This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/hV-zRLbAPN5QIo2GRJg1aDtyjyE.roa File: hV-zRLbAPN5QIo2GRJg1aDtyjyE.roa (raw, json) Hash identifier: unxVdF0OO10eYmyF3uCvsTabiFWtNi6zD1YCePOHllM= Subject key identifier: 85:5F:B3:44:B6:C0:3C:DE:50:22:8D:86:44:98:35:68:3B:72:8F:21 Certificate issuer: /CN=1795ac843cd8ba90188f7313652bb561299b296f Certificate serial: 019AF7DDA6815F47707F34A8EF9F3885F926 Authority key identifier: 17:95:AC:84:3C:D8:BA:90:18:8F:73:13:65:2B:B5:61:29:9B:29:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5WshDzYupAYj3MTZSu1YSmbKW8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/hV-zRLbAPN5QIo2GRJg1aDtyjyE.roa Signing time: Sun 07 Dec 2025 08:11:29 +0000 ROA not before: Sun 07 Dec 2025 08:11:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 62101 IP address blocks: 176.126.220.0/23 maxlen: 24 176.126.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.mft rsync://rpki.ripe.net/repository/DEFAULT/F5WshDzYupAYj3MTZSu1YSmbKW8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 05:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f7:dd:a6:81:5f:47:70:7f:34:a8:ef:9f:38:85:f9:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1795ac843cd8ba90188f7313652bb561299b296f Validity Not Before: Dec 7 08:11:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=855fb344b6c03cde50228d86449835683b728f21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:39:af:72:21:23:0d:a1:c4:8f:c9:dc:56:1b: 39:b1:ff:e9:7b:fe:d1:90:bc:71:c8:e9:7e:1f:35: 98:81:4a:1c:16:49:e2:e2:88:72:75:9b:0d:37:a2: e8:cc:3e:61:05:1e:e5:f8:02:6b:9a:4e:e4:5e:47: 0d:4b:06:9a:ee:c0:50:91:46:92:80:fc:27:b0:fa: ea:dd:a9:0d:4d:1d:d9:ff:68:50:9f:88:37:ae:0c: cf:8d:4e:de:00:8a:8b:6e:80:e9:93:f3:34:0a:4c: 89:55:49:3b:c8:39:9f:98:1d:d1:e7:a2:f2:62:9c: 29:19:f3:e8:ef:ed:0d:e5:cd:2a:0a:32:9e:55:c2: 60:8c:e1:d7:e2:66:62:1a:08:c3:9a:47:ab:6a:4c: 8e:0b:04:9b:d6:b7:86:ab:6b:fe:d1:96:1d:79:60: 6c:ff:c3:31:a6:91:31:e8:9f:92:a8:de:f9:b7:36: e6:40:ce:72:47:ed:3f:4d:e9:f9:ca:47:b4:1b:3e: 02:73:b6:f9:81:6e:42:99:47:ff:43:8b:34:81:b2: a1:98:a0:9a:95:e5:e9:89:34:24:c2:27:db:85:43: 94:4f:34:80:f7:f8:53:38:2e:1c:52:4f:3c:13:88: 2a:ae:e4:18:06:3b:d7:b3:24:e5:eb:f9:ec:f0:bc: fd:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:5F:B3:44:B6:C0:3C:DE:50:22:8D:86:44:98:35:68:3B:72:8F:21 X509v3 Authority Key Identifier: keyid:17:95:AC:84:3C:D8:BA:90:18:8F:73:13:65:2B:B5:61:29:9B:29:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5WshDzYupAYj3MTZSu1YSmbKW8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/hV-zRLbAPN5QIo2GRJg1aDtyjyE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.126.220.0/23 