This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/hHpgnkHBn7jNnoYxbotvE9vrOHs.roa File: hHpgnkHBn7jNnoYxbotvE9vrOHs.roa (raw, json) Hash identifier: vwUiUKTRStlpxfIc77utAGpduIi8mu5ntxt1cIjkh3M= Subject key identifier: 84:7A:60:9E:41:C1:9F:B8:CD:9E:86:31:6E:8B:6F:13:DB:EB:38:7B Certificate issuer: /CN=44fc887c977393575de6257e75fa99cde2037c6c Certificate serial: 019AFFF92802B0C8D91966F2B8029B1094DF Authority key identifier: 44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/hHpgnkHBn7jNnoYxbotvE9vrOHs.roa Signing time: Mon 08 Dec 2025 21:58:29 +0000 ROA not before: Mon 08 Dec 2025 21:58:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9304 IP address blocks: 45.85.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ff:f9:28:02:b0:c8:d9:19:66:f2:b8:02:9b:10:94:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44fc887c977393575de6257e75fa99cde2037c6c Validity Not Before: Dec 8 21:58:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=847a609e41c19fb8cd9e86316e8b6f13dbeb387b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5c:f4:f9:6c:c2:39:b2:bb:9e:0e:da:c9:2d: 42:7f:ac:ce:4b:31:f7:87:cb:f7:dc:3b:75:4d:5d: 3c:c3:b0:54:fa:62:8b:dc:8e:a0:43:d0:4d:19:72: c4:48:a2:65:b5:8a:9a:83:d5:e4:26:30:5e:2f:51: 02:b8:56:80:34:1b:f8:13:1d:d0:52:da:fa:50:96: 6c:7c:b6:50:9c:ec:96:f7:31:f2:98:14:f7:0a:31: 1e:85:e4:4f:a2:34:22:39:1f:24:02:a8:57:cc:35: 26:83:c2:c5:e6:6e:0d:fa:21:25:85:3a:00:d5:50: ad:e1:04:ca:c0:93:0f:24:97:c2:d1:f4:30:90:0b: 75:ac:b8:f8:6a:17:8d:51:6c:89:bc:fd:2a:08:1d: 25:d5:00:2a:ac:c1:55:54:14:37:5d:1b:07:d1:9a: 6e:ea:7f:27:68:ce:7a:c1:b5:5d:c7:f7:eb:22:27: 1a:46:68:63:e7:bf:31:f6:ae:ff:3e:d2:21:b2:cf: 77:4d:78:25:15:e8:5d:08:31:f3:9c:11:17:15:bc: 0a:64:6e:0e:dd:2f:e4:31:d7:b3:05:1e:6e:57:eb: 3d:0c:a3:37:b7:3d:2c:b7:da:d1:8d:82:91:2c:2b: 1c:30:d7:c9:7c:ed:00:0d:d4:be:5e:04:00:0a:0a: 06:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:7A:60:9E:41:C1:9F:B8:CD:9E:86:31:6E:8B:6F:13:DB:EB:38:7B X509v3 Authority Key Identifier: keyid:44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/hHpgnkHBn7jNnoYxbotvE9vrOHs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.85.13.