This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/657197-c628-48b1-956d-effe955a5d64/1/_hY8OE1vA86wyK3ByKxKme_jHPA.roa File: _hY8OE1vA86wyK3ByKxKme_jHPA.roa (raw, json) Hash identifier: 77qfF/YB8xlTjgPPV6F7smZo7NAYUmHDjTAKbxWVa7Q= Subject key identifier: FE:16:3C:38:4D:6F:03:CE:B0:C8:AD:C1:C8:AC:4A:99:EF:E3:1C:F0 Certificate issuer: /CN=c1e8b88f1e30573a0e20e479d5ba00b4e91827b6 Certificate serial: 019B35D991D74BC14DE068DC46A5811140C7 Authority key identifier: C1:E8:B8:8F:1E:30:57:3A:0E:20:E4:79:D5:BA:00:B4:E9:18:27:B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wei4jx4wVzoOIOR51boAtOkYJ7Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/657197-c628-48b1-956d-effe955a5d64/1/_hY8OE1vA86wyK3ByKxKme_jHPA.roa Signing time: Fri 19 Dec 2025 09:03:29 +0000 ROA not before: Fri 19 Dec 2025 09:03:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 31317 IP address blocks: 91.198.136.0/24 maxlen: 24 185.170.244.0/22 maxlen: 32 2a0a:b900::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/657197-c628-48b1-956d-effe955a5d64/1/wei4jx4wVzoOIOR51boAtOkYJ7Y.crl rsync://rpki.ripe.net/repository/DEFAULT/50/657197-c628-48b1-956d-effe955a5d64/1/wei4jx4wVzoOIOR51boAtOkYJ7Y.mft rsync://rpki.ripe.net/repository/DEFAULT/wei4jx4wVzoOIOR51boAtOkYJ7Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:d9:91:d7:4b:c1:4d:e0:68:dc:46:a5:81:11:40:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1e8b88f1e30573a0e20e479d5ba00b4e91827b6 Validity Not Before: Dec 19 09:03:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fe163c384d6f03ceb0c8adc1c8ac4a99efe31cf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:6c:af:30:5b:2e:c9:d4:53:7f:8d:ac:1e:1c: 98:d0:ae:7c:76:fe:b3:8b:1a:a7:e8:06:79:eb:01: 2f:41:a1:89:28:95:26:f1:ad:c1:15:6c:4a:87:46: 9e:41:89:70:3a:aa:a7:40:17:be:82:8e:36:d6:c8: 6b:79:80:90:c8:b0:93:d5:ad:10:b0:ac:e2:a0:4a: fd:ea:77:63:76:05:c4:4f:0f:e5:f0:1d:e5:a6:3e: d6:d7:86:5e:7e:c5:47:69:6d:90:53:1f:87:7d:94: 84:5b:61:48:69:65:03:51:cd:4e:d8:30:4d:19:bf: 0b:f2:84:20:ab:19:94:a6:02:c7:99:3e:69:a8:3d: 4d:3c:80:9f:13:23:ea:c7:de:43:e2:22:5e:b9:59: e8:09:5e:bc:9e:ff:a0:84:1e:d5:5f:5c:64:d8:d9: 3e:69:47:c2:78:e1:43:e0:2f:90:d2:06:fc:bf:ba: 98:2e:19:dd:8b:b2:96:99:5e:d0:31:56:fc:97:aa: 5d:d2:75:4d:15:cb:36:d2:4f:f0:b0:c4:f1:4a:1f: 3b:0b:e2:8b:17:fa:0d:15:e6:f4:f4:71:24:32:60: 07:ba:10:76:8e:83:e3:4d:30:d8:9d:ce:74:96:99: 36:20:b4:c9:b8:89:da:f8:01:65:e6:63:3f:09:59: 82:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:16:3C:38:4D:6F:03:CE:B0:C8:AD:C1:C8:AC:4A:99:EF:E3:1C:F0 X509v3 Authority Key Identifier: keyid:C1:E8:B8:8F:1E:30:57:3A:0E:20:E4:79:D5:BA:00:B4:E9:18:27:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wei4jx4wVzoOIOR51boAtOkYJ7Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/657197-c628-48b1-956d-effe955a5d64/1/_hY8OE1vA86wyK3ByKxKme_jHPA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/657197-c628-48b1-956d-effe955a5d64/1/wei4jx4wVzoOIOR51boAtOkYJ7Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.136.0/24 