This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/HbJ_U9zbX8fxMvtFMjI0YyZaIU0.roa File: HbJ_U9zbX8fxMvtFMjI0YyZaIU0.roa (raw, json) Hash identifier: 2yJvKj/omVNhgQrJaORplMTqKb/JuCVSujLu6XPy7Jc= Subject key identifier: 1D:B2:7F:53:DC:DB:5F:C7:F1:32:FB:45:32:32:34:63:26:5A:21:4D Certificate issuer: /CN=d27b877f899341269bec67c6e3a0a888ba7ae98d Certificate serial: 019B03B3217734EB0D5BB85B73DAB7097000 Authority key identifier: D2:7B:87:7F:89:93:41:26:9B:EC:67:C6:E3:A0:A8:88:BA:7A:E9:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nuHf4mTQSab7GfG46CoiLp66Y0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/HbJ_U9zbX8fxMvtFMjI0YyZaIU0.roa Signing time: Tue 09 Dec 2025 15:20:29 +0000 ROA not before: Tue 09 Dec 2025 15:20:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 16509 IP address blocks: 195.234.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.mft rsync://rpki.ripe.net/repository/DEFAULT/0nuHf4mTQSab7GfG46CoiLp66Y0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:03:b3:21:77:34:eb:0d:5b:b8:5b:73:da:b7:09:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d27b877f899341269bec67c6e3a0a888ba7ae98d Validity Not Before: Dec 9 15:20:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1db27f53dcdb5fc7f132fb4532323463265a214d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:19:31:b2:f1:65:a0:28:5a:e2:8f:06:e4:f5: dd:1b:30:83:00:a9:55:82:f9:c4:35:72:8e:a3:aa: 9f:d1:f2:b1:15:45:4b:48:de:4d:68:10:7f:c8:67: 50:d1:72:b8:82:76:5a:0a:4d:bd:2c:54:b5:3b:83: 37:4a:ce:a1:2a:14:17:b3:d1:02:89:7a:e3:4d:2f: be:f1:a0:fe:44:a6:ff:cb:f8:20:31:05:af:7a:17: 66:55:94:3d:1f:57:ec:ee:20:4d:0f:a0:3d:88:a5: 38:58:7b:e1:6e:bd:48:55:cf:f0:53:25:cd:ae:11: b0:22:18:8c:94:77:7d:78:41:97:47:74:ac:8e:57: 3d:89:4d:19:2f:76:9a:20:3e:36:d0:4a:67:59:89: 76:db:20:6a:8e:2c:45:5c:2d:6e:43:08:21:07:67: b5:71:c4:ce:0d:81:31:45:a3:e7:38:92:e5:bd:c7: 0f:54:4e:80:58:1f:57:56:53:2b:ca:55:67:f3:42: b2:08:fe:fb:84:0d:82:9e:b2:86:28:c5:70:df:e8: 3f:83:68:61:c5:71:54:60:00:a4:06:32:ff:0a:f2: d7:c4:59:5c:1a:eb:6f:b0:1b:94:eb:e1:23:9b:d8: f5:62:c5:ee:88:12:28:16:68:b2:25:9e:07:7c:3a: 18:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:B2:7F:53:DC:DB:5F:C7:F1:32:FB:45:32:32:34:63:26:5A:21:4D X509v3 Authority Key Identifier: keyid:D2:7B:87:7F:89:93:41:26:9B:EC:67:C6:E3:A0:A8:88:BA:7A:E9:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nuHf4mTQSab7GfG46CoiLp66Y0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/HbJ_U9zbX8fxMvtFMjI0YyZaIU0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.234.34.