This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/HI-yulWjSdkTTcGglLjiELeFDcM.roa
File: HI-yulWjSdkTTcGglLjiELeFDcM.roa (raw, json)
Hash identifier: IbRZxdC6DTZm7sopaYrGgwOa5BufPd0W6FqVE2Q7hOc=
Subject key identifier: 1C:8F:B2:BA:55:A3:49:D9:13:4D:C1:A0:94:B8:E2:10:B7:85:0D:C3
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019AFD775E1A64EB60DB34BE0D224958BE9A
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/HI-yulWjSdkTTcGglLjiELeFDcM.roa
Signing time: Mon 08 Dec 2025 10:17:29 +0000
ROA not before: Mon 08 Dec 2025 10:17:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 17497
IP address blocks: 212.135.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Dec 2025 01:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:fd:77:5e:1a:64:eb:60:db:34:be:0d:22:49:58:be:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Dec 8 10:17:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1c8fb2ba55a349d9134dc1a094b8e210b7850dc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:5d:fc:b3:db:d3:23:66:5c:e2:87:ec:8d:22:
c2:79:56:ad:94:20:70:43:2e:5d:69:97:e6:1f:15:
17:1f:c2:58:ec:2b:40:52:ee:f9:cb:ea:72:80:2e:
c3:b1:55:37:a9:2b:92:1f:60:ca:ae:13:06:5d:51:
23:8e:3e:eb:9b:df:2a:80:39:29:f1:dd:52:3a:1b:
91:00:e7:21:1d:d8:aa:4d:ca:2e:82:af:3c:22:df:
0e:ad:cf:9a:7c:77:d1:0e:ac:a6:ac:56:4b:e8:97:
74:4a:64:9e:83:e0:50:b2:cd:ba:a4:ee:8a:14:ed:
2f:3f:08:ce:95:9b:c9:99:1d:2e:68:2d:03:4d:1b:
f8:f2:b3:d2:47:b8:1f:f8:a6:56:4f:9b:73:29:6d:
b9:14:40:e6:7d:2d:68:fc:8a:ac:f3:f1:80:38:43:
ab:d3:07:1e:68:02:1b:27:e9:7d:1d:e4:ff:e4:7f:
8b:01:93:87:8e:72:ce:00:73:09:ff:ea:49:51:4f:
05:f1:a1:0c:66:d6:07:7e:b1:25:b8:4b:67:1c:b7:
12:82:b3:d7:0f:34:8c:a9:30:c4:48:9e:01:14:74:
9f:4a:b5:dc:e6:34:6e:23:6c:dc:78:ab:12:a7:d6:
59:0c:4d:e1:22:9e:03:2f:db:fe:0e:31:8f:83:c3:
b6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:8F:B2:BA:55:A3:49:D9:13:4D:C1:A0:94:B8:E2:10:B7:85:0D:C3
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/HI-yulWjSdkTTcGglLjiELeFDcM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.135.24.0/24
Signature Algorithm: sha256WithRSAEncryption
07:fe:8c:29:55:05:d8:7d:a7:14:ac:72:82:c6:3f:f1:13:a8:
c5:94:8e:5a:7c:3a:8f:69:5c:1f:45:aa:5b:30:8f:58:d7:8c:
0c:ae:5b:69:77:70:a7:2f:66:8e:dc:ba:44:c5:c9:7b:bf:7a:
6e:68:f2:7c:53:4a:64:c9:66:2d:99:50:16:e2:d5:d7:a8:34:
af:10:f9:6f:1e:07:1c:f0:ef:65:96:68:4a:57:8e:6a:78:cf:
02:5f:61:c0:ab:d6:c3:fc:c3:52:52:fe:5e:51:2b:89:2d:fe:
dd:a1:fd:2e:51:8b:8a:c2:0e:86:4a:d7:8a:bb:c8:90:c3:bd:
7e:69:d6:45:75:22:45:60:0b:6b:e2:68:1b:98:37:2d:3b:ba:
48:5c:43:56:1b:23:c7:a1:be:8c:ba:39:e7:64:45:f2:6d:65:
1d:1c:cb:cb:80:c7:19:2f:6d:c9:db:3c:7f:95:3a:2d:54:69:
3d:5e:b5:91:cb:fb:3f:17:ff:7a:9e:8e:12:d7:b5:d4:08:1c:
7d:70:c0:7e:dc:b9:37:ac:94:3b:e7:f8:27:7d:ca:15:5d:f9:
ef:55:4b:33:70:c2:cf:04:c4:d2:72:51:eb:83:83:a0:3f:c2:
11:9b:ac:d7:70:7e:7c:06:5a:30:04:eb:38:00:12:75:ab:ab:
10:69:8f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 07:52:44 2025 by rpki-client