This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/H0EuDKc_0qiFwD_oB8SH7IZNLKw.roa File: H0EuDKc_0qiFwD_oB8SH7IZNLKw.roa (raw, json) Hash identifier: UoObSdqoM3rgoGxfUBoLZfUHgqMnC51MhumXeypBTEM= Subject key identifier: 1F:41:2E:0C:A7:3F:D2:A8:85:C0:3F:E8:07:C4:87:EC:86:4D:2C:AC Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954 Certificate serial: 019B2288CF76A7AD7E491D8EE1E07BFC9A1C Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/H0EuDKc_0qiFwD_oB8SH7IZNLKw.roa Signing time: Mon 15 Dec 2025 15:02:29 +0000 ROA not before: Mon 15 Dec 2025 15:02:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 393886 IP address blocks: 152.163.0.0/22 maxlen: 22 152.163.12.0/22 maxlen: 22 152.163.64.0/22 maxlen: 22 152.163.100.0/22 maxlen: 22 152.163.112.0/22 maxlen: 22 152.163.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 03:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:88:cf:76:a7:ad:7e:49:1d:8e:e1:e0:7b:fc:9a:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954 Validity Not Before: Dec 15 15:02:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1f412e0ca73fd2a885c03fe807c487ec864d2cac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f6:aa:f4:8a:0a:d7:64:3e:1d:72:80:35:44: 57:c2:cb:f9:e8:e5:f5:37:09:e5:ce:21:79:6a:e3: 39:64:9e:52:e0:4b:44:7f:bc:83:d3:c6:65:87:8b: 68:11:eb:53:0e:b6:da:9c:c4:03:57:26:4e:01:f0: 41:a9:48:b8:26:99:15:10:ca:07:ef:d2:9a:17:47: da:ae:bb:42:c4:65:08:34:50:13:39:1b:64:73:eb: 07:1a:a9:f7:11:05:e7:4d:b8:1f:15:01:d5:5f:6c: c8:ca:5b:ff:90:fb:e3:9d:20:ed:d2:28:f3:f5:fb: 00:13:17:17:5e:2d:68:31:5d:18:61:f1:7d:f2:58: 35:6e:42:11:31:65:d5:52:f7:a0:e4:dd:19:37:48: 69:08:9d:14:dd:5f:9b:a9:2f:f9:18:a3:7d:05:a9: 3d:96:08:a2:97:d5:31:b2:bb:9b:54:87:e7:62:a8: 5c:1e:53:96:45:9c:4b:33:ab:51:1e:ca:04:08:e4: e6:cd:2a:2d:ec:69:fc:4e:73:69:b3:63:04:a0:d4: f0:11:b9:fe:bf:1d:44:7a:3d:37:5a:10:83:66:00: a4:d4:21:58:9d:c9:f5:10:b8:dc:1e:dc:15:81:80: 3f:8c:3c:66:1b:7f:8c:4d:50:e6:89:36:a7:fb:c6: c6:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:41:2E:0C:A7:3F:D2:A8:85:C0:3F:E8:07:C4:87:EC:86:4D:2C:AC X509v3 Authority Key Identifier: keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/H0EuDKc_0qiFwD_oB8SH7IZNLKw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.163.0.0/22 152.163.12.0/22 152.163.64.0/22 152.163.100.0/22 152.163.112.0/22 152.163.120.0/22 Signature Algorithm: