This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/C-HPFOYCMQLmFVZYqIoVsP8I6Tw.roa File: C-HPFOYCMQLmFVZYqIoVsP8I6Tw.roa (raw, json) Hash identifier: D+5EahY4vodx621ahpBPycW58S7hhxRlUsk16p9n/KY= Subject key identifier: 0B:E1:CF:14:E6:02:31:02:E6:15:56:58:A8:8A:15:B0:FF:08:E9:3C Certificate issuer: /CN=df3fdc4bf33bd80fe128d756843f60b39d5beee3 Certificate serial: 019B228C79DBF5ED112BCC1EAA61C7B58941 Authority key identifier: DF:3F:DC:4B:F3:3B:D8:0F:E1:28:D7:56:84:3F:60:B3:9D:5B:EE:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/C-HPFOYCMQLmFVZYqIoVsP8I6Tw.roa Signing time: Mon 15 Dec 2025 15:06:30 +0000 ROA not before: Mon 15 Dec 2025 15:06:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 199959 IP address blocks: 31.220.14.0/24 maxlen: 24 45.12.52.0/23 maxlen: 23 45.12.91.0/24 maxlen: 24 185.238.249.0/24 maxlen: 24 185.238.251.0/24 maxlen: 24 193.9.45.0/24 maxlen: 24 194.40.248.0/24 maxlen: 24 212.108.122.0/24 maxlen: 24 2a14:640:2::/48 maxlen: 48 2a14:640:3::/48 maxlen: 48 2a14:640:4::/48 maxlen: 48 2a14:640:5::/48 maxlen: 48 2a14:640:6::/48 maxlen: 48 2a14:640:7::/48 maxlen: 48 2a14:640:8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:8c:79:db:f5:ed:11:2b:cc:1e:aa:61:c7:b5:89:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df3fdc4bf33bd80fe128d756843f60b39d5beee3 Validity Not Before: Dec 15 15:06:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0be1cf14e6023102e6155658a88a15b0ff08e93c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:43:2c:14:91:1e:0b:66:fc:6c:f1:92:5b:8e: 22:4e:17:fa:e7:aa:78:f1:b8:1d:13:f2:46:70:e7: b8:32:7a:05:e2:61:cf:2f:e0:bf:74:6e:88:2d:80: 56:3a:bc:c8:75:9a:ba:2b:03:5f:4e:94:ca:c4:50: 24:80:36:b4:73:9c:34:e2:cf:e3:4b:ef:4f:f4:57: 8f:77:dc:c9:40:8f:e7:a6:a6:8f:19:f5:c5:56:47: 41:05:b2:39:29:36:3a:a7:fc:98:70:5c:86:3f:25: 4d:82:1c:08:c3:97:4b:99:b2:d4:8a:f8:94:a8:1e: 0f:c6:51:fd:b0:63:d2:99:dc:47:02:b6:fc:db:68: 8a:a3:1f:88:e6:61:c5:c4:ee:f6:6b:c2:d6:b5:2a: b0:eb:5b:ab:06:b4:65:97:54:97:18:ad:ca:60:08: a4:d3:bf:c5:91:fe:7a:91:78:f2:58:c4:1b:1c:e2: 26:7b:81:ab:57:61:92:f9:37:ce:98:70:04:aa:33: a8:e7:b8:8e:26:64:2b:8b:74:45:89:a1:67:92:56: a7:19:77:2f:24:26:13:72:de:8c:f8:17:35:92:07: 3e:fc:b6:86:93:bd:e1:7b:73:30:fd:23:46:e2:82: 20:14:1e:99:86:cc:d7:3a:14:17:52:21:ba:aa:aa: ea:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:E1:CF:14:E6:02:31:02:E6:15:56:58:A8:8A:15:B0:FF:08:E9:3C X509v3 Authority Key Identifier: keyid:DF:3F:DC:4B:F3:3B:D8:0F:E1:28:D7:56:84:3F:60:B3:9D:5B:EE:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/C-HPFOYCMQLmFVZYqIoVsP8I6Tw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.220.14.0/24 45.12.52.0/23 45.12.91.0/24 185.238.249.0/24 185.238.251.0/24 193.9.45.0/24 194.40.248.0/24 