This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/HzDvBeLYGr_ZTI1_kgKXDeomTvk.roa File: HzDvBeLYGr_ZTI1_kgKXDeomTvk.roa (raw, json) Hash identifier: N7WWBB3O4TVdAGj4IUZ2US/YD6EO1XiPjFKXmTMrnlw= Subject key identifier: 1F:30:EF:05:E2:D8:1A:BF:D9:4C:8D:7F:92:02:97:0D:EA:26:4E:F9 Certificate issuer: /CN=836462c62c7f63d2f5d787a701d779ab696e2236 Certificate serial: 019B35DA7BDB15C0DCCFDD0F7689723E0BCB Authority key identifier: 83:64:62:C6:2C:7F:63:D2:F5:D7:87:A7:01:D7:79:AB:69:6E:22:36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2Rixix_Y9L114enAdd5q2luIjY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/HzDvBeLYGr_ZTI1_kgKXDeomTvk.roa Signing time: Fri 19 Dec 2025 09:04:29 +0000 ROA not before: Fri 19 Dec 2025 09:04:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 209128 IP address blocks: 185.149.121.0/24 maxlen: 24 2a0d:5980:ebae::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.crl rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.mft rsync://rpki.ripe.net/repository/DEFAULT/g2Rixix_Y9L114enAdd5q2luIjY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 15:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:da:7b:db:15:c0:dc:cf:dd:0f:76:89:72:3e:0b:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=836462c62c7f63d2f5d787a701d779ab696e2236 Validity Not Before: Dec 19 09:04:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1f30ef05e2d81abfd94c8d7f9202970dea264ef9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:df:26:15:dd:2f:1d:f4:b2:5e:18:c1:d4:99: 89:d9:95:7b:b6:77:68:c2:92:34:53:a6:91:bc:7d: 64:b3:60:08:61:70:e2:a1:aa:c5:af:0a:de:07:5b: e8:95:14:b3:1c:38:60:2a:53:2e:03:d7:7f:ca:82: 1e:63:0b:71:cb:b0:c9:fa:92:09:6f:05:b5:6d:50: 73:6a:91:e0:31:24:2d:ca:e0:0b:a6:48:f6:71:51: 40:6e:17:29:f8:ca:42:2c:c0:64:f6:03:d9:3b:04: 15:77:dc:7e:9b:56:17:41:d2:1d:03:9c:fb:59:b5: 70:cb:ce:4c:0a:39:03:fe:22:e3:96:69:4e:52:47: c1:7a:7b:c3:f9:ca:41:11:b0:0e:e7:7d:4e:f0:2b: 8a:69:f5:59:64:e3:a6:62:42:d4:90:bb:23:07:0c: 8b:60:b5:8a:9b:04:3d:9a:81:55:df:60:a7:d2:1a: 1b:d9:30:d1:a7:72:17:1e:62:5d:32:ba:48:94:a2: 75:8a:44:6c:ce:e2:70:7a:30:a7:7f:78:9e:8c:77: fb:a0:a5:a2:e2:99:9c:bf:26:ee:1c:85:87:e9:49: 91:3f:dc:18:7a:23:f8:a9:a1:45:1d:39:45:15:fc: 33:55:b6:27:5e:83:94:2e:77:76:b0:34:27:2c:77: 60:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:30:EF:05:E2:D8:1A:BF:D9:4C:8D:7F:92:02:97:0D:EA:26:4E:F9 X509v3 Authority Key Identifier: keyid:83:64:62:C6:2C:7F:63:D2:F5:D7:87:A7:01:D7:79:AB:69:6E:22:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2Rixix_Y9L114enAdd5q2luIjY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/HzDvBeLYGr_ZTI1_kgKXDeomTvk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.149.121.0/24 