This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/1-hmnqRRiYRBv3-7FZSouO-sZxc8.roa File: 1-hmnqRRiYRBv3-7FZSouO-sZxc8.roa (raw, json) Hash identifier: qZzAiDR7xg8HVxN9Yfi6WKDJM19ySP6xEDjjV5RaVos= Subject key identifier: FA:19:A7:A9:14:62:61:10:6F:DF:EE:C5:65:2A:2E:3B:EB:19:C5:CF Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Certificate serial: 019B2BC3C95CE5898CC94E7EE4FC2312BE0C Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/1-hmnqRRiYRBv3-7FZSouO-sZxc8.roa Signing time: Wed 17 Dec 2025 10:03:29 +0000 ROA not before: Wed 17 Dec 2025 10:03:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 81.22.142.0/23 maxlen: 24 89.185.0.0/22 maxlen: 22 109.72.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:c3:c9:5c:e5:89:8c:c9:4e:7e:e4:fc:23:12:be:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Validity Not Before: Dec 17 10:03:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fa19a7a9146261106fdfeec5652a2e3beb19c5cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4c:fa:6c:f9:cf:06:b5:40:cd:bc:96:f3:e8: 88:12:1d:1d:1c:28:ab:a4:a1:b5:9b:ec:be:9c:39: 0a:f8:13:0b:41:b7:93:69:18:4d:3c:5a:73:73:48: 6f:48:75:31:65:3b:ad:94:a1:b1:39:ff:96:a1:28: 92:16:91:6f:7f:e5:88:1a:24:a1:4e:87:2b:b3:31: c8:34:55:7e:8b:5b:63:ce:6c:d6:da:b6:39:e7:fd: 8a:e9:29:ea:cc:e6:46:93:df:9d:06:13:d5:d6:66: ef:4c:01:0f:f4:d5:9d:ee:d3:cf:3c:79:30:48:ed: 41:b8:db:63:c3:54:19:08:49:bf:8d:0d:a2:6a:f0: 37:21:07:00:c7:e4:72:2a:19:ec:f1:9f:d7:cb:91: 4b:26:26:7d:31:5f:0a:35:d4:8c:6f:eb:b9:15:75: 7f:24:c0:04:1a:fc:b6:e1:92:80:3f:63:29:16:b9: 90:6d:75:f3:71:6d:70:36:c8:8f:7b:46:30:f1:72: cc:94:5d:31:b0:a5:a1:31:b0:64:ab:07:b9:f2:01: ad:f0:af:e9:b8:6c:17:03:48:6e:0d:8c:0b:0b:d4: 8b:af:53:d8:81:35:16:16:9f:f1:46:6e:97:7c:36: 7e:c6:89:dc:9d:88:d5:dd:ab:82:fe:12:92:7c:82: b3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:19:A7:A9:14:62:61:10:6F:DF:EE:C5:65:2A:2E:3B:EB:19:C5:CF X509v3 Authority Key Identifier: keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/1-hmnqRRiYRBv3-7FZSouO-sZxc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.22.142.0/23 89.185.0.0/22 109.72.116.0/22 Signature Algorithm: sha256WithRSAEncryption 5e:5c:44:b6:cd:d6:af:cb:32:3a:9a:62:43:f2:c9:20:19:4c: d3:48:32:c3:fb:a5:ca:85:02:d5:57:a6:2f:ef:10:ff:ef:ce: 97:14:9d:9c:e4:86:01:ce:5d:d9:70:65:46:a9:c1:ca:2d:3b: d8:0c:3d:6a:15:5c:55:18:52:3c:5f:5c:2a:b4:66:42:de:e0: 56:dd:8e:fc:48:63:b0:5f:02:d9:e9:44:d3:a2:c0:07:28:95: 01:f9:3b:73:57:97:27:06:b9:4a:23:b4:66:37:bd:4b:6c:bf: ce:65:f4:e6:0a:91:6d:99:aa:26:28:37:b7:23:e7:12:6b:2f: 54:78:8a:c6:37:ee:1b:1b:cb:5c:db:49:86:5c:3e:24:57:f1: 58:cd:6f:cb:4f:3d:d2:bd:69:b1:af:5b:e9:7f:65:cf:48:af: ec:2b:62:d8:a4:c5:c1:e8:00:e2:2e:38:f2:22:a0:4e:b6:af: a0:6f:ba:35:5e:7e:0e:bb:ff:6f:f0:92:98:39:dd:43:d6:d1: f3:b8:96:d9:9f:f4:ee:bd:c1:d2:d0:be:d3:be:3f:f7:a4:ef: 01:c4:06:68:d6:0e:f5:63:51:32:43:a9:d8:80:f9:3a:24:55: f1:a6:2b:2e:97:65:01:b5:d1:70:a7:9b:4b:7c:33:9b:f2:4c: 52:10:23:e8 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZsrw8lc5YmMyU5+5PwjEr4MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk OGRhYmUwHhcNMjUxMjE3MTAwMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTE5YTdhOTE0NjI2MTEwNmZkZmVlYzU2NTJhMmUzYmViMTljNWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Ez6bPnPBrVAzbyW8+iIEh0dHCir pKG1m+y+nDkK+BMLQbeTaRhNPFpzc0hvSHUxZTutlKGxOf+WoSiSFpFvf+WIGiSh TocrszHINFV+i1tjzmzW2rY55/2K6SnqzOZGk9+dBhPV1mbvTAEP9NWd7tPPPHkw SO1BuNtjw1QZCEm/jQ2iavA3IQcAx+RyKhns8Z/Xy5FLJiZ9MV8KNdSMb+u5FXV/ JMAEGvy24ZKAP2MpFrmQbXXzcW1wNsiPe0Yw8XLMlF0xsKWhMbBkqwe58gGt8K/p uGwXA0huDYwLC9SLr1PYgTUWFp/xRm6XfDZ+xoncnYjV3auC/hKSfIKz2QIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFPoZp6kUYmEQb9/uxWUqLjvrGcXPMB8GA1UdIwQY MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt ODJhZDE0NTU1ZWFhLzEvMS1obW5xUlJpWVJCdjMtN0ZaU291Ty1zWnhjOC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvY2QvNjE2OGQ3LTk0NmMtNDU3NC05MWVhLTgyYWQxNDU1NWVh YS8xL21DejRDY0RqNk9WVkw1ME4wdUotRGRMWTJyNC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAVEWjgME Alm5AAMEAm1IdDANBgkqhkiG9w0BAQsFAAOCAQEAXlxEts3Wr8syOppiQ/LJIBlM 00gyw/ulyoUC1VemL+8Q/+/OlxSdnOSGAc5d2XBlRqnByi072Aw9ahVcVRhSPF9c KrRmQt7gVt2O/EhjsF8C2elE06LAByiVAfk7c1eXJwa5SiO0Zje9S2y/zmX05gqR bZmqJig3tyPnEmsvVHiKxjfuGxvLXNtJhlw+JFfxWM1vy0890r1psa9b6X9lz0iv 7Cti2KTFwegA4i448iKgTravoG+6NV5+Drv/b/CSmDndQ9bR87iW2Z/07r3B0tC+ 074/96TvAcQGaNYO9WNRMkOp2ID5OiRV8aYrLpdlAbXRcKebS3wzm/JMUhAj6A== -----END CERTIFICATE-----Generated at Sat Dec 20 00:50:40 2025 by rpki-client