This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/257fd7-a9f7-4284-acf3-34304f5cda98/1/hw_fy601pCnJdWJqGO21hqXw0e0.roa File: hw_fy601pCnJdWJqGO21hqXw0e0.roa (raw, json) Hash identifier: nKa3P8/VrIIMHKO5DiFWr4AqxiZeZFxFV2r+HmZmd+o= Subject key identifier: 87:0F:DF:CB:AD:35:A4:29:C9:75:62:6A:18:ED:B5:86:A5:F0:D1:ED Certificate issuer: /CN=fd385a616398e416c70dcb322566f93e3d2fbf13 Certificate serial: 019B26D26371E2226A30E7A1AE37905F4C23 Authority key identifier: FD:38:5A:61:63:98:E4:16:C7:0D:CB:32:25:66:F9:3E:3D:2F:BF:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ThaYWOY5BbHDcsyJWb5Pj0vvxM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/257fd7-a9f7-4284-acf3-34304f5cda98/1/hw_fy601pCnJdWJqGO21hqXw0e0.roa Signing time: Tue 16 Dec 2025 11:01:20 +0000 ROA not before: Tue 16 Dec 2025 11:01:20 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 208744 IP address blocks: 46.31.64.0/24 maxlen: 24 185.202.110.0/24 maxlen: 24 185.247.94.0/24 maxlen: 24 185.247.95.0/24 maxlen: 24 2a0d:bc80::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/257fd7-a9f7-4284-acf3-34304f5cda98/1/_ThaYWOY5BbHDcsyJWb5Pj0vvxM.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/257fd7-a9f7-4284-acf3-34304f5cda98/1/_ThaYWOY5BbHDcsyJWb5Pj0vvxM.mft rsync://rpki.ripe.net/repository/DEFAULT/_ThaYWOY5BbHDcsyJWb5Pj0vvxM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 08:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:d2:63:71:e2:22:6a:30:e7:a1:ae:37:90:5f:4c:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd385a616398e416c70dcb322566f93e3d2fbf13 Validity Not Before: Dec 16 11:01:20 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=870fdfcbad35a429c975626a18edb586a5f0d1ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a4:62:fd:11:dd:b3:e0:6e:cb:89:a9:25:0e: fd:7a:b6:0f:b8:7b:93:0f:bc:05:b0:f3:7b:52:9d: f0:8b:fc:73:97:91:30:6a:9a:4d:f6:47:d1:ed:56: a6:84:9b:05:7f:f3:c3:0b:cf:8f:4b:1d:90:d4:b8: 49:0c:ba:f2:42:bc:04:ec:dc:4a:ca:91:2a:2b:29: f0:11:cb:f2:71:a7:c4:30:48:e7:75:b0:ce:fb:79: 8b:57:fb:32:11:b1:4f:e0:72:b1:21:5f:79:36:5a: 54:91:d2:39:4b:a9:59:79:ec:aa:eb:59:13:b2:9e: 19:17:73:a7:68:f7:3d:99:55:5b:9a:2b:8d:61:ed: 9b:3e:fe:2c:01:ac:1c:e2:ce:59:1f:dc:90:5d:40: b0:17:15:5a:ac:ff:77:21:92:1e:3f:e1:d2:b9:cf: ef:fc:01:d9:d4:3e:28:94:db:69:27:53:f0:bd:fc: c3:a7:b4:68:7a:31:ed:3c:17:6c:9a:90:be:52:f2: e2:85:5d:96:7c:34:f0:15:d5:8a:ca:79:13:8b:3d: 37:4d:8f:9d:25:73:89:50:ec:8c:df:d5:a2:52:45: fb:d3:68:d2:21:b1:19:20:01:4d:83:49:68:fd:6e: df:f5:84:a9:69:b0:c2:fd:93:f8:14:d9:7a:61:b2: 51:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:0F:DF:CB:AD:35:A4:29:C9:75:62:6A:18:ED:B5:86:A5:F0:D1:ED X509v3 Authority Key Identifier: keyid:FD:38:5A:61:63:98:E4:16:C7:0D:CB:32:25:66:F9:3E:3D:2F:BF:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ThaYWOY5BbHDcsyJWb5Pj0vvxM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/257fd7-a9f7-4284-acf3-34304f5cda98/1/hw_fy601pCnJdWJqGO21hqXw0e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/257fd7-a9f7-4284-acf3-34304f5cda98/1/_ThaYWOY5BbHDcsyJWb5Pj0vvxM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.31.64.0/24 185.202.110.0/24 185.247.94.0/23 IPv6: 2a0d:bc80::/29 Signature Algorithm: sha256WithRSAEncryption a5:78:69:6f:d5:a0:e2:94:cd:39:36:44:ac:20:a2:63:25:a0: 54:2a:b5:92:e7:d7:c0:e2:b6:e4:2c:a7:c1:7a:25:37:3a:e4: d3:c5:fd:44:f8:62:e9:7f:0c:a6:85:66:b5:1f:cf:7f:db:fa: 97:40:8c:47:e7:da:91:c2:47:8f:8d:46:44:5f:8a:11:2e:bc: a9:6e:b7:f3:bd:2b:49:f1:91:da:3c:80:a9:ac:67:46:05:d2: fa:5d:a8:41:53:96:b5:43:e6:fc:9d:59:f5:0f:ee:06:50:c6: 8b:38:85:ab:69:51:8b:2f:48:a8:bb:a5:36:8c:b7:b4:7c:f9: 17:d9:7f:ed:3b:c0:e9:7e:d7:2d:89:c1:69:36:bb:fe:d9:65: 9c:a1:00:12:5b:22:c1:4f:f4:42:11:36:7a:d8:74:25:03:03: 2c:10:16:69:27:7a:19:ef:37:46:52:f1:7d:5b:67:5b:7a:71: 43:9f:6d:92:76:7b:61:de:b4:43:0d:4c:7a:b8:1b:bd:af:5d: 55:24:ca:74:c4:56:aa:83:a6:2d:55:cc:d1:cf:1c:29:e7:bd: 9e:56:d9:11:d6:92:a7:e0:45:f5:ae:65:00:99:31:7a:6c:2a: 26:57:de:50:40:bb:30:a7:27:43:3d:dd:b1:48:7e:2e:5d:08: 12:9b:e7:e0 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZsm0mNx4iJqMOehrjeQX0wjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkMzg1YTYxNjM5OGU0MTZjNzBkY2IzMjI1NjZmOTNlM2Qy ZmJmMTMwHhcNMjUxMjE2MTEwMTIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NzBmZGZjYmFkMzVhNDI5Yzk3NTYyNmExOGVkYjU4NmE1ZjBkMWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6Ri/RHds+Buy4mpJQ79erYPuHuT D7wFsPN7Up3wi/xzl5EwappN9kfR7VamhJsFf/PDC8+PSx2Q1LhJDLryQrwE7NxK ypEqKynwEcvycafEMEjndbDO+3mLV/syEbFP4HKxIV95NlpUkdI5S6lZeeyq61kT sp4ZF3OnaPc9mVVbmiuNYe2bPv4sAawc4s5ZH9yQXUCwFxVarP93IZIeP+HSuc/v /AHZ1D4olNtpJ1PwvfzDp7RoejHtPBdsmpC+UvLihV2WfDTwFdWKynkTiz03TY+d JXOJUOyM39WiUkX702jSIbEZIAFNg0lo/W7f9YSpabDC/ZP4FNl6YbJROQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFIcP38utNaQpyXViahjttYal8NHtMB8GA1UdIwQY MBaAFP04WmFjmOQWxw3LMiVm+T49L78TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1RoYVlXT1k1QmJIRGNzeUpXYjVQajB2dnhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8yNTdmZDctYTlmNy00Mjg0LWFjZjMt MzQzMDRmNWNkYTk4LzEvaHdfZnk2MDFwQ25KZFdKcUdPMjFocVh3MGUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8yNTdmZDctYTlmNy00Mjg0LWFjZjMtMzQzMDRmNWNkYTk4 LzEvX1RoYVlXT1k1QmJIRGNzeUpXYjVQajB2dnhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQALh9AAwQA ucpuAwQBufdeMA0EAgACMAcDBQMqDbyAMA0GCSqGSIb3DQEBCwUAA4IBAQCleGlv 1aDilM05NkSsIKJjJaBUKrWS59fA4rbkLKfBeiU3OuTTxf1E+GLpfwymhWa1H89/ 2/qXQIxH59qRwkePjUZEX4oRLrypbrfzvStJ8ZHaPICprGdGBdL6XahBU5a1Q+b8 nVn1D+4GUMaLOIWraVGLL0iou6U2jLe0fPkX2X/tO8DpftcticFpNrv+2WWcoQAS WyLBT/RCETZ62HQlAwMsEBZpJ3oZ7zdGUvF9W2dbenFDn22Sdnth3rRDDUx6uBu9 r11VJMp0xFaqg6YtVczRzxwp572eVtkR1pKn4EX1rmUAmTF6bComV95QQLswpydD Pd2xSH4uXQgSm+fg -----END CERTIFICATE-----Generated at Sun Dec 21 17:11:16 2025 by rpki-client