This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/HlCGo8yoPblLdm7h3C_uNbeaTIk.roa File: HlCGo8yoPblLdm7h3C_uNbeaTIk.roa (raw, json) Hash identifier: QDnH5cXbZxGi5hvbhXRK9KiYyC+qT+Di75CPyY8Dw0c= Subject key identifier: 1E:50:86:A3:CC:A8:3D:B9:4B:76:6E:E1:DC:2F:EE:35:B7:9A:4C:89 Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Certificate serial: 019ACFDCDAAFFED641308A677E865FD039A5 Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/HlCGo8yoPblLdm7h3C_uNbeaTIk.roa Signing time: Sat 29 Nov 2025 13:45:48 +0000 ROA not before: Sat 29 Nov 2025 13:45:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 202799 IP address blocks: 212.193.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 08:40:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:cf:dc:da:af:fe:d6:41:30:8a:67:7e:86:5f:d0:39:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Validity Not Before: Nov 29 13:45:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1e5086a3cca83db94b766ee1dc2fee35b79a4c89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:60:07:76:6c:c4:0d:c9:61:37:8a:81:e6:d9: bd:cd:82:40:8d:53:8f:14:90:52:c8:6a:a6:43:f4: a2:42:5b:66:de:01:06:81:8f:a5:a6:35:e6:be:2d: 98:53:2b:21:e1:52:ed:e5:62:36:f7:a3:a1:90:ad: c0:45:25:e9:67:16:d6:0e:13:d6:d7:2a:9e:2e:f1: fa:ca:31:13:16:3f:16:57:de:10:ce:d1:93:25:6d: 2f:3f:ae:67:15:42:d4:51:39:bb:c3:1d:14:f7:34: a4:c0:43:f5:bf:94:b5:34:48:a5:ef:f8:9d:c8:a5: 5c:dc:79:c6:6d:00:d1:38:a2:d9:29:2a:eb:70:5e: d8:14:2f:62:a5:5e:0a:1b:7c:96:d4:f8:04:74:6b: 5e:4d:15:9e:2f:56:98:67:ef:fd:50:c5:73:57:f0: 1b:fe:35:bf:31:03:cb:b4:98:ec:b2:aa:44:c3:f5: 6e:03:9f:b2:4d:43:91:2a:70:c9:9e:df:12:f4:dc: 0f:57:dd:d7:61:2e:86:a2:b7:49:34:a5:f4:1b:d9: 9e:d9:99:25:e5:8c:10:94:ff:c9:81:c8:7c:6b:d1: d2:3c:9e:fe:4d:cb:19:47:56:c4:4e:3d:0b:0c:e1: 09:7a:50:6d:70:17:c8:40:6b:25:92:3b:9b:14:58: ea:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:50:86:A3:CC:A8:3D:B9:4B:76:6E:E1:DC:2F:EE:35:B7:9A:4C:89 X509v3 Authority Key Identifier: keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/HlCGo8yoPblLdm7h3C_uNbeaTIk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.193.31.0/24 Signature Algorithm: sha256WithRSAEncryption 31:fd:5e:bf:18:6c:04:ba:f0:1d:28:56:13:60:32:0e:f6:69: bb:fd:7e:68:31:1f:83:4e:7a:38:66:cb:91:a8:fc:ee:3d:83: a2:08:b7:61:63:2d:67:4f:c0:04:1b:b2:59:98:45:54:57:46: 50:53:b0:4a:4c:5e:a8:30:10:8d:a2:b1:9f:d9:ad:a6:e8:fd: 3f:95:0d:29:32:35:82:36:46:f8:28:66:7c:57:bc:6c:9f:92: 22:ac:2d:5a:0d:b8:37:cc:56:c2:25:dd:be:71:57:27:e0:6d: 48:f8:fb:87:ef:88:82:f6:24:af:ad:4a:59:a8:fd:c7:d7:0e: 0a:cf:50:6e:36:d8:69:b4:68:28:c8:44:52:ca:0c:75:72:cc: 94:a6:ae:86:e8:03:ed:fa:d6:2c:65:46:76:5f:3c:c7:e9:95: 25:50:70:75:82:f3:41:a1:24:ac:b5:b6:1b:11:c5:e5:7d:77: ac:86:37:b4:4a:35:1e:0e:36:29:40:84:48:4b:91:45:93:96: d4:81:a7:0b:4e:d2:cf:6c:0a:b0:97:85:d8:87:28:b0:f9:93: 40:37:98:14:0d:42:93:48:d2:ff:3f:b3:0d:27:d7:43:39:ac: 8b:60:08:91:22:bd:ba:66:5f:7d:80:44:4b:15:0d:1a:31:f2: c6:5c:48:ac -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrP3Nqv/tZBMIpnfoZf0DmlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw ZTFhYzcwHhcNMjUxMTI5MTM0NTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZTUwODZhM2NjYTgzZGI5NGI3NjZlZTFkYzJmZWUzNWI3OWE0Yzg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2AHdmzEDclhN4qB5tm9zYJAjVOP FJBSyGqmQ/SiQltm3gEGgY+lpjXmvi2YUysh4VLt5WI296OhkK3ARSXpZxbWDhPW 1yqeLvH6yjETFj8WV94QztGTJW0vP65nFULUUTm7wx0U9zSkwEP1v5S1NEil7/id yKVc3HnGbQDROKLZKSrrcF7YFC9ipV4KG3yW1PgEdGteTRWeL1aYZ+/9UMVzV/Ab /jW/MQPLtJjssqpEw/VuA5+yTUORKnDJnt8S9NwPV93XYS6GordJNKX0G9me2Zkl 5YwQlP/Jgch8a9HSPJ7+TcsZR1bETj0LDOEJelBtcBfIQGslkjubFFjqewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB5QhqPMqD25S3Zu4dwv7jW3mkyJMB8GA1UdIwQY MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt NWE0MjQyOGYxMTQzLzEvSGxDR284eW9QYmxMZG03aDNDX3VOYmVhVElrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1MEfMA0G CSqGSIb3DQEBCwUAA4IBAQAx/V6/GGwEuvAdKFYTYDIO9mm7/X5oMR+DTno4ZsuR qPzuPYOiCLdhYy1nT8AEG7JZmEVUV0ZQU7BKTF6oMBCNorGf2a2m6P0/lQ0pMjWC Nkb4KGZ8V7xsn5IirC1aDbg3zFbCJd2+cVcn4G1I+PuH74iC9iSvrUpZqP3H1w4K z1BuNthptGgoyERSygx1csyUpq6G6APt+tYsZUZ2XzzH6ZUlUHB1gvNBoSSstbYb EcXlfXeshje0SjUeDjYpQIRIS5FFk5bUgacLTtLPbAqwl4XYhyiw+ZNAN5gUDUKT SNL/P7MNJ9dDOayLYAiRIr26Zl99gERLFQ0aMfLGXEis -----END CERTIFICATE-----Generated at Fri Dec 5 16:35:49 2025 by rpki-client