This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/974881-4c4e-4d48-8fd3-1cc6a31b14bf/1/HWElXTOzJCjqFvyXqO6Xmn0U0dg.roa File: HWElXTOzJCjqFvyXqO6Xmn0U0dg.roa (raw, json) Hash identifier: pdtdttEaHfdOrOSAScGkDCQ3+kURXkYRzpOAlorabs0= Subject key identifier: 1D:61:25:5D:33:B3:24:28:EA:16:FC:97:A8:EE:97:9A:7D:14:D1:D8 Certificate issuer: /CN=d9d649188aaa439d8511f70ebe82ba5e766c85d2 Certificate serial: 019AB68316194AD7F79BC18D1AE1AC3117D0 Authority key identifier: D9:D6:49:18:8A:AA:43:9D:85:11:F7:0E:BE:82:BA:5E:76:6C:85:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2dZJGIqqQ52FEfcOvoK6XnZshdI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/974881-4c4e-4d48-8fd3-1cc6a31b14bf/1/HWElXTOzJCjqFvyXqO6Xmn0U0dg.roa Signing time: Mon 24 Nov 2025 15:37:15 +0000 ROA not before: Mon 24 Nov 2025 15:37:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 16197 IP address blocks: 80.68.152.0/24 maxlen: 24 185.85.88.0/24 maxlen: 24 185.85.89.0/24 maxlen: 24 185.85.90.0/24 maxlen: 24 185.85.91.0/24 maxlen: 24 2a12:cb80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/974881-4c4e-4d48-8fd3-1cc6a31b14bf/1/2dZJGIqqQ52FEfcOvoK6XnZshdI.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/974881-4c4e-4d48-8fd3-1cc6a31b14bf/1/2dZJGIqqQ52FEfcOvoK6XnZshdI.mft rsync://rpki.ripe.net/repository/DEFAULT/2dZJGIqqQ52FEfcOvoK6XnZshdI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 03:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b6:83:16:19:4a:d7:f7:9b:c1:8d:1a:e1:ac:31:17:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d649188aaa439d8511f70ebe82ba5e766c85d2 Validity Not Before: Nov 24 15:37:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1d61255d33b32428ea16fc97a8ee979a7d14d1d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:4d:e1:d6:86:9a:eb:da:92:ec:1a:32:e0:32: d9:b9:10:90:d6:c8:5d:a0:f2:8e:52:3a:61:4a:67: 11:cd:e4:1a:05:a2:39:5f:22:d5:3d:4a:7b:37:cd: 88:42:03:78:b8:f5:c9:4a:39:e7:cf:d5:75:e0:54: 79:44:4b:5c:5c:0d:65:68:cb:e8:76:85:1b:91:8b: ce:a6:d0:1a:23:ae:c4:31:4f:fa:64:b9:fd:1a:88: 03:6b:8c:61:9c:eb:b8:a3:a8:59:ff:3c:b3:34:7d: 8a:8c:e5:67:ac:2f:de:bb:da:22:88:1d:77:98:5d: c0:e9:9f:12:91:43:5b:70:16:d6:50:90:b2:c6:62: 57:7a:46:e3:7d:50:2d:3a:21:a8:86:e1:3c:bc:7d: a0:fd:d6:d4:44:24:fe:26:ad:a1:74:15:12:fe:86: 63:6a:37:a5:c6:51:36:39:4d:7c:0e:9f:b9:2e:65: 4c:db:9b:d1:95:87:bd:60:d9:18:44:f1:80:26:9a: 8c:c4:4e:47:35:a5:62:4e:1c:06:a0:e2:d8:fd:aa: 5f:1b:3f:fa:67:73:c9:da:a9:43:be:f0:f6:34:82: eb:df:b0:5e:dd:fe:13:4e:76:f8:38:f0:d9:fd:23: 11:10:9a:a4:78:63:ec:e0:1e:3a:5a:e1:ed:d4:59: 19:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:61:25:5D:33:B3:24:28:EA:16:FC:97:A8:EE:97:9A:7D:14:D1:D8 X509v3 Authority Key Identifier: