This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/ChHF1zt4XcE31-yjd2Jszyre5D0.roa File: ChHF1zt4XcE31-yjd2Jszyre5D0.roa (raw, json) Hash identifier: KwMNd8gWXgFpMRAzpkTU5CulF5+d5MZAqFNcwoyhNNI= Subject key identifier: 0A:11:C5:D7:3B:78:5D:C1:37:D7:EC:A3:77:62:6C:CF:2A:DE:E4:3D Certificate issuer: /CN=a60cee7582e9759be016c931ab34d9285d2fc8b4 Certificate serial: 019A7356283F5980B6187F8FE72819223BF7 Authority key identifier: A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/ChHF1zt4XcE31-yjd2Jszyre5D0.roa Signing time: Tue 11 Nov 2025 14:33:37 +0000 ROA not before: Tue 11 Nov 2025 14:33:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 87.248.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:73:56:28:3f:59:80:b6:18:7f:8f:e7:28:19:22:3b:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a60cee7582e9759be016c931ab34d9285d2fc8b4 Validity Not Before: Nov 11 14:33:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0a11c5d73b785dc137d7eca377626ccf2adee43d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e1:6f:f2:8c:7e:d3:8e:02:5a:5b:06:b8:bf: c9:f0:d9:3a:5b:0a:ea:c2:59:48:c3:ff:fb:16:ae: 59:d7:4f:ff:ee:67:8b:25:66:78:39:c8:63:6e:ac: b4:27:41:37:69:89:c0:73:b8:ac:f6:d6:32:ee:9e: 6d:be:07:28:99:6f:51:5c:af:ab:cd:59:f1:70:28: e7:5c:54:fe:56:f4:13:92:b3:42:0d:25:7e:ce:be: b8:73:32:b7:b4:a6:49:85:85:24:c4:e5:88:82:a4: f8:9f:7b:75:a9:ad:30:7b:43:9c:96:1d:25:aa:c5: 0b:76:0c:88:4a:e9:4c:41:bf:19:68:ac:96:43:d1: e3:f2:2a:27:dd:d1:4b:26:08:0e:c4:81:aa:a3:76: 71:7a:4d:58:78:56:ba:e3:1f:00:a2:6b:52:72:01: 26:5b:ae:df:0e:ae:5d:ff:f4:ed:ae:46:ab:8f:48: 90:fe:93:41:4d:75:44:44:55:e3:49:64:29:1f:13: c0:54:52:25:e0:2e:81:82:2e:88:4d:17:e0:e5:7b: 85:78:cd:86:41:b2:e0:fc:fe:2f:f1:8b:b3:af:22: af:cc:c3:6e:58:7a:b6:f1:c9:c1:a3:1d:9a:9d:58: d6:bc:99:29:a4:8b:9d:e2:9a:98:8d:b4:42:5e:cd: 15:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:11:C5:D7:3B:78:5D:C1:37:D7:EC:A3:77:62:6C:CF:2A:DE:E4:3D X509v3 Authority Key Identifier: keyid:A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/ChHF1zt4XcE31-yjd2Jszyre5D0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.248.132.0/24 Signature Algorithm: sha256WithRSAEncryption 16:89:ba:b9:f0:3e:d7:8c:a3:3c:a6:8a:e3:21:28:cc:c9:30: 7e:ae:f5:c2:da:20:65:6c:ad:84:38:41:48:9a:b3:0a:88:17: 11:de:ba:79:56:c7:4a:8a:58:69:24:9a:a0:ec:42:6f:bb:8d: 75:e0:db:74:33:64:8c:ad:25:8a:20:05:1e:86:e6:7e:b0:96: 0e:09:15:eb:5d:eb:35:5b:91:2c:6f:f8:37:f6:aa:1a:2b:f7: 27:c9:a0:28:46:15:c5:9c:4d:30:52:51:e9:fe:0e:9a:0b:9f: a2:84:12:01:a7:00:6d:80:6b:15:eb:a1:7a:6a:70:c9:2c:9e: 98:e2:f8:00:54:f4:d7:cb:5d:c5:b6:66:f5:0a:46:f5:29:88: 9c:1e:f9:5d:5d:c9:f6:96:85:72:70:2b:b4:6d:6a:65:49:b7: b3:89:e0:ea:31:be:90:f0:d6:50:d1:a8:6f:f4:9f:a5:77:8e: aa:45:17:e8:b6:7c:ab:66:e6:5f:83:ee:1e:53:7a:26:4c:39: 7d:47:b1:8e:bd:ec:74:15:26:60:99:d7:1e:08:7f:d5:49:7d: ce:26:9f:96:94:93:46:8a:fd:c0:7d:95:0c:c8:89:ce:ee:7b: b9:ed:ac:6e:be:37:a2:3f:ac:ba:ee:b3:e9:00:ab:57:77:8e: 55:4c:31:44 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZpzVig/WYC2GH+P5ygZIjv3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MGNlZTc1ODJlOTc1OWJlMDE2YzkzMWFiMzRkOTI4NWQy ZmM4YjQwHhcNMjUxMTExMTQzMzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYTExYzVkNzNiNzg1ZGMxMzdkN2VjYTM3NzYyNmNjZjJhZGVlNDNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOFv8ox+044CWlsGuL/J8Nk6Wwrq wllIw//7Fq5Z10//7meLJWZ4Ochjbqy0J0E3aYnAc7is9tYy7p5tvgcomW9RXK+r zVnxcCjnXFT+VvQTkrNCDSV+zr64czK3tKZJhYUkxOWIgqT4n3t1qa0we0Oclh0l qsULdgyISulMQb8ZaKyWQ9Hj8ion3dFLJggOxIGqo3Zxek1YeFa64x8AomtScgEm W67fDq5d//Ttrkarj0iQ/pNBTXVERFXjSWQpHxPAVFIl4C6Bgi6ITRfg5XuFeM2G QbLg/P4v8YuzryKvzMNuWHq28cnBox2anVjWvJkppIud4pqYjbRCXs0VcQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAoRxdc7eF3BN9fso3dibM8q3uQ9MB8GA1UdIwQY MBaAFKYM7nWC6XWb4BbJMas02ShdL8i0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9kZWNhZDAtMjZkYS00YjlhLWIxYTct ZDNiMzhjZTlkYzM0LzEvQ2hIRjF6dDRYY0UzMS15amQySnN6eXJlNUQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9kZWNhZDAtMjZkYS00YjlhLWIxYTctZDNiMzhjZTlkYzM0 LzEvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV/iEMA0G CSqGSIb3DQEBCwUAA4IBAQAWibq58D7XjKM8porjISjMyTB+rvXC2iBlbK2EOEFI mrMKiBcR3rp5VsdKilhpJJqg7EJvu4114Nt0M2SMrSWKIAUehuZ+sJYOCRXrXes1 W5Esb/g39qoaK/cnyaAoRhXFnE0wUlHp/g6aC5+ihBIBpwBtgGsV66F6anDJLJ6Y 4vgAVPTXy13Ftmb1Ckb1KYicHvldXcn2loVycCu0bWplSbezieDqMb6Q8NZQ0ahv 9J+ld46qRRfotnyrZuZfg+4eU3omTDl9R7GOvex0FSZgmdceCH/VSX3OJp+WlJNG iv3AfZUMyInO7nu57axuvjeiP6y67rPpAKtXd45VTDFE -----END CERTIFICATE-----Generated at Fri Dec 5 19:36:15 2025 by rpki-client