This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/HuoNXJGwniINSg9uYW1zjf1lnCg.roa File: HuoNXJGwniINSg9uYW1zjf1lnCg.roa (raw, json) Hash identifier: xti/hBmMeZkiIrI9gLnHUDXFnGlYkqDp/4ahVmX7Pzw= Subject key identifier: 1E:EA:0D:5C:91:B0:9E:22:0D:4A:0F:6E:61:6D:73:8D:FD:65:9C:28 Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc Certificate serial: 019ADD3597A690FF8B02AC478EA8A6FFE667 Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/HuoNXJGwniINSg9uYW1zjf1lnCg.roa Signing time: Tue 02 Dec 2025 03:57:48 +0000 ROA not before: Tue 02 Dec 2025 03:57:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212836 IP address blocks: 45.158.253.0/24 maxlen: 24 185.233.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:dd:35:97:a6:90:ff:8b:02:ac:47:8e:a8:a6:ff:e6:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc Validity Not Before: Dec 2 03:57:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1eea0d5c91b09e220d4a0f6e616d738dfd659c28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:bd:45:4a:d9:46:b7:33:42:0e:a3:56:5d:60: f6:98:2e:3c:37:e4:51:1b:14:a0:c1:7e:a8:68:05: 3a:43:93:ef:e8:a0:f7:74:4e:8e:5c:c6:c9:e6:c1: 2f:8d:06:79:37:0c:4c:d0:f8:89:bd:f0:f7:58:c4: 4a:a4:71:5d:f5:3d:1e:ce:9a:c7:4b:ed:ca:c6:f4: dc:17:a8:17:b8:fa:8d:19:19:2e:c8:7c:d9:9a:c4: 0d:72:62:f6:50:77:ba:d9:cb:77:92:fa:f5:5d:d5: ed:52:c0:b9:c4:ba:c8:50:b1:3c:51:46:f9:e1:ca: 51:0c:f0:7c:93:b0:07:b5:31:63:8d:66:7a:a3:0e: 24:fe:5a:3b:9e:62:00:07:10:c9:a5:d1:b7:9d:5c: f3:a1:7d:5a:aa:f3:63:e9:2f:34:a7:5e:75:cd:1f: 30:c6:13:8d:d8:61:92:ab:83:d7:9d:2a:b2:ca:1d: 1f:8b:0c:51:35:1d:65:2d:ee:62:77:56:f7:99:da: 62:48:2f:a2:85:53:73:f9:ef:92:35:a8:88:8c:f9: d9:b4:db:d1:c6:b2:2b:c9:53:d9:15:e5:bb:c4:59: 93:93:5a:fc:29:dd:4f:df:ee:a0:af:06:4a:f6:36: cb:58:4a:4e:09:48:c7:28:1c:8e:4e:1e:4c:88:76: eb:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:EA:0D:5C:91:B0:9E:22:0D:4A:0F:6E:61:6D:73:8D:FD:65:9C:28 X509v3 Authority Key Identifier: keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/HuoNXJGwniINSg9uYW1zjf1lnCg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.158.253.0/24 185.233.16.0/24 Signature Algorithm: sha256WithRSAEncryption 10:15:f9:12:4d:a4:70:31:4b:ab:f5:61:62:d3:a1:9b:a0:96: 32:71:53:05:77:95:d8:3a:a8:05:15:e5:b0:56:eb:42:77:d8: 72:e0:24:31:8c:21:fa:16:a3:b6:9f:de:bb:bb:8c:30:2d:f0: 0a:c7:70:f5:61:f9:c8:38:4b:e7:c7:ce:34:6a:7e:50:56:e8: a5:30:86:df:9b:cd:e4:23:13:ef:50:84:dc:80:7e:cc:c2:3a: 0d:1a:03:f4:b9:47:4b:bf:bb:a0:25:67:2f:25:81:77:3b:32: 42:d4:b1:37:4c:b2:92:dd:7a:7a:ed:01:14:81:50:07:23:5e: 54:59:57:fd:ce:ee:6c:f7:df:a9:ee:54:68:3e:4d:3a:9f:2c: b4:24:4c:13:e8:99:91:4d:bf:99:4d:c2:41:cd:04:4f:ac:63: 51:2b:63:55:57:8b:df:3d:71:62:e4:fe:0c:9b:f5:a1:76:98: 30:a4:bf:94:24:5a:41:cf:a9:2d:df:3b:ba:00:41:88:61:73: 89:c6:1a:f1:26:f5:7f:b0:a8:34:51:70:fc:35:1d:da:5e:4a: e7:93:5d:e4:d4:22:8e:c6:2e:90:27:5a:e7:54:26:b8:a2:0b: 45:1c:cf:51:2f:55:6f:33:e3:cd:1a:2b:97:56:40:98:1a:ea: 62:51:01:2a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZrdNZemkP+LAqxHjqim/+ZnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2 YzhkY2MwHhcNMjUxMjAyMDM1NzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZWVhMGQ1YzkxYjA5ZTIyMGQ0YTBmNmU2MTZkNzM4ZGZkNjU5YzI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3r1FStlGtzNCDqNWXWD2mC48N+RR GxSgwX6oaAU6Q5Pv6KD3dE6OXMbJ5sEvjQZ5NwxM0PiJvfD3WMRKpHFd9T0ezprH S+3KxvTcF6gXuPqNGRkuyHzZmsQNcmL2UHe62ct3kvr1XdXtUsC5xLrIULE8UUb5 4cpRDPB8k7AHtTFjjWZ6ow4k/lo7nmIABxDJpdG3nVzzoX1aqvNj6S80p151zR8w xhON2GGSq4PXnSqyyh0fiwxRNR1lLe5id1b3mdpiSC+ihVNz+e+SNaiIjPnZtNvR xrIryVPZFeW7xFmTk1r8Kd1P3+6grwZK9jbLWEpOCUjHKByOTh5MiHbrAQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFB7qDVyRsJ4iDUoPbmFtc439ZZwoMB8GA1UdIwQY MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt OTE4YWM2NDYyNjc5LzEvSHVvTlhKR3duaUlOU2c5dVlXMXpqZjFsbkNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5 LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZ79AwQA uekQMA0GCSqGSIb3DQEBCwUAA4IBAQAQFfkSTaRwMUur9WFi06GboJYycVMFd5XY OqgFFeWwVutCd9hy4CQxjCH6FqO2n967u4wwLfAKx3D1YfnIOEvnx840an5QVuil MIbfm83kIxPvUITcgH7MwjoNGgP0uUdLv7ugJWcvJYF3OzJC1LE3TLKS3Xp67QEU gVAHI15UWVf9zu5s99+p7lRoPk06nyy0JEwT6JmRTb+ZTcJBzQRPrGNRK2NVV4vf PXFi5P4Mm/WhdpgwpL+UJFpBz6kt3zu6AEGIYXOJxhrxJvV/sKg0UXD8NR3aXkrn k13k1CKOxi6QJ1rnVCa4ogtFHM9RL1VvM+PNGiuXVkCYGupiUQEq -----END CERTIFICATE-----Generated at Sat Dec 6 18:47:03 2025 by rpki-client