This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/HR_0woHNpijOumDdiK-LVz85Nik.roa File: HR_0woHNpijOumDdiK-LVz85Nik.roa (raw, json) Hash identifier: FzE6RBfomkbB/0hG0bqV9u5CsQD/hiOX6IZks4n3ONY= Subject key identifier: 1D:1F:F4:C2:81:CD:A6:28:CE:BA:60:DD:88:AF:8B:57:3F:39:36:29 Certificate issuer: /CN=1795ac843cd8ba90188f7313652bb561299b296f Certificate serial: 019AF7DDA6D9074241BAD1F57B37879211B5 Authority key identifier: 17:95:AC:84:3C:D8:BA:90:18:8F:73:13:65:2B:B5:61:29:9B:29:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5WshDzYupAYj3MTZSu1YSmbKW8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/HR_0woHNpijOumDdiK-LVz85Nik.roa Signing time: Sun 07 Dec 2025 08:11:29 +0000 ROA not before: Sun 07 Dec 2025 08:11:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 208096 IP address blocks: 89.200.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.mft rsync://rpki.ripe.net/repository/DEFAULT/F5WshDzYupAYj3MTZSu1YSmbKW8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f7:dd:a6:d9:07:42:41:ba:d1:f5:7b:37:87:92:11:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1795ac843cd8ba90188f7313652bb561299b296f Validity Not Before: Dec 7 08:11:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1d1ff4c281cda628ceba60dd88af8b573f393629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:27:78:c5:d6:ad:a7:55:3e:cc:e7:32:ea:5a: cb:6f:5d:8a:1d:cf:2a:f3:c1:d2:e3:17:1b:05:1e: ed:51:7b:3c:6d:5d:fb:30:c4:65:65:db:2c:ee:61: b8:19:8b:1a:d7:78:37:c1:14:af:70:67:4f:da:8a: 60:07:5a:53:0c:de:9b:ac:24:23:97:00:a8:3c:51: 9a:2e:9d:20:1c:21:53:91:28:b9:0a:a3:79:60:8c: 0d:65:67:ea:62:a5:e2:ad:be:66:4d:91:d6:be:b6: ee:30:46:a7:8b:f1:51:42:38:f2:32:27:f9:9e:39: 43:49:35:c6:8f:85:d8:a9:cd:4c:5e:45:5d:3d:71: 8b:33:2f:b1:bf:84:b6:56:83:1d:34:48:9a:ab:b6: f7:f0:7c:72:1f:a6:98:b9:fa:4c:cd:86:5b:a2:46: a7:5b:5a:98:f7:0e:31:e7:ff:42:08:75:2d:22:de: 7f:5f:5c:89:13:e4:3b:80:f8:b2:09:97:38:2c:93: 1c:ce:d5:b2:da:06:67:70:8f:11:fd:b1:18:58:88: 06:9c:82:3f:b8:63:58:08:91:1a:02:83:53:81:cb: 2f:e2:c7:ff:3c:65:bd:b6:8d:36:b8:cd:41:86:dc: b9:98:7e:1b:3b:71:97:6b:41:29:ee:56:47:33:6d: 3e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:1F:F4:C2:81:CD:A6:28:CE:BA:60:DD:88:AF:8B:57:3F:39:36:29 X509v3 Authority Key Identifier: keyid:17:95:AC:84:3C:D8:BA:90:18:8F:73:13:65:2B:B5:61:29:9B:29:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5WshDzYupAYj3MTZSu1YSmbKW8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/HR_0woHNpijOumDdiK-LVz85Nik.