This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/HC_fY3Dyop_teZVfnRrX_P7gNus.roa File: HC_fY3Dyop_teZVfnRrX_P7gNus.roa (raw, json) Hash identifier: iTKUBl0sdpH5manrcdzIFKUjKfF+AxYSgiPXrpbjeTk= Subject key identifier: 1C:2F:DF:63:70:F2:A2:9F:ED:79:95:5F:9D:1A:D7:FC:FE:E0:36:EB Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Certificate serial: 019A711CB40FE657C1A706A3A8DBF7D29F4F Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/HC_fY3Dyop_teZVfnRrX_P7gNus.roa Signing time: Tue 11 Nov 2025 04:11:37 +0000 ROA not before: Tue 11 Nov 2025 04:11:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215620 IP address blocks: 89.45.44.0/24 maxlen: 24 94.177.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:71:1c:b4:0f:e6:57:c1:a7:06:a3:a8:db:f7:d2:9f:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Validity Not Before: Nov 11 04:11:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1c2fdf6370f2a29fed79955f9d1ad7fcfee036eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:cf:57:65:0c:80:33:41:b6:2d:a6:18:0b:7a: 04:c5:72:80:fc:e1:78:4a:ef:8c:c7:c3:5c:fb:ce: 72:83:5a:0e:90:dd:94:6e:f9:95:58:9f:a8:49:65: 67:78:9c:70:cf:cd:6e:bd:26:15:ee:2f:37:7b:1c: 01:0a:e0:88:22:87:ae:56:66:49:8d:db:75:be:36: 89:c9:3b:97:c8:3b:8b:25:6e:dc:37:1a:17:58:64: 40:3c:56:80:85:a5:62:1c:41:ff:22:94:31:f5:5d: 26:4e:23:57:b1:ba:8c:87:71:50:86:0f:83:df:0a: 3b:07:49:18:78:36:d4:d1:a7:97:80:fd:3a:26:9a: a7:5f:84:dc:fe:88:f9:dd:5a:2d:47:32:a2:78:f9: 79:80:6f:20:83:bb:c2:5d:9e:ee:8a:b5:06:67:62: d7:3b:86:6a:4e:2f:7c:c9:43:fb:4e:f7:0b:bd:e5: 22:e1:af:df:df:01:13:1b:69:01:ce:4a:0d:04:42: 8b:1c:1f:f4:e9:db:99:9c:fc:71:0c:10:d5:cb:67: 1d:08:ec:2f:0f:b7:13:be:41:d0:37:83:15:0f:8f: d4:0c:bc:22:c9:8b:65:46:db:3f:c9:c4:0b:2c:9d: a2:03:b5:88:52:33:b5:90:d9:b5:a7:e5:3a:24:09: ac:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:2F:DF:63:70:F2:A2:9F:ED:79:95:5F:9D:1A:D7:FC:FE:E0:36:EB X509v3 Authority Key Identifier: keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/HC_fY3Dyop_teZVfnRrX_P7gNus.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.45.44.0/24 94.177.147.0/24 Signature Algorithm: sha256WithRSAEncryption 90:6f:2f:56:46:f5:a8:d7:93:a5:22:19:b8:f7:17:a9:a0:7c: ab:2e:70:38:7c:57:64:81:e0:93:52:f3:9e:f3:81:d7:0c:2e: b1:67:4c:c3:36:3a:92:ea:3e:ab:0e:f5:ed:7d:c8:7d:ec:0b: f4:e9:1e:f6:99:f3:1b:0b:e8:4b:39:0c:ec:3c:9c:96:21:03: 3b:16:e4:ca:91:07:25:b0:e5:0e:ec:47:b4:1c:b1:8c:5f:cc: d3:34:e4:13:83:53:9f:64:0b:7f:8f:8d:44:0a:c9:dd:25:a8: c2:98:8a:64:72:37:53:09:b7:63:a5:b4:de:aa:37:3e:e8:5a: 58:a6:55:71:fc:20:26:d5:77:2e:e8:26:2b:50:1b:44:e5:48: e7:7d:73:fd:02:45:bf:44:71:1e:9c:94:ec:22:cb:71:91:ab: 46:4b:d2:bd:2a:27:24:c9:60:e4:76:42:c3:37:72:8e:92:a3: 5e:06:1d:a8:e9:7d:fd:3d:fd:08:2a:3d:1e:1d:12:23:45:c6: 88:8a:da:c2:3f:f8:6d:1f:8b:7d:80:e1:de:ea:b4:38:68:7b: ca:f5:72:c5:57:96:d1:5e:21:18:e6:8f:f8:09:5d:e0:9e:2c: 23:45:f1:39:fe:f1:dd:be:55:8d:0c:ab:f4:7e:22:64:0f:fe: 72:e1:e7:ca -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZpxHLQP5lfBpwajqNv30p9PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm Y2ZlZDEwHhcNMjUxMTExMDQxMTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzJmZGY2MzcwZjJhMjlmZWQ3OTk1NWY5ZDFhZDdmY2ZlZTAzNmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyc9XZQyAM0G2LaYYC3oExXKA/OF4 Su+Mx8Nc+85yg1oOkN2UbvmVWJ+oSWVneJxwz81uvSYV7i83exwBCuCIIoeuVmZJ jdt1vjaJyTuXyDuLJW7cNxoXWGRAPFaAhaViHEH/IpQx9V0mTiNXsbqMh3FQhg+D 3wo7B0kYeDbU0aeXgP06JpqnX4Tc/oj53VotRzKiePl5gG8gg7vCXZ7uirUGZ2LX O4ZqTi98yUP7TvcLveUi4a/f3wETG2kBzkoNBEKLHB/06duZnPxxDBDVy2cdCOwv D7cTvkHQN4MVD4/UDLwiyYtlRts/ycQLLJ2iA7WIUjO1kNm1p+U6JAmsgQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBwv32Nw8qKf7XmVX50a1/z+4DbrMB8GA1UdIwQY MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt ZTU4MzlmNDNlNTgzLzEvSENfZlkzRHlvcF90ZVpWZm5SclhfUDdnTnVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWS0sAwQA XrGTMA0GCSqGSIb3DQEBCwUAA4IBAQCQby9WRvWo15OlIhm49xepoHyrLnA4fFdk geCTUvOe84HXDC6xZ0zDNjqS6j6rDvXtfch97Av06R72mfMbC+hLOQzsPJyWIQM7 FuTKkQclsOUO7Ee0HLGMX8zTNOQTg1OfZAt/j41ECsndJajCmIpkcjdTCbdjpbTe qjc+6FpYplVx/CAm1Xcu6CYrUBtE5UjnfXP9AkW/RHEenJTsIstxkatGS9K9Kick yWDkdkLDN3KOkqNeBh2o6X39Pf0IKj0eHRIjRcaIitrCP/htH4t9gOHe6rQ4aHvK 9XLFV5bRXiEY5o/4CV3gniwjRfE5/vHdvlWNDKv0fiJkD/5y4efK -----END CERTIFICATE-----Generated at Fri Dec 5 07:58:51 2025 by rpki-client