keyid:D9:D6:49:18:8A:AA:43:9D:85:11:F7:0E:BE:82:BA:5E:76:6C:85:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dZJGIqqQ52FEfcOvoK6XnZshdI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/974881-4c4e-4d48-8fd3-1cc6a31b14bf/1/HWElXTOzJCjqFvyXqO6Xmn0U0dg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/974881-4c4e-4d48-8fd3-1cc6a31b14bf/1/2dZJGIqqQ52FEfcOvoK6XnZshdI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.68.152.0/24 185.85.88.0/22 IPv6: 2a12:cb80::/29 Signature Algorithm: sha256WithRSAEncryption 33:10:a4:4a:fe:60:9f:11:44:c6:96:2f:77:97:e0:ad:e2:fd: 54:ff:8a:c7:af:35:95:1f:69:8a:58:5e:7a:b0:2f:5a:9a:29: 8d:1c:e1:77:13:cf:16:2b:05:7c:b1:d6:93:ca:81:52:61:b2: de:47:b6:19:71:bc:36:a5:a2:fd:a5:cb:05:a7:3d:8c:66:e6: 5f:d9:de:3d:69:aa:f8:bd:9c:6a:22:ec:c5:89:47:01:d4:30: 68:3f:a9:ee:28:72:d0:07:29:0c:8a:49:3d:c3:13:c6:36:9d: 19:a1:00:9b:8d:ef:41:45:d4:1b:ae:1d:1c:04:7f:86:16:de: 7d:a1:bc:bd:9e:bb:7f:dd:db:0f:65:dd:02:02:8f:ff:7d:2d: d5:f0:65:97:a5:b3:b5:4d:14:4c:cd:fd:1c:e0:e4:e7:f6:eb: 74:b9:bf:25:f4:2a:24:30:16:02:cb:7a:a6:6d:c7:28:b9:d6: 4d:6f:95:f7:f8:3e:cf:52:c1:57:c4:d9:e8:c8:49:56:31:a3: 8c:ae:78:e3:1e:e6:ed:d9:86:a9:6d:6c:98:58:b0:ba:4a:da: b5:9f:0c:0c:89:f3:64:b2:51:83:14:4a:af:14:b1:f6:6d:7c: 88:6c:b3:71:5f:51:6f:cf:22:70:b0:6e:55:29:e6:cc:bf:80: 24:d1:29:09 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZq2gxYZStf3m8GNGuGsMRfQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5ZDY0OTE4OGFhYTQzOWQ4NTExZjcwZWJlODJiYTVlNzY2 Yzg1ZDIwHhcNMjUxMTI0MTUzNzE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZDYxMjU1ZDMzYjMyNDI4ZWExNmZjOTdhOGVlOTc5YTdkMTRkMWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5k3h1oaa69qS7Boy4DLZuRCQ1shd oPKOUjphSmcRzeQaBaI5XyLVPUp7N82IQgN4uPXJSjnnz9V14FR5REtcXA1laMvo doUbkYvOptAaI67EMU/6ZLn9GogDa4xhnOu4o6hZ/zyzNH2KjOVnrC/eu9oiiB13 mF3A6Z8SkUNbcBbWUJCyxmJXekbjfVAtOiGohuE8vH2g/dbURCT+Jq2hdBUS/oZj ajelxlE2OU18Dp+5LmVM25vRlYe9YNkYRPGAJpqMxE5HNaViThwGoOLY/apfGz/6 Z3PJ2qlDvvD2NILr37Be3f4TTnb4OPDZ/SMREJqkeGPs4B46WuHt1FkZnwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFB1hJV0zsyQo6hb8l6jul5p9FNHYMB8GA1UdIwQY MBaAFNnWSRiKqkOdhRH3Dr6Cul52bIXSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmRaSkdJcXFRNTJGRWZjT3ZvSzZYblpzaGRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi85NzQ4ODEtNGM0ZS00ZDQ4LThmZDMt MWNjNmEzMWIxNGJmLzEvSFdFbFhUT3pKQ2pxRnZ5WHFPNlhtbjBVMGRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi85NzQ4ODEtNGM0ZS00ZDQ4LThmZDMtMWNjNmEzMWIxNGJm LzEvMmRaSkdJcXFRNTJGRWZjT3ZvSzZYblpzaGRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAUESYAwQC uVVYMA0EAgACMAcDBQMqEsuAMA0GCSqGSIb3DQEBCwUAA4IBAQAzEKRK/mCfEUTG li93l+Ct4v1U/4rHrzWVH2mKWF56sC9amimNHOF3E88WKwV8sdaTyoFSYbLeR7YZ cbw2paL9pcsFpz2MZuZf2d49aar4vZxqIuzFiUcB1DBoP6nuKHLQBykMikk9wxPG Np0ZoQCbje9BRdQbrh0cBH+GFt59oby9nrt/3dsPZd0CAo//fS3V8GWXpbO1TRRM zf0c4OTn9ut0ub8l9CokMBYCy3qmbccoudZNb5X3+D7PUsFXxNnoyElWMaOMrnjj Hubt2YapbWyYWLC6Stq1nwwMifNkslGDFEqvFLH2bXyIbLNxX1FvzyJwsG5VKebM v4Ak0SkJ -----END CERTIFICATE-----Generated at Tue Dec 23 12:35:28 2025 by rpki-client