This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/hKtl6YrzcFs2c5akQ4QGQkOqaqs.roa File: hKtl6YrzcFs2c5akQ4QGQkOqaqs.roa (raw, json) Hash identifier: zejLevyjCi1eBLeaN7L1PcRyE8TcqoV2q3GNhHozY7Q= Subject key identifier: 84:AB:65:E9:8A:F3:70:5B:36:73:96:A4:43:84:06:42:43:AA:6A:AB Certificate issuer: /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Certificate serial: 019A585CBA014FE16A2B8D3233902CA73745 Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/hKtl6YrzcFs2c5akQ4QGQkOqaqs.roa Signing time: Thu 06 Nov 2025 08:51:03 +0000 ROA not before: Thu 06 Nov 2025 08:51:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 197177 IP address blocks: 94.240.20.0/24 maxlen: 24 94.240.21.0/24 maxlen: 24 94.240.38.0/24 maxlen: 24 94.240.39.0/24 maxlen: 24 94.240.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:58:5c:ba:01:4f:e1:6a:2b:8d:32:33:90:2c:a7:37:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Validity Not Before: Nov 6 08:51:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=84ab65e98af3705b367396a44384064243aa6aab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a5:8d:f1:a2:6c:2d:b7:2a:79:fb:25:64:08: 89:98:6a:f7:39:08:90:1e:c7:ee:03:fc:60:15:22: 92:e9:d3:77:14:ec:2b:54:db:d2:d6:9f:80:0e:44: d4:73:b8:7d:8d:e2:07:29:43:dd:a4:be:b1:1d:d3: 7c:73:24:30:74:2f:47:08:bc:24:b4:db:73:1d:5a: 74:b8:98:99:be:eb:03:59:16:40:76:c3:7d:56:c2: 9c:59:c0:10:70:ad:48:63:ff:ff:86:cb:1f:7c:2b: 45:ca:3f:2a:85:65:e6:e0:ca:7b:01:6f:89:46:a8: 71:53:73:78:25:5a:5e:21:79:67:54:2c:ca:ed:73: b9:7b:ca:ce:77:4e:12:b5:75:d5:09:93:01:c6:ab: 3b:27:7f:96:b4:08:ba:e1:a7:34:5b:b6:70:ff:98: 0f:c4:27:2b:9a:01:b6:82:a1:de:ab:76:b0:3d:2b: 77:31:81:a2:92:ec:3f:80:6f:14:59:4a:6f:ce:37: 97:db:af:be:07:39:96:3d:89:f4:9d:ac:24:68:f8: ca:57:09:fc:f3:ef:df:cc:2e:a1:7a:71:f2:f2:77: 57:83:cc:83:c2:d7:46:a7:da:bc:55:ba:54:4a:8d: 42:87:2f:e0:0f:34:92:16:0d:09:8e:fd:d2:44:0d: 96:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:AB:65:E9:8A:F3:70:5B:36:73:96:A4:43:84:06:42:43:AA:6A:AB X509v3 Authority Key Identifier: keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/hKtl6YrzcFs2c5akQ4QGQkOqaqs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.240.20.0/23 94.240.38.0/23 94.240.60.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:96:2d:f0:e7:e0:ae:bd:9a:f2:00:77:43:68:57:bf:da:f7: dc:95:38:95:4e:5b:cc:97:a0:ef:b4:d0:81:93:05:6d:4e:c9: 9e:d0:07:69:41:98:31:86:ca:dd:7d:c7:79:54:7c:68:48:3e: 64:2e:51:47:ec:36:d4:1c:ec:85:a9:4d:21:a7:4a:8d:41:0b: 93:93:92:7a:0a:7f:35:1a:8a:ad:0b:b7:11:8b:28:7e:26:2b: 78:35:ad:95:3a:78:6d:e2:fc:89:4d:a7:94:d2:9a:44:36:fd: 77:7a:e1:63:25:c8:c3:30:75:ce:05:14:9d:01:ef:12:70:31: 91:60:0e:25:dd:cb:94:6f:61:04:15:e8:af:1c:32:1a:43:1a: b6:49:d0:aa:da:c9:05:23:7b:9b:a6:90:e1:c0:90:52:cd:d3: a2:ee:54:b9:c9:e1:7d:90:13:6e:15:46:5e:cb:c1:15:cc:4c: 9d:2e:4e:91:cb:68:ae:47:70:54:0e:8d:65:a9:98:30:07:77: 72:a4:11:5d:8a:6f:a7:f1:20:f8:36:db:aa:15:39:92:45:17: d3:f7:4d:25:c2:1f:12:7e:9c:68:f0:50:c0:94:1f:33:03:93: dd:29:f7:d5:68:74:06:a6:72:52:d8:9a:67:cd:d9:0a:30:e0: ad:cc:81:01 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZpYXLoBT+FqK40yM5AspzdFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MWEyZmQ2ZjVlNWFmODdkNWNlYTA5NTA2NmZiY2MzZDNl NTQ2YTQwHhcNMjUxMTA2MDg1MTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NGFiNjVlOThhZjM3MDViMzY3Mzk2YTQ0Mzg0MDY0MjQzYWE2YWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKWN8aJsLbcqefslZAiJmGr3OQiQ HsfuA/xgFSKS6dN3FOwrVNvS1p+ADkTUc7h9jeIHKUPdpL6xHdN8cyQwdC9HCLwk tNtzHVp0uJiZvusDWRZAdsN9VsKcWcAQcK1IY///hssffCtFyj8qhWXm4Mp7AW+J RqhxU3N4JVpeIXlnVCzK7XO5e8rOd04StXXVCZMBxqs7J3+WtAi64ac0W7Zw/5gP xCcrmgG2gqHeq3awPSt3MYGikuw/gG8UWUpvzjeX26++BzmWPYn0nawkaPjKVwn8 8+/fzC6henHy8ndXg8yDwtdGp9q8VbpUSo1Chy/gDzSSFg0Jjv3SRA2WbQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFISrZemK83BbNnOWpEOEBkJDqmqrMB8GA1UdIwQY MBaAFDUaL9b15a+H1c6glQZvvMPT5UakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODIt MjMwNDllNGQyZjEyLzEvaEt0bDZZcnpjRnMyYzVha1E0UUdRa09xYXFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODItMjMwNDllNGQyZjEy LzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBXvAUAwQB XvAmAwQAXvA8MA0GCSqGSIb3DQEBCwUAA4IBAQCNli3w5+CuvZryAHdDaFe/2vfc lTiVTlvMl6DvtNCBkwVtTsme0AdpQZgxhsrdfcd5VHxoSD5kLlFH7DbUHOyFqU0h p0qNQQuTk5J6Cn81GoqtC7cRiyh+Jit4Na2VOnht4vyJTaeU0ppENv13euFjJcjD MHXOBRSdAe8ScDGRYA4l3cuUb2EEFeivHDIaQxq2SdCq2skFI3ubppDhwJBSzdOi 7lS5yeF9kBNuFUZey8EVzEydLk6Ry2iuR3BUDo1lqZgwB3dypBFdim+n8SD4Ntuq FTmSRRfT900lwh8Sfpxo8FDAlB8zA5PdKffVaHQGpnJS2JpnzdkKMOCtzIEB -----END CERTIFICATE-----Generated at Sun Dec 7 01:06:02 2025 by rpki-client