This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/IHON2rn_CAk-QTZRxcf294uBItk.roa File: IHON2rn_CAk-QTZRxcf294uBItk.roa (raw, json) Hash identifier: GpSTLre0+QFMoobK7dgqzWVvBqhjML/zcMCSHc91zfI= Subject key identifier: 20:73:8D:DA:B9:FF:08:09:3E:41:36:51:C5:C7:F6:F7:8B:81:22:D9 Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b Certificate serial: 019B7F84158A94D63A6B6311114D55EF40B9 Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/IHON2rn_CAk-QTZRxcf294uBItk.roa Signing time: Fri 02 Jan 2026 16:22:01 +0000 ROA not before: Fri 02 Jan 2026 16:22:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61157 IP address blocks: 85.93.65.0/24 maxlen: 24 85.93.66.0/24 maxlen: 24 85.93.67.0/24 maxlen: 24 85.93.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:15:8a:94:d6:3a:6b:63:11:11:4d:55:ef:40:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b Validity Not Before: Jan 2 16:22:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=20738ddab9ff08093e413651c5c7f6f78b8122d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b2:aa:0a:64:3d:8d:d5:de:99:d3:56:26:c8: e9:46:fc:f2:24:18:5f:b6:12:91:c4:93:cb:fc:ca: e6:fb:52:38:8f:b9:f7:e6:6c:9e:2b:f6:bf:88:1c: b2:04:2a:47:05:9b:f9:2e:f8:62:94:04:22:f1:a3: ad:3f:96:00:5c:8f:29:4b:7c:a6:f5:1c:3e:62:5b: 37:70:01:b2:3d:96:f8:ef:f1:89:f0:aa:3d:fa:e9: 79:f3:b9:a0:1e:0d:7a:b2:f9:92:56:4c:3f:0a:74: e8:9e:0a:54:96:f4:64:91:c9:cc:f1:61:4e:fe:8d: 89:c9:4d:1e:57:99:00:58:e2:97:6e:59:a5:7b:75: 0f:d1:43:8e:4d:17:0c:cc:54:86:ec:6f:53:a4:19: e9:39:52:16:8e:be:d3:b5:b2:83:7c:bc:f9:90:ea: 10:9e:aa:94:a3:0e:3a:d2:fd:11:a7:a2:f6:4e:14: 17:0b:52:17:8d:56:0a:9d:f0:8c:dd:4f:37:7d:e2: 88:30:71:90:d8:2b:ce:5a:58:ab:61:78:88:9c:7a: f2:a2:b3:ab:76:ed:b0:d8:3f:07:74:f6:55:ac:c8: 79:2f:54:ad:43:71:c7:d8:bd:23:dd:ef:74:32:a7: ce:5f:83:4c:c8:d0:ed:f0:ee:f9:70:72:fb:87:0a: 56:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:73:8D:DA:B9:FF:08:09:3E:41:36:51:C5:C7:F6:F7:8B:81:22:D9 X509v3 Authority Key Identifier: keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/IHON2rn_CAk-QTZRxcf294uBItk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.93.65.0-85.93.67.255 85.93.80.0/24 Signature Algorithm: sha256WithRSAEncryption 32:12:c4:cd:aa:c0:1f:9c:2c:06:e0:bd:fb:28:69:f6:db:1b: e2:70:3a:92:2e:9e:ed:6a:b1:9a:b7:82:be:a0:32:7e:63:9c: 9a:0f:10:4a:f3:17:95:17:dd:4c:46:d2:d2:d9:9a:3d:bf:21: ed:db:fd:57:e0:a0:e2:c5:9d:aa:11:88:e2:08:5f:3c:d3:83: 88:df:b9:54:be:9b:d2:a6:10:3a:8e:85:bb:96:36:e5:dd:a3: 1d:4f:70:8a:a2:08:40:23:3f:66:d7:a3:ab:85:c4:48:11:1d: 7a:3f:36:c9:8e:d4:fe:09:2c:c5:a2:d3:d2:f7:9f:fb:3e:69: b4:2e:0d:27:d6:f8:80:17:25:c6:a6:38:d1:4d:d2:8b:6d:5f: b8:06:50:5f:df:f1:b4:5a:52:58:e7:3d:54:9d:61:b8:bf:80: 07:60:40:ba:00:83:b4:7b:33:cf:5c:8e:0c:1c:5c:0f:7e:04: 2d:06:57:74:2e:55:36:d6:12:f1:53:77:9b:72:2e:8f:40:a1: 07:d0:c5:62:10:32:99:cf:f8:5e:d6:10:32:7d:e0:4a:09:d3: 7a:89:cf:6d:c5:a6:7e:8c:ba:2a:2a:c6:56:47:1d:e4:25:54: 90:0b:05:93:f3:fd:a2:ff:42:b4:3e:f3:d6:59:32:c7:3b:9e: ce:e1:2c:31 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt/hBWKlNY6a2MREU1V70C5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNmVkMGZiN2IzMjA4MzJhYzE1ODA1MzRjN2IyNjNmMzA0 ZTk4MWIwHhcNMjYwMTAyMTYyMjAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMDczOGRkYWI5ZmYwODA5M2U0MTM2NTFjNWM3ZjZmNzhiODEyMmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbKqCmQ9jdXemdNWJsjpRvzyJBhf thKRxJPL/Mrm+1I4j7n35myeK/a/iByyBCpHBZv5LvhilAQi8aOtP5YAXI8pS3ym 9Rw+Yls3cAGyPZb47/GJ8Ko9+ul587mgHg16svmSVkw/CnTongpUlvRkkcnM8WFO /o2JyU0eV5kAWOKXblmle3UP0UOOTRcMzFSG7G9TpBnpOVIWjr7TtbKDfLz5kOoQ nqqUow460v0Rp6L2ThQXC1IXjVYKnfCM3U83feKIMHGQ2CvOWlirYXiInHryorOr du2w2D8HdPZVrMh5L1StQ3HH2L0j3e90MqfOX4NMyNDt8O75cHL7hwpWJwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFCBzjdq5/wgJPkE2UcXH9veLgSLZMB8GA1UdIwQY MBaAFLpu0Pt7MggyrBWAU0x7Jj8wTpgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQt MTYxZjM0MjM4N2QxLzEvSUhPTjJybl9DQWstUVRaUnhjZjI5NHVCSXRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQtMTYxZjM0MjM4N2Qx LzEvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBABVXUED BAJVXUADBABVXVAwDQYJKoZIhvcNAQELBQADggEBADISxM2qwB+cLAbgvfsoafbb G+JwOpIunu1qsZq3gr6gMn5jnJoPEErzF5UX3UxG0tLZmj2/Ie3b/VfgoOLFnaoR iOIIXzzTg4jfuVS+m9KmEDqOhbuWNuXdox1PcIqiCEAjP2bXo6uFxEgRHXo/NsmO 1P4JLMWi09L3n/s+abQuDSfW+IAXJcamONFN0ottX7gGUF/f8bRaUljnPVSdYbi/ gAdgQLoAg7R7M89cjgwcXA9+BC0GV3QuVTbWEvFTd5tyLo9AoQfQxWIQMpnP+F7W EDJ94EoJ03qJz23Fpn6MuioqxlZHHeQlVJALBZPz/aL/QrQ+89ZZMsc7ns7hLDE= -----END CERTIFICATE-----Generated at Sun Jan 25 14:21:12 2026 by rpki-client