This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/HsLS8TqY4NFLquD6H-5Z9XTyc6w.roa File: HsLS8TqY4NFLquD6H-5Z9XTyc6w.roa (raw, json) Hash identifier: g2/hdlCHK2Ht1c5u6jzay4iFxsxhaV8W4ya9D22Ghyw= Subject key identifier: 1E:C2:D2:F1:3A:98:E0:D1:4B:AA:E0:FA:1F:EE:59:F5:74:F2:73:AC Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Certificate serial: 019B20CE9CD5DF8E56D4DE8AEEA358F9DCEF Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/HsLS8TqY4NFLquD6H-5Z9XTyc6w.roa Signing time: Mon 15 Dec 2025 06:59:30 +0000 ROA not before: Mon 15 Dec 2025 06:59:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 31715 IP address blocks: 85.239.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 05:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:ce:9c:d5:df:8e:56:d4:de:8a:ee:a3:58:f9:dc:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Validity Not Before: Dec 15 06:59:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1ec2d2f13a98e0d14baae0fa1fee59f574f273ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:32:75:6f:a3:c4:63:40:97:62:1e:d8:75:b7: 77:0f:b1:8b:82:74:6b:6a:74:62:e1:df:5e:4f:e8: fa:58:77:72:a1:6b:ad:98:ae:25:d3:81:f4:76:11: 8b:07:f3:4b:39:42:4c:b2:29:97:18:42:31:69:1b: e8:c5:41:5e:6d:4d:08:a6:66:fe:05:a9:e8:30:a7: 36:03:de:12:3e:ca:db:37:81:c9:72:ff:c7:1d:0e: 87:3a:15:36:2b:9e:4f:55:ac:8f:2a:b3:f0:10:7b: de:3f:2c:70:0f:14:3d:aa:8e:88:76:38:04:a9:51: d3:e9:c8:f8:2a:2c:f7:97:a0:5e:b8:e8:73:01:a2: a0:e5:72:9b:3c:9c:2b:77:15:9e:77:18:57:be:5f: 7a:ff:7b:d8:96:4b:55:0b:8e:3e:06:1f:a4:78:d6: fd:d1:95:a0:26:b7:97:e4:2a:a7:f8:de:81:5d:41: 6b:e8:56:cf:8a:59:2e:7b:86:79:fc:a0:9b:10:7b: 72:96:c1:25:c3:85:b0:b1:bc:2b:6f:35:79:0b:1e: 83:ab:70:ea:a6:9f:9d:09:b3:5e:ab:6f:4c:2e:fb: 3b:f2:75:a2:7d:71:cc:29:dc:21:2e:1d:25:3d:1b: 08:b9:bd:fb:25:9a:f3:56:c9:05:01:24:2f:f6:25: 66:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:C2:D2:F1:3A:98:E0:D1:4B:AA:E0:FA:1F:EE:59:F5:74:F2:73:AC X509v3 Authority Key Identifier: keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/HsLS8TqY4NFLquD6H-5Z9XTyc6w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.239.154.0/24 Signature Algorithm: sha256WithRSAEncryption 04:d1:96:67:94:3b:4c:3b:bf:fc:59:97:a8:b1:cc:b9:7c:e5: de:49:8e:4b:fd:2b:56:a9:fd:ef:56:10:01:20:f6:76:09:eb: e2:08:71:b4:54:75:6a:6a:00:d6:4f:d6:c5:f6:9e:7c:02:24: 6d:9b:e4:71:7c:d3:d3:4b:2e:89:9d:b2:4d:b9:46:e9:91:01: f3:a2:36:72:2b:33:9a:4e:a0:c6:73:f1:90:48:ec:a6:f1:86: 70:41:d4:87:be:11:22:24:ce:4a:f4:45:fa:e8:52:19:5f:35: 22:8c:e0:bd:ad:08:25:2b:f6:bd:9f:36:bf:08:9e:c6:57:d0: 3e:ac:9f:1a:02:b3:2c:aa:bb:5f:38:fa:d2:93:ac:d5:81:24: 75:c0:db:1b:15:e4:06:2b:0f:b8:35:14:09:8c:84:02:0c:34: 17:b7:25:f9:17:9e:09:78:4f:27:99:a4:ce:51:44:87:9a:33: 2e:5f:17:87:d6:6e:92:9d:1e:a8:34:35:54:58:4e:ce:38:a9: d8:9f:2e:6d:90:81:d5:2f:3c:98:fe:ea:ef:ab:7d:21:ff:92: f4:17:e6:c5:e3:b7:4c:fb:8c:1f:58:d4:33:cb:4e:c3:7a:41: 57:aa:fa:0a:db:0a:7f:7d:aa:0b:f8:ef:64:9c:e9:b4:e7:b7: 37:99:06:be -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsgzpzV345W1N6K7qNY+dzvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZDJkYWZmMWM1YmI2MWEwYWM4YjNjYWVhZDRiOGExZmEy ODRkMGYwHhcNMjUxMjE1MDY1OTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZWMyZDJmMTNhOThlMGQxNGJhYWUwZmExZmVlNTlmNTc0ZjI3M2FjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDJ1b6PEY0CXYh7Ydbd3D7GLgnRr anRi4d9eT+j6WHdyoWutmK4l04H0dhGLB/NLOUJMsimXGEIxaRvoxUFebU0Ipmb+ BanoMKc2A94SPsrbN4HJcv/HHQ6HOhU2K55PVayPKrPwEHvePyxwDxQ9qo6IdjgE qVHT6cj4Kiz3l6BeuOhzAaKg5XKbPJwrdxWedxhXvl96/3vYlktVC44+Bh+keNb9 0ZWgJreX5Cqn+N6BXUFr6FbPilkue4Z5/KCbEHtylsElw4WwsbwrbzV5Cx6Dq3Dq pp+dCbNeq29MLvs78nWifXHMKdwhLh0lPRsIub37JZrzVskFASQv9iVmvQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB7C0vE6mODRS6rg+h/uWfV08nOsMB8GA1UdIwQY MBaAFCnS2v8cW7YaCsizyurUuKH6KE0PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3Zjgt NGY1N2Q5Y2Y1Y2FhLzEvSHNMUzhUcVk0TkZMcXVENkgtNVo5WFR5YzZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3ZjgtNGY1N2Q5Y2Y1Y2Fh LzEvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVe+aMA0G CSqGSIb3DQEBCwUAA4IBAQAE0ZZnlDtMO7/8WZeoscy5fOXeSY5L/StWqf3vVhAB IPZ2CeviCHG0VHVqagDWT9bF9p58AiRtm+RxfNPTSy6JnbJNuUbpkQHzojZyKzOa TqDGc/GQSOym8YZwQdSHvhEiJM5K9EX66FIZXzUijOC9rQglK/a9nza/CJ7GV9A+ rJ8aArMsqrtfOPrSk6zVgSR1wNsbFeQGKw+4NRQJjIQCDDQXtyX5F54JeE8nmaTO UUSHmjMuXxeH1m6SnR6oNDVUWE7OOKnYny5tkIHVLzyY/urvq30h/5L0F+bF47dM +4wfWNQzy07DekFXqvoK2wp/faoL+O9knOm057c3mQa+ -----END CERTIFICATE-----Generated at Sat Dec 20 12:54:39 2025 by rpki-client