This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/h4euwiZkkIu6VGQesk_ZDlXxDdQ.roa File: h4euwiZkkIu6VGQesk_ZDlXxDdQ.roa (raw, json) Hash identifier: P9A3LEAkOvVgqjVbsOD0f3NWIUzPCtO5tPEJ9DsAMyA= Subject key identifier: 87:87:AE:C2:26:64:90:8B:BA:54:64:1E:B2:4F:D9:0E:55:F1:0D:D4 Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Certificate serial: 019AF8FB4C3B22CF24D7579ECA62F7D19C0F Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/h4euwiZkkIu6VGQesk_ZDlXxDdQ.roa Signing time: Sun 07 Dec 2025 13:23:29 +0000 ROA not before: Sun 07 Dec 2025 13:23:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 204914 IP address blocks: 2.56.165.0/24 maxlen: 24 77.83.242.0/24 maxlen: 24 89.190.158.0/24 maxlen: 24 185.234.75.0/24 maxlen: 24 194.56.226.0/24 maxlen: 24 212.107.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f8:fb:4c:3b:22:cf:24:d7:57:9e:ca:62:f7:d1:9c:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Validity Not Before: Dec 7 13:23:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8787aec22664908bba54641eb24fd90e55f10dd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ac:5b:7f:37:99:98:a7:c1:c8:74:8e:be:52: 1e:c1:41:03:26:c6:a7:db:f0:3c:ff:65:38:9b:62: 91:3f:e8:b0:70:ee:1d:10:26:41:29:9b:05:a6:c4: 84:6a:d5:01:a2:a2:79:44:61:f4:39:f9:8f:a4:2f: fa:17:25:0f:7b:74:93:d5:2f:ae:4b:f5:4a:9e:b4: 56:d4:d8:48:93:e2:3a:51:4e:9d:27:b8:16:a0:73: 62:bc:e2:d6:80:04:9f:f4:e8:af:ea:70:62:15:24: 24:fd:77:b7:b0:ca:d4:45:b3:83:b6:d8:98:ee:e9: 98:9f:54:27:55:89:f1:fd:9a:34:cf:3d:88:54:da: 86:c3:c6:46:1d:8a:ce:d4:ad:02:6b:b7:78:1a:29: bd:f9:62:39:67:58:26:ac:82:84:d2:69:6f:cf:0b: 6d:d2:b0:6e:81:8f:d4:b5:97:61:18:01:24:94:d6: eb:b6:49:b2:1a:5e:4a:42:4b:99:10:0a:cf:6e:3c: 94:30:7d:25:79:df:fb:5a:ad:98:b7:9a:00:8c:cc: 67:60:04:1e:9d:3f:bc:fa:38:b3:27:cf:6a:68:d3: de:33:4a:12:9c:54:b1:0c:1a:85:c2:e3:56:19:fb: 0d:e1:85:8f:9d:f8:e8:33:c5:a8:83:dd:1d:9e:b7: 91:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:87:AE:C2:26:64:90:8B:BA:54:64:1E:B2:4F:D9:0E:55:F1:0D:D4 X509v3 Authority Key Identifier: keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/h4euwiZkkIu6VGQesk_ZDlXxDdQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.165.0/24 77.83.242.0/24 89.190.158.0/24 185.234.75.0/24 194.56.226.0/24 212.107.14.0/24 Signature Algorithm: sha256WithRSAEncryption d2:7c:9b:73:0a:cf:51:1b:d4:f3:5f:6c:69:8f:8b:59:c0:98: 25:67:4b:c2:2d:ee:9d:a0:94:73:cd:0d:56:c3:8d:d4:0d:94: 67:2d:2d:ac:97:5d:be:1e:b5:79:44:18:7c:47:f1:3b:50:49: 8e:7d:21:8a:57:ec:ed:f1:81:2b:f0:ba:e5:7f:0a:0e:5d:0e: fe:43:41:31:ad:80:3d:2d:52:69:0e:ec:a0:4e:77:4b:a8:0d: 42:4b:81:5c:0f:8d:2d:f0:9e:df:b1:96:c1:1a:c8:c2:01:6d: 2f:8c:41:06:19:44:8a:76:da:7b:ed:94:a6:f8:2f:da:f2:21: 9c:08:60:f7:5e:ad:e1:b4:49:7c:11:8a:fc:97:40:10:d0:7e: 5d:7e:3e:dd:7a:19:b5:6b:44:52:3d:68:33:f9:ef:da:6a:ed: a7:97:e1:cf:4b:ee:e8:61:02:f1:69:9d:0c:f0:f8:8e:a8:bc: 5a:21:26:20:91:d4:a6:12:6d:e0:d9:06:10:04:6c:5e:2e:41: b4:a2:8b:1f:17:ce:d4:c9:b6:b5:b0:e5:4a:3c:08:6b:b3:ab: dc:14:bd:cd:68:b2:22:f7:d0:d8:04:42:b9:5b:9d:d7:29:1a: 1c:7e:d9:ca:13:2b:ab:10:e7:15:4a:d1:84:73:39:e8:78:c4: 29:b4:df:78 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZr4+0w7Is8k11eeymL30ZwPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz YjUwMzQwHhcNMjUxMjA3MTMyMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Nzg3YWVjMjI2NjQ5MDhiYmE1NDY0MWViMjRmZDkwZTU1ZjEwZGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqxbfzeZmKfByHSOvlIewUEDJsan 2/A8/2U4m2KRP+iwcO4dECZBKZsFpsSEatUBoqJ5RGH0OfmPpC/6FyUPe3ST1S+u S/VKnrRW1NhIk+I6UU6dJ7gWoHNivOLWgASf9Oiv6nBiFSQk/Xe3sMrURbODttiY 7umYn1QnVYnx/Zo0zz2IVNqGw8ZGHYrO1K0Ca7d4Gim9+WI5Z1gmrIKE0mlvzwtt 0rBugY/UtZdhGAEklNbrtkmyGl5KQkuZEArPbjyUMH0led/7Wq2Yt5oAjMxnYAQe nT+8+jizJ89qaNPeM0oSnFSxDBqFwuNWGfsN4YWPnfjoM8Wog90dnreReQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFIeHrsImZJCLulRkHrJP2Q5V8Q3UMB8GA1UdIwQY MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It Mzk0YWNkMjFmMzliLzEvaDRldXdpWmtrSXU2VkdRZXNrX1pEbFh4RGRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAAjilAwQA TVPyAwQAWb6eAwQAuepLAwQAwjjiAwQA1GsOMA0GCSqGSIb3DQEBCwUAA4IBAQDS fJtzCs9RG9TzX2xpj4tZwJglZ0vCLe6doJRzzQ1Ww43UDZRnLS2sl12+HrV5RBh8 R/E7UEmOfSGKV+zt8YEr8LrlfwoOXQ7+Q0ExrYA9LVJpDuygTndLqA1CS4FcD40t 8J7fsZbBGsjCAW0vjEEGGUSKdtp77ZSm+C/a8iGcCGD3Xq3htEl8EYr8l0AQ0H5d fj7dehm1a0RSPWgz+e/aau2nl+HPS+7oYQLxaZ0M8PiOqLxaISYgkdSmEm3g2QYQ BGxeLkG0oosfF87Uyba1sOVKPAhrs6vcFL3NaLIi99DYBEK5W53XKRocftnKEyur EOcVStGEcznoeMQptN94 -----END CERTIFICATE-----Generated at Fri Dec 12 13:38:25 2025 by rpki-client