185.170.244.0/22 IPv6: 2a0a:b900::/29 Signature Algorithm: sha256WithRSAEncryption 7e:d6:a0:f7:44:ce:9f:31:95:f8:22:45:38:91:66:55:60:71: 73:c7:4a:6b:34:de:8e:95:c2:e1:1b:ff:39:2c:e1:22:a5:de: 32:7f:99:33:41:78:41:63:15:ea:92:66:40:41:d4:69:09:0d: 2b:6d:fc:81:2c:57:9a:07:3e:f4:07:29:9b:96:fd:6d:b6:3c: fb:e4:f7:ef:19:cc:48:ce:1b:41:a1:2f:87:67:7c:6e:1b:a6: 6b:86:2c:3a:ac:88:19:b4:93:a1:74:12:47:41:a8:f2:c9:cb: 59:e1:5e:1d:d8:7f:48:ff:2f:ec:75:05:03:60:cb:ef:88:c0: 81:7d:5c:42:9b:8d:96:a8:d1:72:ea:2e:14:77:ee:4d:06:68: 93:6c:de:24:98:a5:bb:f3:83:5e:f1:26:82:03:a8:33:78:2b: 7f:63:86:9b:e3:2c:cd:44:79:5d:a9:3c:9f:f4:a2:84:09:b0: f5:09:58:49:00:50:27:f7:f8:26:7e:a2:53:f4:54:b7:0a:43: 93:f7:bc:ee:6f:5d:79:e2:cf:59:4b:b2:82:1a:dd:a0:bc:e1: c1:f3:03:12:a1:82:b4:a2:73:e5:36:22:63:6e:ee:3a:21:36: 30:3f:6c:83:0e:78:0f:a1:cb:7b:a2:51:4b:f5:92:ea:f2:ff: 81:14:42:c0 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZs12ZHXS8FN4GjcRqWBEUDHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxZThiODhmMWUzMDU3M2EwZTIwZTQ3OWQ1YmEwMGI0ZTkx ODI3YjYwHhcNMjUxMjE5MDkwMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZTE2M2MzODRkNmYwM2NlYjBjOGFkYzFjOGFjNGE5OWVmZTMxY2YwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6myvMFsuydRTf42sHhyY0K58dv6z ixqn6AZ56wEvQaGJKJUm8a3BFWxKh0aeQYlwOqqnQBe+go421shreYCQyLCT1a0Q sKzioEr96ndjdgXETw/l8B3lpj7W14ZefsVHaW2QUx+HfZSEW2FIaWUDUc1O2DBN Gb8L8oQgqxmUpgLHmT5pqD1NPICfEyPqx95D4iJeuVnoCV68nv+ghB7VX1xk2Nk+ aUfCeOFD4C+Q0gb8v7qYLhndi7KWmV7QMVb8l6pd0nVNFcs20k/wsMTxSh87C+KL F/oNFeb09HEkMmAHuhB2joPjTTDYnc50lpk2ILTJuIna+AFl5mM/CVmCnwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFP4WPDhNbwPOsMitwcisSpnv4xzwMB8GA1UdIwQY MBaAFMHouI8eMFc6DiDkedW6ALTpGCe2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2VpNGp4NHdWem9PSU9SNTFib0F0T2tZSjdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC82NTcxOTctYzYyOC00OGIxLTk1NmQt ZWZmZTk1NWE1ZDY0LzEvX2hZOE9FMXZBODZ3eUszQnlLeEttZV9qSFBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC82NTcxOTctYzYyOC00OGIxLTk1NmQtZWZmZTk1NWE1ZDY0 LzEvd2VpNGp4NHdWem9PSU9SNTFib0F0T2tZSjdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAW8aIAwQC uar0MA0EAgACMAcDBQMqCrkAMA0GCSqGSIb3DQEBCwUAA4IBAQB+1qD3RM6fMZX4 IkU4kWZVYHFzx0prNN6OlcLhG/85LOEipd4yf5kzQXhBYxXqkmZAQdRpCQ0rbfyB LFeaBz70Bymblv1ttjz75PfvGcxIzhtBoS+HZ3xuG6Zrhiw6rIgZtJOhdBJHQajy yctZ4V4d2H9I/y/sdQUDYMvviMCBfVxCm42WqNFy6i4Ud+5NBmiTbN4kmKW784Ne 8SaCA6gzeCt/Y4ab4yzNRHldqTyf9KKECbD1CVhJAFAn9/gmfqJT9FS3CkOT97zu b1154s9ZS7KCGt2gvOHB8wMSoYK0onPlNiJjbu46ITYwP2yDDngPoct7olFL9ZLq 8v+BFELA -----END CERTIFICATE-----Generated at Sat Dec 20 13:43:08 2025 by rpki-client