IPv6: 2a0d:5980:ebae::/48 Signature Algorithm: sha256WithRSAEncryption 77:81:0c:b2:f1:e4:08:25:ad:c9:5a:f3:48:57:bc:76:d6:b4: 98:da:b0:22:32:78:59:b5:a2:7d:2a:3d:43:67:5f:96:2f:e4: 15:50:32:8a:7c:0e:53:e3:d6:7a:39:5b:e5:10:de:b5:b5:16: 0f:77:7b:bd:69:6c:38:e4:dd:d4:c4:b4:d4:c4:72:c7:89:0c: 9e:88:0e:74:5d:ad:f7:3a:79:96:c2:e0:ce:21:1b:ae:cd:f6: bc:21:0e:97:2b:8d:8b:b1:c9:0c:54:c5:de:4e:95:4a:d6:3a: ab:12:78:6b:d2:5c:1d:5d:10:34:93:85:84:b9:bd:fb:1f:61: cf:ad:ca:a0:42:f0:a8:f6:5c:6b:a7:c3:b9:9c:70:75:4b:01: 60:09:78:87:4c:85:23:62:48:c7:43:6c:27:ff:5e:8f:a5:05: 86:fd:c7:d1:6f:5d:08:f1:0b:f9:7b:b0:3c:e1:3d:a7:11:28: 7d:b6:e9:2a:f4:ee:b3:d8:77:ca:52:e4:24:88:c9:e1:21:8f: fa:1c:19:72:d9:b3:fd:ab:d6:48:28:8e:71:27:5c:f3:a5:3d: db:da:5e:cd:7e:f4:de:be:77:18:c5:70:64:4f:4a:66:d9:df: 8a:fd:89:86:e5:af:8c:a4:f3:0f:97:5f:7f:cf:a1:9b:53:07: 63:60:cf:b4 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZs12nvbFcDcz90PdolyPgvLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzNjQ2MmM2MmM3ZjYzZDJmNWQ3ODdhNzAxZDc3OWFiNjk2 ZTIyMzYwHhcNMjUxMjE5MDkwNDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjMwZWYwNWUyZDgxYWJmZDk0YzhkN2Y5MjAyOTcwZGVhMjY0ZWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA198mFd0vHfSyXhjB1JmJ2ZV7tndo wpI0U6aRvH1ks2AIYXDioarFrwreB1volRSzHDhgKlMuA9d/yoIeYwtxy7DJ+pIJ bwW1bVBzapHgMSQtyuALpkj2cVFAbhcp+MpCLMBk9gPZOwQVd9x+m1YXQdIdA5z7 WbVwy85MCjkD/iLjlmlOUkfBenvD+cpBEbAO531O8CuKafVZZOOmYkLUkLsjBwyL YLWKmwQ9moFV32Cn0hob2TDRp3IXHmJdMrpIlKJ1ikRszuJwejCnf3iejHf7oKWi 4pmcvybuHIWH6UmRP9wYeiP4qaFFHTlFFfwzVbYnXoOULnd2sDQnLHdguwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFB8w7wXi2Bq/2UyNf5IClw3qJk75MB8GA1UdIwQY MBaAFINkYsYsf2PS9deHpwHXeatpbiI2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzJSaXhpeF9ZOUwxMTRlbkFkZDVxMmx1SWpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8zNzE3Y2YtZmEzOC00ZTNlLWFlZmMt ZjkxMGU1MTc2YjVlLzEvSHpEdkJlTFlHcl9aVEkxX2tnS1hEZW9tVHZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8zNzE3Y2YtZmEzOC00ZTNlLWFlZmMtZjkxMGU1MTc2YjVl LzEvZzJSaXhpeF9ZOUwxMTRlbkFkZDVxMmx1SWpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuZV5MA8E AgACMAkDBwAqDVmA664wDQYJKoZIhvcNAQELBQADggEBAHeBDLLx5Aglrcla80hX vHbWtJjasCIyeFm1on0qPUNnX5Yv5BVQMop8DlPj1no5W+UQ3rW1Fg93e71pbDjk 3dTEtNTEcseJDJ6IDnRdrfc6eZbC4M4hG67N9rwhDpcrjYuxyQxUxd5OlUrWOqsS eGvSXB1dEDSThYS5vfsfYc+tyqBC8Kj2XGunw7mccHVLAWAJeIdMhSNiSMdDbCf/ Xo+lBYb9x9FvXQjxC/l7sDzhPacRKH226Sr07rPYd8pS5CSIyeEhj/ocGXLZs/2r 1kgojnEnXPOlPdvaXs1+9N6+dxjFcGRPSmbZ34r9iYblr4yk8w+XX3/PoZtTB2Ng z7Q= -----END CERTIFICATE-----Generated at Sat Dec 27 20:58:52 2025 by rpki-client