This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/_Hg3RiRRbCVFdEVQSVANmXe1AZM.roa File: _Hg3RiRRbCVFdEVQSVANmXe1AZM.roa (raw, json) Hash identifier: craDG3qBGDlj43lq+QC1MGx/jTT9DqlZJhNew+U6jZ8= Subject key identifier: FC:78:37:46:24:51:6C:25:45:74:45:50:49:50:0D:99:77:B5:01:93 Certificate issuer: /CN=cd108c225f2478cd4230179890d07284be1636cd Certificate serial: 019AB9A6EA6C2974DE8DD5EEFE3D3A6464FF Authority key identifier: CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/_Hg3RiRRbCVFdEVQSVANmXe1AZM.roa Signing time: Tue 25 Nov 2025 06:15:15 +0000 ROA not before: Tue 25 Nov 2025 06:15:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 138195 IP address blocks: 194.126.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b9:a6:ea:6c:29:74:de:8d:d5:ee:fe:3d:3a:64:64:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd108c225f2478cd4230179890d07284be1636cd Validity Not Before: Nov 25 06:15:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fc78374624516c254574455049500d9977b50193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6d:8c:5a:03:e4:a5:45:f7:6c:58:7d:d5:49: 54:af:2e:0c:b1:2a:b6:2c:e5:23:4b:b9:cb:e2:2f: 0b:7f:28:b1:57:aa:5e:44:e8:dc:f0:87:c3:6a:22: 36:dd:2c:4c:b1:61:d7:f6:87:ea:70:b3:db:56:7c: 39:f0:94:f4:45:1f:30:51:62:88:5d:67:cc:d0:fd: 7d:6b:ff:ff:8c:7d:08:48:17:ac:e6:16:1f:f6:80: f0:6e:a3:40:9e:b3:ee:dc:99:46:8c:cd:4d:a9:12: 12:9c:51:4c:02:51:c6:6b:96:f0:b1:f9:34:bc:5f: 3f:e0:8e:2c:17:08:e6:f0:c2:54:42:e4:24:31:df: 97:f9:ff:7f:93:87:95:2e:8d:a3:ce:c0:18:c4:f9: 0e:e0:0c:3f:81:f6:c1:5e:38:3d:dd:eb:e6:83:ee: 70:8c:2f:95:04:da:5e:f0:b7:c9:c8:ac:14:fa:51: aa:e0:7d:ed:11:6d:24:62:c1:16:93:c6:d7:e1:7d: bb:9c:f6:70:d9:c0:a7:c3:6a:f9:73:73:a4:c4:4b: ba:69:be:b1:21:f3:b8:6a:08:5b:a7:da:16:c5:45: 2c:c2:23:e5:dc:58:6a:5a:78:1c:e1:f3:87:57:ad: 2e:07:d3:f3:76:6c:4f:5c:ba:9e:b2:f6:c1:9f:dd: 22:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:78:37:46:24:51:6C:25:45:74:45:50:49:50:0D:99:77:B5:01:93 X509v3 Authority Key Identifier: keyid:CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/_Hg3RiRRbCVFdEVQSVANmXe1AZM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.126.215.0/24 Signature Algorithm: sha256WithRSAEncryption 16:a4:8a:8f:a7:24:37:26:86:79:e2:29:53:1f:e1:6a:11:5e: af:3e:04:a7:15:21:c8:0d:2f:1d:6c:28:0e:60:a1:f0:e6:e8: 40:e3:1c:03:e8:eb:41:a8:3c:a1:62:9a:05:be:16:be:47:1d: c3:c2:3b:0c:52:e4:68:a8:93:73:b9:47:31:c9:ca:f4:f1:7a: 2e:e6:59:a1:09:5d:d9:ac:f6:1f:aa:05:8c:e1:50:1e:69:d4: cc:a5:f6:dc:ea:71:6c:f9:8f:14:8d:28:7b:03:28:44:7c:72: 8b:1f:24:ad:57:37:33:ab:f1:5b:a9:49:0d:4f:b7:51:26:fd: 8c:c2:9f:32:8f:9a:7c:36:a6:d8:63:cb:74:37:e9:0f:38:f3: 06:40:a4:65:91:58:dd:9c:ef:cd:d4:51:b2:97:0f:9b:f2:d3: 73:19:be:25:e3:0a:51:d2:ca:2e:74:e3:b6:63:74:87:1b:bf: b2:0b:fb:72:05:8a:de:e4:d6:bd:a9:b3:55:4a:d8:88:26:9e: f3:b9:fd:66:ed:0b:ca:ea:92:d4:e5:ad:b2:f1:ec:9b:52:b3: 6f:4d:04:13:e1:12:61:7c:be:2c:d1:90:a2:f9:14:2d:c7:64: 9f:87:79:71:11:90:0c:95:76:d2:17:09:bf:33:d6:2f:8a:1c: 14:3c:74:2c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZq5pupsKXTejdXu/j06ZGT/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMTA4YzIyNWYyNDc4Y2Q0MjMwMTc5ODkwZDA3Mjg0YmUx NjM2Y2QwHhcNMjUxMTI1MDYxNTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYzc4Mzc0NjI0NTE2YzI1NDU3NDQ1NTA0OTUwMGQ5OTc3YjUwMTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsG2MWgPkpUX3bFh91UlUry4MsSq2 LOUjS7nL4i8LfyixV6peROjc8IfDaiI23SxMsWHX9ofqcLPbVnw58JT0RR8wUWKI XWfM0P19a///jH0ISBes5hYf9oDwbqNAnrPu3JlGjM1NqRISnFFMAlHGa5bwsfk0 vF8/4I4sFwjm8MJUQuQkMd+X+f9/k4eVLo2jzsAYxPkO4Aw/gfbBXjg93evmg+5w jC+VBNpe8LfJyKwU+lGq4H3tEW0kYsEWk8bX4X27nPZw2cCnw2r5c3OkxEu6ab6x IfO4aghbp9oWxUUswiPl3FhqWngc4fOHV60uB9PzdmxPXLqesvbBn90iNwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPx4N0YkUWwlRXRFUElQDZl3tQGTMB8GA1UdIwQY MBaAFM0QjCJfJHjNQjAXmJDQcoS+FjbNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQt YWU1MDI3MzY4MWE3LzEvX0hnM1JpUlJiQ1ZGZEVWUVNWQU5tWGUxQVpNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQtYWU1MDI3MzY4MWE3 LzEvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwn7XMA0G CSqGSIb3DQEBCwUAA4IBAQAWpIqPpyQ3JoZ54ilTH+FqEV6vPgSnFSHIDS8dbCgO YKHw5uhA4xwD6OtBqDyhYpoFvha+Rx3DwjsMUuRoqJNzuUcxycr08Xou5lmhCV3Z rPYfqgWM4VAeadTMpfbc6nFs+Y8UjSh7AyhEfHKLHyStVzczq/FbqUkNT7dRJv2M wp8yj5p8NqbYY8t0N+kPOPMGQKRlkVjdnO/N1FGylw+b8tNzGb4l4wpR0soudOO2 Y3SHG7+yC/tyBYre5Na9qbNVStiIJp7zuf1m7QvK6pLU5a2y8eybUrNvTQQT4RJh fL4s0ZCi+RQtx2Sfh3lxEZAMlXbSFwm/M9YvihwUPHQs -----END CERTIFICATE-----Generated at Sun Dec 7 05:34:54 2025 by rpki-client