This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/hyf_FSstDRsTVrHqWp4atR0wNuE.roa File: hyf_FSstDRsTVrHqWp4atR0wNuE.roa (raw, json) Hash identifier: 9ioSdjemsZQEdMQrcBPYz4QYSaYVbVg2990HFiQlLkg= Subject key identifier: 87:27:FF:15:2B:2D:0D:1B:13:56:B1:EA:5A:9E:1A:B5:1D:30:36:E1 Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c Certificate serial: 019B022E11AD795AB7A36DE2FFBF4DB90DA5 Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/hyf_FSstDRsTVrHqWp4atR0wNuE.roa Signing time: Tue 09 Dec 2025 08:15:32 +0000 ROA not before: Tue 09 Dec 2025 08:15:32 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 25198 IP address blocks: 144.56.37.0/24 maxlen: 24 144.56.86.0/24 maxlen: 24 144.56.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 11:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:02:2e:11:ad:79:5a:b7:a3:6d:e2:ff:bf:4d:b9:0d:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16055801b775e774306321455fd463fbd9273c4c Validity Not Before: Dec 9 08:15:32 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8727ff152b2d0d1b1356b1ea5a9e1ab51d3036e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d7:e0:ed:ad:32:10:af:f5:58:b6:88:ef:ec: 04:35:eb:31:99:d3:5f:a9:0e:1a:17:38:64:bb:7d: ca:fd:50:60:22:8f:87:dc:9a:b3:99:63:0d:7d:9c: 2d:d0:2f:ad:ce:5a:16:88:31:c0:db:2c:55:ae:e8: f9:43:d5:fa:03:79:89:64:89:db:92:da:33:19:3d: 85:5a:5a:e2:bc:69:61:04:04:89:09:2e:60:0f:4b: c8:9e:c0:63:24:60:f6:e3:c8:60:b8:c6:4d:17:24: c3:36:31:4d:b3:8d:57:25:30:cd:95:73:7a:3c:6e: e5:28:55:9e:50:fe:5d:44:e4:fd:57:46:91:76:4e: 6b:34:bf:65:2a:fb:39:2d:fc:c2:5a:9b:1a:df:3f: 4e:2a:fe:1a:3c:cd:b5:5c:bb:2b:98:33:94:fc:3f: ca:2f:41:16:81:30:3b:3d:b6:87:8e:e8:5b:51:05: 2b:66:dd:e6:ae:21:34:51:95:13:ff:d1:4f:52:7b: 54:d1:3d:44:0c:02:ad:cb:b7:1b:49:d3:2e:ee:eb: ee:89:4a:d5:63:4d:29:ec:98:f9:e5:99:ba:67:48: 7c:a9:47:20:03:68:17:c9:6c:fe:94:e5:99:27:6e: b2:6a:a4:d5:93:04:ac:71:9e:3d:c4:8a:e3:ba:fb: 28:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:27:FF:15:2B:2D:0D:1B:13:56:B1:EA:5A:9E:1A:B5:1D:30:36:E1 X509v3 Authority Key Identifier: keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/hyf_FSstDRsTVrHqWp4atR0wNuE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.56.37.0/24 144.56.86.0/24 144.56.107.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:19:f5:12:06:76:cd:34:b6:02:50:0d:18:6b:b9:0f:62:1b: 22:2c:8a:64:cc:9b:35:ba:1b:46:f5:65:f5:ab:4a:a4:d2:03: 1a:6e:65:8d:d3:22:75:06:5b:7b:fa:c6:8e:cf:25:1a:d3:9f: ee:19:01:52:e6:28:86:cb:d2:f4:74:af:63:34:27:5a:e6:18: 42:4d:0f:2f:5d:34:62:a1:4f:82:e5:c1:4a:90:0b:90:6a:eb: d1:99:10:01:63:ee:0e:1e:3d:20:4a:67:f6:37:57:6f:5e:f6: f5:d4:81:88:88:5e:42:12:d8:f1:d9:cf:a9:27:13:75:d4:89: 3b:8b:98:dd:99:45:ad:83:e2:fb:f1:bb:2d:37:a6:64:08:17: d6:06:77:b8:55:30:a4:f3:30:a5:e5:a0:45:1a:16:1a:3d:53: 43:89:c6:7b:cb:ae:c1:1c:aa:ad:8a:11:ab:2e:b0:cb:20:f8: 89:db:c0:d0:46:c7:33:f1:dc:4d:01:74:47:7c:64:48:31:cc: 0d:e9:bb:00:d5:25:f7:2c:cf:ea:14:36:56:e3:9d:b0:db:59: 82:57:2b:8d:ef:e7:82:f6:6e:a1:e7:12:94:1d:de:3b:2c:6a: 46:51:0d:b8:4d:0b:e8:f7:6c:4f:27:a7:d0:e7:a7:c4:ea:7b: 5c:c4:d3:12 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZsCLhGteVq3o23i/79NuQ2lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MDU1ODAxYjc3NWU3NzQzMDYzMjE0NTVmZDQ2M2ZiZDky NzNjNGMwHhcNMjUxMjA5MDgxNTMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NzI3ZmYxNTJiMmQwZDFiMTM1NmIxZWE1YTllMWFiNTFkMzAzNmUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9fg7a0yEK/1WLaI7+wENesxmdNf qQ4aFzhku33K/VBgIo+H3JqzmWMNfZwt0C+tzloWiDHA2yxVruj5Q9X6A3mJZInb ktozGT2FWlrivGlhBASJCS5gD0vInsBjJGD248hguMZNFyTDNjFNs41XJTDNlXN6 PG7lKFWeUP5dROT9V0aRdk5rNL9lKvs5LfzCWpsa3z9OKv4aPM21XLsrmDOU/D/K L0EWgTA7PbaHjuhbUQUrZt3mriE0UZUT/9FPUntU0T1EDAKty7cbSdMu7uvuiUrV Y00p7Jj55Zm6Z0h8qUcgA2gXyWz+lOWZJ26yaqTVkwSscZ49xIrjuvsoPQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFIcn/xUrLQ0bE1ax6lqeGrUdMDbhMB8GA1UdIwQY MBaAFBYFWAG3ded0MGMhRV/UY/vZJzxMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgt MTM1NzE3ZWYzODhhLzEvaHlmX0ZTc3REUnNUVnJIcVdwNGF0UjB3TnVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgtMTM1NzE3ZWYzODhh LzEvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAkDglAwQA kDhWAwQAkDhrMA0GCSqGSIb3DQEBCwUAA4IBAQCaGfUSBnbNNLYCUA0Ya7kPYhsi LIpkzJs1uhtG9WX1q0qk0gMabmWN0yJ1Blt7+saOzyUa05/uGQFS5iiGy9L0dK9j NCda5hhCTQ8vXTRioU+C5cFKkAuQauvRmRABY+4OHj0gSmf2N1dvXvb11IGIiF5C Etjx2c+pJxN11Ik7i5jdmUWtg+L78bstN6ZkCBfWBne4VTCk8zCl5aBFGhYaPVND icZ7y67BHKqtihGrLrDLIPiJ28DQRscz8dxNAXRHfGRIMcwN6bsA1SX3LM/qFDZW 452w21mCVyuN7+eC9m6h5xKUHd47LGpGUQ24TQvo92xPJ6fQ56fE6ntcxNMS -----END CERTIFICATE-----Generated at Fri Dec 19 21:22:16 2025 by rpki-client