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:cb:ba:8e:09:58:b3:5e:cf:31:d2:94:7a:43:67:87:5d:dd: 0b:ec:ed:f0:02:1d:07:04:bd:76:65:00:d7:e9:8b:bd:da:f2: 8c:02:aa:83:d4:ac:50:a7:d9:f7:6c:97:d1:fd:b2:e5:68:d2: f6:66:7d:3e:ab:02:d0:08:06:6a:bc:67:2d:3e:75:69:25:33: e3:c2:56:ff:3b:b3:71:b8:84:e1:0c:58:87:f1:dd:6f:2a:f9: 3f:1e:1a:6d:bb:7c:0c:ca:5f:3c:cf:49:07:6a:55:e2:67:d9: c5:fd:78:bc:de:2b:36:56:a3:6d:71:e5:19:18:7b:b9:e4:1e: 2f:ac:cd:d8:73:1c:65:d8:82:19:fd:30:0d:f1:a4:81:ea:fc: 45:7c:c0:52:18:b6:f5:1a:f5:31:f3:df:92:5c:3b:13:da:9d: 86:8e:3e:16:ae:0b:9b:da:35:bb:c0:85:0d:5e:bf:e4:c7:22: 03:8c:6b:94:30:90:7b:6c:cc:06:a8:22:ba:73:ee:fa:a8:c7: 69:e7:f8:dc:96:2e:9c:5e:2e:fa:b1:94:51:e9:fc:66:b7:22: 79:6a:9d:01:79:c7:14:8f:bc:c6:07:c7:99:9b:2f:b2:66:d3: a9:51:2b:9f:84:ef:c5:a6:83:f3:50:27:3c:65:03:f3:2d:4f: 60:65:e1:f3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsDsyF3NOsNW7hbc9q3CXAAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyN2I4NzdmODk5MzQxMjY5YmVjNjdjNmUzYTBhODg4YmE3 YWU5OGQwHhcNMjUxMjA5MTUyMDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZGIyN2Y1M2RjZGI1ZmM3ZjEzMmZiNDUzMjMyMzQ2MzI2NWEyMTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhkxsvFloCha4o8G5PXdGzCDAKlV gvnENXKOo6qf0fKxFUVLSN5NaBB/yGdQ0XK4gnZaCk29LFS1O4M3Ss6hKhQXs9EC iXrjTS++8aD+RKb/y/ggMQWvehdmVZQ9H1fs7iBND6A9iKU4WHvhbr1IVc/wUyXN rhGwIhiMlHd9eEGXR3Ssjlc9iU0ZL3aaID420EpnWYl22yBqjixFXC1uQwghB2e1 ccTODYExRaPnOJLlvccPVE6AWB9XVlMrylVn80KyCP77hA2CnrKGKMVw3+g/g2hh xXFUYACkBjL/CvLXxFlcGutvsBuU6+Ejm9j1YsXuiBIoFmiyJZ4HfDoYWQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB2yf1Pc21/H8TL7RTIyNGMmWiFNMB8GA1UdIwQY MBaAFNJ7h3+Jk0Emm+xnxuOgqIi6eumNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMG51SGY0bVRRU2FiN0dmRzQ2Q29pTHA2NlkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS80NDVlZDAtNDhiMy00MDhlLWExYmMt OTk3OWRmNTJiMDE4LzEvSGJKX1U5emJYOGZ4TXZ0Rk1qSTBZeVphSVUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS80NDVlZDAtNDhiMy00MDhlLWExYmMtOTk3OWRmNTJiMDE4 LzEvMG51SGY0bVRRU2FiN0dmRzQ2Q29pTHA2NlkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw+oiMA0G CSqGSIb3DQEBCwUAA4IBAQAey7qOCVizXs8x0pR6Q2eHXd0L7O3wAh0HBL12ZQDX 6Yu92vKMAqqD1KxQp9n3bJfR/bLlaNL2Zn0+qwLQCAZqvGctPnVpJTPjwlb/O7Nx uIThDFiH8d1vKvk/Hhptu3wMyl88z0kHalXiZ9nF/Xi83is2VqNtceUZGHu55B4v rM3Ycxxl2IIZ/TAN8aSB6vxFfMBSGLb1GvUx89+SXDsT2p2Gjj4Wrgub2jW7wIUN Xr/kxyIDjGuUMJB7bMwGqCK6c+76qMdp5/jcli6cXi76sZRR6fxmtyJ5ap0BeccU j7zGB8eZmy+yZtOpUSufhO/FpoPzUCc8ZQPzLU9gZeHz -----END CERTIFICATE-----Generated at Fri Dec 19 23:21:59 2025 by rpki-client