This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/H9du-Jn6MCQXm1t_8iJu9f0WTBU.roa File: H9du-Jn6MCQXm1t_8iJu9f0WTBU.roa (raw, json) Hash identifier: LU8c8guDjsQyLHDNAitm6LJgUmtfwruCob1ccYNDcss= Subject key identifier: 1F:D7:6E:F8:99:FA:30:24:17:9B:5B:7F:F2:22:6E:F5:FD:16:4C:15 Certificate issuer: /CN=0690913dbbeedadde95dce4704526284e7ae7cca Certificate serial: 019ACCAEF0F3959AB80BC3CC4088A371D70E Authority key identifier: 06:90:91:3D:BB:EE:DA:DD:E9:5D:CE:47:04:52:62:84:E7:AE:7C:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpCRPbvu2t3pXc5HBFJihOeufMo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/H9du-Jn6MCQXm1t_8iJu9f0WTBU.roa Signing time: Fri 28 Nov 2025 22:56:48 +0000 ROA not before: Fri 28 Nov 2025 22:56:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 41720 IP address blocks: 195.182.210.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.mft rsync://rpki.ripe.net/repository/DEFAULT/BpCRPbvu2t3pXc5HBFJihOeufMo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:cc:ae:f0:f3:95:9a:b8:0b:c3:cc:40:88:a3:71:d7:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0690913dbbeedadde95dce4704526284e7ae7cca Validity Not Before: Nov 28 22:56:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1fd76ef899fa3024179b5b7ff2226ef5fd164c15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:23:c3:82:2d:45:84:0e:98:68:67:ce:77:79: 72:3e:44:32:67:09:71:7b:13:3b:0f:de:04:da:85: f9:16:29:6f:f9:4b:11:f8:7f:80:ee:a6:fb:07:dc: 64:19:83:74:f6:88:5c:73:6b:32:45:be:12:aa:8a: 7c:49:0a:59:23:9e:83:7d:9c:db:91:5e:dd:1e:93: 64:8c:10:61:4a:05:a3:d8:02:83:92:3b:da:7f:84: c3:ff:7e:d7:62:60:fc:cc:64:d5:4e:c8:b4:39:a2: 63:5f:f2:4d:74:ab:bb:3b:c5:42:90:72:b2:76:79: 53:fe:03:62:50:96:f0:3c:01:85:3c:aa:ba:0b:38: a9:df:b4:00:54:c5:64:6a:18:2c:30:44:81:c5:c8: 74:0b:00:e4:d7:04:d5:cc:0b:67:3a:e8:a8:4c:52: 4d:e4:c2:8f:56:37:04:e2:f0:13:0d:80:34:f5:20: 97:b9:78:91:9c:f8:61:aa:a7:34:73:38:5d:11:55: 42:2c:3a:fa:36:ab:1e:42:53:c9:20:32:39:80:e1: d4:1d:c0:fd:ef:1a:5c:96:f4:91:27:0d:85:e5:ae: 39:93:bc:4d:38:cb:45:25:31:52:ea:93:c1:df:bb: 99:98:28:37:78:0e:38:c1:2f:ac:39:b3:5e:01:99: bd:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:D7:6E:F8:99:FA:30:24:17:9B:5B:7F:F2:22:6E:F5:FD:16:4C:15 X509v3 Authority Key Identifier: keyid:06:90:91:3D:BB:EE:DA:DD:E9:5D:CE:47:04:52:62:84:E7:AE:7C:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpCRPbvu2t3pXc5HBFJihOeufMo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/H9du-Jn6MCQXm1t_8iJu9f0WTBU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.182.210.0/23 