sha256WithRSAEncryption 52:94:b9:45:84:31:b8:50:94:12:10:e2:06:2c:e1:95:21:ef: ed:2e:43:d7:bd:17:33:75:45:3a:3b:08:b7:cb:b5:c9:9b:31: fc:56:6b:9e:c1:ed:6f:52:c2:bd:97:84:f2:de:8d:81:cb:76: fd:da:0e:3b:9a:0a:9a:81:ba:4b:b5:52:e4:8a:9a:1e:f1:3b: 57:fa:ca:1c:b1:e9:3a:ae:51:8e:45:57:57:d8:71:a1:b1:d5: e6:74:b0:f8:14:57:92:5e:41:73:b6:11:2a:78:a6:ee:58:57: 7e:52:d1:ca:79:65:36:e5:bc:d5:f4:87:6a:18:8f:d2:b3:c5: e4:c3:3c:80:81:a4:7d:3c:7a:d0:17:05:a1:d2:08:a4:91:1a: 84:f2:95:8a:8b:54:c2:10:a2:88:80:2a:c0:0c:57:43:52:b5: 4b:35:a8:63:fd:84:64:c8:a4:4e:97:36:c9:7a:60:59:93:ce: 7e:5b:d1:fe:88:dc:57:16:31:40:4b:25:ab:f6:6c:fc:d3:37: a7:ee:3e:a2:06:6e:0a:48:a7:6f:84:a1:5b:17:7b:b6:24:a0: 26:34:d8:db:9d:67:8b:3c:07:d3:7a:de:79:ce:96:54:43:a4: 0a:db:aa:c8:f5:36:d7:5a:09:21:44:63:f7:f5:5c:e5:f4:b1: f8:42:0d:f1 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZsiiM92p61+SR2O4eB7/JocMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMDIxYjI1MjIyMjk5N2JmZTMzYjdlNGIzMTVhYzhkNWUw Njc5NTQwHhcNMjUxMjE1MTUwMjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjQxMmUwY2E3M2ZkMmE4ODVjMDNmZTgwN2M0ODdlYzg2NGQyY2FjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vaq9IoK12Q+HXKANURXwsv56OX1 NwnlziF5auM5ZJ5S4EtEf7yD08Zlh4toEetTDrbanMQDVyZOAfBBqUi4JpkVEMoH 79KaF0farrtCxGUINFATORtkc+sHGqn3EQXnTbgfFQHVX2zIylv/kPvjnSDt0ijz 9fsAExcXXi1oMV0YYfF98lg1bkIRMWXVUveg5N0ZN0hpCJ0U3V+bqS/5GKN9Bak9 lgiil9UxsrubVIfnYqhcHlOWRZxLM6tRHsoECOTmzSot7Gn8TnNps2MEoNTwEbn+ vx1Eej03WhCDZgCk1CFYncn1ELjcHtwVgYA/jDxmG3+MTVDmiTan+8bG5wIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFB9BLgynP9KohcA/6AfEh+yGTSysMB8GA1UdIwQY MBaAFCECGyUiIpl7/jO35LMVrI1eBnlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMt NmVhYzYyZTYwZGY3LzEvSDBFdURLY18wcWlGd0Rfb0I4U0g3SVpOTEt3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMtNmVhYzYyZTYwZGY3 LzEvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQCmKMAAwQC mKMMAwQCmKNAAwQCmKNkAwQCmKNwAwQCmKN4MA0GCSqGSIb3DQEBCwUAA4IBAQBS lLlFhDG4UJQSEOIGLOGVIe/tLkPXvRczdUU6Owi3y7XJmzH8Vmuewe1vUsK9l4Ty 3o2By3b92g47mgqagbpLtVLkipoe8TtX+socsek6rlGORVdX2HGhsdXmdLD4FFeS XkFzthEqeKbuWFd+UtHKeWU25bzV9IdqGI/Ss8XkwzyAgaR9PHrQFwWh0gikkRqE 8pWKi1TCEKKIgCrADFdDUrVLNahj/YRkyKROlzbJemBZk85+W9H+iNxXFjFASyWr 9mz80zen7j6iBm4KSKdvhKFbF3u2JKAmNNjbnWeLPAfTet55zpZUQ6QK26rI9TbX WgkhRGP39Vzl9LH4Qg3x -----END CERTIFICATE-----Generated at Sat Dec 20 11:46:51 2025 by rpki-client