This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/hVtuFcGheqCya1aIvBlykH_4yyA.roa File: hVtuFcGheqCya1aIvBlykH_4yyA.roa (raw, json) Hash identifier: ++MQUCq5EfMOV53TJAd9FzuTMizDUiHnDQDWn6D6XeY= Subject key identifier: 85:5B:6E:15:C1:A1:7A:A0:B2:6B:56:88:BC:19:72:90:7F:F8:CB:20 Certificate issuer: /CN=c0e8e56b18d45c646f03cb6f9069da0c8b3c74ad Certificate serial: 019A810F09661DC90386AE10AD5546DCF834 Authority key identifier: C0:E8:E5:6B:18:D4:5C:64:6F:03:CB:6F:90:69:DA:0C:8B:3C:74:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOjlaxjUXGRvA8tvkGnaDIs8dK0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/hVtuFcGheqCya1aIvBlykH_4yyA.roa Signing time: Fri 14 Nov 2025 06:30:37 +0000 ROA not before: Fri 14 Nov 2025 06:30:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 43926 IP address blocks: 46.253.32.0/21 maxlen: 21 185.58.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/wOjlaxjUXGRvA8tvkGnaDIs8dK0.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/wOjlaxjUXGRvA8tvkGnaDIs8dK0.mft rsync://rpki.ripe.net/repository/DEFAULT/wOjlaxjUXGRvA8tvkGnaDIs8dK0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 09:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:81:0f:09:66:1d:c9:03:86:ae:10:ad:55:46:dc:f8:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0e8e56b18d45c646f03cb6f9069da0c8b3c74ad Validity Not Before: Nov 14 06:30:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=855b6e15c1a17aa0b26b5688bc1972907ff8cb20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:27:16:61:e3:72:f0:2a:b7:ca:05:b6:29:dd: 1f:11:9b:10:a7:20:96:01:b4:2f:6b:6d:0a:31:ed: 58:4a:a9:28:15:dd:50:a2:79:44:3b:df:3a:5c:8c: d2:24:b2:b2:3c:9b:a1:14:38:8a:50:61:53:64:8a: 42:17:6e:22:53:63:61:ae:14:84:25:0c:b0:aa:b9: bd:16:07:4c:67:83:8b:ca:1e:9d:30:ff:be:07:92: e5:1f:5a:c6:f6:7d:2e:e8:8a:19:07:44:48:ea:55: df:61:b5:41:e5:72:d6:22:4e:a5:6f:33:e6:02:8e: 51:b7:93:0e:cb:38:b8:0d:f5:69:d2:7d:c6:b6:f7: c6:db:74:de:79:5e:05:94:bf:cb:43:25:67:fb:e1: b6:24:2f:7f:4a:c2:06:f0:40:97:eb:5f:5f:86:2e: 5f:e4:d1:6f:ff:b0:56:9f:6e:c8:bf:c2:48:ea:fd: e1:89:7a:02:ee:7f:e3:a9:c0:87:50:6c:5c:a5:da: 36:6c:b6:b0:87:45:2b:c7:5e:e0:00:00:5c:3f:e9: 38:15:d7:21:b7:ca:19:78:03:7d:e5:c3:e7:95:74: c1:c3:e0:d3:79:b2:b1:f1:77:75:a3:b9:bb:22:9a: cf:af:d9:68:95:6e:86:6a:dc:3a:ff:2a:4d:37:fc: 38:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:5B:6E:15:C1:A1:7A:A0:B2:6B:56:88:BC:19:72:90:7F:F8:CB:20 X509v3 Authority Key Identifier: keyid:C0:E8:E5:6B:18:D4:5C:64:6F:03:CB:6F:90:69:DA:0C:8B:3C:74:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOjlaxjUXGRvA8tvkGnaDIs8dK0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/hVtuFcGheqCya1aIvBlykH_4yyA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/wOjlaxjUXGRvA8tvkGnaDIs8dK0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.253.32.0/21 