This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rH4s0ZY3q2k87-mN5fkllQEjX8I.roa File: rH4s0ZY3q2k87-mN5fkllQEjX8I.roa (raw, json) Hash identifier: OIxd17JGnMWMwrk7lJBINV/0ISpqHWJ/lISkpe13ftM= Subject key identifier: AC:7E:2C:D1:96:37:AB:69:3C:EF:E9:8D:E5:F9:25:95:01:23:5F:C2 Certificate issuer: /CN=acf910f36291c3c224ddb596d956543197f163de Certificate serial: 019B07B65B8DB07409149F6E245C116411AF Authority key identifier: AC:F9:10:F3:62:91:C3:C2:24:DD:B5:96:D9:56:54:31:97:F1:63:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rH4s0ZY3q2k87-mN5fkllQEjX8I.roa Signing time: Wed 10 Dec 2025 10:02:29 +0000 ROA not before: Wed 10 Dec 2025 10:02:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 201071 IP address blocks: 91.109.248.0/21 maxlen: 21 92.249.5.0/24 maxlen: 24 217.147.120.0/24 maxlen: 24 217.147.121.0/24 maxlen: 24 217.147.122.0/24 maxlen: 24 217.147.124.0/22 maxlen: 22 217.147.124.0/24 maxlen: 24 217.147.125.0/24 maxlen: 24 217.147.126.0/24 maxlen: 24 217.147.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.mft rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:b6:5b:8d:b0:74:09:14:9f:6e:24:5c:11:64:11:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acf910f36291c3c224ddb596d956543197f163de Validity Not Before: Dec 10 10:02:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ac7e2cd19637ab693cefe98de5f9259501235fc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:28:fa:da:33:44:1f:4c:09:79:ce:0f:d0:38: 23:4d:64:90:98:4b:c3:cd:80:e0:61:b7:9b:a5:ac: 3c:c4:8a:ea:b2:c7:79:f1:71:b2:ce:64:e5:95:b8: 46:7c:a3:14:74:7f:08:ff:11:5d:a3:a7:03:e4:8d: bb:65:2a:ce:c8:5a:10:60:e7:2e:5d:70:0e:1d:f3: bd:ad:46:16:8a:0d:5d:7f:61:0d:7f:c3:a0:5b:f6: 0e:bd:8e:06:f6:20:59:45:c1:b8:78:03:53:2f:99: 67:3b:0e:d8:92:1a:76:59:db:d8:dd:f6:2d:bb:df: 97:86:6b:fd:fb:f3:bf:e7:d9:e2:f1:fa:72:cd:7c: 36:16:73:78:a9:8d:e3:bb:fd:dc:7b:23:6d:7c:ba: aa:55:0a:a6:48:bf:c6:09:50:51:54:62:fe:0d:d3: 9a:a9:ea:f1:13:cb:b4:de:da:04:b0:3c:bf:50:58: eb:f0:41:70:2f:1d:0c:81:8c:fc:23:e9:8a:c8:41: 74:47:04:ea:62:3f:e2:25:05:21:69:f9:ed:b7:3e: 10:1e:eb:72:60:be:c6:84:f7:9c:7e:08:5f:26:79: e5:96:5f:88:61:15:2e:83:27:93:4e:32:28:f0:5c: 25:5f:53:be:7b:56:48:8b:67:36:db:e1:d7:8d:4c: 5e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:7E:2C:D1:96:37:AB:69:3C:EF:E9:8D:E5:F9:25:95:01:23:5F:C2 X509v3 Authority Key Identifier: keyid:AC:F9:10:F3:62:91:C3:C2:24:DD:B5:96:D9:56:54:31:97:F1:63:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rH4s0ZY3q2k87-mN5fkllQEjX8I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.109.248.0/21 92.249.5.0/24 217.147.120.0-217.147.122.255 