This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/hEJl8G7xYNL4qy8d-uONT7fH6pg.roa File: hEJl8G7xYNL4qy8d-uONT7fH6pg.roa (raw, json) Hash identifier: lCbxkEMzF/MvYs2erOvwhQCMpIdvjZnFzBI5Pdlm0kQ= Subject key identifier: 84:42:65:F0:6E:F1:60:D2:F8:AB:2F:1D:FA:E3:8D:4F:B7:C7:EA:98 Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491 Certificate serial: 019B226BF053B385D67F28502A1D017222FA Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/hEJl8G7xYNL4qy8d-uONT7fH6pg.roa Signing time: Mon 15 Dec 2025 14:30:57 +0000 ROA not before: Mon 15 Dec 2025 14:30:57 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 206111 IP address blocks: 81.198.190.0/24 maxlen: 24 87.246.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.mft rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:6b:f0:53:b3:85:d6:7f:28:50:2a:1d:01:72:22:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491 Validity Not Before: Dec 15 14:30:57 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=844265f06ef160d2f8ab2f1dfae38d4fb7c7ea98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4e:1d:6f:5d:34:bd:c9:80:20:17:e0:0c:4d: d5:44:e2:b5:56:c3:47:e7:47:4f:7b:7d:07:a3:fb: b8:85:5e:f7:60:d7:aa:8e:a7:fc:f9:55:a7:78:dd: ec:b8:0b:0d:a7:9d:32:82:9d:1c:a7:a6:94:4d:34: d9:54:77:25:b0:ef:53:21:f1:47:e3:69:90:49:17: e9:08:7b:65:78:c0:a5:8f:94:2a:9d:a2:48:2c:16: a1:1f:1f:fe:65:18:f7:ec:99:4d:a3:9f:9c:d5:ba: eb:91:a2:5b:9e:c5:70:8b:4a:57:1a:74:a6:6b:20: d1:17:da:7e:3d:37:4f:85:f2:0d:51:7b:b7:37:c1: a5:be:90:27:67:17:66:6c:85:38:57:ee:4f:d0:51: a1:27:06:eb:9a:ad:90:a4:07:b5:11:51:90:fa:9b: 4f:ba:41:73:af:39:93:fb:20:99:6c:ee:7e:c3:61: bb:e5:42:95:fd:7e:d4:a6:dd:3c:1e:ec:e6:77:4a: dd:de:90:c4:ab:ee:8e:45:b6:7c:85:17:64:ba:14: 63:b8:81:00:ce:af:f6:29:f1:36:5e:7c:7f:bc:0b: 52:5b:37:e4:dd:7d:4e:4e:48:94:6d:6f:65:85:f2: 61:4a:a3:34:0a:da:98:16:30:69:c6:80:17:35:ae: d7:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:42:65:F0:6E:F1:60:D2:F8:AB:2F:1D:FA:E3:8D:4F:B7:C7:EA:98 X509v3 Authority Key Identifier: keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/hEJl8G7xYNL4qy8d-uONT7fH6pg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.198.190.0/24 87.246.178.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:bf:f2:92:d5:72:a7:4f:83:5c:fb:90:f4:40:6e:df:27:fa: 61:f5:6b:d4:8f:7b:54:0a:56:84:64:58:f1:65:a1:14:3b:f9: 87:89:85:d6:ef:11:c5:50:6b:ad:b9:52:4b:0e:07:0a:53:37: c7:3b:91:9b:7b:91:c2:0d:17:ac:f2:92:92:e6:7c:62:5a:ab: 36:64:90:aa:8a:dd:b8:1b:92:23:f3:97:40:a4:c5:32:66:08: 63:32:52:fa:00:b5:30:08:7c:90:7d:b7:87:0a:96:62:a7:82: 74:f3:e8:1a:83:fa:ff:01:95:e9:9b:11:92:e1:c5:ba:2b:40: 07:98:20:4b:9e:88:0a:58:06:e0:32:37:31:52:58:b7:b8:20: 53:68:ab:4f:aa:bf:00:6e:00:27:4e:98:c8:6f:42:97:d7:33: 02:ac:f5:29:fa:dc:77:46:88:80:22:3e:89:4a:01:c2:cd:70: af:76:c7:a2:45:af:ec:da:60:be:0e:36:e5:e1:c6:5e:82:59: 2b:c4:fa:45:83:00:73:8c:7f:9a:ec:0a:41:f0:d4:a3:33:6f: 36:fe:c6:bf:93:02:d6:d9:e2:7a:69:bf:c3:c1:5c:01:61:2a: 28:8f:6a:00:b4:ec:11:6f:70:d3:62:ab:40:da:3e:7b:35:e6: 8b:9a:2e:f6 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZsia/BTs4XWfyhQKh0BciL6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzYmUwN2NiMWZkNGYxZTNjOTIyMzAzYjY3MGE4ODFiODJl NjE0OTEwHhcNMjUxMjE1MTQzMDU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDQyNjVmMDZlZjE2MGQyZjhhYjJmMWRmYWUzOGQ0ZmI3YzdlYTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsk4db100vcmAIBfgDE3VROK1VsNH 50dPe30Ho/u4hV73YNeqjqf8+VWneN3suAsNp50ygp0cp6aUTTTZVHclsO9TIfFH 42mQSRfpCHtleMClj5QqnaJILBahHx/+ZRj37JlNo5+c1brrkaJbnsVwi0pXGnSm ayDRF9p+PTdPhfINUXu3N8GlvpAnZxdmbIU4V+5P0FGhJwbrmq2QpAe1EVGQ+ptP ukFzrzmT+yCZbO5+w2G75UKV/X7Upt08Huzmd0rd3pDEq+6ORbZ8hRdkuhRjuIEA zq/2KfE2Xnx/vAtSWzfk3X1OTkiUbW9lhfJhSqM0CtqYFjBpxoAXNa7XPwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIRCZfBu8WDS+KsvHfrjjU+3x+qYMB8GA1UdIwQY MBaAFOO+B8sf1PHjySIwO2cKiBuC5hSRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMt ZDRlZTFkMzg5ZTBkLzEvaEVKbDhHN3hZTkw0cXk4ZC11T05UN2ZINnBnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMtZDRlZTFkMzg5ZTBk LzEvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUca+AwQA V/ayMA0GCSqGSIb3DQEBCwUAA4IBAQB8v/KS1XKnT4Nc+5D0QG7fJ/ph9WvUj3tU ClaEZFjxZaEUO/mHiYXW7xHFUGutuVJLDgcKUzfHO5Gbe5HCDRes8pKS5nxiWqs2 ZJCqit24G5Ij85dApMUyZghjMlL6ALUwCHyQfbeHCpZip4J08+gag/r/AZXpmxGS 4cW6K0AHmCBLnogKWAbgMjcxUli3uCBTaKtPqr8AbgAnTpjIb0KX1zMCrPUp+tx3 RoiAIj6JSgHCzXCvdseiRa/s2mC+Djbl4cZeglkrxPpFgwBzjH+a7ApB8NSjM282 /sa/kwLW2eJ6ab/DwVwBYSooj2oAtOwRb3DTYqtA2j57NeaLmi72 -----END CERTIFICATE-----Generated at Sat Dec 20 21:26:43 2025 by rpki-client