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:53:84:1e:e2:d4:02:c4:43:39:ef:28:21:92:c2:a6:7b:20: 77:51:a1:3c:5f:db:33:c9:8f:0c:8c:b4:b8:4b:9c:1e:b7:ae: 0d:b6:cb:99:34:9a:b8:73:e5:07:fd:1a:a4:e5:d5:8b:da:c8: 1a:e7:10:7c:f6:fd:e4:be:45:e9:5b:f0:bf:3b:de:3f:38:74: a3:26:72:2c:c2:99:34:1f:9e:d0:0e:22:46:9b:bd:8d:8f:04: af:9c:ca:9b:21:36:2e:69:52:88:9c:8d:b4:98:bd:84:2c:5c: 9f:9a:1a:dd:e0:41:2d:dd:f6:13:6d:85:53:0c:3f:79:04:f3: 31:bd:2e:0a:75:d3:2c:68:71:28:2e:c6:19:07:d5:04:37:00: e6:c6:ba:62:19:15:58:63:e6:d5:8d:57:fc:ad:17:fa:f8:7e: 5d:ff:b4:6a:81:59:35:3b:79:3f:f9:9a:59:61:53:ae:67:56: fc:0f:4e:e4:61:66:98:8a:a2:0d:9b:b4:c0:ca:59:39:b9:7f: f6:da:68:e5:e5:07:b8:a1:09:fe:d1:33:fc:0f:2a:47:3f:9d: 48:bd:22:19:15:f6:de:5f:f6:65:c7:72:ba:eb:fc:49:58:b6: de:18:c2:34:b7:2f:12:07:dc:33:17:c6:2b:b0:93:66:19:ae: 0d:c5:4b:53 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZr/+SgCsMjZGWbyuAKbEJTfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0ZmM4ODdjOTc3MzkzNTc1ZGU2MjU3ZTc1ZmE5OWNkZTIw MzdjNmMwHhcNMjUxMjA4MjE1ODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDdhNjA5ZTQxYzE5ZmI4Y2Q5ZTg2MzE2ZThiNmYxM2RiZWIzODdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlz0+WzCObK7ng7ayS1Cf6zOSzH3 h8v33Dt1TV08w7BU+mKL3I6gQ9BNGXLESKJltYqag9XkJjBeL1ECuFaANBv4Ex3Q Utr6UJZsfLZQnOyW9zHymBT3CjEeheRPojQiOR8kAqhXzDUmg8LF5m4N+iElhToA 1VCt4QTKwJMPJJfC0fQwkAt1rLj4aheNUWyJvP0qCB0l1QAqrMFVVBQ3XRsH0Zpu 6n8naM56wbVdx/frIicaRmhj578x9q7/PtIhss93TXglFehdCDHznBEXFbwKZG4O 3S/kMdezBR5uV+s9DKM3tz0st9rRjYKRLCscMNfJfO0ADdS+XgQACgoGvQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIR6YJ5BwZ+4zZ6GMW6LbxPb6zh7MB8GA1UdIwQY MBaAFET8iHyXc5NXXeYlfnX6mc3iA3xsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlB5SWZKZHprMWRkNWlWLWRmcVp6ZUlEZkd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9mMDdjNjYtNDczZC00MzVhLWI2OTMt YzM2OWMxZDRjMzM3LzEvaEhwZ25rSEJuN2pObm9ZeGJvdHZFOXZyT0hzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy9mMDdjNjYtNDczZC00MzVhLWI2OTMtYzM2OWMxZDRjMzM3 LzEvUlB5SWZKZHprMWRkNWlWLWRmcVp6ZUlEZkd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVUNMA0G CSqGSIb3DQEBCwUAA4IBAQAdU4Qe4tQCxEM57yghksKmeyB3UaE8X9szyY8MjLS4 S5wet64NtsuZNJq4c+UH/Rqk5dWL2sga5xB89v3kvkXpW/C/O94/OHSjJnIswpk0 H57QDiJGm72NjwSvnMqbITYuaVKInI20mL2ELFyfmhrd4EEt3fYTbYVTDD95BPMx vS4KddMsaHEoLsYZB9UENwDmxrpiGRVYY+bVjVf8rRf6+H5d/7RqgVk1O3k/+ZpZ YVOuZ1b8D07kYWaYiqINm7TAylk5uX/22mjl5Qe4oQn+0TP8DypHP51IvSIZFfbe X/Zlx3K66/xJWLbeGMI0ty8SB9wzF8YrsJNmGa4NxUtT -----END CERTIFICATE-----Generated at Sat Dec 20 07:57:49 2025 by rpki-client