This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/HNhf-D_PEssdX9LVrnIMDsv0KIw.roa File: HNhf-D_PEssdX9LVrnIMDsv0KIw.roa (raw, json) Hash identifier: bVdo4uf32LEDJaY4T2QwPbWvITwhd4KcifOR3lFOhpg= Subject key identifier: 1C:D8:5F:F8:3F:CF:12:CB:1D:5F:D2:D5:AE:72:0C:0E:CB:F4:28:8C Certificate issuer: /CN=20aa60cb0024332a2db68993f3357158af60c8de Certificate serial: 019A733B9B518227F97FDDE664EBB5EFEB9E Authority key identifier: 20:AA:60:CB:00:24:33:2A:2D:B6:89:93:F3:35:71:58:AF:60:C8:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IKpgywAkMyottomT8zVxWK9gyN4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/HNhf-D_PEssdX9LVrnIMDsv0KIw.roa Signing time: Tue 11 Nov 2025 14:04:37 +0000 ROA not before: Tue 11 Nov 2025 14:04:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 12638 IP address blocks: 5.1.128.0/17 maxlen: 17 176.0.0.0/13 maxlen: 13 176.1.0.0/16 maxlen: 16 193.7.128.0/19 maxlen: 19 212.23.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.mft rsync://rpki.ripe.net/repository/DEFAULT/IKpgywAkMyottomT8zVxWK9gyN4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:73:3b:9b:51:82:27:f9:7f:dd:e6:64:eb:b5:ef:eb:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20aa60cb0024332a2db68993f3357158af60c8de Validity Not Before: Nov 11 14:04:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1cd85ff83fcf12cb1d5fd2d5ae720c0ecbf4288c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:50:5d:d4:f9:14:df:9b:d0:ec:cc:96:60:8f: 8f:cb:b0:ee:c3:40:ee:9c:1a:be:33:92:cf:ad:2e: 72:41:ae:d2:19:f2:ba:51:6d:86:df:12:99:70:ea: f5:c2:e7:8c:5f:23:b9:ef:24:78:39:0c:52:d8:4f: b1:7a:ae:3c:25:54:b0:43:36:10:7e:63:f5:b9:7a: 4a:c1:be:46:c5:23:04:42:6e:72:e0:94:83:3a:bc: 81:62:4d:06:5d:3b:bb:1d:a4:a6:29:27:c9:19:41: 84:ea:d0:4e:ca:84:b3:41:f9:40:90:3c:2e:eb:2b: 5f:ab:1f:54:bd:52:73:02:99:6f:2f:a8:46:96:62: 4d:16:3f:17:7c:ae:76:b2:3f:78:47:b5:6b:87:c3: cf:8b:fb:c3:90:b4:f3:60:29:6b:1b:09:4b:0a:34: 27:ac:57:3f:8d:99:32:2a:8c:63:56:e1:0d:b8:04: e3:ba:a8:86:5d:3a:85:1b:d0:53:cb:c3:2b:4b:64: 58:e8:7c:7b:cf:88:3f:fd:65:d7:a1:70:77:9a:48: 8f:74:e0:1c:2f:bf:05:92:e6:24:82:37:de:b0:28: fc:04:12:a7:2b:cf:c7:57:f5:65:b8:6d:50:5a:f3: 78:59:e9:6d:55:fc:4d:24:5d:92:8f:b7:5b:b2:cf: f7:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:D8:5F:F8:3F:CF:12:CB:1D:5F:D2:D5:AE:72:0C:0E:CB:F4:28:8C X509v3 Authority Key Identifier: keyid:20:AA:60:CB:00:24:33:2A:2D:B6:89:93:F3:35:71:58:AF:60:C8:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IKpgywAkMyottomT8zVxWK9gyN4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/HNhf-D_PEssdX9LVrnIMDsv0KIw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.1.128.0/17 