This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/hcNQgtq4B8n5IjypUmSIWBB5z4Y.roa File: hcNQgtq4B8n5IjypUmSIWBB5z4Y.roa (raw, json) Hash identifier: vGZLGeEL2sQ8puNILMJmPcSyv6tDcAr0IKPEBpE8T9A= Subject key identifier: 85:C3:50:82:DA:B8:07:C9:F9:22:3C:A9:52:64:88:58:10:79:CF:86 Certificate issuer: /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339 Certificate serial: 019B32DB458D053957998A390B6D54316C9C Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/hcNQgtq4B8n5IjypUmSIWBB5z4Y.roa Signing time: Thu 18 Dec 2025 19:06:29 +0000 ROA not before: Thu 18 Dec 2025 19:06:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215238 IP address blocks: 91.108.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:06:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:db:45:8d:05:39:57:99:8a:39:0b:6d:54:31:6c:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339 Validity Not Before: Dec 18 19:06:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=85c35082dab807c9f9223ca9526488581079cf86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d1:45:49:de:0f:4b:a3:54:c9:23:bf:cc:8e: d4:51:d0:f0:4a:14:92:a8:f4:4f:5f:3e:26:ea:a5: c9:87:0d:09:73:22:6d:80:fa:aa:8f:1b:ae:96:e7: 0c:c0:ae:bb:7c:b5:a4:3e:71:77:34:03:d6:76:be: 82:8f:a1:14:ad:0c:21:41:40:e9:84:5a:bf:a7:24: 17:90:65:6d:c8:c5:e8:bb:61:6b:64:cc:1b:10:a0: 8e:1e:3e:bc:22:aa:d6:69:13:8f:3b:52:8f:eb:ec: 27:3b:31:33:5a:0c:3d:2e:89:4f:43:95:91:71:8b: bb:10:c7:f1:1f:82:8a:11:eb:bc:b6:0c:e1:f2:39: 23:17:d8:f5:eb:73:ad:3d:34:52:0d:e6:57:79:65: 19:8e:eb:e5:d3:ee:37:4c:07:cf:9b:ee:c9:6f:93: 47:34:b0:85:cd:38:ba:d1:48:5d:16:0a:77:c1:5b: e2:02:2f:99:b5:8d:9a:9a:06:d7:8d:62:09:1b:7a: 85:54:ee:e5:64:77:6d:90:68:5b:17:52:63:7a:f5: bd:04:9b:fc:4a:2b:20:91:d6:91:62:e0:f7:66:e9: c4:51:03:4a:95:45:0e:ec:20:e1:4b:db:6a:6e:98: 6d:de:f8:7f:cc:7e:8a:06:e3:1f:34:1f:4d:2d:a0: 4a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:C3:50:82:DA:B8:07:C9:F9:22:3C:A9:52:64:88:58:10:79:CF:86 X509v3 Authority Key Identifier: keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/hcNQgtq4B8n5IjypUmSIWBB5z4Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.108.237.0/24 Signature Algorithm: sha256WithRSAEncryption 69:03:80:10:69:70:96:30:3a:e6:ae:2d:0c:d1:a5:bb:7b:38: c6:bd:09:46:96:3f:08:86:00:8b:2e:29:d6:c8:cf:49:2c:d2: 1f:aa:73:89:2c:80:29:8f:5c:22:45:37:2c:0d:b8:46:df:4f: 74:94:f8:dc:9c:12:ed:20:8c:53:89:d7:08:77:f3:29:74:dd: 22:07:e1:27:ad:cc:00:55:7a:ab:13:ac:4e:2b:37:19:df:4e: 34:38:3e:d6:2f:f4:69:d4:f8:a9:a8:52:34:e7:e2:b0:18:29: 4f:02:a0:61:f4:e0:ac:47:51:ba:ac:d0:65:30:f0:85:c4:4e: 3c:f8:65:c1:71:a9:0f:2f:aa:00:1d:f2:8e:67:f5:07:84:bd: c6:0b:83:b7:f1:d0:3a:da:d0:92:6f:1e:16:85:b7:d0:ac:2c: ae:c3:94:a4:4e:71:5a:26:9e:6a:e6:df:36:e6:35:9b:f5:ba: 28:4a:a2:ff:a9:80:fb:31:c5:cc:ca:00:ec:13:15:25:38:00: 98:c0:72:25:7d:61:75:11:1e:19:ff:e1:e7:a4:87:9e:85:4b: da:15:62:90:e1:9b:4f:20:25:37:2b:ec:df:43:04:df:fb:93: ef:f9:ac:66:2f:88:19:8d:a1:32:7c:f1:bf:88:5b:b5:d8:6c: 5a:f0:d1:ae -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsy20WNBTlXmYo5C21UMWycMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZWU0NTQyNmUxMmU1MGZlMzBlOGZmYzM5ZTA0NDg1ZDhm NzMzMzkwHhcNMjUxMjE4MTkwNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NWMzNTA4MmRhYjgwN2M5ZjkyMjNjYTk1MjY0ODg1ODEwNzljZjg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9FFSd4PS6NUySO/zI7UUdDwShSS qPRPXz4m6qXJhw0JcyJtgPqqjxuulucMwK67fLWkPnF3NAPWdr6Cj6EUrQwhQUDp hFq/pyQXkGVtyMXou2FrZMwbEKCOHj68IqrWaROPO1KP6+wnOzEzWgw9LolPQ5WR cYu7EMfxH4KKEeu8tgzh8jkjF9j163OtPTRSDeZXeWUZjuvl0+43TAfPm+7Jb5NH NLCFzTi60UhdFgp3wVviAi+ZtY2amgbXjWIJG3qFVO7lZHdtkGhbF1JjevW9BJv8 SisgkdaRYuD3ZunEUQNKlUUO7CDhS9tqbpht3vh/zH6KBuMfNB9NLaBKowIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIXDUILauAfJ+SI8qVJkiFgQec+GMB8GA1UdIwQY MBaAFMLuRUJuEuUP4w6P/DngRIXY9zM5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3U1RlFtNFM1UV9qRG9fOE9lQkVoZGozTXprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC83MGFhMzItOTYwNy00ZGI3LThmMWUt ZGE3NTQzMGIxNmY2LzEvaGNOUWd0cTRCOG41SWp5cFVtU0lXQkI1ejRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC83MGFhMzItOTYwNy00ZGI3LThmMWUtZGE3NTQzMGIxNmY2 LzEvd3U1RlFtNFM1UV9qRG9fOE9lQkVoZGozTXprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW2ztMA0G CSqGSIb3DQEBCwUAA4IBAQBpA4AQaXCWMDrmri0M0aW7ezjGvQlGlj8IhgCLLinW yM9JLNIfqnOJLIApj1wiRTcsDbhG3090lPjcnBLtIIxTidcId/MpdN0iB+EnrcwA VXqrE6xOKzcZ3040OD7WL/Rp1PipqFI05+KwGClPAqBh9OCsR1G6rNBlMPCFxE48 +GXBcakPL6oAHfKOZ/UHhL3GC4O38dA62tCSbx4WhbfQrCyuw5SkTnFaJp5q5t82 5jWb9booSqL/qYD7McXMygDsExUlOACYwHIlfWF1ER4Z/+HnpIeehUvaFWKQ4ZtP ICU3K+zfQwTf+5Pv+axmL4gZjaEyfPG/iFu12Gxa8NGu -----END CERTIFICATE-----Generated at Fri Dec 19 05:05:23 2025 by rpki-client