217.147.124.0/22 Signature Algorithm: sha256WithRSAEncryption 8c:ab:59:52:7c:44:04:c9:7c:2a:e3:07:cf:4a:7f:12:54:d2: 98:d1:57:7b:4b:60:34:67:e6:ff:38:ab:1f:15:4d:9b:10:64: f0:99:e5:ac:16:12:f6:78:86:cc:5f:52:e1:52:a9:a2:74:49: a8:3c:25:ac:d6:21:db:25:1f:e1:ec:09:4e:60:ce:20:23:fe: f1:d0:8b:ff:eb:a5:0f:cd:2b:e2:29:c7:97:08:e6:a5:22:8f: 12:18:a8:5a:4a:f8:41:2b:07:d9:e7:11:b9:8f:3d:fd:76:73: 9f:1b:0e:c5:3e:18:64:8e:7d:cf:8f:30:ce:13:9f:f7:b7:5b: a1:53:2a:60:e9:34:cb:eb:52:a5:cd:34:5a:12:9b:04:64:4e: ae:52:67:bf:7b:80:6f:35:56:95:41:3a:f2:dc:77:05:01:26: 07:15:77:f0:e6:7f:8a:11:fd:4c:04:ad:8a:a9:99:49:54:c0: aa:bc:89:5f:6d:2d:a1:f8:51:f5:8d:90:c6:36:09:03:20:9c: 62:48:86:6a:80:2a:f6:fe:67:d3:b5:57:34:d7:df:a2:8a:d9: d7:59:c1:a0:bb:30:81:ab:6e:2b:91:9c:7b:92:f1:21:af:02: b2:53:14:ca:68:a3:8f:d3:2e:b4:26:ab:d2:77:7d:b6:4e:5b: 1c:7e:f7:cc -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZsHtluNsHQJFJ9uJFwRZBGvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjZjkxMGYzNjI5MWMzYzIyNGRkYjU5NmQ5NTY1NDMxOTdm MTYzZGUwHhcNMjUxMjEwMTAwMjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYzdlMmNkMTk2MzdhYjY5M2NlZmU5OGRlNWY5MjU5NTAxMjM1ZmMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCj62jNEH0wJec4P0DgjTWSQmEvD zYDgYbebpaw8xIrqssd58XGyzmTllbhGfKMUdH8I/xFdo6cD5I27ZSrOyFoQYOcu XXAOHfO9rUYWig1df2ENf8OgW/YOvY4G9iBZRcG4eANTL5lnOw7Ykhp2WdvY3fYt u9+Xhmv9+/O/59ni8fpyzXw2FnN4qY3ju/3ceyNtfLqqVQqmSL/GCVBRVGL+DdOa qerxE8u03toEsDy/UFjr8EFwLx0MgYz8I+mKyEF0RwTqYj/iJQUhafnttz4QHuty YL7GhPecfghfJnnlll+IYRUugyeTTjIo8FwlX1O+e1ZIi2c22+HXjUxeHwIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFKx+LNGWN6tpPO/pjeX5JZUBI1/CMB8GA1UdIwQY MBaAFKz5EPNikcPCJN21ltlWVDGX8WPeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclBrUTgyS1J3OElrM2JXVzJWWlVNWmZ4WTk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8xZjVlMDctMzJiNi00MTE0LThiMGQt ZDNiNThmNjk4MTQ4LzEvckg0czBaWTNxMms4Ny1tTjVma2xsUUVqWDhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8xZjVlMDctMzJiNi00MTE0LThiMGQtZDNiNThmNjk4MTQ4 LzEvclBrUTgyS1J3OElrM2JXVzJWWlVNWmZ4WTk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQDW234AwQA XPkFMAwDBAPZk3gDBADZk3oDBALZk3wwDQYJKoZIhvcNAQELBQADggEBAIyrWVJ8 RATJfCrjB89KfxJU0pjRV3tLYDRn5v84qx8VTZsQZPCZ5awWEvZ4hsxfUuFSqaJ0 Sag8JazWIdslH+HsCU5gziAj/vHQi//rpQ/NK+Ipx5cI5qUijxIYqFpK+EErB9nn EbmPPf12c58bDsU+GGSOfc+PMM4Tn/e3W6FTKmDpNMvrUqXNNFoSmwRkTq5SZ797 gG81VpVBOvLcdwUBJgcVd/Dmf4oR/UwErYqpmUlUwKq8iV9tLaH4UfWNkMY2CQMg nGJIhmqAKvb+Z9O1VzTX36KK2ddZwaC7MIGrbiuRnHuS8SGvArJTFMpoo4/TLrQm q9J3fbZOWxx+98w= -----END CERTIFICATE-----Generated at Fri Dec 19 06:52:28 2025 by rpki-client