This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/H_hOQkSql0xe8SzvI1lQZgozg84.roa File: H_hOQkSql0xe8SzvI1lQZgozg84.roa (raw, json) Hash identifier: BYpmoiDjHBHncY51m+5UvYoUmAnZrIME8Cmlf9qM/N4= Subject key identifier: 1F:F8:4E:42:44:AA:97:4C:5E:F1:2C:EF:23:59:50:66:0A:33:83:CE Certificate issuer: /CN=3c361707514c4420ce82bce1bb71995c25171be3 Certificate serial: 019AA6276D2C46215FE3D95EE448629A17C8 Authority key identifier: 3C:36:17:07:51:4C:44:20:CE:82:BC:E1:BB:71:99:5C:25:17:1B:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PDYXB1FMRCDOgrzhu3GZXCUXG-M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/H_hOQkSql0xe8SzvI1lQZgozg84.roa Signing time: Fri 21 Nov 2025 11:23:12 +0000 ROA not before: Fri 21 Nov 2025 11:23:12 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205544 IP address blocks: 82.113.64.0/19 maxlen: 19 2001:1b88::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft rsync://rpki.ripe.net/repository/DEFAULT/PDYXB1FMRCDOgrzhu3GZXCUXG-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a6:27:6d:2c:46:21:5f:e3:d9:5e:e4:48:62:9a:17:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c361707514c4420ce82bce1bb71995c25171be3 Validity Not Before: Nov 21 11:23:12 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1ff84e4244aa974c5ef12cef235950660a3383ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:39:f5:33:ae:aa:d1:c4:3e:ed:78:de:f4:20: 7c:48:61:79:0e:10:36:0f:28:2f:81:31:11:b1:71: 0b:4f:03:51:3d:b2:7b:51:d4:91:f2:3c:30:b0:6c: 15:b4:44:f3:b4:2d:29:92:a1:be:8d:08:bc:a0:32: 9f:d7:17:0a:99:d3:31:93:f8:1c:96:66:db:df:d5: d9:b2:aa:65:b7:83:b1:6e:29:3f:14:06:1e:fd:43: 2a:70:57:18:dc:9c:de:9a:74:b7:5a:0d:b4:ae:6c: 6b:41:76:9d:b2:43:81:8d:74:cc:bf:65:82:1c:96: 5a:27:65:8b:7b:ee:28:a8:62:75:ee:22:bb:2c:82: 35:70:bb:d3:d5:7c:6c:b3:f1:d0:68:61:84:19:b8: eb:d3:7c:73:58:0e:41:a8:b8:f8:c1:5c:7f:aa:fe: 18:c5:e5:1a:a4:be:e7:89:ac:76:65:b1:8e:08:7e: aa:61:43:22:67:55:4d:63:c1:2b:e9:20:5b:ce:68: 0d:92:78:1e:b3:c4:90:0a:1b:cc:c2:4c:9f:f0:87: e3:a4:55:30:80:d0:d3:19:40:e7:46:47:48:03:cf: 71:01:84:f9:56:af:1a:c3:49:ff:02:dd:ae:78:0b: 9b:9f:47:0a:c0:42:3f:81:5c:9e:a9:1d:40:96:38: aa:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:F8:4E:42:44:AA:97:4C:5E:F1:2C:EF:23:59:50:66:0A:33:83:CE X509v3 Authority Key Identifier: keyid:3C:36:17:07:51:4C:44:20:CE:82:BC:E1:BB:71:99:5C:25:17:1B:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PDYXB1FMRCDOgrzhu3GZXCUXG-M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/H_hOQkSql0xe8SzvI1lQZgozg84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.113.64.0/19 IPv6: 