This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/HIVJoksJXwcHthON17dqrXRRGU8.roa File: HIVJoksJXwcHthON17dqrXRRGU8.roa (raw, json) Hash identifier: tjSkC+5m+7Q5G4ELY3Nmo5sKQ8qJZYONOeYNJNasPBM= Subject key identifier: 1C:85:49:A2:4B:09:5F:07:07:B6:13:8D:D7:B7:6A:AD:74:51:19:4F Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c Certificate serial: 019AD72E04C3844D54F8F181E262A1ADF3D4 Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/HIVJoksJXwcHthON17dqrXRRGU8.roa Signing time: Sun 30 Nov 2025 23:51:48 +0000 ROA not before: Sun 30 Nov 2025 23:51:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9304 IP address blocks: 144.56.13.0/24 maxlen: 24 144.56.23.0/24 maxlen: 24 144.56.36.0/24 maxlen: 24 144.56.38.0/24 maxlen: 24 144.56.76.0/24 maxlen: 24 144.56.93.0/24 maxlen: 24 144.56.95.0/24 maxlen: 24 144.56.97.0/24 maxlen: 24 144.56.98.0/24 maxlen: 24 144.56.99.0/24 maxlen: 24 144.56.100.0/24 maxlen: 24 144.56.101.0/24 maxlen: 24 144.56.103.0/24 maxlen: 24 144.56.106.0/24 maxlen: 24 144.56.108.0/24 maxlen: 24 144.56.114.0/24 maxlen: 24 144.56.115.0/24 maxlen: 24 144.56.116.0/24 maxlen: 24 144.56.117.0/24 maxlen: 24 144.56.118.0/24 maxlen: 24 144.56.119.0/24 maxlen: 24 144.56.120.0/24 maxlen: 24 144.56.121.0/24 maxlen: 24 144.56.122.0/24 maxlen: 24 144.56.124.0/24 maxlen: 24 144.56.125.0/24 maxlen: 24 144.56.126.0/24 maxlen: 24 144.56.127.0/24 maxlen: 24 144.56.128.0/24 maxlen: 24 144.56.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 23:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d7:2e:04:c3:84:4d:54:f8:f1:81:e2:62:a1:ad:f3:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16055801b775e774306321455fd463fbd9273c4c Validity Not Before: Nov 30 23:51:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1c8549a24b095f0707b6138dd7b76aad7451194f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:6d:6e:ad:6b:af:3f:d6:cc:cb:2f:49:67:07: 25:68:6f:99:42:17:a0:7a:bc:47:43:12:21:0d:be: b9:75:9e:02:bb:83:d7:b2:2c:28:8e:1c:e0:70:68: 18:ba:88:ba:83:69:60:dc:b8:dc:2f:da:0b:dd:ae: b1:f5:66:bd:3e:8e:14:64:d3:e1:eb:af:ff:d4:9f: a0:b8:0d:e3:77:21:4f:9c:5c:6c:fd:19:4e:9c:4d: 20:87:35:1a:d4:b9:d4:17:47:6d:7c:b0:1b:a6:31: e9:82:6d:94:6e:05:81:ca:19:96:64:55:5f:0b:29: 57:6f:fd:5a:87:42:f1:33:be:20:00:c8:34:41:63: d9:51:d4:95:49:13:8d:4b:64:92:b5:ec:3d:66:ad: 00:54:ad:04:d1:c3:bb:f5:f2:cd:48:c8:2d:1e:be: d7:d9:d3:f4:f7:10:13:bc:50:de:71:26:ff:c3:e6: 3f:5c:30:34:01:ed:ac:ae:30:13:8e:ed:2e:cb:6e: 5d:8f:c0:20:aa:79:fc:54:6e:26:5b:58:1b:77:25: 20:aa:b7:14:a8:74:71:3b:77:d8:79:86:e6:30:76: a8:a1:14:84:f1:cd:ad:68:a7:70:73:95:f4:a8:5c: 13:83:44:d8:3d:50:e9:e6:98:1e:43:2a:24:5e:9b: 15:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:85:49:A2:4B:09:5F:07:07:B6:13:8D:D7:B7:6A:AD:74:51:19:4F X509v3 Authority Key Identifier: keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/HIVJoksJXwcHthON17dqrXRRGU8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.56.13.0/24 144.56.23.0/24 144.56.36.0/24 144.56.38.0/24 144.56.76.0/24 144.56.93.0/24 144.56.95.0/24 144.56.97.0-144.56.101.255 144.56.103.0/24 144.56.106.0/24 144.56.108.0/24 144.56.114.0-144.56.122.255 144.56.124.0-144.56.129.255 Signature Algorithm: sha256WithRSAEncryption b1:d7:dc:38:07:a0:81:0a:ea:f2:df:c2:6e:98:3b:08:70:35: 61:37:3f:a1:40:72:b1:76:fb:b7:3e:4a:20:1b:bb:63:2e:a4: 0c:b6:66:0b:73:e9:05:6e:81:a5:3f:be:21:67:41:86:a0:4e: e5:5a:69:d8:86:b3:f7:9f:c1:08:88:44:4e:10:de:6b:d7:50: cc:9f:84:7a:bd:d3:03:49:de:db:94:01:c4:b9:5a:18:75:ad: 62:d5:a0:54:cc:a9:97:83:57:6d:cd:04:56:77:cd:80:99:7a: db:e9:f5:05:cd:f5:9f:94:a6:aa:54:58:64:04:2e:26:db:2c: 85:8a:1f:2b:88:43:c6:3e:c5:bf:1b:05:81:e3:bf:3c:b9:bb: bc:57:b5:c3:af:4a:28:b2:e5:1c:17:f3:45:b7:53:b2:ed:b4: 18:41:9f:26:1c:33:6b:32:fb:63:33:5e:6a:c7:4f:9d:12:98: 2a:84:6c:fb:86:25:ed:38:e4:81:e5:19:3f:40:32:ee:9f:cc: 74:fe:69:ba:e4:51:b9:be:44:8b:d7:b4:28:d5:9a:18:7c:29: 2d:f4:01:35:ce:e0:b7:bf:e9:67:d3:af:81:c5:dc:8e:ef:ff: 0a:f4:a7:c4:fd:f2:e0:c7:2f:a2:9b:29:51:c9:1d:c8:7b:9e: 46:c0:a2:5d -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgISAZrXLgTDhE1U+PGB4mKhrfPUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MDU1ODAxYjc3NWU3NzQzMDYzMjE0NTVmZDQ2M2ZiZDky NzNjNGMwHhcNMjUxMTMwMjM1MTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzg1NDlhMjRiMDk1ZjA3MDdiNjEzOGRkN2I3NmFhZDc0NTExOTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5G1urWuvP9bMyy9JZwclaG+ZQheg erxHQxIhDb65dZ4Cu4PXsiwojhzgcGgYuoi6g2lg3LjcL9oL3a6x9Wa9Po4UZNPh 66//1J+guA3jdyFPnFxs/RlOnE0ghzUa1LnUF0dtfLAbpjHpgm2UbgWByhmWZFVf CylXb/1ah0LxM74gAMg0QWPZUdSVSRONS2SStew9Zq0AVK0E0cO79fLNSMgtHr7X 2dP09xATvFDecSb/w+Y/XDA0Ae2srjATju0uy25dj8Agqnn8VG4mW1gbdyUgqrcU qHRxO3fYeYbmMHaooRSE8c2taKdwc5X0qFwTg0TYPVDp5pgeQyokXpsVCwIDAQAB o4ICaTCCAmUwHQYDVR0OBBYEFByFSaJLCV8HB7YTjde3aq10URlPMB8GA1UdIwQY MBaAFBYFWAG3ded0MGMhRV/UY/vZJzxMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgt MTM1NzE3ZWYzODhhLzEvSElWSm9rc0pYd2NIdGhPTjE3ZHFyWFJSR1U4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgtMTM1NzE3ZWYzODhh LzEvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMH8GCCsGAQUFBwEHAQH/BHAwbjBsBAIAATBmAwQAkDgNAwQA kDgXAwQAkDgkAwQAkDgmAwQAkDhMAwQAkDhdAwQAkDhfMAwDBACQOGEDBAGQOGQD BACQOGcDBACQOGoDBACQOGwwDAMEAZA4cgMEAJA4ejAMAwQCkDh8AwQBkDiAMA0G CSqGSIb3DQEBCwUAA4IBAQCx19w4B6CBCury38JumDsIcDVhNz+hQHKxdvu3Pkog G7tjLqQMtmYLc+kFboGlP74hZ0GGoE7lWmnYhrP3n8EIiEROEN5r11DMn4R6vdMD Sd7blAHEuVoYda1i1aBUzKmXg1dtzQRWd82AmXrb6fUFzfWflKaqVFhkBC4m2yyF ih8riEPGPsW/GwWB4788ubu8V7XDr0oosuUcF/NFt1Oy7bQYQZ8mHDNrMvtjM15q x0+dEpgqhGz7hiXtOOSB5Rk/QDLun8x0/mm65FG5vkSL17Qo1ZoYfCkt9AE1zuC3 v+ln06+BxdyO7/8K9KfE/fLgxy+imylRyR3Ie55GwKJd -----END CERTIFICATE-----Generated at Thu Dec 4 04:21:30 2025 by rpki-client