This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/HLvhD2MuHgkhYXDg-SuIbLYOHgk.roa File: HLvhD2MuHgkhYXDg-SuIbLYOHgk.roa (raw, json) Hash identifier: yEbv0Qvw7CzFL55jFQMv8xIMnfPjOGOXgDPO0YO14o8= Subject key identifier: 1C:BB:E1:0F:63:2E:1E:09:21:61:70:E0:F9:2B:88:6C:B6:0E:1E:09 Certificate issuer: /CN=ec5ada0dc900a13c83b70ac3f587fb8c2e1df030 Certificate serial: 019B277EA43398131B0B3B7C6D78EC0FE066 Authority key identifier: EC:5A:DA:0D:C9:00:A1:3C:83:B7:0A:C3:F5:87:FB:8C:2E:1D:F0:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7FraDckAoTyDtwrD9Yf7jC4d8DA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/HLvhD2MuHgkhYXDg-SuIbLYOHgk.roa Signing time: Tue 16 Dec 2025 14:09:29 +0000 ROA not before: Tue 16 Dec 2025 14:09:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 51580 IP address blocks: 31.193.16.0/20 maxlen: 24 46.17.152.0/21 maxlen: 24 80.66.208.0/20 maxlen: 24 89.105.76.0/22 maxlen: 24 89.105.76.0/23 maxlen: 23 89.105.78.0/23 maxlen: 23 109.238.16.0/20 maxlen: 24 141.105.152.0/21 maxlen: 24 145.14.160.0/19 maxlen: 24 178.218.148.0/22 maxlen: 24 178.250.64.0/21 maxlen: 24 185.5.180.0/22 maxlen: 24 185.55.88.0/22 maxlen: 24 185.121.148.0/22 maxlen: 24 185.139.28.0/22 maxlen: 24 185.180.180.0/23 maxlen: 24 194.110.56.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/7FraDckAoTyDtwrD9Yf7jC4d8DA.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/7FraDckAoTyDtwrD9Yf7jC4d8DA.mft rsync://rpki.ripe.net/repository/DEFAULT/7FraDckAoTyDtwrD9Yf7jC4d8DA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 05:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:7e:a4:33:98:13:1b:0b:3b:7c:6d:78:ec:0f:e0:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec5ada0dc900a13c83b70ac3f587fb8c2e1df030 Validity Not Before: Dec 16 14:09:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1cbbe10f632e1e09216170e0f92b886cb60e1e09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:29:a2:c9:e5:da:bc:de:2b:cd:0b:4e:d4:16: a9:18:75:32:0a:08:09:c8:17:f9:83:6a:71:72:89: 7b:fe:2b:8b:52:7a:49:e4:b4:63:7b:8b:64:a2:5a: 9e:49:96:78:ed:5d:13:f8:4b:0f:c0:c4:48:81:6c: 02:6a:ba:6d:09:04:b2:d3:e2:da:14:12:be:9f:af: 42:38:dd:27:10:ba:21:da:f1:d4:05:5e:32:9d:df: b7:e8:36:ff:60:5b:ed:c0:2c:80:2a:5b:83:64:be: e9:0c:52:6a:59:b5:0d:8f:9d:a0:0d:43:6c:49:49: e5:c8:f5:3d:ab:22:a8:b6:46:b0:5d:c6:91:94:42: 47:d5:6e:44:87:1b:48:ef:97:e6:08:b6:ca:fc:70: ce:ee:51:6a:5b:f4:1e:8a:6b:a3:ed:c3:b8:a9:39: cb:d8:bd:5d:eb:e2:94:99:eb:96:a1:f9:97:eb:33: 08:3c:5d:be:d0:d4:27:8f:d8:ea:41:4b:d2:a3:f3: 2b:8b:64:6b:84:5d:77:a4:e8:a0:29:29:6b:11:ec: 00:cd:f6:e3:25:23:4c:e4:5d:5b:46:6b:99:cd:ff: e6:c5:20:c5:dd:30:e4:b4:99:84:9b:6b:a4:b0:02: 59:01:43:46:27:da:f5:47:d4:87:fc:b0:3b:98:f5: 88:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:BB:E1:0F:63:2E:1E:09:21:61:70:E0:F9:2B:88:6C:B6:0E:1E:09 X509v3 Authority Key Identifier: keyid:EC:5A:DA:0D:C9:00:A1:3C:83:B7:0A:C3:F5:87:FB:8C:2E:1D:F0:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7FraDckAoTyDtwrD9Yf7jC4d8DA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/HLvhD2MuHgkhYXDg-SuIbLYOHgk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/7FraDckAoTyDtwrD9Yf7jC4d8DA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.193.16.0/20 