176.0.0.0/13 193.7.128.0/19 212.23.96.0/19 Signature Algorithm: sha256WithRSAEncryption 11:f9:b4:8d:68:dc:6f:57:3b:10:75:ed:7b:a6:16:fb:ce:ee: 2c:e9:f4:1a:8c:c2:2b:78:94:4a:72:8b:9d:84:74:c5:3a:d2: 1f:95:32:1f:da:24:2a:6d:41:15:70:c8:1d:ce:6f:01:f0:b7: d3:4a:01:cc:03:00:60:f9:7d:92:f4:26:16:7e:80:db:e6:53: 84:b4:57:07:de:16:52:6d:b1:8d:aa:d5:68:53:51:e3:a3:7c: 72:f3:3b:c8:ba:07:8b:ff:73:69:dc:76:3b:3f:c2:7c:79:ed: 54:04:79:88:c0:11:7f:22:ce:a0:d9:b0:c3:ab:ac:67:95:2d: 83:34:b6:7c:8d:28:4b:53:b9:cc:93:22:ce:b3:f8:d1:50:d5: 56:00:5b:11:5d:bc:0b:bf:ac:c9:e0:ce:3d:21:a2:c9:c6:59: b2:8f:7a:5b:8e:0c:f9:39:3a:62:ff:50:6d:16:1d:91:4c:4e: 37:86:a9:f7:34:bf:b7:12:f9:28:bb:b7:dc:c1:cd:0e:4f:93: be:5f:60:94:37:79:1e:0e:92:70:c0:f2:6f:ed:70:8a:67:4a: d3:0f:f9:b1:38:b9:72:22:4a:45:dd:ff:54:15:d1:31:6a:6c: 74:06:5b:cd:90:d5:8c:bd:a9:30:a8:6b:9a:eb:83:d4:55:c8: 54:49:bd:28 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZpzO5tRgif5f93mZOu17+ueMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwYWE2MGNiMDAyNDMzMmEyZGI2ODk5M2YzMzU3MTU4YWY2 MGM4ZGUwHhcNMjUxMTExMTQwNDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxY2Q4NWZmODNmY2YxMmNiMWQ1ZmQyZDVhZTcyMGMwZWNiZjQyODhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VBd1PkU35vQ7MyWYI+Py7Duw0Du nBq+M5LPrS5yQa7SGfK6UW2G3xKZcOr1wueMXyO57yR4OQxS2E+xeq48JVSwQzYQ fmP1uXpKwb5GxSMEQm5y4JSDOryBYk0GXTu7HaSmKSfJGUGE6tBOyoSzQflAkDwu 6ytfqx9UvVJzAplvL6hGlmJNFj8XfK52sj94R7Vrh8PPi/vDkLTzYClrGwlLCjQn rFc/jZkyKoxjVuENuATjuqiGXTqFG9BTy8MrS2RY6Hx7z4g//WXXoXB3mkiPdOAc L78FkuYkgjfesCj8BBKnK8/HV/VluG1QWvN4WeltVfxNJF2Sj7dbss/3NwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFBzYX/g/zxLLHV/S1a5yDA7L9CiMMB8GA1UdIwQY MBaAFCCqYMsAJDMqLbaJk/M1cVivYMjeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUtwZ3l3QWtNeW90dG9tVDh6VnhXSzlneU40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8zNTI0MzEtZTY5NC00NDEyLWE3NjYt NzNmN2QxMTBiODJhLzEvSE5oZi1EX1BFc3NkWDlMVnJuSU1Ec3YwS0l3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi8zNTI0MzEtZTY5NC00NDEyLWE3NjYtNzNmN2QxMTBiODJh LzEvSUtwZ3l3QWtNeW90dG9tVDh6VnhXSzlneU40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAdBAIAATAXAwQHBQGAAwMD sAADBAXBB4ADBAXUF2AwDQYJKoZIhvcNAQELBQADggEBABH5tI1o3G9XOxB17Xum FvvO7izp9BqMwit4lEpyi52EdMU60h+VMh/aJCptQRVwyB3ObwHwt9NKAcwDAGD5 fZL0JhZ+gNvmU4S0VwfeFlJtsY2q1WhTUeOjfHLzO8i6B4v/c2ncdjs/wnx57VQE eYjAEX8izqDZsMOrrGeVLYM0tnyNKEtTucyTIs6z+NFQ1VYAWxFdvAu/rMngzj0h osnGWbKPeluODPk5OmL/UG0WHZFMTjeGqfc0v7cS+Si7t9zBzQ5Pk75fYJQ3eR4O knDA8m/tcIpnStMP+bE4uXIiSkXd/1QV0TFqbHQGW82Q1Yy9qTCoa5rrg9RVyFRJ vSg= -----END CERTIFICATE-----Generated at Sat Dec 6 17:17:58 2025 by rpki-client