This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/HdVwiDwUbAPjibY5-soI_-5GP3Q.roa File: HdVwiDwUbAPjibY5-soI_-5GP3Q.roa (raw, json) Hash identifier: LGd6NFXkOMQdCLQuTu/prT8oZ0DAlS19b3AM/PKsdWY= Subject key identifier: 1D:D5:70:88:3C:14:6C:03:E3:89:B6:39:FA:CA:08:FF:EE:46:3F:74 Certificate issuer: /CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce Certificate serial: 019A6A09CA20A1EA2D83932FD173322FD692 Authority key identifier: D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/HdVwiDwUbAPjibY5-soI_-5GP3Q.roa Signing time: Sun 09 Nov 2025 19:13:37 +0000 ROA not before: Sun 09 Nov 2025 19:13:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 53616 IP address blocks: 185.219.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:6a:09:ca:20:a1:ea:2d:83:93:2f:d1:73:32:2f:d6:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce Validity Not Before: Nov 9 19:13:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1dd570883c146c03e389b639faca08ffee463f74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:bc:5f:e2:66:50:4a:60:4d:ba:45:59:c9:a0: 34:ea:8c:aa:76:7a:1c:e0:f8:b1:51:bd:bb:8d:7a: 45:2d:e7:99:62:62:dc:80:80:03:27:3b:33:48:35: a7:51:16:9d:dc:7f:c6:85:41:86:21:41:2c:ae:9e: 94:be:89:0b:e5:b5:44:46:8f:e1:fe:bd:59:c4:9d: 2a:76:e9:e9:59:ca:09:c6:a9:14:93:9c:af:a9:9e: dd:19:a6:c5:53:9f:39:a0:80:ae:c4:e2:4a:80:7e: b3:05:ef:06:ef:4b:5c:c6:20:df:79:12:69:f5:e3: 47:f6:c5:ea:8e:b8:27:40:76:67:b8:6e:dc:0b:44: dc:74:f1:ba:5c:32:7a:dd:f1:36:dc:ec:84:3f:60: 35:8a:2e:71:44:99:18:82:26:6c:ea:70:c3:83:b8: 56:e4:a2:dd:de:d4:ff:7d:06:82:4e:71:e2:ea:7e: 75:6a:82:b1:09:d1:5d:df:aa:25:1d:dc:bd:56:4d: 11:19:ae:e3:ed:4f:63:59:56:3b:70:d9:35:0d:aa: 62:ac:3b:38:c2:7f:df:bb:50:7b:88:fe:06:b5:d4: 83:c4:45:06:3c:f6:e1:45:46:7b:30:10:24:1b:15: f8:db:0e:19:3c:9c:7a:6f:0b:f3:ca:d2:1d:04:3c: 11:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:D5:70:88:3C:14:6C:03:E3:89:B6:39:FA:CA:08:FF:EE:46:3F:74 X509v3 Authority Key Identifier: keyid:D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/HdVwiDwUbAPjibY5-soI_-5GP3Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.219.189.0/24 Signature Algorithm: sha256WithRSAEncryption 52:7b:3a:5b:e4:ea:cb:e5:25:51:cc:c6:c8:e7:27:0a:c4:da: 05:a7:6d:b3:67:77:dd:48:d1:52:61:74:1d:b9:c8:0f:88:be: f9:31:b9:b6:5e:f5:78:ea:95:3b:8d:95:f4:9c:f6:82:e2:25: 79:1b:6c:1c:b1:a3:b4:b2:c6:1d:7a:73:2a:f7:3b:1a:f9:8e: 3f:dc:64:ca:ce:e4:c1:66:8d:bd:74:c2:79:24:f0:3c:52:7a: ee:9f:03:5d:62:0d:9b:15:8a:68:5e:c5:99:73:4b:ac:d4:fb: 42:5f:8d:71:a3:dc:82:10:0a:39:8f:be:9f:d1:a7:93:97:7a: b1:5f:ce:60:b6:b2:ab:97:bd:03:b4:ac:31:8c:96:71:e5:93: 38:34:8c:af:db:54:51:1e:3c:6a:59:ea:01:5f:bd:71:ff:9c: 57:9e:3b:8f:21:9d:b9:18:ec:a7:10:48:ae:e1:05:f3:67:11: b8:c2:b8:c2:0a:cb:00:e5:d9:87:34:7d:2c:cb:2e:a3:3c:39: 49:e0:77:c3:c8:d0:d0:67:fd:9e:16:d5:71:87:82:0a:bd:15: 49:7f:7a:96:81:46:10:af:6a:16:cc:6f:e0:8d:88:60:28:3d: 8e:9d:e9:f4:92:4c:28:40:7c:b7:45:1c:1e:af:26:e5:9f:43: 17:d8:e2:ce -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZpqCcogoeotg5Mv0XMyL9aSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2YWEzZmJjNzhlMzEyMjkxNTdjNzhiNmQyM2E2NWViMmUz NTNkY2UwHhcNMjUxMTA5MTkxMzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZGQ1NzA4ODNjMTQ2YzAzZTM4OWI2MzlmYWNhMDhmZmVlNDYzZjc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7xf4mZQSmBNukVZyaA06oyqdnoc 4PixUb27jXpFLeeZYmLcgIADJzszSDWnURad3H/GhUGGIUEsrp6UvokL5bVERo/h /r1ZxJ0qdunpWcoJxqkUk5yvqZ7dGabFU585oICuxOJKgH6zBe8G70tcxiDfeRJp 9eNH9sXqjrgnQHZnuG7cC0TcdPG6XDJ63fE23OyEP2A1ii5xRJkYgiZs6nDDg7hW 5KLd3tT/fQaCTnHi6n51aoKxCdFd36olHdy9Vk0RGa7j7U9jWVY7cNk1DapirDs4 wn/fu1B7iP4GtdSDxEUGPPbhRUZ7MBAkGxX42w4ZPJx6bwvzytIdBDwR+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB3VcIg8FGwD44m2OfrKCP/uRj90MB8GA1UdIwQY MBaAFNaqP7x44xIpFXx4ttI6ZesuNT3OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXFvX3ZIampFaWtWZkhpMjBqcGw2eTQxUGM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC82Y2Y4YmUtMjUzZC00NmQ1LWFiN2Mt ODI3NmM4YWFjNTBlLzEvSGRWd2lEd1ViQVBqaWJZNS1zb0lfLTVHUDNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC82Y2Y4YmUtMjUzZC00NmQ1LWFiN2MtODI3NmM4YWFjNTBl LzEvMXFvX3ZIampFaWtWZkhpMjBqcGw2eTQxUGM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudu9MA0G CSqGSIb3DQEBCwUAA4IBAQBSezpb5OrL5SVRzMbI5ycKxNoFp22zZ3fdSNFSYXQd ucgPiL75Mbm2XvV46pU7jZX0nPaC4iV5G2wcsaO0ssYdenMq9zsa+Y4/3GTKzuTB Zo29dMJ5JPA8UnrunwNdYg2bFYpoXsWZc0us1PtCX41xo9yCEAo5j76f0aeTl3qx X85gtrKrl70DtKwxjJZx5ZM4NIyv21RRHjxqWeoBX71x/5xXnjuPIZ25GOynEEiu 4QXzZxG4wrjCCssA5dmHNH0syy6jPDlJ4HfDyNDQZ/2eFtVxh4IKvRVJf3qWgUYQ r2oWzG/gjYhgKD2Onen0kkwoQHy3RRwerybln0MX2OLO -----END CERTIFICATE-----Generated at Sat Dec 6 11:04:21 2025 by rpki-client