This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/HDz_F3hZa5r8NL-Agbpv0aIdYQo.roa File: HDz_F3hZa5r8NL-Agbpv0aIdYQo.roa (raw, json) Hash identifier: 8B4QcGu+QViJQc3w5/m4TMovMHtzH0RK2AcezX0B9fU= Subject key identifier: 1C:3C:FF:17:78:59:6B:9A:FC:34:BF:80:81:BA:6F:D1:A2:1D:61:0A Certificate issuer: /CN=f62eeb879085c94194297dd9e4cd249cd2516515 Certificate serial: 019B267AA17AD5E41FC9878AA8679B10E11E Authority key identifier: F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/HDz_F3hZa5r8NL-Agbpv0aIdYQo.roa Signing time: Tue 16 Dec 2025 09:25:29 +0000 ROA not before: Tue 16 Dec 2025 09:25:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214996 IP address blocks: 159.195.12.0/22 maxlen: 22 159.195.16.0/22 maxlen: 22 159.195.91.0/24 maxlen: 24 159.195.92.0/22 maxlen: 22 2a0a:4cc0:101::/48 maxlen: 48 2a0a:4cc0:101::/52 maxlen: 52 2a0a:4cc0:120::/43 maxlen: 43 2a0a:4cc0:2000::/43 maxlen: 48 2a0a:4cc0:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:7a:a1:7a:d5:e4:1f:c9:87:8a:a8:67:9b:10:e1:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f62eeb879085c94194297dd9e4cd249cd2516515 Validity Not Before: Dec 16 09:25:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1c3cff1778596b9afc34bf8081ba6fd1a21d610a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4c:44:4b:c4:f3:d7:74:22:6f:1e:a3:33:8d: 6d:c6:a6:dd:54:95:96:f6:14:be:e4:e8:5c:41:ac: 2d:0f:82:42:3c:ac:32:f0:7e:b3:e9:a2:dd:4b:1a: 1e:a1:26:06:e2:22:6d:4e:57:07:46:29:51:42:3e: 00:74:8b:3e:c1:ff:ac:fd:9d:39:99:ec:ef:49:bb: d3:3c:ab:a8:1b:16:94:4b:e4:10:c0:97:c9:dc:1e: 96:9a:62:5d:e1:88:1f:93:e3:df:02:a5:61:c4:4e: 7f:6d:28:73:01:50:b1:55:57:c8:58:6a:06:a8:59: 33:d3:59:21:d8:d9:e1:f1:38:cc:fa:0b:01:84:5f: 5d:a0:b6:dd:81:78:30:82:d7:d0:50:12:92:34:be: 2e:03:07:c0:e6:fa:6d:d6:57:64:ec:d6:c3:62:a6: 15:8c:bd:42:3b:55:60:4c:22:7c:53:73:e5:1d:67: 52:b4:e3:ce:e0:f3:1d:bf:2a:ea:6a:60:b0:41:c3: 5a:42:d0:c2:32:71:af:7e:d9:f8:f4:8f:13:c3:81: dd:c2:df:99:cb:04:24:df:8a:9f:b7:72:e4:37:67: ad:d2:e6:44:f5:6f:15:28:4b:63:bd:ed:2b:84:6f: d2:d8:aa:66:14:bf:c5:b2:b8:c9:15:cf:af:60:49: f1:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:3C:FF:17:78:59:6B:9A:FC:34:BF:80:81:BA:6F:D1:A2:1D:61:0A X509v3 Authority Key Identifier: keyid:F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/HDz_F3hZa5r8NL-Agbpv0aIdYQo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.195.12.0-159.195.19.255 159.195.91.0-159.195.95.255 IPv6: 2a0a:4cc0:101::/48 2a0a:4cc0:120::/43 2a0a:4cc0:2000::/43 Signature Algorithm: sha256WithRSAEncryption 