This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/HPF1EF2pEBBCUvpqqjbt704BkAM.roa File: HPF1EF2pEBBCUvpqqjbt704BkAM.roa (raw, json) Hash identifier: DZnBkpIRttGbq0grnZbqytmJZ0D6EWKV+Lm4QWUSros= Subject key identifier: 1C:F1:75:10:5D:A9:10:10:42:52:FA:6A:AA:36:ED:EF:4E:01:90:03 Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b Certificate serial: 019AB98E32F191F190024B6636CF9FE2AF7E Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/HPF1EF2pEBBCUvpqqjbt704BkAM.roa Signing time: Tue 25 Nov 2025 05:48:15 +0000 ROA not before: Tue 25 Nov 2025 05:48:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 26548 IP address blocks: 5.181.170.0/24 maxlen: 24 5.183.252.0/24 maxlen: 24 45.10.167.0/24 maxlen: 24 45.66.208.0/24 maxlen: 24 45.132.184.0/24 maxlen: 24 45.148.124.0/24 maxlen: 24 77.220.192.0/24 maxlen: 24 77.220.193.0/24 maxlen: 24 77.220.194.0/24 maxlen: 24 77.220.195.0/24 maxlen: 24 91.132.198.0/24 maxlen: 24 93.177.118.0/23 maxlen: 24 147.78.180.0/24 maxlen: 24 147.78.182.0/24 maxlen: 24 147.78.183.0/24 maxlen: 24 185.61.217.0/24 maxlen: 24 185.61.218.0/24 maxlen: 24 185.61.219.0/24 maxlen: 24 185.61.221.0/24 maxlen: 24 185.61.222.0/24 maxlen: 24 185.61.223.0/24 maxlen: 24 185.77.220.0/24 maxlen: 24 185.77.221.0/24 maxlen: 24 185.77.222.0/24 maxlen: 24 185.77.223.0/24 maxlen: 24 185.88.100.0/24 maxlen: 24 194.104.8.0/24 maxlen: 24 194.104.11.0/24 maxlen: 24 213.108.0.0/24 maxlen: 24 217.145.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 06:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b9:8e:32:f1:91:f1:90:02:4b:66:36:cf:9f:e2:af:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b Validity Not Before: Nov 25 05:48:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1cf175105da910104252fa6aaa36edef4e019003 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:02:58:ae:35:6f:ee:60:8c:db:ce:c1:e5:5f: 78:fe:35:cc:dd:0d:e3:ea:7b:94:03:e0:69:8b:c0: 90:10:e6:a7:bd:a4:27:5e:63:82:5f:1c:ab:03:93: c9:5b:17:6e:77:e6:89:21:a0:8a:6f:4d:54:e3:cd: c0:6f:8c:1e:43:f6:0d:91:5c:18:06:a7:a6:5a:4b: 1a:f6:d3:2d:da:45:65:59:e8:b2:97:67:da:69:b4: 3e:aa:b6:d5:88:d0:84:1e:64:30:9f:df:04:b4:ef: 06:1d:91:02:fb:61:4e:78:82:6e:01:44:18:5f:22: 7d:5d:f9:d9:49:a4:e9:ef:1e:90:87:2b:3d:28:0a: a4:f1:87:a1:da:24:f8:8c:8d:ee:79:c6:34:02:40: 8e:9b:e5:7d:75:18:d0:5c:c6:4a:a3:aa:a4:0a:fc: a9:b7:35:26:e8:d1:29:2d:89:ac:bb:c1:46:d0:9c: b7:d9:1a:98:c1:de:35:c8:64:a4:49:15:16:48:10: 52:f8:e7:f8:f4:48:59:02:aa:c1:2b:82:dd:a1:7a: da:c1:91:b2:f6:3d:6a:19:68:a4:d7:c7:eb:5c:a6: 23:b6:8d:04:52:75:3c:f1:de:fb:8e:3d:a5:d0:fa: 0e:f2:a8:d5:0f:b2:96:f7:0a:f3:9a:05:93:f2:26: 39:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:F1:75:10:5D:A9:10:10:42:52:FA:6A:AA:36:ED:EF:4E:01:90:03 X509v3 Authority Key Identifier: keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/HPF1EF2pEBBCUvpqqjbt704BkAM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.181.170.0/24 5.183.252.0/24 45.10.167.0/24 45.66.208.0/24 45.132.184.0/24 45.148.124.0/24 77.220.192.0/22 91.132.198.0/24 93.177.118.0/23 147.78.180.0/24 147.78.182.0/23 185.61.217.0-185.61.219.255 185.61.221.0-185.61.223.255 185.77.220.0/22 185.88.100.0/24 194.104.8.0/24 194.104.11.0/24 213.108.0.0/24 217.145.224.