185.58.172.0/22 Signature Algorithm: sha256WithRSAEncryption 66:13:ec:3e:37:4c:f0:39:16:67:d3:e8:45:a8:0a:d3:d1:d0: 98:70:7a:b2:d0:35:e5:f1:0d:78:a2:d5:ce:02:aa:60:2b:28: e8:ca:56:4a:34:70:9b:1a:80:ce:7a:bc:2e:0f:b3:81:d7:db: 1b:b0:b1:36:6c:1e:9c:2e:84:37:a8:ea:75:5e:58:ae:79:26: 05:85:c6:cd:04:a7:5c:db:12:08:e8:3e:4a:89:a5:61:f5:cd: 4a:45:d5:6d:dd:b4:58:c5:ad:e4:3a:48:6a:06:80:d2:e4:ec: 4c:07:ea:7f:06:34:81:f2:43:e2:4a:a6:06:19:d8:38:ca:ee: 6d:4f:5c:9c:40:6e:ef:52:c7:07:72:8b:70:f6:e9:e3:1d:65: 6d:01:41:d3:fc:bf:0f:ad:bc:90:63:d1:67:21:af:2b:9f:bb: ff:71:aa:fc:66:59:d4:74:4b:de:1e:8c:74:0f:8b:65:ae:08: dd:6e:3c:8b:ef:70:54:1c:9a:d7:82:23:b2:10:98:d0:6d:90: 49:53:d1:ca:31:30:10:11:c1:b8:3f:40:db:68:42:6f:0d:fa: 49:b9:4a:65:b1:22:70:7e:c0:68:a1:b9:7d:54:7e:09:c1:a1: f8:ba:2e:bb:65:01:b5:72:64:b9:69:75:93:9d:42:e5:c9:00: c2:ca:42:50 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZqBDwlmHckDhq4QrVVG3Pg0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwZThlNTZiMThkNDVjNjQ2ZjAzY2I2ZjkwNjlkYTBjOGIz Yzc0YWQwHhcNMjUxMTE0MDYzMDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTViNmUxNWMxYTE3YWEwYjI2YjU2ODhiYzE5NzI5MDdmZjhjYjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzycWYeNy8Cq3ygW2Kd0fEZsQpyCW AbQva20KMe1YSqkoFd1QonlEO986XIzSJLKyPJuhFDiKUGFTZIpCF24iU2NhrhSE JQywqrm9FgdMZ4OLyh6dMP++B5LlH1rG9n0u6IoZB0RI6lXfYbVB5XLWIk6lbzPm Ao5Rt5MOyzi4DfVp0n3GtvfG23TeeV4FlL/LQyVn++G2JC9/SsIG8ECX619fhi5f 5NFv/7BWn27Iv8JI6v3hiXoC7n/jqcCHUGxcpdo2bLawh0Urx17gAABcP+k4Fdch t8oZeAN95cPnlXTBw+DTebKx8Xd1o7m7IprPr9lolW6Gatw6/ypNN/w4TwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIVbbhXBoXqgsmtWiLwZcpB/+MsgMB8GA1UdIwQY MBaAFMDo5WsY1FxkbwPLb5Bp2gyLPHStMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd09qbGF4alVYR1J2QTh0dmtHbmFESXM4ZEswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8yYWJlYTItMzBkMC00NjU0LWE4MzQt NzQ1YmNlMzA2MGM5LzEvaFZ0dUZjR2hlcUN5YTFhSXZCbHlrSF80eXlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8yYWJlYTItMzBkMC00NjU0LWE4MzQtNzQ1YmNlMzA2MGM5 LzEvd09qbGF4alVYR1J2QTh0dmtHbmFESXM4ZEswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDLv0gAwQC uTqsMA0GCSqGSIb3DQEBCwUAA4IBAQBmE+w+N0zwORZn0+hFqArT0dCYcHqy0DXl 8Q14otXOAqpgKyjoylZKNHCbGoDOerwuD7OB19sbsLE2bB6cLoQ3qOp1XliueSYF hcbNBKdc2xII6D5KiaVh9c1KRdVt3bRYxa3kOkhqBoDS5OxMB+p/BjSB8kPiSqYG Gdg4yu5tT1ycQG7vUscHcotw9unjHWVtAUHT/L8PrbyQY9FnIa8rn7v/car8ZlnU dEveHox0D4tlrgjdbjyL73BUHJrXgiOyEJjQbZBJU9HKMTAQEcG4P0DbaEJvDfpJ uUplsSJwfsBoobl9VH4JwaH4ui67ZQG1cmS5aXWTnULlyQDCykJQ -----END CERTIFICATE-----Generated at Sat Dec 6 16:15:05 2025 by rpki-client