This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/_hJVsGkdkPIA8VTwr4osaLx5Th0.roa File: _hJVsGkdkPIA8VTwr4osaLx5Th0.roa (raw, json) Hash identifier: 4alzko28psufS04H2VzzTeYHd1Jas0SFM2Usq8bzvDQ= Subject key identifier: FE:12:55:B0:69:1D:90:F2:00:F1:54:F0:AF:8A:2C:68:BC:79:4E:1D Certificate issuer: /CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f Certificate serial: 019B0291D36C7BC7947D551B0927F7E1F4F3 Authority key identifier: 29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/_hJVsGkdkPIA8VTwr4osaLx5Th0.roa Signing time: Tue 09 Dec 2025 10:04:29 +0000 ROA not before: Tue 09 Dec 2025 10:04:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 209604 IP address blocks: 5.10.223.0/24 maxlen: 24 185.23.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:02:91:d3:6c:7b:c7:94:7d:55:1b:09:27:f7:e1:f4:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f Validity Not Before: Dec 9 10:04:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fe1255b0691d90f200f154f0af8a2c68bc794e1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b4:5f:75:ff:dd:f6:87:79:27:8d:aa:e2:4e: 1c:d9:bb:b6:e2:5f:4d:59:d8:5a:fc:04:c7:c4:f1: be:f4:1e:47:f7:b2:8c:28:8c:75:25:16:17:ba:a6: 27:8c:6d:de:f9:d1:c3:68:c2:b9:09:d9:13:8b:4b: f2:20:b0:e5:7f:bc:ae:25:d4:6c:95:ad:20:72:dd: 64:fd:f0:26:5f:f1:aa:34:e8:6d:0b:09:54:98:ad: 37:1c:1e:ce:2f:93:5d:48:01:1e:0e:d2:b8:c4:58: 03:eb:0d:95:f8:d7:ee:be:fc:dd:fb:24:53:56:aa: 06:16:92:cc:7b:7d:c8:df:8d:1a:58:ed:f9:0c:30: fd:ba:f2:50:7e:04:e0:38:9c:39:f5:59:f8:23:5e: f3:2e:f5:f4:9e:b5:08:bb:75:3c:36:50:0f:68:0d: be:c1:01:0a:b3:b1:09:55:88:d2:5f:b2:b3:ca:58: 84:53:f8:54:06:e4:81:42:f6:23:ce:86:89:a8:98: a2:1a:f6:e6:7a:02:66:ec:fc:36:09:c8:86:6d:7b: 52:42:8f:64:79:31:56:d6:7b:62:07:0b:0f:98:32: f8:de:bc:84:69:a1:a3:66:65:c0:db:d8:58:2c:94: 38:81:11:32:8a:e0:fb:d1:f2:89:2c:2f:b8:1d:50: d6:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:12:55:B0:69:1D:90:F2:00:F1:54:F0:AF:8A:2C:68:BC:79:4E:1D X509v3 Authority Key Identifier: keyid:29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/_hJVsGkdkPIA8VTwr4osaLx5Th0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.10.223.0/24 185.23.237.0/24 Signature Algorithm: sha256WithRSAEncryption 73:90:42:bb:34:ba:1b:99:70:cc:f8:7a:bf:51:de:cd:d4:50: 7d:c8:d1:9b:b5:a1:92:2d:d1:58:69:bf:9f:55:11:bf:08:71: a6:3c:c1:fe:e3:c6:ac:fc:7c:e0:c3:b6:6a:5e:5d:47:f1:c2: b0:96:ad:d2:01:ab:18:4b:1f:86:1c:c1:8f:29:31:fd:75:b9: b8:55:72:93:8a:58:4c:36:4f:d0:a3:3d:0a:49:06:00:d2:c7: 38:b3:dc:48:fa:da:70:75:5e:91:e0:88:cf:91:78:2d:e8:0c: 54:e2:e2:60:1a:4d:d1:ec:44:54:c7:cb:e4:00:f6:46:83:8c: d9:ef:69:00:07:d0:77:7f:15:e0:f4:0e:aa:cd:77:3f:62:5e: 9c:cb:f0:7f:51:75:b6:55:07:53:c0:74:f8:f4:00:87:ce:0a: 9e:73:19:44:ca:28:57:07:5a:fb:a6:8d:dc:e8:1e:28:cc:b4: 2b:93:1f:43:b2:b6:28:bf:cb:ce:31:e9:f1:1e:ce:a3:1a:fe: a7:67:4d:71:95:99:d4:11:41:2a:00:25:0c:35:78:b0:29:27: 57:c2:9b:de:a6:bf:8a:a1:48:58:97:87:b0:03:89:83:05:c7: 49:8c:89:4d:e9:6c:cd:24:92:2c:bc:8f:3e:eb:fb:75:1e:39: cd:d6:33:80 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZsCkdNse8eUfVUbCSf34fTzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2VmOWJlZmQxYTdlMjRjMGNjOTcyOTk4N2ZjMDY1ZDZi NzEzMmYwHhcNMjUxMjA5MTAwNDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZTEyNTViMDY5MWQ5MGYyMDBmMTU0ZjBhZjhhMmM2OGJjNzk0ZTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7Rfdf/d9od5J42q4k4c2bu24l9N Wdha/ATHxPG+9B5H97KMKIx1JRYXuqYnjG3e+dHDaMK5CdkTi0vyILDlf7yuJdRs la0gct1k/fAmX/GqNOhtCwlUmK03HB7OL5NdSAEeDtK4xFgD6w2V+Nfuvvzd+yRT VqoGFpLMe33I340aWO35DDD9uvJQfgTgOJw59Vn4I17zLvX0nrUIu3U8NlAPaA2+ wQEKs7EJVYjSX7KzyliEU/hUBuSBQvYjzoaJqJiiGvbmegJm7Pw2CciGbXtSQo9k eTFW1ntiBwsPmDL43ryEaaGjZmXA29hYLJQ4gREyiuD70fKJLC+4HVDWhQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFP4SVbBpHZDyAPFU8K+KLGi8eU4dMB8GA1UdIwQY MBaAFCl++b79Gn4kwMyXKZh/wGXWtxMvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9iZTQ5MDktNzQ1Zi00ZDBjLWJmYWIt ZGVlNzY4NjAwMTNkLzEvX2hKVnNHa2RrUElBOFZUd3I0b3NhTHg1VGgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS9iZTQ5MDktNzQ1Zi00ZDBjLWJmYWItZGVlNzY4NjAwMTNk LzEvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABQrfAwQA uRftMA0GCSqGSIb3DQEBCwUAA4IBAQBzkEK7NLobmXDM+Hq/Ud7N1FB9yNGbtaGS LdFYab+fVRG/CHGmPMH+48as/Hzgw7ZqXl1H8cKwlq3SAasYSx+GHMGPKTH9dbm4 VXKTilhMNk/Qoz0KSQYA0sc4s9xI+tpwdV6R4IjPkXgt6AxU4uJgGk3R7ERUx8vk APZGg4zZ72kAB9B3fxXg9A6qzXc/Yl6cy/B/UXW2VQdTwHT49ACHzgqecxlEyihX B1r7po3c6B4ozLQrkx9DsrYov8vOMenxHs6jGv6nZ01xlZnUEUEqACUMNXiwKSdX wpvepr+KoUhYl4ewA4mDBcdJjIlN6WzNJJIsvI8+6/t1HjnN1jOA -----END CERTIFICATE-----Generated at Sat Dec 20 19:27:12 2025 by rpki-client