This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/hgHxEdlUSkxpUUxJ2utNrv_T0og.roa File: hgHxEdlUSkxpUUxJ2utNrv_T0og.roa (raw, json) Hash identifier: BUIKHjexc15uAccqXGwIgkPuaHaUnszdblVHgmXKBwI= Subject key identifier: 86:01:F1:11:D9:54:4A:4C:69:51:4C:49:DA:EB:4D:AE:FF:D3:D2:88 Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019A2A305A37250E46CCEAD749F30A287759 Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/hgHxEdlUSkxpUUxJ2utNrv_T0og.roa Signing time: Tue 28 Oct 2025 09:40:03 +0000 ROA not before: Tue 28 Oct 2025 09:40:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 22427 IP address blocks: 178.253.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:2a:30:5a:37:25:0e:46:cc:ea:d7:49:f3:0a:28:77:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Oct 28 09:40:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8601f111d9544a4c69514c49daeb4daeffd3d288 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:dd:4c:e8:5d:e5:10:9b:7b:69:d3:96:07:d8: bb:2b:c6:0b:c4:00:ff:24:2a:23:a3:87:e8:06:6f: 6e:34:b7:27:49:ec:c9:fa:be:de:e7:3b:af:67:d8: ae:63:43:0f:9c:b3:21:94:21:16:87:f4:a8:ee:1e: 33:a4:75:2d:f6:fb:f2:85:db:b7:88:03:be:2a:5b: 8d:e9:13:ee:4e:f6:b9:db:1a:ea:ee:5c:14:54:44: e2:97:95:5f:7d:f0:d3:21:a3:ac:99:77:1e:29:65: 02:2e:55:39:c2:2a:1c:50:d1:18:78:bd:02:32:b2: a5:97:a7:2f:14:a0:bc:9b:44:28:6a:9d:6c:90:d6: e0:75:12:44:98:39:d5:bf:74:42:b1:a6:10:da:57: a6:28:20:2e:5c:a3:f1:58:20:42:12:cf:b3:73:94: 6b:24:04:e9:53:11:0a:ff:8b:5d:31:42:2c:3a:ce: 90:8a:c4:06:b8:88:0b:6d:ef:ee:33:fb:fa:59:df: 56:fc:92:81:64:51:1d:84:b8:5d:b4:ef:3a:f2:f7: 10:1d:e2:60:c4:46:4b:8f:a4:ad:94:b6:ab:62:63: aa:20:43:51:c6:30:8a:67:ff:81:33:12:65:f5:df: 3b:a6:f5:b2:55:df:c6:71:b6:43:1a:a5:b0:04:66: 4f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:01:F1:11:D9:54:4A:4C:69:51:4C:49:DA:EB:4D:AE:FF:D3:D2:88 X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/hgHxEdlUSkxpUUxJ2utNrv_T0og.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.253.229.0/24 Signature Algorithm: sha256WithRSAEncryption 37:f3:59:df:c1:77:a1:80:87:01:c4:8e:0f:d0:14:23:f2:26: 80:1d:a9:29:c4:d2:bc:9c:27:b3:5c:1d:0d:57:e6:ed:86:86: 9e:f9:d0:25:04:51:d2:58:9e:8c:36:6d:87:a9:7d:dd:70:5d: 77:75:c9:9d:ed:f1:8d:fa:f4:c5:28:75:64:e3:de:e7:9c:17: c5:3b:ef:47:ba:7c:e2:87:49:48:ec:c1:8b:c5:0d:be:c6:33: b0:c2:09:85:c1:16:11:81:24:5b:fe:a3:1a:34:e7:d3:ee:71: 86:10:21:5c:7d:42:ed:eb:fc:d9:fb:b5:2e:fc:ae:50:38:1c: 68:c9:ca:80:5f:df:9b:f3:61:4f:05:1a:4e:67:08:b9:aa:39: 50:ca:14:6d:d8:e9:6f:b8:89:84:85:be:b8:87:6e:c1:c9:0f: dd:0a:f6:f4:26:56:0f:09:be:5f:5b:c0:0d:1d:ba:85:4d:c2: 39:a9:8f:2d:eb:6e:cf:97:d0:72:bb:61:a6:5d:a1:68:6e:53: a7:d1:c8:00:5e:30:45:2d:0e:31:d0:2e:82:f2:d8:69:55:44: df:e2:41:73:2d:f4:36:d0:28:76:db:88:61:3f:4e:a0:aa:53: 8b:c8:92:7a:71:0a:72:ba:e2:eb:ae:d7:7c:77:87:8e:c1:ae: e5:0d:e4:50 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZoqMFo3JQ5GzOrXSfMKKHdZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjUxMDI4MDk0MDAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NjAxZjExMWQ5NTQ0YTRjNjk1MTRjNDlkYWViNGRhZWZmZDNkMjg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApt1M6F3lEJt7adOWB9i7K8YLxAD/ JCojo4foBm9uNLcnSezJ+r7e5zuvZ9iuY0MPnLMhlCEWh/So7h4zpHUt9vvyhdu3 iAO+KluN6RPuTva52xrq7lwUVETil5VfffDTIaOsmXceKWUCLlU5wiocUNEYeL0C MrKll6cvFKC8m0Qoap1skNbgdRJEmDnVv3RCsaYQ2lemKCAuXKPxWCBCEs+zc5Rr JATpUxEK/4tdMUIsOs6QisQGuIgLbe/uM/v6Wd9W/JKBZFEdhLhdtO868vcQHeJg xEZLj6StlLarYmOqIENRxjCKZ/+BMxJl9d87pvWyVd/GcbZDGqWwBGZPTwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIYB8RHZVEpMaVFMSdrrTa7/09KIMB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEvaGdIeEVkbFVTa3hwVVV4SjJ1dE5ydl9UMG9nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsv3lMA0G CSqGSIb3DQEBCwUAA4IBAQA381nfwXehgIcBxI4P0BQj8iaAHakpxNK8nCezXB0N V+bthoae+dAlBFHSWJ6MNm2HqX3dcF13dcmd7fGN+vTFKHVk497nnBfFO+9Hunzi h0lI7MGLxQ2+xjOwwgmFwRYRgSRb/qMaNOfT7nGGECFcfULt6/zZ+7Uu/K5QOBxo ycqAX9+b82FPBRpOZwi5qjlQyhRt2OlvuImEhb64h27ByQ/dCvb0JlYPCb5fW8AN HbqFTcI5qY8t627Pl9Byu2GmXaFoblOn0cgAXjBFLQ4x0C6C8thpVUTf4kFzLfQ2 0Ch224hhP06gqlOLyJJ6cQpyuuLrrtd8d4eOwa7lDeRQ -----END CERTIFICATE-----Generated at Fri Dec 5 18:11:56 2025 by rpki-client