This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/HhrLKxq_9UhdyBfdJAmRzYkDeMo.roa File: HhrLKxq_9UhdyBfdJAmRzYkDeMo.roa (raw, json) Hash identifier: KUnWa29rPwH/NqnRPQIA4bZ+/tciU5Hf82XsQ0qlG64= Subject key identifier: 1E:1A:CB:2B:1A:BF:F5:48:5D:C8:17:DD:24:09:91:CD:89:03:78:CA Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430 Certificate serial: 019A7322E3ED7E148A8894A841E4579FD8B4 Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/HhrLKxq_9UhdyBfdJAmRzYkDeMo.roa Signing time: Tue 11 Nov 2025 13:37:37 +0000 ROA not before: Tue 11 Nov 2025 13:37:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 44889 IP address blocks: 46.38.129.0/24 maxlen: 24 46.38.131.0/24 maxlen: 24 46.38.139.0/24 maxlen: 24 185.24.150.0/24 maxlen: 24 185.29.220.0/24 maxlen: 24 185.29.221.0/24 maxlen: 24 212.16.64.0/19 maxlen: 24 212.16.68.0/24 maxlen: 24 212.16.72.0/24 maxlen: 25 212.16.86.0/23 maxlen: 23 212.16.89.0/24 maxlen: 24 212.80.0.0/19 maxlen: 24 212.80.2.0/24 maxlen: 24 212.80.12.0/24 maxlen: 24 212.80.13.0/24 maxlen: 24 212.80.14.0/24 maxlen: 24 212.80.15.0/24 maxlen: 24 2a00:7d80::/29 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:73:22:e3:ed:7e:14:8a:88:94:a8:41:e4:57:9f:d8:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430 Validity Not Before: Nov 11 13:37:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1e1acb2b1abff5485dc817dd240991cd890378ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d3:4b:f2:7d:5f:19:7a:97:c8:a5:6c:dd:a7: ef:4b:30:12:88:c6:28:66:75:47:7a:75:ff:95:84: f6:64:ff:65:35:15:ca:b7:7f:66:64:ae:1a:e8:4b: ca:6c:c8:9e:0a:5c:ce:33:6f:c7:32:72:38:68:31: a9:d8:26:e3:d9:2f:2c:6b:00:22:75:ba:9d:96:6e: 50:63:78:82:23:50:14:e4:86:6e:b2:13:5e:ab:00: 7c:59:61:db:53:5a:df:41:69:26:22:d7:76:67:a2: 96:0a:17:f5:9e:e5:12:92:9d:a0:5b:45:b8:a6:6b: 13:f9:a5:ed:b9:6a:05:f8:c2:eb:50:52:d8:20:7f: f5:56:f8:bb:eb:23:49:39:ad:2e:e7:af:04:8f:ef: 85:d4:97:15:ad:58:95:7e:14:ea:13:27:de:21:cc: eb:42:bf:ed:a8:d2:eb:75:3b:a7:3e:98:4c:54:54: 78:77:44:28:1f:7d:77:ce:6d:52:74:f9:58:41:22: b1:94:30:26:c6:af:1e:7d:fd:b0:d9:87:4d:5b:dd: 87:ca:72:9e:16:a0:79:39:28:45:a3:46:df:30:71: 97:80:54:2e:1b:92:7d:36:81:c7:fc:2c:17:ea:e4: aa:9f:44:d7:f2:ae:ee:9c:06:1f:54:3a:54:6b:09: da:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:1A:CB:2B:1A:BF:F5:48:5D:C8:17:DD:24:09:91:CD:89:03:78:CA X509v3 Authority Key Identifier: keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/HhrLKxq_9UhdyBfdJAmRzYkDeMo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.38.129.0/24 46.38.131.0/24 