18:2a:81:51:2c:01:84:19:a7:05:ad:98:ab:74:35:eb:4f:fd: 58:ad:26:f2:d4:0c:f5:bf:5c:2a:ad:ab:a6:f6:f4:87:be:c2: 10:a9:42:9d:01:e9:d3:b4:40:12:fe:19:68:0a:b7:36:24:6c: 61:87:46:b0:b7:e5:66:65:a7:f0:50:6a:3b:a4:90:cf:c6:6d: a5:e8:5b:f3:43:6e:f0:7b:d3:8b:16:8c:91:ec:38:fc:10:08: ac:ec:0c:96:1d:77:54:e5:94:83:8d:a2:93:8a:a6:03:e5:95: 18:72:5d:10:fd:63:f7:e9:6d:0d:1c:f7:1a:09:8e:79:ac:c7: c9:8d:63:44:d9:15:73:b7:3b:d9:cc:ae:54:9f:31:e1:8e:ed: 6e:b8:23:ef:af:17:16:b4:93:a4:3f:4a:dd:40:64:9c:5c:48: 93:3c:9a:fe:ef:77:61:e6:5a:98:38:42:62:e4:0d:25:20:e6: c7:d1:75:de:61:ea:4d:80:12:5b:3e:d4:fa:ef:55:5d:f3:81: 27:86:b4:bd:38:09:1c:d4:37:fc:23:d2:88:e6:40:69:e9:b9: f1:32:19:f0:76:58:3b:37:5b:62:b9:88:47:d8:9f:d8:06:c1: d8:a2:d1:da:a5:d3:02:f4:46:d6:53:46:9f:e0:60:60:f2:5c: 9d:d1:06:50 -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgISAZsmeqF61eQfyYeKqGebEOEeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2MmVlYjg3OTA4NWM5NDE5NDI5N2RkOWU0Y2QyNDljZDI1 MTY1MTUwHhcNMjUxMjE2MDkyNTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzNjZmYxNzc4NTk2YjlhZmMzNGJmODA4MWJhNmZkMWEyMWQ2MTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkxES8Tz13Qibx6jM41txqbdVJWW 9hS+5OhcQawtD4JCPKwy8H6z6aLdSxoeoSYG4iJtTlcHRilRQj4AdIs+wf+s/Z05 mezvSbvTPKuoGxaUS+QQwJfJ3B6WmmJd4Ygfk+PfAqVhxE5/bShzAVCxVVfIWGoG qFkz01kh2Nnh8TjM+gsBhF9doLbdgXgwgtfQUBKSNL4uAwfA5vpt1ldk7NbDYqYV jL1CO1VgTCJ8U3PlHWdStOPO4PMdvyrqamCwQcNaQtDCMnGvftn49I8Tw4Hdwt+Z ywQk34qft3LkN2et0uZE9W8VKEtjve0rhG/S2KpmFL/FsrjJFc+vYEnxvwIDAQAB o4ICQjCCAj4wHQYDVR0OBBYEFBw8/xd4WWua/DS/gIG6b9GiHWEKMB8GA1UdIwQY MBaAFPYu64eQhclBlCl92eTNJJzSUWUVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWk3cmg1Q0Z5VUdVS1gzWjVNMGtuTkpSWlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS85MWRhOGItMDUwMi00OGRmLTg1MzIt NWZiZjlhMjliNmUxLzEvSER6X0YzaFphNXI4TkwtQWdicHYwYUlkWVFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS85MWRhOGItMDUwMi00OGRmLTg1MzItNWZiZjlhMjliNmUx LzEvOWk3cmg1Q0Z5VUdVS1gzWjVNMGtuTkpSWlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzAiBAIAATAcMAwDBAKfwwwD BAKfwxAwDAMEAJ/DWwMEBZ/DQDAhBAIAAjAbAwcAKgpMwAEBAwcFKgpMwAEgAwcF KgpMwCAAMA0GCSqGSIb3DQEBCwUAA4IBAQAYKoFRLAGEGacFrZirdDXrT/1YrSby 1Az1v1wqraum9vSHvsIQqUKdAenTtEAS/hloCrc2JGxhh0awt+VmZafwUGo7pJDP xm2l6FvzQ27we9OLFoyR7Dj8EAis7AyWHXdU5ZSDjaKTiqYD5ZUYcl0Q/WP36W0N HPcaCY55rMfJjWNE2RVztzvZzK5UnzHhju1uuCPvrxcWtJOkP0rdQGScXEiTPJr+ 73dh5lqYOEJi5A0lIObH0XXeYepNgBJbPtT671Vd84EnhrS9OAkc1Df8I9KI5kBp 6bnxMhnwdlg7N1tiuYhH2J/YBsHYotHapdMC9EbWU0af4GBg8lyd0QZQ -----END CERTIFICATE-----Generated at Fri Dec 19 08:26:19 2025 by rpki-client