This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/Hd_pbYNJS6Yi-k0tVsDsErLdxyo.roa File: Hd_pbYNJS6Yi-k0tVsDsErLdxyo.roa (raw, json) Hash identifier: nlfGof7swDkDQ7O/uQUGbM73LWqnxbg6+kbUFVkSQTw= Subject key identifier: 1D:DF:E9:6D:83:49:4B:A6:22:FA:4D:2D:56:C0:EC:12:B2:DD:C7:2A Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Certificate serial: 019A7C3101273B2E3693CCE6394F7BC43ED6 Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/Hd_pbYNJS6Yi-k0tVsDsErLdxyo.roa Signing time: Thu 13 Nov 2025 07:49:37 +0000 ROA not before: Thu 13 Nov 2025 07:49:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 401434 IP address blocks: 89.185.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 10:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7c:31:01:27:3b:2e:36:93:cc:e6:39:4f:7b:c4:3e:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Validity Not Before: Nov 13 07:49:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1ddfe96d83494ba622fa4d2d56c0ec12b2ddc72a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:93:52:fb:63:e6:7b:73:32:7d:28:f4:ee:db: 6b:4b:dd:f0:d9:fc:20:f2:d9:59:57:c7:37:cb:a8: be:43:28:83:7e:bc:c3:66:ba:06:84:f9:da:2c:57: 47:95:11:52:cd:79:d7:18:5b:79:53:8d:45:25:72: 56:3a:10:93:82:67:f4:0a:2a:1c:ed:7b:35:60:5b: 72:6d:fd:6e:36:a0:a1:84:5a:19:ba:fd:e0:e4:a5: 65:ef:10:bb:7e:a1:3c:47:48:c4:0f:ef:66:92:81: 4d:0e:e1:66:e3:15:da:ca:f4:fc:c0:68:35:e9:fb: 97:2e:b5:c2:a2:91:a4:59:85:f2:40:cf:fd:f4:bd: 31:2b:3b:a9:b8:8d:a5:1f:be:cb:a3:fd:a9:8e:54: da:19:1e:e6:5b:11:07:82:1d:a5:08:d4:f8:41:14: 24:62:82:70:37:2f:08:93:d7:20:f9:15:72:f0:b8: 00:d7:20:9e:15:57:0d:25:dc:1d:48:69:11:3d:5d: 8d:15:bb:14:46:6f:cc:0b:3b:7d:cd:4e:5e:da:de: ad:97:03:83:32:77:71:30:f0:fc:48:b6:79:06:d5: d3:76:11:49:1b:b9:13:41:46:65:e8:0b:34:00:73: b4:f0:65:ad:75:09:6a:1d:28:d1:60:a2:a0:dd:a5: 6e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:DF:E9:6D:83:49:4B:A6:22:FA:4D:2D:56:C0:EC:12:B2:DD:C7:2A X509v3 Authority Key Identifier: keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/Hd_pbYNJS6Yi-k0tVsDsErLdxyo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.185.28.0/22 Signature Algorithm: sha256WithRSAEncryption 68:5b:83:31:59:f7:8d:65:3c:a0:a0:86:a5:05:ac:32:12:70: f6:e3:10:10:8a:30:bc:80:b1:c4:eb:04:b5:80:fc:5f:72:44: 49:a2:e5:36:e8:c6:4d:0e:76:14:c5:87:b0:6c:3e:09:78:d1: 2c:71:e1:65:a4:ec:66:af:86:08:96:f5:56:d0:be:19:c6:4e: dd:c9:e7:63:ad:53:1a:24:25:f8:12:ca:ee:45:c0:7f:5b:4c: eb:75:a6:fc:97:7c:14:4f:ee:dd:27:60:be:e8:91:c0:20:97: 7b:6d:c3:3a:9f:cc:e6:84:92:d8:17:f8:e0:cd:76:77:6a:27: a5:b5:0d:3a:39:34:d6:31:ba:b6:42:86:ec:df:78:88:06:95: d4:24:48:04:c4:d1:56:4c:f5:3e:f7:91:81:de:6d:74:4c:79: b9:3e:f1:da:60:b1:fd:96:58:a2:e6:88:34:e9:5f:dd:16:1c: 10:8d:df:c1:31:48:eb:9f:69:d2:30:b0:d6:e3:32:98:16:09: 43:39:99:79:6e:27:c4:9c:6a:3a:43:95:c9:09:b7:71:9a:9c: 7f:46:85:a8:d9:b6:a3:6a:3c:a9:79:87:3e:89:c1:5b:37:f8: 29:f2:3a:e9:cb:3d:98:3c:3f:f5:c0:e0:f7:55:97:6d:64:81: 90:55:f2:5e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZp8MQEnOy42k8zmOU97xD7WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk OGRhYmUwHhcNMjUxMTEzMDc0OTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZGRmZTk2ZDgzNDk0YmE2MjJmYTRkMmQ1NmMwZWMxMmIyZGRjNzJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5NS+2Pme3MyfSj07ttrS93w2fwg 8tlZV8c3y6i+QyiDfrzDZroGhPnaLFdHlRFSzXnXGFt5U41FJXJWOhCTgmf0Cioc 7Xs1YFtybf1uNqChhFoZuv3g5KVl7xC7fqE8R0jED+9mkoFNDuFm4xXayvT8wGg1 6fuXLrXCopGkWYXyQM/99L0xKzupuI2lH77Lo/2pjlTaGR7mWxEHgh2lCNT4QRQk YoJwNy8Ik9cg+RVy8LgA1yCeFVcNJdwdSGkRPV2NFbsURm/MCzt9zU5e2t6tlwOD MndxMPD8SLZ5BtXTdhFJG7kTQUZl6As0AHO08GWtdQlqHSjRYKKg3aVucQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB3f6W2DSUumIvpNLVbA7BKy3ccqMB8GA1UdIwQY MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt ODJhZDE0NTU1ZWFhLzEvSGRfcGJZTkpTNllpLWswdFZzRHNFckxkeHlvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEtODJhZDE0NTU1ZWFh LzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCWbkcMA0G CSqGSIb3DQEBCwUAA4IBAQBoW4MxWfeNZTygoIalBawyEnD24xAQijC8gLHE6wS1 gPxfckRJouU26MZNDnYUxYewbD4JeNEsceFlpOxmr4YIlvVW0L4Zxk7dyedjrVMa JCX4EsruRcB/W0zrdab8l3wUT+7dJ2C+6JHAIJd7bcM6n8zmhJLYF/jgzXZ3aiel tQ06OTTWMbq2Qobs33iIBpXUJEgExNFWTPU+95GB3m10THm5PvHaYLH9llii5og0 6V/dFhwQjd/BMUjrn2nSMLDW4zKYFglDOZl5bifEnGo6Q5XJCbdxmpx/RoWo2baj ajypeYc+icFbN/gp8jrpyz2YPD/1wOD3VZdtZIGQVfJe -----END CERTIFICATE-----Generated at Fri Dec 5 14:02:08 2025 by rpki-client