This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/HbeQRoxPpDHCAC-nA9_3-JrPAeM.roa File: HbeQRoxPpDHCAC-nA9_3-JrPAeM.roa (raw, json) Hash identifier: G4sQzJXdS6O2EylSl79XWh9ZSYXUAtP0Wp4/fBYIKYg= Subject key identifier: 1D:B7:90:46:8C:4F:A4:31:C2:00:2F:A7:03:DF:F7:F8:9A:CF:01:E3 Certificate issuer: /CN=4dd1b2587490ad061cb207176bdeec81a531588c Certificate serial: 019A7E1CA4E635AE090565B87BD64593966B Authority key identifier: 4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/HbeQRoxPpDHCAC-nA9_3-JrPAeM.roa Signing time: Thu 13 Nov 2025 16:46:37 +0000 ROA not before: Thu 13 Nov 2025 16:46:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205113 IP address blocks: 66.110.88.0/21 maxlen: 24 80.231.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 06:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7e:1c:a4:e6:35:ae:09:05:65:b8:7b:d6:45:93:96:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd1b2587490ad061cb207176bdeec81a531588c Validity Not Before: Nov 13 16:46:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1db790468c4fa431c2002fa703dff7f89acf01e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:1a:04:67:ad:7f:1a:12:7a:ed:29:65:82:02: ca:53:27:1c:8a:71:ab:f8:65:d1:04:b2:c5:38:21: 2c:88:40:fc:38:c8:2d:25:79:01:3a:a5:f6:ea:03: a2:ac:b5:9f:91:66:47:eb:46:f5:8a:82:ef:0a:b0: 92:86:15:13:63:cc:50:2e:c2:e4:58:4e:32:a0:05: 71:61:f2:00:7f:fb:a7:e4:d0:c5:d4:1e:ce:e4:81: 26:48:19:2a:70:bf:b9:20:4d:56:6a:ba:af:30:1f: e2:8c:cd:be:ec:a4:1c:1c:a3:df:13:25:ab:ef:06: 67:e9:b8:7f:d5:ec:07:ff:ba:60:41:c9:17:2c:b6: f3:ec:6e:d9:b7:10:33:4c:98:80:b8:d9:b2:1d:9c: bd:2c:97:06:15:e9:52:cf:86:08:d6:b2:80:01:ac: a2:98:a3:ed:15:e4:e5:e4:08:e6:f7:77:3e:e3:c1: 4a:51:50:09:b6:60:5d:69:4e:64:8d:01:8c:a3:83: 29:c6:c2:ec:c8:93:4f:43:ac:11:9e:81:7b:b4:c0: b0:5b:b0:5a:39:4c:7b:e0:e3:1a:b1:d0:db:48:94: b7:9e:ed:98:a3:37:6d:e9:35:56:a3:46:31:e9:e9: 44:50:b3:bf:53:e2:e6:43:7b:04:29:a2:6a:48:8e: 5b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:B7:90:46:8C:4F:A4:31:C2:00:2F:A7:03:DF:F7:F8:9A:CF:01:E3 X509v3 Authority Key Identifier: keyid:4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/HbeQRoxPpDHCAC-nA9_3-JrPAeM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 66.110.88.0/21 80.231.188.0/22 Signature Algorithm: sha256WithRSAEncryption 13:b8:24:a0:6f:0f:bd:d0:d9:8f:ac:d2:90:8b:12:7a:d9:05: b1:4a:c6:ec:71:d4:bd:42:02:af:c2:88:98:fb:13:f8:3a:5b: e1:c1:9b:8d:cd:39:5a:2f:88:9d:f8:0b:19:e3:84:87:6e:82: b4:a1:65:6a:f3:d7:45:c4:7b:0f:d7:bf:a3:c3:07:48:8e:79: 1a:a9:8d:99:8f:26:7d:99:b6:b3:5c:77:1c:d2:f0:a0:03:89: 57:78:69:3e:b8:10:9f:4b:b2:9e:15:e3:43:ba:fc:70:b5:5b: e6:cd:fe:1f:9c:74:11:e3:37:5c:6c:00:a2:ca:b6:3a:cc:bf: 0a:f6:31:5d:72:0f:f8:62:ce:12:52:fb:54:6f:75:8b:a2:7d: 69:21:f9:c0:4c:58:be:75:fb:54:c8:7d:28:70:94:14:b3:0b: 9f:b4:80:1f:6e:3b:73:98:78:26:0d:15:41:25:8a:1c:17:01: 32:34:17:55:11:5d:a1:00:7d:b1:40:cf:40:b9:a8:ac:b2:6e: 83:33:23:de:7d:d5:6d:54:04:c1:55:30:a4:0a:4f:c3:0e:52: 59:c7:24:ae:9c:2e:cc:b1:4b:f4:e2:84:da:0f:23:c8:1c:46: ad:df:17:fa:52:c3:f2:26:6b:df:4f:ca:f0:57:72:59:87:15: c8:a5:6d:aa -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZp+HKTmNa4JBWW4e9ZFk5ZrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDFiMjU4NzQ5MGFkMDYxY2IyMDcxNzZiZGVlYzgxYTUz MTU4OGMwHhcNMjUxMTEzMTY0NjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZGI3OTA0NjhjNGZhNDMxYzIwMDJmYTcwM2RmZjdmODlhY2YwMWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hoEZ61/GhJ67SllggLKUyccinGr +GXRBLLFOCEsiED8OMgtJXkBOqX26gOirLWfkWZH60b1ioLvCrCShhUTY8xQLsLk WE4yoAVxYfIAf/un5NDF1B7O5IEmSBkqcL+5IE1WarqvMB/ijM2+7KQcHKPfEyWr 7wZn6bh/1ewH/7pgQckXLLbz7G7ZtxAzTJiAuNmyHZy9LJcGFelSz4YI1rKAAayi mKPtFeTl5Ajm93c+48FKUVAJtmBdaU5kjQGMo4MpxsLsyJNPQ6wRnoF7tMCwW7Ba OUx74OMasdDbSJS3nu2Yozdt6TVWo0Yx6elEULO/U+LmQ3sEKaJqSI5brwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFB23kEaMT6QxwgAvpwPf9/iazwHjMB8GA1UdIwQY MBaAFE3Rslh0kK0GHLIHF2ve7IGlMViMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRHeVdIU1FyUVljc2djWGE5N3NnYVV4V0l3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8wMWQyYWYtMWYyMS00YjgwLWI2NjUt ZGI0NjNjNWZiMGI0LzEvSGJlUVJveFBwREhDQUMtbkE5XzMtSnJQQWVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8wMWQyYWYtMWYyMS00YjgwLWI2NjUtZGI0NjNjNWZiMGI0 LzEvVGRHeVdIU1FyUVljc2djWGE5N3NnYVV4V0l3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDQm5YAwQC UOe8MA0GCSqGSIb3DQEBCwUAA4IBAQATuCSgbw+90NmPrNKQixJ62QWxSsbscdS9 QgKvwoiY+xP4OlvhwZuNzTlaL4id+AsZ44SHboK0oWVq89dFxHsP17+jwwdIjnka qY2ZjyZ9mbazXHcc0vCgA4lXeGk+uBCfS7KeFeNDuvxwtVvmzf4fnHQR4zdcbACi yrY6zL8K9jFdcg/4Ys4SUvtUb3WLon1pIfnATFi+dftUyH0ocJQUswuftIAfbjtz mHgmDRVBJYocFwEyNBdVEV2hAH2xQM9Auaissm6DMyPefdVtVATBVTCkCk/DDlJZ xySunC7MsUv04oTaDyPIHEat3xf6UsPyJmvfT8rwV3JZhxXIpW2q -----END CERTIFICATE-----Generated at Fri Dec 12 09:23:35 2025 by rpki-client