2001:1b88::/32 Signature Algorithm: sha256WithRSAEncryption 5f:87:a6:24:fc:51:3f:67:f6:b4:4a:ee:4a:1b:8e:dd:7a:3b: a0:d0:5a:7e:18:95:43:c2:4d:4f:fc:52:4b:a1:00:66:8a:8d: c5:43:7a:6b:18:8c:91:fc:2a:b4:47:15:b4:cd:34:e5:23:5b: de:a7:00:d9:83:71:1b:d0:89:64:fb:d1:74:6c:d1:49:7c:e5: 70:4e:8d:8b:7c:0e:8e:5e:67:28:71:ca:e6:ce:60:17:c1:74: 7a:a8:2e:b2:c4:79:10:98:b2:6a:d7:38:27:f9:5a:63:53:9c: c0:8d:1e:c4:1a:3e:2d:7f:32:78:99:bf:6c:13:9e:46:70:14: c2:d6:ec:cb:59:52:18:3b:f9:5b:3e:bc:84:3c:9c:19:ca:30: 96:1b:2f:a1:ab:8b:a0:fa:6f:a5:7c:6c:68:11:f6:d1:9c:06: 59:94:51:ea:62:0c:f3:3b:65:64:8b:9a:9c:d6:1f:b8:60:81: 84:a5:68:28:21:81:5b:99:79:bc:ae:d1:f9:9a:a4:6d:57:68: 8c:50:db:e4:48:a8:8a:1e:7f:af:e5:9e:ff:b1:99:f8:61:1b: dd:7c:8a:22:fd:fc:2b:fa:be:e4:62:ea:2c:dd:98:a6:7f:e3: aa:7c:ff:63:21:c5:46:27:cd:8a:f6:5b:84:52:27:2c:8d:35: de:35:1f:93 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZqmJ20sRiFf49le5EhimhfIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjMzYxNzA3NTE0YzQ0MjBjZTgyYmNlMWJiNzE5OTVjMjUx NzFiZTMwHhcNMjUxMTIxMTEyMzEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZmY4NGU0MjQ0YWE5NzRjNWVmMTJjZWYyMzU5NTA2NjBhMzM4M2NlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDn1M66q0cQ+7Xje9CB8SGF5DhA2 DygvgTERsXELTwNRPbJ7UdSR8jwwsGwVtETztC0pkqG+jQi8oDKf1xcKmdMxk/gc lmbb39XZsqplt4Oxbik/FAYe/UMqcFcY3JzemnS3Wg20rmxrQXadskOBjXTMv2WC HJZaJ2WLe+4oqGJ17iK7LII1cLvT1Xxss/HQaGGEGbjr03xzWA5BqLj4wVx/qv4Y xeUapL7niax2ZbGOCH6qYUMiZ1VNY8Er6SBbzmgNknges8SQChvMwkyf8IfjpFUw gNDTGUDnRkdIA89xAYT5Vq8aw0n/At2ueAubn0cKwEI/gVyeqR1AljiqHwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFB/4TkJEqpdMXvEs7yNZUGYKM4POMB8GA1UdIwQY MBaAFDw2FwdRTEQgzoK84btxmVwlFxvjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUERZWEIxRk1SQ0RPZ3J6aHUzR1pYQ1VYRy1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9iOGMwOTgtODM4Yy00MjUzLTgyODgt OWI5MzczNTc5NzRkLzEvSF9oT1FrU3FsMHhlOFN6dkkxbFFaZ296Zzg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9iOGMwOTgtODM4Yy00MjUzLTgyODgtOWI5MzczNTc5NzRk LzEvUERZWEIxRk1SQ0RPZ3J6aHUzR1pYQ1VYRy1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQFUnFAMA0E AgACMAcDBQAgARuIMA0GCSqGSIb3DQEBCwUAA4IBAQBfh6Yk/FE/Z/a0Su5KG47d ejug0Fp+GJVDwk1P/FJLoQBmio3FQ3prGIyR/Cq0RxW0zTTlI1vepwDZg3Eb0Ilk +9F0bNFJfOVwTo2LfA6OXmcoccrmzmAXwXR6qC6yxHkQmLJq1zgn+VpjU5zAjR7E Gj4tfzJ4mb9sE55GcBTC1uzLWVIYO/lbPryEPJwZyjCWGy+hq4ug+m+lfGxoEfbR nAZZlFHqYgzzO2Vki5qc1h+4YIGEpWgoIYFbmXm8rtH5mqRtV2iMUNvkSKiKHn+v 5Z7/sZn4YRvdfIoi/fwr+r7kYuos3Zimf+OqfP9jIcVGJ82K9luEUicsjTXeNR+T -----END CERTIFICATE-----Generated at Sat Dec 6 09:22:44 2025 by rpki-client