This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/hrfPehy-8UVceFeU7Xle-OL563A.roa File: hrfPehy-8UVceFeU7Xle-OL563A.roa (raw, json) Hash identifier: kEiu5kAUVF5pv4YewaiWfhC/WJTnfqtZ8QK0JWmjHu0= Subject key identifier: 86:B7:CF:7A:1C:BE:F1:45:5C:78:57:94:ED:79:5E:F8:E2:F9:EB:70 Certificate issuer: /CN=337e636ba60c714ffe8754ab9d04c6d1eedb9b89 Certificate serial: 019B318CEB7E1DC63A920892E05CF27AD54E Authority key identifier: 33:7E:63:6B:A6:0C:71:4F:FE:87:54:AB:9D:04:C6:D1:EE:DB:9B:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M35ja6YMcU_-h1SrnQTG0e7bm4k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/hrfPehy-8UVceFeU7Xle-OL563A.roa Signing time: Thu 18 Dec 2025 13:01:17 +0000 ROA not before: Thu 18 Dec 2025 13:01:17 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 15169 IP address blocks: 62.182.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.crl rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.mft rsync://rpki.ripe.net/repository/DEFAULT/M35ja6YMcU_-h1SrnQTG0e7bm4k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:8c:eb:7e:1d:c6:3a:92:08:92:e0:5c:f2:7a:d5:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=337e636ba60c714ffe8754ab9d04c6d1eedb9b89 Validity Not Before: Dec 18 13:01:17 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=86b7cf7a1cbef1455c785794ed795ef8e2f9eb70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:43:be:a8:1e:22:ca:97:82:a9:96:64:5d:48: 63:17:11:e6:3f:c2:77:5c:3e:0e:71:32:80:12:63: 2d:34:02:df:22:57:7b:0f:20:5e:c2:de:e4:51:58: b5:fe:98:4e:a7:13:14:da:b7:db:5d:7b:d7:48:55: 29:a8:f7:09:ea:3a:d3:15:41:c2:d3:3a:03:43:d9: b9:ee:aa:7d:01:3b:25:b5:66:9e:2d:b3:b8:8e:ae: ab:27:90:b9:38:64:54:3a:af:f5:e9:be:9c:ed:cf: 88:b6:d2:ac:94:24:96:2a:be:1d:26:8c:cf:14:7c: 05:43:1e:d7:4b:04:91:43:59:1b:de:60:e2:e3:b7: fa:02:6c:6c:6a:a3:c8:45:cc:2e:90:68:fa:6b:f0: 2b:ac:5a:a1:6c:91:06:35:81:c4:50:0c:93:c5:de: ec:50:d4:22:40:c8:c6:78:34:38:b1:86:97:fb:82: 0a:fe:1f:3e:3d:af:c5:70:30:45:2f:2f:3b:d9:4f: d0:40:30:6d:48:a1:3d:21:c7:55:8a:27:22:85:0b: 1b:62:1a:89:97:77:7b:c2:0e:2d:52:70:ba:a3:d9: 05:29:ed:42:c9:4d:ae:bd:48:96:db:ae:2d:73:76: 43:ca:ff:12:e6:c5:c8:d7:ad:f0:91:10:f7:3d:b7: b5:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:B7:CF:7A:1C:BE:F1:45:5C:78:57:94:ED:79:5E:F8:E2:F9:EB:70 X509v3 Authority Key Identifier: keyid:33:7E:63:6B:A6:0C:71:4F:FE:87:54:AB:9D:04:C6:D1:EE:DB:9B:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M35ja6YMcU_-h1SrnQTG0e7bm4k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/hrfPehy-8UVceFeU7Xle-OL563A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.182.188.