This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/HH1S4SS-_tmNDJ-9u5sDwZE2P3c.roa File: HH1S4SS-_tmNDJ-9u5sDwZE2P3c.roa (raw, json) Hash identifier: mZlHYb8CS1tgrT2PVpbkRsXSqxGpm2slViLC+J0/iAU= Subject key identifier: 1C:7D:52:E1:24:BE:FE:D9:8D:0C:9F:BD:BB:9B:03:C1:91:36:3F:77 Certificate issuer: /CN=4f99e4eae48a01c781faad11f6d81a91ea33bdff Certificate serial: 019B212BFD4DD61665E6D6CDB3EA1FD46216 Authority key identifier: 4F:99:E4:EA:E4:8A:01:C7:81:FA:AD:11:F6:D8:1A:91:EA:33:BD:FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5nk6uSKAceB-q0R9tgakeozvf8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/HH1S4SS-_tmNDJ-9u5sDwZE2P3c.roa Signing time: Mon 15 Dec 2025 08:41:29 +0000 ROA not before: Mon 15 Dec 2025 08:41:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 34704 IP address blocks: 37.208.48.0/24 maxlen: 24 37.208.49.0/24 maxlen: 24 37.208.50.0/24 maxlen: 24 37.208.51.0/24 maxlen: 24 37.208.52.0/24 maxlen: 24 37.208.53.0/24 maxlen: 24 37.208.54.0/24 maxlen: 24 37.208.55.0/24 maxlen: 24 93.174.32.0/24 maxlen: 24 93.174.33.0/24 maxlen: 24 93.174.34.0/24 maxlen: 24 93.174.35.0/24 maxlen: 24 93.174.36.0/24 maxlen: 24 93.174.37.0/24 maxlen: 24 93.174.38.0/24 maxlen: 24 93.174.39.0/24 maxlen: 24 213.232.80.0/24 maxlen: 24 213.232.81.0/24 maxlen: 24 213.232.82.0/24 maxlen: 24 213.232.83.0/24 maxlen: 24 2a07:5e40::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.mft rsync://rpki.ripe.net/repository/DEFAULT/T5nk6uSKAceB-q0R9tgakeozvf8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:2b:fd:4d:d6:16:65:e6:d6:cd:b3:ea:1f:d4:62:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f99e4eae48a01c781faad11f6d81a91ea33bdff Validity Not Before: Dec 15 08:41:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1c7d52e124befed98d0c9fbdbb9b03c191363f77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:df:13:57:7a:ac:2c:46:b4:27:c8:7a:c8:63: e5:b7:36:db:6b:3a:6b:87:19:82:bc:11:7a:82:06: d9:d1:38:6f:d4:20:66:5e:d2:7a:7f:ab:2a:33:de: f5:38:40:5b:e4:01:b9:a5:32:6d:07:03:f0:16:12: 88:b3:0a:56:50:2c:d6:19:72:e1:09:b6:d0:69:b8: 72:6c:82:a9:b1:6f:ae:84:a4:67:f7:fa:da:c4:b7: e5:af:23:11:9c:d8:28:96:2d:93:4b:82:ee:1a:ea: fa:b2:55:fb:c5:6a:24:ff:79:35:4e:69:fb:54:e4: a1:c5:22:b5:41:7c:8a:15:5b:8f:b5:29:98:9d:2a: 64:7c:70:ed:f4:4e:0c:4b:53:8e:db:6e:7b:5f:7c: 20:79:03:58:bf:59:d7:5d:d8:b6:d1:3d:69:bc:1c: 5b:06:23:ba:4d:90:06:cd:dd:b7:93:ee:35:ea:79: 1f:0d:f7:12:ec:57:1e:c1:d4:c8:6c:67:ae:d3:41: 39:f3:b2:6e:b0:70:7e:6d:4d:5b:a7:7b:97:6d:22: 21:a6:d7:5b:68:6c:12:71:13:90:a1:6c:62:f8:2d: fa:64:c2:d0:3d:7c:36:8c:0d:ad:c9:67:0e:e1:e7: f6:d6:93:ba:87:8a:2c:9b:51:1c:91:24:4b:c5:81: 33:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:7D:52:E1:24:BE:FE:D9:8D:0C:9F:BD:BB:9B:03:C1:91:36:3F:77 X509v3 Authority Key Identifier: keyid:4F:99:E4:EA:E4:8A:01:C7:81:FA:AD:11:F6:D8:1A:91:EA:33:BD:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5nk6uSKAceB-q0R9tgakeozvf8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/HH1S4SS-_tmNDJ-9u5sDwZE2P3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.208.48.0/21 93.174.32.0/21 213.232.80.0/22 IPv6: 2a07:5e40::/29 Signature Algorithm: sha256WithRSAEncryption 4e:00:66:0d:af:37:bd:e9:e1:56:30:be:33:9d:9f:95:cf:9b: 84:55:d3:6d:41:d2:1b:a1:3b:0f:fe:34:e4:72:7c:27:8c:ef: 5d:3f:18:10:13:ec:ee:82:f3:d2:35:93:19:ea:62:1e:ab:65: cd:45:f9:2a:f4:df:e0:b6:13:58:61:9b:f9:5f:3f:a5:50:6e: b1:eb:29:48:87:f9:b7:8b:6c:ed:bd:a8:29:4a:fc:54:3b:20: 9c:01:cf:50:79:9f:47:25:d8:97:ce:a4:bc:84:0b:2f:5c:a3: 97:16:9a:38:36:06:56:bf:aa:30:52:c6:94:6f:28:58:d5:db: f1:a1:41:b3:2f:19:7e:21:0c:c0:63:34:63:7d:7d:6b:e5:ad: d8:e5:27:b6:a6:cb:39:38:0a:a0:49:b6:ae:af:a8:94:db:4f: 0f:67:68:23:92:3d:0c:e7:84:7c:df:f6:40:29:4f:2f:59:c6: cb:d4:b0:e1:47:0b:b4:fc:f6:61:96:76:9d:43:0b:32:df:67: bd:82:e3:83:0c:b8:e4:a0:8b:72:dd:d1:94:76:d4:20:58:7e: 2c:ea:f6:16:96:e1:ff:cd:1e:7d:8d:3e:95:ea:58:ac:3a:73: 88:81:4d:78:4f:2e:b7:85:1d:3c:c8:cf:9b:d4:60:bf:7a:39: 93:b9:ec:69 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZshK/1N1hZl5tbNs+of1GIWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmOTllNGVhZTQ4YTAxYzc4MWZhYWQxMWY2ZDgxYTkxZWEz M2JkZmYwHhcNMjUxMjE1MDg0MTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzdkNTJlMTI0YmVmZWQ5OGQwYzlmYmRiYjliMDNjMTkxMzYzZjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnN8TV3qsLEa0J8h6yGPltzbbazpr hxmCvBF6ggbZ0Thv1CBmXtJ6f6sqM971OEBb5AG5pTJtBwPwFhKIswpWUCzWGXLh CbbQabhybIKpsW+uhKRn9/raxLflryMRnNgoli2TS4LuGur6slX7xWok/3k1Tmn7 VOShxSK1QXyKFVuPtSmYnSpkfHDt9E4MS1OO2257X3wgeQNYv1nXXdi20T1pvBxb BiO6TZAGzd23k+416nkfDfcS7FcewdTIbGeu00E587JusHB+bU1bp3uXbSIhptdb aGwScROQoWxi+C36ZMLQPXw2jA2tyWcO4ef21pO6h4osm1EckSRLxYEzmwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFBx9UuEkvv7ZjQyfvbubA8GRNj93MB8GA1UdIwQY MBaAFE+Z5OrkigHHgfqtEfbYGpHqM73/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDVuazZ1U0tBY2VCLXEwUjl0Z2FrZW96dmY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8xOWQzMTMtNzc3Yi00MDQ0LWEyMzgt OGI4ZjNmOGQ3MzAzLzEvSEgxUzRTUy1fdG1OREotOXU1c0R3WkUyUDNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8xOWQzMTMtNzc3Yi00MDQ0LWEyMzgtOGI4ZjNmOGQ3MzAz LzEvVDVuazZ1U0tBY2VCLXEwUjl0Z2FrZW96dmY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDJdAwAwQD Xa4gAwQC1ehQMA0EAgACMAcDBQMqB15AMA0GCSqGSIb3DQEBCwUAA4IBAQBOAGYN rze96eFWML4znZ+Vz5uEVdNtQdIboTsP/jTkcnwnjO9dPxgQE+zugvPSNZMZ6mIe q2XNRfkq9N/gthNYYZv5Xz+lUG6x6ylIh/m3i2ztvagpSvxUOyCcAc9QeZ9HJdiX zqS8hAsvXKOXFpo4NgZWv6owUsaUbyhY1dvxoUGzLxl+IQzAYzRjfX1r5a3Y5Se2 pss5OAqgSbaur6iU208PZ2gjkj0M54R83/ZAKU8vWcbL1LDhRwu0/PZhlnadQwsy 32e9guODDLjkoIty3dGUdtQgWH4s6vYWluH/zR59jT6V6lisOnOIgU14Ty63hR08 yM+b1GC/ejmTuexp -----END CERTIFICATE-----Generated at Tue Dec 16 04:30:40 2025 by rpki-client