This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/HV1Z-5AfweeGexBOTSK8oVgBYow.roa File: HV1Z-5AfweeGexBOTSK8oVgBYow.roa (raw, json) Hash identifier: qnxO3FYOQTQD5KJbNkx4B5RNsjP4JgPBD2QA8OcXdj8= Subject key identifier: 1D:5D:59:FB:90:1F:C1:E7:86:7B:10:4E:4D:22:BC:A1:58:01:62:8C Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21 Certificate serial: 019A9BF94BBC673B18055E4B9EF387CDD2BC Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/HV1Z-5AfweeGexBOTSK8oVgBYow.roa Signing time: Wed 19 Nov 2025 11:56:37 +0000 ROA not before: Wed 19 Nov 2025 11:56:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 209836 IP address blocks: 87.107.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9b:f9:4b:bc:67:3b:18:05:5e:4b:9e:f3:87:cd:d2:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21 Validity Not Before: Nov 19 11:56:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1d5d59fb901fc1e7867b104e4d22bca15801628c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:51:55:7d:7d:e0:3b:6b:23:56:5e:35:6d:8b: ad:36:fc:d5:49:ae:c8:d2:2c:38:c1:09:c5:66:61: 12:73:09:90:80:45:2a:eb:9f:03:67:2d:5d:15:00: c4:38:69:21:9a:4c:dc:78:51:09:65:91:b5:fd:c4: 8e:84:e0:e5:40:27:9c:22:6c:5a:78:b0:77:78:b4: 61:bb:6e:a8:3c:8d:3f:8e:cf:7f:0b:df:8d:d7:71: 51:0a:9a:a7:e4:22:c2:d4:d0:6e:38:08:aa:35:0b: ad:7b:5b:ce:a3:d2:b3:2a:66:f8:99:c0:18:20:7c: 44:3c:58:b2:c9:ff:f8:83:80:75:bc:5c:09:df:9e: d1:99:91:82:33:80:37:ef:26:42:2b:34:45:fd:3a: 27:83:0e:a7:1b:12:73:8b:50:e5:a1:c9:5b:61:dc: 0d:90:91:f4:8d:42:36:7a:f4:5b:77:36:01:8d:f0: c1:0a:cd:ec:cb:c9:55:9d:f4:95:9d:7b:44:44:31: 00:a8:6f:7f:72:d7:98:49:c7:3f:44:b3:fc:8b:d2: 8f:28:05:02:11:be:e9:cf:eb:f9:89:27:20:97:c3: cd:fd:e4:5e:41:5c:1d:fd:d6:9f:7d:43:77:7e:a6: 52:88:23:d5:80:42:76:39:dc:d7:de:31:d2:74:b9: ce:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:5D:59:FB:90:1F:C1:E7:86:7B:10:4E:4D:22:BC:A1:58:01:62:8C X509v3 Authority Key Identifier: keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/HV1Z-5AfweeGexBOTSK8oVgBYow.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.107.39.0/24 Signature Algorithm: sha256WithRSAEncryption 91:59:36:35:a9:9f:ee:09:76:24:0e:20:ae:b0:e7:28:93:5e: 6a:0d:da:c1:10:5c:a5:15:5c:33:c6:83:c8:2e:ed:4f:fd:69: 46:50:ea:9b:41:2c:ff:90:ea:f9:2a:e1:72:e5:b3:d2:78:cd: ea:8a:ff:a4:3f:6c:e5:7b:e9:3c:62:36:88:c8:3c:de:05:10: a3:ef:78:d7:28:85:e3:a0:f8:fa:13:10:d4:14:86:9d:4a:b3: 8a:84:09:03:7c:52:fd:ca:f5:00:98:a2:d9:88:18:7c:cb:60: 4e:71:f4:b5:a6:e8:f9:0e:ff:cb:37:37:b3:47:bc:00:12:10: 9c:a4:e6:e8:e7:d9:f0:86:5e:25:c7:f3:3e:19:dd:8e:82:5c: e6:da:e9:81:88:49:d7:f4:6b:1c:22:27:ea:4b:45:26:47:0f: 27:62:ef:b8:56:56:e1:38:a3:4f:16:6a:9b:be:df:5f:4d:69: ed:76:81:d4:57:7b:d2:e9:d1:64:b7:9d:73:1d:81:a3:3f:ff: 68:3d:bd:2f:3e:ef:75:a3:be:57:bc:57:2c:62:58:ea:95:9f: 26:48:46:3c:d9:03:a1:cb:35:34:d1:c8:33:e9:7d:5a:0c:6d: 5d:39:b7:59:82:91:6b:66:dd:5a:35:62:66:90:80:7d:e4:f2: 11:1f:02:17 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqb+Uu8ZzsYBV5LnvOHzdK8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwNzc1ZDk0NzFiODVkOTYzZmVmNmQyODM1OTBlMmQ5NDJk ZDVjMjEwHhcNMjUxMTE5MTE1NjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZDVkNTlmYjkwMWZjMWU3ODY3YjEwNGU0ZDIyYmNhMTU4MDE2MjhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01FVfX3gO2sjVl41bYutNvzVSa7I 0iw4wQnFZmEScwmQgEUq658DZy1dFQDEOGkhmkzceFEJZZG1/cSOhODlQCecImxa eLB3eLRhu26oPI0/js9/C9+N13FRCpqn5CLC1NBuOAiqNQute1vOo9KzKmb4mcAY IHxEPFiyyf/4g4B1vFwJ357RmZGCM4A37yZCKzRF/Tongw6nGxJzi1DloclbYdwN kJH0jUI2evRbdzYBjfDBCs3sy8lVnfSVnXtERDEAqG9/cteYScc/RLP8i9KPKAUC Eb7pz+v5iScgl8PN/eReQVwd/daffUN3fqZSiCPVgEJ2OdzX3jHSdLnO/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB1dWfuQH8HnhnsQTk0ivKFYAWKMMB8GA1UdIwQY MBaAFAB3XZRxuF2WP+9tKDWQ4tlC3VwhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQt NzZiMzNlNGNlODIxLzEvSFYxWi01QWZ3ZWVHZXhCT1RTSzhvVmdCWW93LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQtNzZiMzNlNGNlODIx LzEvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV2snMA0G CSqGSIb3DQEBCwUAA4IBAQCRWTY1qZ/uCXYkDiCusOcok15qDdrBEFylFVwzxoPI Lu1P/WlGUOqbQSz/kOr5KuFy5bPSeM3qiv+kP2zle+k8YjaIyDzeBRCj73jXKIXj oPj6ExDUFIadSrOKhAkDfFL9yvUAmKLZiBh8y2BOcfS1puj5Dv/LNzezR7wAEhCc pObo59nwhl4lx/M+Gd2Oglzm2umBiEnX9GscIifqS0UmRw8nYu+4VlbhOKNPFmqb vt9fTWntdoHUV3vS6dFkt51zHYGjP/9oPb0vPu91o75XvFcsYljqlZ8mSEY82QOh yzU00cgz6X1aDG1dObdZgpFrZt1aNWJmkIB95PIRHwIX -----END CERTIFICATE-----Generated at Sat Dec 6 12:27:29 2025 by rpki-client