46.38.139.0/24 185.24.150.0/24 185.29.220.0/23 212.16.64.0/19 212.80.0.0/19 IPv6: 2a00:7d80::/29 Signature Algorithm: sha256WithRSAEncryption b2:36:be:c5:96:ce:3d:94:39:30:1d:34:94:8c:49:0f:ea:c8: c0:db:3c:ec:73:b1:5a:7a:8c:3d:c8:d1:7e:59:83:6b:d3:a7: 56:09:16:de:c8:bf:0e:92:26:d0:3c:02:11:e3:92:1d:58:af: 00:63:84:f6:ad:2e:08:0e:5f:6b:6c:f7:14:9b:9b:f6:74:37: 8b:2f:aa:ff:d5:5f:fe:04:e1:35:c3:e2:f9:96:b8:09:4f:da: 25:34:1a:0e:27:98:18:4c:95:2d:d3:24:90:ca:1a:97:20:ab: 57:f3:34:87:3f:21:ee:d8:ce:e5:6a:f1:3a:32:70:5f:12:f8: eb:59:92:24:97:e1:84:d7:2d:fc:37:4d:3d:89:e5:5a:89:4e: 88:53:42:78:ed:29:82:78:66:77:bb:2d:12:7f:f8:44:ee:3d: da:0f:12:82:a1:f0:c0:c0:48:0f:80:e6:43:31:18:7d:be:c3: 2d:4e:66:64:c8:55:6b:2a:1a:5e:5b:69:3e:9a:97:c8:f3:9e: be:4d:ab:f6:cf:06:dd:94:7b:e7:90:68:de:a5:be:e3:34:ea: 1d:92:38:83:d0:29:46:d3:69:c0:13:37:6b:01:bb:dc:03:88: 6c:12:68:d0:22:19:63:64:e4:35:ae:4a:29:24:a4:be:b8:0b: a9:87:d4:32 -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgISAZpzIuPtfhSKiJSoQeRXn9i0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3Mjk0NWY1NzEwMzE1M2EwNzg1NGU3NGUyMjdmMmFlYzFj NWY0MzAwHhcNMjUxMTExMTMzNzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZTFhY2IyYjFhYmZmNTQ4NWRjODE3ZGQyNDA5OTFjZDg5MDM3OGNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9NL8n1fGXqXyKVs3afvSzASiMYo ZnVHenX/lYT2ZP9lNRXKt39mZK4a6EvKbMieClzOM2/HMnI4aDGp2Cbj2S8sawAi dbqdlm5QY3iCI1AU5IZushNeqwB8WWHbU1rfQWkmItd2Z6KWChf1nuUSkp2gW0W4 pmsT+aXtuWoF+MLrUFLYIH/1Vvi76yNJOa0u568Ej++F1JcVrViVfhTqEyfeIczr Qr/tqNLrdTunPphMVFR4d0QoH313zm1SdPlYQSKxlDAmxq8eff2w2YdNW92HynKe FqB5OShFo0bfMHGXgFQuG5J9NoHH/CwX6uSqn0TX8q7unAYfVDpUawnaXQIDAQAB o4ICPDCCAjgwHQYDVR0OBBYEFB4ayysav/VIXcgX3SQJkc2JA3jKMB8GA1UdIwQY MBaAFLcpRfVxAxU6B4VOdOIn8q7BxfQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEt MmEwOWNjNTNhODA1LzEvSGhyTEt4cV85VWhkeUJmZEpBbVJ6WWtEZU1vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEtMmEwOWNjNTNhODA1 LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAwBAIAATAqAwQALiaBAwQA LiaDAwQALiaLAwQAuRiWAwQBuR3cAwQF1BBAAwQF1FAAMA0EAgACMAcDBQMqAH2A MA0GCSqGSIb3DQEBCwUAA4IBAQCyNr7Fls49lDkwHTSUjEkP6sjA2zzsc7Faeow9 yNF+WYNr06dWCRbeyL8OkibQPAIR45IdWK8AY4T2rS4IDl9rbPcUm5v2dDeLL6r/ 1V/+BOE1w+L5lrgJT9olNBoOJ5gYTJUt0ySQyhqXIKtX8zSHPyHu2M7lavE6MnBf EvjrWZIkl+GE1y38N009ieVaiU6IU0J47SmCeGZ3uy0Sf/hE7j3aDxKCofDAwEgP gOZDMRh9vsMtTmZkyFVrKhpeW2k+mpfI856+Tav2zwbdlHvnkGjepb7jNOodkjiD 0ClG02nAEzdrAbvcA4hsEmjQIhljZOQ1rkopJKS+uAuph9Qy -----END CERTIFICATE-----Generated at Sat Dec 6 16:51:38 2025 by rpki-client