46.17.152.0/21 80.66.208.0/20 89.105.76.0/22 109.238.16.0/20 141.105.152.0/21 145.14.160.0/19 178.218.148.0/22 178.250.64.0/21 185.5.180.0/22 185.55.88.0/22 185.121.148.0/22 185.139.28.0/22 185.180.180.0/23 194.110.56.0/22 Signature Algorithm: sha256WithRSAEncryption 20:98:2a:fe:d1:f0:37:43:a3:a5:db:9b:f8:b5:69:21:b7:6e: 7f:c0:2a:60:64:22:1c:49:0f:cf:97:28:db:42:d6:29:86:09: 31:ca:30:b4:bc:1e:04:59:40:f0:20:8a:7c:97:00:d3:93:e5: e6:fc:3d:da:e2:d9:4c:19:8d:5b:8f:c5:19:33:a8:d8:b5:ec: e4:fb:b5:03:09:9c:c1:66:21:48:df:76:c7:1f:49:70:f8:6d: ff:d7:09:38:49:bc:0e:c9:97:d7:18:77:03:7c:41:17:db:e1: b0:9d:ad:9d:3a:3d:47:74:c4:84:4d:d3:45:cf:d7:bf:c4:b5: 20:b2:51:1c:dc:e7:fe:6d:e0:40:fb:98:f8:8f:b7:a9:0e:0c: e6:f2:e4:f5:f6:51:b1:73:cd:4a:bc:cc:af:ee:e9:d5:80:f9: 38:76:4b:8f:8a:86:ba:cf:a2:86:22:e3:c4:43:1d:79:05:32: 8a:9f:4d:1d:d9:fb:2b:13:5f:f6:32:07:b0:25:18:2a:7a:d1: 1d:a1:de:18:18:fc:20:2b:41:bc:51:d9:83:e0:7d:1b:30:1f: 1e:d9:3d:be:44:8f:b5:88:5e:c2:f7:7c:1f:38:b8:26:a3:cb: 07:6a:26:6d:0c:f2:1b:c9:15:c5:e0:31:55:18:f4:f4:8c:81: 6b:49:16:31 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgISAZsnfqQzmBMbCzt8bXjsD+BmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNWFkYTBkYzkwMGExM2M4M2I3MGFjM2Y1ODdmYjhjMmUx ZGYwMzAwHhcNMjUxMjE2MTQwOTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxY2JiZTEwZjYzMmUxZTA5MjE2MTcwZTBmOTJiODg2Y2I2MGUxZTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySmiyeXavN4rzQtO1BapGHUyCggJ yBf5g2pxcol7/iuLUnpJ5LRje4tkolqeSZZ47V0T+EsPwMRIgWwCarptCQSy0+La FBK+n69CON0nELoh2vHUBV4ynd+36Db/YFvtwCyAKluDZL7pDFJqWbUNj52gDUNs SUnlyPU9qyKotkawXcaRlEJH1W5EhxtI75fmCLbK/HDO7lFqW/Qeimuj7cO4qTnL 2L1d6+KUmeuWofmX6zMIPF2+0NQnj9jqQUvSo/Mri2RrhF13pOigKSlrEewAzfbj JSNM5F1bRmuZzf/mxSDF3TDktJmEm2uksAJZAUNGJ9r1R9SH/LA7mPWI3wIDAQAB o4ICXTCCAlkwHQYDVR0OBBYEFBy74Q9jLh4JIWFw4PkriGy2Dh4JMB8GA1UdIwQY MBaAFOxa2g3JAKE8g7cKw/WH+4wuHfAwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0ZyYURja0FvVHlEdHdyRDlZZjdqQzRkOERBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9jYTczNGItNWEwYi00YTAzLTgxMzEt Y2ZlZmVhZWU4NjVlLzEvSEx2aEQyTXVIZ2toWVhEZy1TdUliTFlPSGdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9jYTczNGItNWEwYi00YTAzLTgxMzEtY2ZlZmVhZWU4NjVl LzEvN0ZyYURja0FvVHlEdHdyRDlZZjdqQzRkOERBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHMGCCsGAQUFBwEHAQH/BGQwYjBgBAIAATBaAwQEH8EQAwQD LhGYAwQEUELQAwQCWWlMAwQEbe4QAwQDjWmYAwQFkQ6gAwQCstqUAwQDsvpAAwQC uQW0AwQCuTdYAwQCuXmUAwQCuYscAwQBubS0AwQCwm44MA0GCSqGSIb3DQEBCwUA A4IBAQAgmCr+0fA3Q6Ol25v4tWkht25/wCpgZCIcSQ/PlyjbQtYphgkxyjC0vB4E WUDwIIp8lwDTk+Xm/D3a4tlMGY1bj8UZM6jYtezk+7UDCZzBZiFI33bHH0lw+G3/ 1wk4SbwOyZfXGHcDfEEX2+Gwna2dOj1HdMSETdNFz9e/xLUgslEc3Of+beBA+5j4 j7epDgzm8uT19lGxc81KvMyv7unVgPk4dkuPioa6z6KGIuPEQx15BTKKn00d2fsr E1/2MgewJRgqetEdod4YGPwgK0G8UdmD4H0bMB8e2T2+RI+1iF7C93wfOLgmo8sH aiZtDPIbyRXF4DFVGPT0jIFrSRYx -----END CERTIFICATE-----Generated at Fri Dec 19 09:25:26 2025 by rpki-client