This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/_H0SXPGsnP8Mcli9NZFDZjfY1Zo.roa File: _H0SXPGsnP8Mcli9NZFDZjfY1Zo.roa (raw, json) Hash identifier: hcZN9Y/WVs+Jvfj2h19TEJ5/Vmx92kJ//R7/XLVV1AM= Subject key identifier: FC:7D:12:5C:F1:AC:9C:FF:0C:72:58:BD:35:91:43:66:37:D8:D5:9A Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9 Certificate serial: 019B11F40616A0707F32B16B8C21AFB2D9FB Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/_H0SXPGsnP8Mcli9NZFDZjfY1Zo.roa Signing time: Fri 12 Dec 2025 09:46:03 +0000 ROA not before: Fri 12 Dec 2025 09:46:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 202736 IP address blocks: 91.186.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:f4:06:16:a0:70:7f:32:b1:6b:8c:21:af:b2:d9:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9 Validity Not Before: Dec 12 09:46:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fc7d125cf1ac9cff0c7258bd3591436637d8d59a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0f:47:04:aa:44:60:e9:c7:39:8a:54:38:8a: 97:bc:51:2f:3d:e0:ba:aa:34:11:05:cb:ae:c3:cc: 33:ef:4c:03:18:ee:ce:78:fe:d9:fd:7a:59:f9:e0: 96:ba:ef:06:1d:f3:69:5c:57:5d:e4:31:07:28:32: 72:d3:8e:5c:54:ed:e5:cc:66:39:ac:fd:c6:bf:89: 30:bc:3b:26:2b:37:50:21:a9:f6:22:58:64:0c:c0: 5a:85:18:1a:67:3c:54:9b:ff:aa:48:99:21:2d:23: 27:72:02:db:21:e9:44:eb:06:4c:71:19:f6:18:ba: 3c:79:7e:db:5f:28:aa:5d:8e:12:32:15:56:fd:81: 96:bb:4e:4b:22:3f:e0:81:e3:e9:05:63:41:d7:73: 57:17:40:1d:b3:14:90:6d:1f:f5:f2:00:62:4e:07: 98:fc:f6:98:a4:b6:76:e7:ff:2e:4a:9f:1b:41:7e: bc:37:08:2a:07:da:58:c9:bb:3a:10:fe:a8:9a:f4: 1e:72:e5:40:15:a6:03:41:c3:9b:5f:4e:84:4f:f2: 36:51:7a:18:44:22:65:15:0e:f1:a9:56:03:9a:c4: 74:b2:01:f8:a5:f4:42:be:24:b9:5b:6a:2f:10:b2: 01:ed:81:91:e3:6d:9b:57:df:c6:1c:2a:65:8a:6a: f3:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:7D:12:5C:F1:AC:9C:FF:0C:72:58:BD:35:91:43:66:37:D8:D5:9A X509v3 Authority Key Identifier: keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/_H0SXPGsnP8Mcli9NZFDZjfY1Zo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.186.195.0/24 Signature Algorithm: sha256WithRSAEncryption 29:d7:be:7f:c5:63:7c:9a:3b:22:8b:1e:48:1c:a2:dc:43:d7: 04:06:06:44:33:d6:dd:ab:93:aa:69:1d:06:20:bf:30:ec:1f: 0e:8b:c2:b5:86:9b:15:93:f1:bf:7a:75:31:cb:cc:0c:36:ed: ea:3d:fe:b0:49:88:3b:46:db:4f:4a:88:49:8f:52:d5:64:db: e7:4c:bf:c4:e5:a3:87:71:a7:67:20:e2:13:68:0f:b6:e6:d8: 0d:3f:42:fd:2b:13:88:8d:9a:a5:d9:19:29:a5:91:2b:6e:0e: 1a:a1:34:fe:dc:73:6b:e8:5f:72:ff:fb:0c:fe:68:e6:18:23: 8f:5c:63:78:e1:99:8f:cd:cf:ef:5d:34:05:b0:15:68:39:0f: 18:f0:30:1f:43:92:4c:83:38:80:32:2c:d4:e3:21:dc:b3:24: dd:fa:9b:85:97:b3:9b:64:eb:c2:62:4e:24:60:39:1e:27:a2: 4f:c7:7c:11:ee:a5:89:89:0f:c8:f2:40:10:51:2e:05:5b:04: 20:83:6c:4e:c8:03:dd:df:f6:91:84:cf:f3:68:fc:6f:b6:e1: 50:52:42:a0:68:7c:39:81:ae:d2:77:0d:5d:7a:f9:22:c6:cc: a2:fc:30:af:76:48:26:90:4d:53:98:76:8c:83:8c:7d:43:2f: ff:61:0d:37 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsR9AYWoHB/MrFrjCGvstn7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1YmFmMjY5Njc1MTBiM2M1MmU0NmQxZGM1OTM5NjdjZGYy OWY5YzkwHhcNMjUxMjEyMDk0NjAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYzdkMTI1Y2YxYWM5Y2ZmMGM3MjU4YmQzNTkxNDM2NjM3ZDhkNTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQ9HBKpEYOnHOYpUOIqXvFEvPeC6 qjQRBcuuw8wz70wDGO7OeP7Z/XpZ+eCWuu8GHfNpXFdd5DEHKDJy045cVO3lzGY5 rP3Gv4kwvDsmKzdQIan2IlhkDMBahRgaZzxUm/+qSJkhLSMncgLbIelE6wZMcRn2 GLo8eX7bXyiqXY4SMhVW/YGWu05LIj/ggePpBWNB13NXF0AdsxSQbR/18gBiTgeY /PaYpLZ25/8uSp8bQX68NwgqB9pYybs6EP6omvQecuVAFaYDQcObX06ET/I2UXoY RCJlFQ7xqVYDmsR0sgH4pfRCviS5W2ovELIB7YGR422bV9/GHCplimrzTwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPx9ElzxrJz/DHJYvTWRQ2Y32NWaMB8GA1UdIwQY MBaAFFW68mlnUQs8UuRtHcWTlnzfKfnJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAt NDlmOTgxZWU1OTgxLzEvX0gwU1hQR3NuUDhNY2xpOU5aRkRaamZZMVpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAtNDlmOTgxZWU1OTgx LzEvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW7rDMA0G CSqGSIb3DQEBCwUAA4IBAQAp175/xWN8mjsiix5IHKLcQ9cEBgZEM9bdq5OqaR0G IL8w7B8Oi8K1hpsVk/G/enUxy8wMNu3qPf6wSYg7RttPSohJj1LVZNvnTL/E5aOH cadnIOITaA+25tgNP0L9KxOIjZql2RkppZErbg4aoTT+3HNr6F9y//sM/mjmGCOP XGN44ZmPzc/vXTQFsBVoOQ8Y8DAfQ5JMgziAMizU4yHcsyTd+puFl7ObZOvCYk4k YDkeJ6JPx3wR7qWJiQ/I8kAQUS4FWwQgg2xOyAPd3/aRhM/zaPxvtuFQUkKgaHw5 ga7Sdw1devkixsyi/DCvdkgmkE1TmHaMg4x9Qy//YQ03 -----END CERTIFICATE-----Generated at Fri Dec 19 16:49:00 2025 by rpki-client