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:dd:93:42:da:89:e9:9e:49:02:9f:1c:1d:fd:30:51:09:75: a2:1b:d0:85:7a:24:2a:6b:57:12:4e:ee:39:2c:45:12:cf:b3: a2:cc:16:68:5e:f3:fd:b8:ee:37:fa:b7:ab:8b:22:cd:f7:61: 07:4b:ea:3c:e3:e6:3b:87:da:04:85:77:43:c5:a9:b8:86:4b: 4f:dd:ae:18:2f:7a:24:95:cd:4e:b4:53:2a:a8:5c:4d:e0:ab: e7:c6:31:d2:bc:3b:1e:4a:cb:73:21:a5:67:21:dd:20:ff:0e: 28:98:4b:f8:3c:51:22:17:e2:94:b9:4e:c4:fb:2a:ae:eb:bc: 7f:90:a5:2b:b7:d5:28:93:5a:40:19:a3:ba:60:55:c1:b5:14: 74:9d:5f:ce:d2:ae:08:de:02:6f:52:f3:2f:21:7b:bb:99:48: ca:e7:0b:00:35:6d:9b:78:0d:f0:89:4e:46:5c:4d:d2:c0:ff: 55:6c:39:ce:61:b9:f4:be:3b:f0:7a:0f:27:67:ea:c7:4f:95: 07:51:48:78:2a:3f:ae:d5:28:62:de:20:7f:0b:fd:4a:8a:e9: db:fc:b6:ad:47:f9:12:fb:8a:b4:0d:de:1b:7d:3d:72:ce:8e: f4:5e:c3:5d:bf:e4:2a:c4:86:13:8a:5a:d2:d4:62:aa:d4:72: be:b8:bd:c0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsxjOt+HcY6kgiS4FzyetVOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzN2U2MzZiYTYwYzcxNGZmZTg3NTRhYjlkMDRjNmQxZWVk YjliODkwHhcNMjUxMjE4MTMwMTE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NmI3Y2Y3YTFjYmVmMTQ1NWM3ODU3OTRlZDc5NWVmOGUyZjllYjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0O+qB4iypeCqZZkXUhjFxHmP8J3 XD4OcTKAEmMtNALfIld7DyBewt7kUVi1/phOpxMU2rfbXXvXSFUpqPcJ6jrTFUHC 0zoDQ9m57qp9ATsltWaeLbO4jq6rJ5C5OGRUOq/16b6c7c+IttKslCSWKr4dJozP FHwFQx7XSwSRQ1kb3mDi47f6AmxsaqPIRcwukGj6a/ArrFqhbJEGNYHEUAyTxd7s UNQiQMjGeDQ4sYaX+4IK/h8+Pa/FcDBFLy872U/QQDBtSKE9IcdViicihQsbYhqJ l3d7wg4tUnC6o9kFKe1CyU2uvUiW264tc3ZDyv8S5sXI163wkRD3Pbe1FwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIa3z3ocvvFFXHhXlO15Xvji+etwMB8GA1UdIwQY MBaAFDN+Y2umDHFP/odUq50ExtHu25uJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTM1amE2WU1jVV8taDFTcm5RVEcwZTdibTRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9lNzBjODMtNDZmZC00MGI0LTgzYzkt NzBjMjI4ZWU5Yzk1LzEvaHJmUGVoeS04VVZjZUZlVTdYbGUtT0w1NjNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9lNzBjODMtNDZmZC00MGI0LTgzYzktNzBjMjI4ZWU5Yzk1 LzEvTTM1amE2WU1jVV8taDFTcm5RVEcwZTdibTRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPra8MA0G CSqGSIb3DQEBCwUAA4IBAQBd3ZNC2onpnkkCnxwd/TBRCXWiG9CFeiQqa1cSTu45 LEUSz7OizBZoXvP9uO43+reriyLN92EHS+o84+Y7h9oEhXdDxam4hktP3a4YL3ok lc1OtFMqqFxN4KvnxjHSvDseSstzIaVnId0g/w4omEv4PFEiF+KUuU7E+yqu67x/ kKUrt9Uok1pAGaO6YFXBtRR0nV/O0q4I3gJvUvMvIXu7mUjK5wsANW2beA3wiU5G XE3SwP9VbDnOYbn0vjvweg8nZ+rHT5UHUUh4Kj+u1Shi3iB/C/1Kiunb/LatR/kS +4q0Dd4bfT1yzo70XsNdv+QqxIYTilrS1GKq1HK+uL3A -----END CERTIFICATE-----Generated at Sat Dec 20 09:20:53 2025 by rpki-client