Signature Algorithm: sha256WithRSAEncryption 30:55:19:0a:ef:25:d4:57:c8:be:b3:39:c2:85:59:01:50:d3: eb:3c:5f:27:53:dc:c5:76:69:b3:d2:5e:f3:d5:cb:c2:bd:ed: e5:71:aa:e1:42:2c:63:1c:79:58:91:02:f0:57:b9:7e:1a:57: 91:4b:c7:b0:3f:ba:1f:79:84:80:28:9b:b2:6c:62:a5:26:1e: f2:e9:7a:0a:9b:bb:06:93:54:9a:6a:82:02:15:77:7f:2a:4d: fc:30:5a:8d:bf:89:83:43:e7:bd:ca:5f:46:dd:08:5f:f4:ba: 91:23:56:d1:29:0d:06:f4:f2:b0:e9:12:a8:37:2f:63:58:6a: fe:26:1d:fe:c3:dc:19:b4:80:71:24:e7:b9:59:0c:b8:f1:5f: 62:5a:73:f8:04:47:d3:db:20:e1:d1:bf:85:cb:e5:93:73:4e: 70:e3:a5:18:39:43:37:61:8d:a0:e8:ea:ab:78:97:d9:0b:da: 5e:7e:dd:52:29:92:4f:98:b6:12:29:70:a8:db:7c:98:5b:75: d5:d7:df:1d:d1:5c:db:35:92:b5:bf:ca:ad:46:69:bb:c4:6b: 5c:f5:9d:0e:74:c5:e3:96:4a:cb:e6:54:55:95:bd:75:7e:96: 6c:11:46:a0:10:52:14:7c:3c:17:a2:c6:ab:8d:be:1b:37:af: c2:5d:fe:69 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZr33aaBX0dwfzSo7584hfkmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3OTVhYzg0M2NkOGJhOTAxODhmNzMxMzY1MmJiNTYxMjk5 YjI5NmYwHhcNMjUxMjA3MDgxMTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTVmYjM0NGI2YzAzY2RlNTAyMjhkODY0NDk4MzU2ODNiNzI4ZjIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzmvciEjDaHEj8ncVhs5sf/pe/7R kLxxyOl+HzWYgUocFkni4ohydZsNN6LozD5hBR7l+AJrmk7kXkcNSwaa7sBQkUaS gPwnsPrq3akNTR3Z/2hQn4g3rgzPjU7eAIqLboDpk/M0CkyJVUk7yDmfmB3R56Ly YpwpGfPo7+0N5c0qCjKeVcJgjOHX4mZiGgjDmkerakyOCwSb1reGq2v+0ZYdeWBs /8MxppEx6J+SqN75tzbmQM5yR+0/Ten5yke0Gz4Cc7b5gW5CmUf/Q4s0gbKhmKCa leXpiTQkwifbhUOUTzSA9/hTOC4cUk88E4gqruQYBjvXsyTl6/ns8Lz9kwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIVfs0S2wDzeUCKNhkSYNWg7co8hMB8GA1UdIwQY MBaAFBeVrIQ82LqQGI9zE2UrtWEpmylvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjVXc2hEell1cEFZajNNVFpTdTFZU21iS1c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS82NjgzZjQtM2VlYy00ZGNiLTg3ODct NzMxYWJjNmY3NWNhLzEvaFYtelJMYkFQTjVRSW8yR1JKZzFhRHR5anlFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS82NjgzZjQtM2VlYy00ZGNiLTg3ODctNzMxYWJjNmY3NWNh LzEvRjVXc2hEell1cEFZajNNVFpTdTFZU21iS1c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBsH7cMA0G CSqGSIb3DQEBCwUAA4IBAQAwVRkK7yXUV8i+sznChVkBUNPrPF8nU9zFdmmz0l7z 1cvCve3lcarhQixjHHlYkQLwV7l+GleRS8ewP7ofeYSAKJuybGKlJh7y6XoKm7sG k1SaaoICFXd/Kk38MFqNv4mDQ+e9yl9G3Qhf9LqRI1bRKQ0G9PKw6RKoNy9jWGr+ Jh3+w9wZtIBxJOe5WQy48V9iWnP4BEfT2yDh0b+Fy+WTc05w46UYOUM3YY2g6Oqr eJfZC9peft1SKZJPmLYSKXCo23yYW3XV198d0VzbNZK1v8qtRmm7xGtc9Z0OdMXj lkrL5lRVlb11fpZsEUagEFIUfDwXosarjb4bN6/CXf5p -----END CERTIFICATE-----Generated at Sun Dec 21 14:56:25 2025 by rpki-client