This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/H5wMcDwPHdHHSfN_ZGCa2GtiDV4.roa File: H5wMcDwPHdHHSfN_ZGCa2GtiDV4.roa (raw, json) Hash identifier: UKcXV99xrcq5JSlZYpOcHSR9inBWnrzLADM94fw5uLs= Subject key identifier: 1F:9C:0C:70:3C:0F:1D:D1:C7:49:F3:7F:64:60:9A:D8:6B:62:0D:5E Certificate issuer: /CN=337e636ba60c714ffe8754ab9d04c6d1eedb9b89 Certificate serial: 019B2A72DE06E43D6BB57E69F697685D5C5C Authority key identifier: 33:7E:63:6B:A6:0C:71:4F:FE:87:54:AB:9D:04:C6:D1:EE:DB:9B:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M35ja6YMcU_-h1SrnQTG0e7bm4k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/H5wMcDwPHdHHSfN_ZGCa2GtiDV4.roa Signing time: Wed 17 Dec 2025 03:55:29 +0000 ROA not before: Wed 17 Dec 2025 03:55:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 20473 IP address blocks: 62.182.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.crl rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.mft rsync://rpki.ripe.net/repository/DEFAULT/M35ja6YMcU_-h1SrnQTG0e7bm4k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2a:72:de:06:e4:3d:6b:b5:7e:69:f6:97:68:5d:5c:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=337e636ba60c714ffe8754ab9d04c6d1eedb9b89 Validity Not Before: Dec 17 03:55:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1f9c0c703c0f1dd1c749f37f64609ad86b620d5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:71:f4:cf:03:7d:e2:72:ae:c8:a1:57:3d:d4: 76:df:a3:6a:54:37:67:1b:c6:9f:3a:1f:aa:23:d4: 0c:d7:11:27:a1:b8:cb:bd:49:08:56:15:ec:b2:d2: 51:d5:e7:4e:b6:bd:82:58:89:40:dd:90:e1:04:37: 57:29:8f:4e:bf:9e:eb:c3:31:f3:f9:af:57:b6:2e: 66:b9:21:8e:74:94:66:4e:67:a0:e1:0a:9f:cb:aa: 75:14:f0:00:dc:4a:50:33:e2:f8:31:97:83:dd:03: d5:d7:1d:eb:e5:59:25:bb:55:be:59:67:be:a5:f5: f9:02:3e:b7:63:c8:aa:dc:7a:e3:4f:9a:f9:2d:25: ee:8e:9d:f9:34:20:75:f4:c6:cc:fd:28:ea:50:40: 60:2c:05:3c:c4:50:b3:ab:ab:d0:a8:98:4f:14:94: 25:92:f6:f5:77:9b:31:a7:e9:a4:1b:4f:6c:c6:ea: 32:f4:ee:6f:64:64:47:48:01:bf:22:e1:39:f1:43: 03:47:c6:6d:d3:c8:7a:96:f5:8a:31:29:b9:6a:74: 8d:29:3c:1c:9e:ce:11:f0:05:ec:15:ff:71:df:39: 27:2e:82:7b:10:34:d4:d1:88:d4:52:41:10:be:19: 62:06:92:63:da:f1:dc:fc:0c:0b:56:7d:ba:cc:18: 3e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:9C:0C:70:3C:0F:1D:D1:C7:49:F3:7F:64:60:9A:D8:6B:62:0D:5E X509v3 Authority Key Identifier: keyid:33:7E:63:6B:A6:0C:71:4F:FE:87:54:AB:9D:04:C6:D1:EE:DB:9B:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M35ja6YMcU_-h1SrnQTG0e7bm4k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/H5wMcDwPHdHHSfN_ZGCa2GtiDV4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.182.190.0/24 