhJb1dZZHZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAW8fTAwQA W8f4AwQAW8vcMA0GCSqGSIb3DQEBCwUAA4IBAQC7HdMPMLdmCWAsqbXMSnli0a95 WQQYk1Nk/Blot/CsWei+HchRe+P4shXHjHh54/5cv4NbBeR7/M9g3JbGeM9TQa4+ PNnsK/69COtSldyMYeQrKa4tmrbqPXoyuOmHwLPC9FKsGrJtdtnK8pyVnbwWKC36 xIryASSlRxsPXZdxzS3C1+ALRW+r6NyJrqHoQjYfy+EOPoKmRByVeDL8gN4HCuv1 HY/1iil3w230cGd4Y3CI+jh0MGDFA7Qq1+VLlZc3U8eCIRGlTkq/XYJqwKJBuZSe sp3IC/CIFmpsu7W0ZKIJ4KZ5+VVPvjDibPlBImeM715tVGFBgLGv5JyMQZhn -----END CERTIFICATE-----Generated at Wed Dec 17 19:31:16 2025 by rpki-client