This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HdqVyawY-tGLVy7QICXPNDiEwj0.roa File: HdqVyawY-tGLVy7QICXPNDiEwj0.roa (raw, json) Hash identifier: uare5gfXBG0B7KiLBhufsE8Bg4rKxvqah28odAlyNiU= Subject key identifier: 1D:DA:95:C9:AC:18:FA:D1:8B:57:2E:D0:20:25:CF:34:38:84:C2:3D Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003 Certificate serial: 019A7EAC61C558875DC04F560464F206F92A Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HdqVyawY-tGLVy7QICXPNDiEwj0.roa Signing time: Thu 13 Nov 2025 19:23:37 +0000 ROA not before: Thu 13 Nov 2025 19:23:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 207483 IP address blocks: 185.229.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7e:ac:61:c5:58:87:5d:c0:4f:56:04:64:f2:06:f9:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003 Validity Not Before: Nov 13 19:23:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1dda95c9ac18fad18b572ed02025cf343884c23d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a8:dd:cb:1b:d4:ed:b5:f9:a5:50:99:81:f7: dc:85:b2:a5:4a:8c:4c:50:70:6d:e8:1e:c0:38:8e: 92:1f:2b:26:f1:70:45:d2:7c:b6:40:62:5d:1a:98: fe:bb:b1:07:4e:e6:39:9c:ef:94:81:de:01:c5:03: e4:d2:8c:69:1e:91:b7:a5:22:03:f6:f1:73:46:f5: 26:d3:87:5d:1b:71:d5:be:0f:9d:2a:12:c6:66:c1: 4b:8a:13:0e:c4:4d:dd:fd:84:4e:19:6d:17:09:e0: 11:d0:90:80:f1:52:fc:7a:b3:cb:49:8c:a2:94:96: 39:39:3a:9b:b6:62:fd:91:0f:f7:02:85:83:18:42: 4d:ef:f1:2c:05:31:7d:f0:b1:83:ed:ab:95:dc:4e: 0a:89:e1:77:40:8b:7b:7e:10:fa:2c:d8:89:cf:95: 1f:04:19:13:d1:84:8c:c9:13:63:dc:b0:9d:a3:e7: 2f:44:3c:ab:4d:6d:a8:a8:2c:d4:ce:d5:f2:0b:d1: f0:2e:55:4f:c0:86:24:98:fc:d3:88:40:fb:54:67: 05:1e:0f:bd:e4:5c:1f:3f:5f:12:d7:de:8b:19:9f: e1:34:27:33:7c:79:7e:84:dd:ab:0c:57:af:bc:cc: b5:1c:00:e7:6b:c8:0f:a9:b2:7a:5d:15:09:f6:16: 5d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:DA:95:C9:AC:18:FA:D1:8B:57:2E:D0:20:25:CF:34:38:84:C2:3D X509v3 Authority Key Identifier: keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HdqVyawY-tGLVy7QICXPNDiEwj0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.229.222.0/24 Signature Algorithm: sha256WithRSAEncryption ae:b2:f1:5e:4e:55:f5:87:66:a3:38:56:8d:19:6a:5c:5e:bb: 78:96:49:9b:4c:92:73:22:37:ef:e8:e2:45:52:a4:21:87:54: 1b:3c:74:ba:0a:ce:25:47:d5:c9:cb:06:9d:75:64:0b:d4:ab: 20:78:45:5b:fa:6a:15:c8:7c:f8:a3:54:a3:22:77:84:3d:17: 49:e1:89:2a:40:da:40:51:41:b1:b3:34:7e:49:8f:84:41:bc: 4a:f8:ee:93:35:ac:f0:d9:c8:3d:4e:5c:39:78:ef:44:02:8c: dc:91:43:f1:92:03:fd:b4:5e:74:c4:de:b5:37:00:c1:52:3f: 21:65:51:b3:2e:37:ac:10:a8:a3:19:7b:bb:08:41:06:8c:6b: 83:d9:cd:4d:60:78:18:91:06:a8:44:3c:99:d5:34:e7:47:76: 85:c6:0d:c9:18:db:3a:b4:46:e9:90:d5:14:f6:f4:58:88:ad: 30:04:a2:81:6b:ae:99:ea:62:2e:a7:b9:ba:ea:82:2c:07:8a: 06:d3:d1:bb:94:9b:d9:41:d0:44:6c:b8:23:33:a2:64:d5:db: a7:a2:cf:82:04:b4:d4:35:0f:ce:8d:e7:09:b1:70:6a:2a:5c: 5d:af:2e:24:b0:f7:7c:17:d8:36:46:cd:75:ae:8a:51:8b:43: f9:3a:39:14 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZp+rGHFWIddwE9WBGTyBvkqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4 NDAwMDMwHhcNMjUxMTEzMTkyMzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZGRhOTVjOWFjMThmYWQxOGI1NzJlZDAyMDI1Y2YzNDM4ODRjMjNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzajdyxvU7bX5pVCZgffchbKlSoxM UHBt6B7AOI6SHysm8XBF0ny2QGJdGpj+u7EHTuY5nO+Ugd4BxQPk0oxpHpG3pSID 9vFzRvUm04ddG3HVvg+dKhLGZsFLihMOxE3d/YROGW0XCeAR0JCA8VL8erPLSYyi lJY5OTqbtmL9kQ/3AoWDGEJN7/EsBTF98LGD7auV3E4KieF3QIt7fhD6LNiJz5Uf BBkT0YSMyRNj3LCdo+cvRDyrTW2oqCzUztXyC9HwLlVPwIYkmPzTiED7VGcFHg+9 5FwfP18S196LGZ/hNCczfHl+hN2rDFevvMy1HADna8gPqbJ6XRUJ9hZdeQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB3alcmsGPrRi1cu0CAlzzQ4hMI9MB8GA1UdIwQY MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt MTQzOTY3YThmZTA4LzEvSGRxVnlhd1ktdEdMVnk3UUlDWFBORGlFd2owLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4 LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueXeMA0G CSqGSIb3DQEBCwUAA4IBAQCusvFeTlX1h2ajOFaNGWpcXrt4lkmbTJJzIjfv6OJF UqQhh1QbPHS6Cs4lR9XJywaddWQL1KsgeEVb+moVyHz4o1SjIneEPRdJ4YkqQNpA UUGxszR+SY+EQbxK+O6TNazw2cg9Tlw5eO9EAozckUPxkgP9tF50xN61NwDBUj8h ZVGzLjesEKijGXu7CEEGjGuD2c1NYHgYkQaoRDyZ1TTnR3aFxg3JGNs6tEbpkNUU 9vRYiK0wBKKBa66Z6mIup7m66oIsB4oG09G7lJvZQdBEbLgjM6Jk1dunos+CBLTU NQ/OjecJsXBqKlxdry4ksPd8F9g2Rs11ropRi0P5OjkU -----END CERTIFICATE-----Generated at Fri Dec 5 17:53:15 2025 by rpki-client