Signature Algorithm: sha256WithRSAEncryption a2:2c:70:14:58:69:aa:11:dc:e6:fb:d3:9d:9c:f8:0e:2f:75: 4b:e3:be:43:ab:c7:f4:5b:93:39:ef:e6:ea:c8:48:78:d0:e1: 8e:db:99:33:37:ae:9e:f7:2d:34:7b:1d:03:7b:12:7b:dd:56: 82:e7:ca:8d:28:1f:e0:e0:5d:51:0d:62:09:58:6b:9d:16:83: 1d:a1:50:7e:3d:19:15:a7:47:d9:14:b8:8d:ec:c8:5b:44:52: ef:14:bc:2c:7f:e1:aa:86:bd:68:c7:89:15:1f:cb:1a:82:d0: fe:38:09:34:a2:82:18:5b:ff:e2:6a:ea:52:6e:15:93:e9:eb: 1d:2a:0c:55:68:5f:63:8f:b7:e9:61:51:10:0e:2f:22:39:00: d5:de:34:76:d6:7c:c4:28:1a:7e:4d:65:c9:f2:c1:27:cb:85: f3:27:3a:f7:8b:e0:f0:58:64:a2:96:30:e6:1f:90:1d:04:a3: 47:03:ce:78:be:9f:4d:08:f7:13:de:0f:f9:83:17:83:5b:4d: f0:9e:ce:ce:90:7e:2b:78:19:ff:98:3a:dd:a4:a3:b0:8e:40: 87:85:f1:22:07:7c:1a:fd:79:99:9e:39:a7:11:2c:40:23:b0: b2:ec:6f:ab:b0:c2:19:b3:78:a0:76:8b:6c:85:72:02:ef:96: c4:f4:30:ee -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsqct4G5D1rtX5p9pdoXVxcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzN2U2MzZiYTYwYzcxNGZmZTg3NTRhYjlkMDRjNmQxZWVk YjliODkwHhcNMjUxMjE3MDM1NTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjljMGM3MDNjMGYxZGQxYzc0OWYzN2Y2NDYwOWFkODZiNjIwZDVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3H0zwN94nKuyKFXPdR236NqVDdn G8afOh+qI9QM1xEnobjLvUkIVhXsstJR1edOtr2CWIlA3ZDhBDdXKY9Ov57rwzHz +a9Xti5muSGOdJRmTmeg4Qqfy6p1FPAA3EpQM+L4MZeD3QPV1x3r5Vklu1W+WWe+ pfX5Aj63Y8iq3HrjT5r5LSXujp35NCB19MbM/SjqUEBgLAU8xFCzq6vQqJhPFJQl kvb1d5sxp+mkG09sxuoy9O5vZGRHSAG/IuE58UMDR8Zt08h6lvWKMSm5anSNKTwc ns4R8AXsFf9x3zknLoJ7EDTU0YjUUkEQvhliBpJj2vHc/AwLVn26zBg+CQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB+cDHA8Dx3Rx0nzf2RgmthrYg1eMB8GA1UdIwQY MBaAFDN+Y2umDHFP/odUq50ExtHu25uJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTM1amE2WU1jVV8taDFTcm5RVEcwZTdibTRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9lNzBjODMtNDZmZC00MGI0LTgzYzkt NzBjMjI4ZWU5Yzk1LzEvSDV3TWNEd1BIZEhIU2ZOX1pHQ2EyR3RpRFY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9lNzBjODMtNDZmZC00MGI0LTgzYzktNzBjMjI4ZWU5Yzk1 LzEvTTM1amE2WU1jVV8taDFTcm5RVEcwZTdibTRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPra+MA0G CSqGSIb3DQEBCwUAA4IBAQCiLHAUWGmqEdzm+9OdnPgOL3VL475Dq8f0W5M57+bq yEh40OGO25kzN66e9y00ex0DexJ73VaC58qNKB/g4F1RDWIJWGudFoMdoVB+PRkV p0fZFLiN7MhbRFLvFLwsf+Gqhr1ox4kVH8sagtD+OAk0ooIYW//iaupSbhWT6esd KgxVaF9jj7fpYVEQDi8iOQDV3jR21nzEKBp+TWXJ8sEny4XzJzr3i+DwWGSiljDm H5AdBKNHA854vp9NCPcT3g/5gxeDW03wns7OkH4reBn/mDrdpKOwjkCHhfEiB3wa /XmZnjmnESxAI7Cy7G+rsMIZs3igdotshXIC75bE9DDu -----END CERTIFICATE-----Generated at Wed Dec 17 19:16:55 2025 by rpki-client