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:19:b9:e1:0c:6b:05:c2:78:b8:fd:be:05:dc:45:ac:ff:62: 19:02:41:c7:87:6f:a6:57:d8:23:73:de:72:f2:63:68:fe:03: 83:d6:a9:f4:bf:63:2e:6f:df:43:e4:df:1f:bc:3c:1e:67:f5: 90:fd:29:38:21:5a:52:3d:e9:4e:c6:56:c7:b0:41:ab:bf:1b: 91:74:10:6c:35:e5:ae:30:a6:04:e6:dd:d1:c2:db:05:e9:b1: cb:22:5d:0b:8c:67:df:0c:0e:ae:e3:15:83:24:06:63:83:80: cc:6c:14:88:7b:28:22:55:cf:6b:98:1d:ee:be:0c:75:3e:a7: 2b:e4:7f:38:71:62:85:93:39:03:6a:8e:8a:22:3a:4a:72:6d: 1b:53:ff:4c:7a:22:46:7c:49:cf:9d:17:d6:84:05:8f:00:38: 7f:8a:4e:fc:7f:96:a1:33:17:93:0c:37:7d:b5:55:a4:c3:a5: 25:cb:23:6d:b3:77:fe:9b:ec:ff:1b:f5:c9:6d:b8:15:2d:3e: c9:7c:63:e1:23:a0:9c:e8:87:9b:8f:22:93:cb:3f:82:84:ba: 4c:1b:97:0d:3c:6e:77:fe:2f:6b:f8:24:04:f4:97:2d:50:2a: 35:e3:7a:3d:aa:fe:d6:1a:13:a9:97:96:73:d3:04:6d:63:16: 6f:26:c6:73 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZq5jjLxkfGQAktmNs+f4q9+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhZWUxNWMzM2RlMzU4OTM4ZDY5MDBhMWIzYzE0NDgwYTM4 OWU4NWIwHhcNMjUxMTI1MDU0ODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxY2YxNzUxMDVkYTkxMDEwNDI1MmZhNmFhYTM2ZWRlZjRlMDE5MDAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAJYrjVv7mCM287B5V94/jXM3Q3j 6nuUA+Bpi8CQEOanvaQnXmOCXxyrA5PJWxdud+aJIaCKb01U483Ab4weQ/YNkVwY BqemWksa9tMt2kVlWeiyl2faabQ+qrbViNCEHmQwn98EtO8GHZEC+2FOeIJuAUQY XyJ9XfnZSaTp7x6Qhys9KAqk8Yeh2iT4jI3uecY0AkCOm+V9dRjQXMZKo6qkCvyp tzUm6NEpLYmsu8FG0Jy32RqYwd41yGSkSRUWSBBS+Of49EhZAqrBK4LdoXrawZGy 9j1qGWik18frXKYjto0EUnU88d77jj2l0PoO8qjVD7KW9wrzmgWT8iY50wIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFBzxdRBdqRAQQlL6aqo27e9OAZADMB8GA1UdIwQY MBaAFJruFcM941iTjWkAobPBRICjiehbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjIt NmVlNTM0ZDkyZTUyLzEvSFBGMUVGMnBFQkJDVXZwcXFqYnQ3MDRCa0FNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjItNmVlNTM0ZDkyZTUy LzEvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGfBggrBgEFBQcBBwEB/wSBjzCBjDCBiQQCAAEwgYIDBAAF taoDBAAFt/wDBAAtCqcDBAAtQtADBAAthLgDBAAtlHwDBAJN3MADBABbhMYDBAFd sXYDBACTTrQDBAGTTrYwDAMEALk92QMEArk92DAMAwQAuT3dAwQFuT3AAwQCuU3c AwQAuVhkAwQAwmgIAwQAwmgLAwQA1WwAAwQA2ZHgMA0GCSqGSIb3DQEBCwUAA4IB AQCMGbnhDGsFwni4/b4F3EWs/2IZAkHHh2+mV9gjc95y8mNo/gOD1qn0v2Mub99D 5N8fvDweZ/WQ/Sk4IVpSPelOxlbHsEGrvxuRdBBsNeWuMKYE5t3RwtsF6bHLIl0L jGffDA6u4xWDJAZjg4DMbBSIeygiVc9rmB3uvgx1Pqcr5H84cWKFkzkDao6KIjpK cm0bU/9MeiJGfEnPnRfWhAWPADh/ik78f5ahMxeTDDd9tVWkw6UlyyNts3f+m+z/ G/XJbbgVLT7JfGPhI6Cc6IebjyKTyz+ChLpMG5cNPG53/i9r+CQE9JctUCo143o9 qv7WGhOpl5Zz0wRtYxZvJsZz -----END CERTIFICATE-----Generated at Fri Dec 5 15:04:53 2025 by rpki-client