Signature Algorithm: sha256WithRSAEncryption 39:ad:0a:5b:34:22:f7:88:35:5a:b0:ad:84:b6:c4:1d:2e:cb: 02:6d:ec:a3:16:8a:69:0f:ce:d9:61:9b:b0:72:fa:e6:2e:5a: 20:e5:ec:d6:6e:e0:95:77:e6:9c:50:f1:52:f1:ac:ce:3d:49: 17:18:df:8f:c5:5e:b0:85:8b:12:ba:a9:4f:d1:94:6c:00:bf: 9d:70:51:c0:63:22:f1:a5:4a:28:62:61:f7:d3:b4:9b:ec:55: 4f:d5:28:3b:10:d1:92:ae:e4:95:f0:5b:1e:c1:0a:27:e8:c2: b5:51:49:7f:bb:62:7a:6e:a3:56:59:69:6e:fb:c3:41:0a:d7: 37:51:25:6c:2d:2d:59:70:c3:c8:16:91:c9:b7:57:26:a3:df: 79:5c:d2:28:04:81:4f:89:f5:b9:d9:02:b4:57:9c:df:15:cd: a3:8a:c9:93:f4:14:e1:29:23:af:1e:8f:32:eb:90:3b:c3:e9: 4b:09:c3:fa:cd:86:c1:c3:76:50:22:03:6b:1d:2e:f2:18:0f: 01:f2:f4:57:93:04:09:26:b6:83:b9:78:8e:7e:20:b0:74:a8: 84:8b:0f:fa:b8:e7:0f:e8:50:88:ea:c7:4b:0a:b0:a3:28:ff: 5d:63:f3:13:73:36:f5:08:ae:b6:87:82:df:11:24:f3:82:ad: c7:fe:e0:bd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrMrvDzlZq4C8PMQIijcdcOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2OTA5MTNkYmJlZWRhZGRlOTVkY2U0NzA0NTI2Mjg0ZTdh ZTdjY2EwHhcNMjUxMTI4MjI1NjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZmQ3NmVmODk5ZmEzMDI0MTc5YjViN2ZmMjIyNmVmNWZkMTY0YzE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiPDgi1FhA6YaGfOd3lyPkQyZwlx exM7D94E2oX5Filv+UsR+H+A7qb7B9xkGYN09ohcc2syRb4Sqop8SQpZI56DfZzb kV7dHpNkjBBhSgWj2AKDkjvaf4TD/37XYmD8zGTVTsi0OaJjX/JNdKu7O8VCkHKy dnlT/gNiUJbwPAGFPKq6Czip37QAVMVkahgsMESBxch0CwDk1wTVzAtnOuioTFJN 5MKPVjcE4vATDYA09SCXuXiRnPhhqqc0czhdEVVCLDr6NqseQlPJIDI5gOHUHcD9 7xpclvSRJw2F5a45k7xNOMtFJTFS6pPB37uZmCg3eA44wS+sObNeAZm9EQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB/XbviZ+jAkF5tbf/IibvX9FkwVMB8GA1UdIwQY MBaAFAaQkT277trd6V3ORwRSYoTnrnzKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnBDUlBidnUydDNwWGM1SEJGSmloT2V1Zk1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mYWI5MTgtOGY0ZC00ZWRlLWJhZDEt MzFiOTUwMjcwNTM2LzEvSDlkdS1KbjZNQ1FYbTF0XzhpSnU5ZjBXVEJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mYWI5MTgtOGY0ZC00ZWRlLWJhZDEtMzFiOTUwMjcwNTM2 LzEvQnBDUlBidnUydDNwWGM1SEJGSmloT2V1Zk1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw7bSMA0G CSqGSIb3DQEBCwUAA4IBAQA5rQpbNCL3iDVasK2EtsQdLssCbeyjFoppD87ZYZuw cvrmLlog5ezWbuCVd+acUPFS8azOPUkXGN+PxV6whYsSuqlP0ZRsAL+dcFHAYyLx pUooYmH307Sb7FVP1Sg7ENGSruSV8FsewQon6MK1UUl/u2J6bqNWWWlu+8NBCtc3 USVsLS1ZcMPIFpHJt1cmo995XNIoBIFPifW52QK0V5zfFc2jismT9BThKSOvHo8y 65A7w+lLCcP6zYbBw3ZQIgNrHS7yGA8B8vRXkwQJJraDuXiOfiCwdKiEiw/6uOcP 6FCI6sdLCrCjKP9dY/MTczb1CK62h4LfESTzgq3H/uC9 -----END CERTIFICATE-----Generated at Sat Dec 6 05:41:40 2025 by rpki-client