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.200.246.0/24 Signature Algorithm: sha256WithRSAEncryption 25:81:32:44:bd:b1:db:73:af:7b:d2:f4:6d:c8:34:c3:ea:3e: d8:63:6f:68:4c:eb:5d:67:66:c3:71:79:f0:3b:24:22:a9:90: fd:c7:f1:d7:8d:b1:75:6f:a1:85:76:c4:63:56:5b:40:dd:3b: 8b:87:25:00:c2:e5:9c:b0:84:0d:8b:dd:01:db:eb:7e:7c:52: 27:a5:06:40:5e:3e:fa:f6:dd:a1:cf:18:d7:5f:0c:c3:14:35: ea:14:51:1f:6b:7e:3e:ff:3f:42:8f:8b:fd:e9:04:64:66:fa: 20:29:ac:ff:5c:4e:c8:35:f6:70:94:61:6c:14:8d:31:6d:25: 1a:66:df:3c:86:f1:72:8c:ed:41:42:1a:ad:1d:ad:d8:5c:72: e8:76:d8:56:43:eb:d4:fd:a8:62:86:31:f5:2a:e4:e5:c3:4a: b7:42:5b:84:79:62:c7:85:97:77:1b:5c:8c:2d:24:58:0e:9f: 91:dd:de:eb:17:88:4c:54:90:5e:81:ba:08:8b:d5:f2:36:d7: 4f:db:ed:ef:04:2b:42:04:96:af:3b:6b:c0:00:f0:ed:a1:68: 81:c5:98:b6:c0:85:23:34:f1:49:90:99:0f:9c:4f:c1:66:e6: 2c:85:74:d4:d0:36:24:6b:47:8d:ad:68:0f:30:c8:de:47:99: fc:cc:67:d0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZr33abZB0JButH1ezeHkhG1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3OTVhYzg0M2NkOGJhOTAxODhmNzMxMzY1MmJiNTYxMjk5 YjI5NmYwHhcNMjUxMjA3MDgxMTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZDFmZjRjMjgxY2RhNjI4Y2ViYTYwZGQ4OGFmOGI1NzNmMzkzNjI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnid4xdatp1U+zOcy6lrLb12KHc8q 88HS4xcbBR7tUXs8bV37MMRlZdss7mG4GYsa13g3wRSvcGdP2opgB1pTDN6brCQj lwCoPFGaLp0gHCFTkSi5CqN5YIwNZWfqYqXirb5mTZHWvrbuMEani/FRQjjyMif5 njlDSTXGj4XYqc1MXkVdPXGLMy+xv4S2VoMdNEiaq7b38HxyH6aYufpMzYZbokan W1qY9w4x5/9CCHUtIt5/X1yJE+Q7gPiyCZc4LJMcztWy2gZncI8R/bEYWIgGnII/ uGNYCJEaAoNTgcsv4sf/PGW9to02uM1Bhty5mH4bO3GXa0Ep7lZHM20+swIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB0f9MKBzaYozrpg3Yivi1c/OTYpMB8GA1UdIwQY MBaAFBeVrIQ82LqQGI9zE2UrtWEpmylvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjVXc2hEell1cEFZajNNVFpTdTFZU21iS1c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS82NjgzZjQtM2VlYy00ZGNiLTg3ODct NzMxYWJjNmY3NWNhLzEvSFJfMHdvSE5waWpPdW1EZGlLLUxWejg1TmlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS82NjgzZjQtM2VlYy00ZGNiLTg3ODctNzMxYWJjNmY3NWNh LzEvRjVXc2hEell1cEFZajNNVFpTdTFZU21iS1c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWcj2MA0G CSqGSIb3DQEBCwUAA4IBAQAlgTJEvbHbc6970vRtyDTD6j7YY29oTOtdZ2bDcXnw OyQiqZD9x/HXjbF1b6GFdsRjVltA3TuLhyUAwuWcsIQNi90B2+t+fFInpQZAXj76 9t2hzxjXXwzDFDXqFFEfa34+/z9Cj4v96QRkZvogKaz/XE7INfZwlGFsFI0xbSUa Zt88hvFyjO1BQhqtHa3YXHLodthWQ+vU/ahihjH1KuTlw0q3QluEeWLHhZd3G1yM LSRYDp+R3d7rF4hMVJBegboIi9XyNtdP2+3vBCtCBJavO2vAAPDtoWiBxZi2wIUj NPFJkJkPnE/BZuYshXTU0DYka0eNrWgPMMjeR5n8zGfQ -----END CERTIFICATE-----Generated at Wed Dec 17 18:06:31 2025 by rpki-client