212.108.122.0/24 IPv6: 2a14:640:2::-2a14:640:8:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 9f:d6:e3:33:79:8f:bf:19:56:8b:b3:ed:25:73:67:1a:73:7d: 68:dd:9a:ce:f7:5d:4d:76:2f:81:74:00:38:bc:d5:60:45:2c: a3:d4:0b:71:c0:81:e7:e1:32:55:f2:ae:9d:36:69:34:14:68: 9f:fb:69:3c:95:d5:34:d6:57:63:c4:65:a8:ec:9f:f8:42:48: e5:21:c3:8a:87:7f:bd:0e:56:71:43:b4:e0:9c:35:bf:04:37: 1d:d6:eb:f2:2a:aa:27:96:11:d8:8d:94:14:90:f3:51:67:79: 5d:4e:c5:34:7c:e3:2c:0b:3a:0e:32:db:6f:8c:97:39:ae:bb: 1b:c7:77:a9:83:13:e4:e6:f8:3c:d4:7b:d4:25:dd:b2:86:fd: 18:83:06:62:0a:a9:cc:9f:02:3f:a5:f9:a0:ea:dd:88:ce:c6: d5:52:cf:9d:d1:ee:c1:b9:11:0f:af:36:c7:eb:c7:4d:a2:c8: c5:2e:4a:66:be:bf:5c:6b:e1:06:96:af:2e:16:57:b3:b1:08: bc:90:72:10:77:ab:a8:90:03:d0:df:6e:f8:9b:d9:e0:30:72: 11:70:05:48:b8:04:38:ad:9c:8e:d6:6a:3e:d5:b9:f3:1a:59: 64:4a:b4:52:48:34:b8:3b:13:4a:06:c4:70:22:99:53:48:fa: 81:9d:44:67 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgISAZsijHnb9e0RK8weqmHHtYlBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmM2ZkYzRiZjMzYmQ4MGZlMTI4ZDc1Njg0M2Y2MGIzOWQ1 YmVlZTMwHhcNMjUxMjE1MTUwNjMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYmUxY2YxNGU2MDIzMTAyZTYxNTU2NThhODhhMTViMGZmMDhlOTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+EMsFJEeC2b8bPGSW44iThf656p4 8bgdE/JGcOe4MnoF4mHPL+C/dG6ILYBWOrzIdZq6KwNfTpTKxFAkgDa0c5w04s/j S+9P9FePd9zJQI/npqaPGfXFVkdBBbI5KTY6p/yYcFyGPyVNghwIw5dLmbLUiviU qB4PxlH9sGPSmdxHArb822iKox+I5mHFxO72a8LWtSqw61urBrRll1SXGK3KYAik 07/Fkf56kXjyWMQbHOIme4GrV2GS+TfOmHAEqjOo57iOJmQri3RFiaFnklanGXcv JCYTct6M+Bc1kgc+/LaGk73he3Mw/SNG4oIgFB6ZhszXOhQXUiG6qqrq7QIDAQAB o4ICTzCCAkswHQYDVR0OBBYEFAvhzxTmAjEC5hVWWKiKFbD/COk8MB8GA1UdIwQY MBaAFN8/3EvzO9gP4SjXVoQ/YLOdW+7jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3pfY1NfTTcyQV9oS05kV2hEOWdzNTFiN3VNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8zMjVjZDMtN2VkYi00MDI2LTg1ODMt YTQ3M2VjNTQxMGMzLzEvQy1IUEZPWUNNUUxtRlZaWXFJb1ZzUDhJNlR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi8zMjVjZDMtN2VkYi00MDI2LTg1ODMtYTQ3M2VjNTQxMGMz LzEvM3pfY1NfTTcyQV9oS05kV2hEOWdzNTFiN3VNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGUGCCsGAQUFBwEHAQH/BFYwVDA2BAIAATAwAwQAH9wOAwQB LQw0AwQALQxbAwQAue75AwQAue77AwQAwQktAwQAwij4AwQA1Gx6MBoEAgACMBQw EgMHASoUBkAAAgMHACoUBkAACDANBgkqhkiG9w0BAQsFAAOCAQEAn9bjM3mPvxlW i7PtJXNnGnN9aN2azvddTXYvgXQAOLzVYEUso9QLccCB5+EyVfKunTZpNBRon/tp PJXVNNZXY8RlqOyf+EJI5SHDiod/vQ5WcUO04Jw1vwQ3Hdbr8iqqJ5YR2I2UFJDz UWd5XU7FNHzjLAs6DjLbb4yXOa67G8d3qYMT5Ob4PNR71CXdsob9GIMGYgqpzJ8C P6X5oOrdiM7G1VLPndHuwbkRD682x+vHTaLIxS5KZr6/XGvhBpavLhZXs7EIvJBy EHerqJAD0N9u+JvZ4DByEXAFSLgEOK2cjtZqPtW58xpZZEq0Ukg0uDsTSgbEcCKZ U0j6gZ1EZw== -----END CERTIFICATE-----Generated at Sat Dec 20 02:00:25 2025 by rpki-client