This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/5_HiTzihb1teYHeDIst8JXzbL6E.roa File: 5_HiTzihb1teYHeDIst8JXzbL6E.roa (raw, json) Hash identifier: A/Lq96hR5u5Wpz8QIlMyZAYPpO5/KMij5Ih2zMyuoxA= Subject key identifier: E7:F1:E2:4F:38:A1:6F:5B:5E:60:77:83:22:CB:7C:25:7C:DB:2F:A1 Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94 Certificate serial: 019AC407C96CAA317211AADBD32FE5E5C735 Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/5_HiTzihb1teYHeDIst8JXzbL6E.roa Signing time: Thu 27 Nov 2025 06:37:15 +0000 ROA not before: Thu 27 Nov 2025 06:37:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 30058 IP address blocks: 95.155.132.0/24 maxlen: 24 95.155.144.0/24 maxlen: 24 95.155.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 06:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c4:07:c9:6c:aa:31:72:11:aa:db:d3:2f:e5:e5:c7:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94 Validity Not Before: Nov 27 06:37:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e7f1e24f38a16f5b5e60778322cb7c257cdb2fa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:62:3f:98:48:cc:7b:e3:67:1c:79:ee:cd:c7: 14:78:aa:f8:d2:8d:75:db:02:0c:b8:ef:2f:f1:b1: 27:04:cc:2f:59:c4:72:a7:12:7c:18:62:e9:c9:5a: 05:0e:30:ed:3a:3a:d1:cc:77:46:a7:bd:04:b5:fd: 0a:b7:63:ea:db:18:80:b7:19:df:34:a4:9c:48:a8: bd:6f:50:0c:58:fa:fd:13:7e:1f:44:7e:ab:26:ef: 76:3d:1a:1b:24:88:4a:3d:fe:e8:02:c3:9f:7d:6d: 32:e0:76:7b:70:5f:dc:e6:4d:7f:ab:4b:df:13:d3: 7f:c1:76:98:a7:99:25:92:ad:99:73:ce:e4:71:14: 54:07:75:ea:b8:2c:02:94:37:d6:b1:5c:25:44:3f: 76:cc:b7:09:71:9a:a6:7c:93:57:df:bc:aa:5b:08: c7:df:ed:c1:6a:93:d7:be:16:4f:57:48:ba:c8:81: 75:61:0c:12:e3:6a:61:c2:02:0c:22:e5:1d:77:f8: 8c:e4:3c:61:49:b8:c1:c1:5e:0a:f1:4a:eb:49:57: 1f:ac:f5:df:31:4e:22:b1:b8:07:cf:88:7f:27:b7: 65:94:eb:ca:3c:97:db:82:10:9e:cb:b0:ea:96:a7: fd:2c:a6:2c:8f:1b:26:6e:00:d8:3a:9a:bb:a7:01: d0:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:F1:E2:4F:38:A1:6F:5B:5E:60:77:83:22:CB:7C:25:7C:DB:2F:A1 X509v3 Authority Key Identifier: keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/5_HiTzihb1teYHeDIst8JXzbL6E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.155.132.0/24 95.155.144.0/24 95.155.151.0/24 Signature Algorithm: sha256WithRSAEncryption 23:72:dd:c3:63:93:63:40:3d:fc:55:63:56:d0:d2:9e:66:9d: 8f:08:b7:80:95:8b:9d:c3:21:0a:33:c8:1b:84:65:68:89:19: f7:f6:16:07:96:3e:0c:71:76:19:88:60:12:ad:f1:5d:b5:19: 2c:5c:32:37:a3:32:f3:0f:cd:2b:85:e6:c6:bc:78:63:69:ad: f3:45:17:9f:4c:56:df:e0:64:c4:66:c0:7a:ce:65:1c:e6:7a: 05:9e:1d:9a:9d:78:40:91:26:9d:fb:27:f0:23:c4:bf:2f:2b: 34:0b:bc:17:37:48:93:06:85:70:97:51:58:7b:99:e9:bb:ae: 3f:d2:c2:b8:96:3f:b3:bf:33:2a:8d:56:9a:f7:8b:82:94:3b: ed:e9:f9:19:8b:c1:20:5b:cc:f1:4b:71:78:e6:0f:58:41:31: 1b:67:cf:36:3a:69:eb:83:0f:54:17:cd:46:d5:3e:b5:db:05: 4d:a5:77:69:4d:98:42:12:7d:24:df:74:ca:92:e0:27:6e:c2: 76:f7:0e:61:d3:5c:c4:7e:cc:a6:8a:5c:f7:49:ef:57:bc:a5: b8:f7:ca:93:59:38:c9:71:88:5a:26:cf:ce:69:61:91:a0:7a: e6:c6:f6:22:45:46:31:3e:a3:ba:38:c1:3e:cd:8c:c9:99:4f: 6b:2d:5c:f7 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZrEB8lsqjFyEarb0y/l5cc1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2YTI0OWEwZWFjZDhhYmNiZWEwZDgyZWY3MTAxNmQzODZl OGVmOTQwHhcNMjUxMTI3MDYzNzE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlN2YxZTI0ZjM4YTE2ZjViNWU2MDc3ODMyMmNiN2MyNTdjZGIyZmExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2I/mEjMe+NnHHnuzccUeKr40o11 2wIMuO8v8bEnBMwvWcRypxJ8GGLpyVoFDjDtOjrRzHdGp70Etf0Kt2Pq2xiAtxnf NKScSKi9b1AMWPr9E34fRH6rJu92PRobJIhKPf7oAsOffW0y4HZ7cF/c5k1/q0vf E9N/wXaYp5klkq2Zc87kcRRUB3XquCwClDfWsVwlRD92zLcJcZqmfJNX37yqWwjH 3+3BapPXvhZPV0i6yIF1YQwS42phwgIMIuUdd/iM5DxhSbjBwV4K8UrrSVcfrPXf MU4isbgHz4h/J7dllOvKPJfbghCey7Dqlqf9LKYsjxsmbgDYOpq7pwHQnQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFOfx4k84oW9bXmB3gyLLfCV82y+hMB8GA1UdIwQY MBaAFMaiSaDqzYq8vqDYLvcQFtOG6O+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2Ut MjEwNTdkMjI4ZDA1LzEvNV9IaVR6aWhiMXRlWUhlRElzdDhKWHpiTDZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2UtMjEwNTdkMjI4ZDA1 LzEveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAX5uEAwQA X5uQAwQAX5uXMA0GCSqGSIb3DQEBCwUAA4IBAQAjct3DY5NjQD38VWNW0NKeZp2P CLeAlYudwyEKM8gbhGVoiRn39hYHlj4McXYZiGASrfFdtRksXDI3ozLzD80rhebG vHhjaa3zRRefTFbf4GTEZsB6zmUc5noFnh2anXhAkSad+yfwI8S/Lys0C7wXN0iT BoVwl1FYe5npu64/0sK4lj+zvzMqjVaa94uClDvt6fkZi8EgW8zxS3F45g9YQTEb Z882Omnrgw9UF81G1T612wVNpXdpTZhCEn0k33TKkuAnbsJ29w5h01zEfsymilz3 Se9XvKW498qTWTjJcYhaJs/OaWGRoHrmxvYiRUYxPqO6OME+zYzJmU9rLVz3 -----END CERTIFICATE-----Generated at Sat Dec 6 15:38:40 2025 by rpki-client