This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/H0ohXS9X5CuNmdABAZo7QVngevg.roa File: H0ohXS9X5CuNmdABAZo7QVngevg.roa (raw, json) Hash identifier: AyyjXDae21dR+HrIf+wOHMkNqlVzHUDtXhdzOaCJinw= Subject key identifier: 1F:4A:21:5D:2F:57:E4:2B:8D:99:D0:01:01:9A:3B:41:59:E0:7A:F8 Certificate issuer: /CN=46ba3f80039b9e784cfb24bf2c7ddb24e1900a76 Certificate serial: 019ABB2108FBC686E70B071C6E4291378496 Authority key identifier: 46:BA:3F:80:03:9B:9E:78:4C:FB:24:BF:2C:7D:DB:24:E1:90:0A:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/H0ohXS9X5CuNmdABAZo7QVngevg.roa Signing time: Tue 25 Nov 2025 13:08:15 +0000 ROA not before: Tue 25 Nov 2025 13:08:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215070 IP address blocks: 90.156.244.0/22 maxlen: 24 90.156.244.0/24 maxlen: 24 90.156.247.0/24 maxlen: 24 2a03:720:60::/48 maxlen: 48 2a03:720:1060::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.crl rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bb:21:08:fb:c6:86:e7:0b:07:1c:6e:42:91:37:84:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46ba3f80039b9e784cfb24bf2c7ddb24e1900a76 Validity Not Before: Nov 25 13:08:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1f4a215d2f57e42b8d99d001019a3b4159e07af8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:29:03:cd:b4:e9:86:3c:55:b0:8d:ec:9b:38: 3b:9c:8d:cf:45:cb:68:19:c3:e3:fb:d9:1e:1b:64: e8:2c:2a:1a:a9:73:c6:67:5b:46:6d:58:49:ac:60: fc:3d:ec:d2:46:f2:3b:71:29:4e:19:6e:69:4b:06: b0:10:4b:3c:38:29:83:39:b1:1a:63:6f:e3:62:4d: d2:6c:f0:90:e5:e0:f9:81:4a:88:cc:12:50:cb:41: bb:a0:b2:9d:14:a1:68:5e:2e:5a:6c:08:44:93:15: c2:5e:42:ed:ae:61:19:78:26:c1:d9:6e:08:9e:30: bd:e1:a2:f9:e7:c5:a1:1a:b0:b9:6e:7b:91:69:1c: ff:8f:f7:39:9f:b8:85:84:7d:4d:3c:aa:41:ca:42: c7:af:e0:21:d7:75:47:af:90:06:70:bf:2f:2e:e0: d7:ef:29:df:47:f6:6d:3d:2f:24:f1:08:1e:06:be: d5:64:2a:46:75:89:c6:5f:e5:6c:e0:9a:2f:1e:bd: 2a:1f:df:0f:20:a2:31:81:2b:5e:c1:38:e9:1d:be: a8:ec:d2:82:a1:4a:1f:a2:5c:f6:70:eb:f2:d3:fc: a8:47:2c:ab:b3:1b:e6:7a:c1:73:8a:73:b7:14:15: 7b:13:95:ae:8e:16:bf:aa:24:05:97:d3:23:a6:61: 72:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:4A:21:5D:2F:57:E4:2B:8D:99:D0:01:01:9A:3B:41:59:E0:7A:F8 X509v3 Authority Key Identifier: keyid:46:BA:3F:80:03:9B:9E:78:4C:FB:24:BF:2C:7D:DB:24:E1:90:0A:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/H0ohXS9X5CuNmdABAZo7QVngevg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 90.156.244.0/22 IPv6: 2a03:720:60::/48 2a03:720:1060::/48 Signature Algorithm: sha256WithRSAEncryption 62:9e:df:d3:94:4e:97:72:86:e3:78:55:65:b3:00:de:18:47: 6c:0c:37:b7:34:b2:4e:9c:ee:34:77:24:15:e3:d8:37:c8:5e: bb:37:77:c5:db:aa:74:c9:05:a9:62:6d:df:36:fd:08:3f:ce: 1c:9d:1f:3d:6d:04:38:4d:c8:40:0c:5f:d9:df:e4:d9:cf:11: a6:44:8d:eb:3b:4a:61:cc:72:cb:76:84:3c:c0:11:e2:4e:46: ac:32:8e:f7:d2:58:32:f0:fd:7c:1d:77:e1:86:f2:4b:03:b3: e8:8e:f5:fe:e4:19:95:41:71:06:e4:a9:3f:37:84:cd:2e:49: 53:f1:b4:c7:fa:11:c9:20:ce:20:4e:77:fe:cd:7d:a5:43:97: 09:fd:42:06:7b:59:0a:0c:8b:fe:bd:19:56:57:c5:d0:58:ed: aa:b4:4d:0b:28:23:19:b4:9f:3c:3a:6f:be:25:68:fb:07:f8: 96:c8:35:70:1e:65:6a:20:07:cc:9f:93:c9:84:d5:60:e2:19: 92:28:28:81:b6:fc:b2:ab:51:f3:a9:73:c2:05:a0:8d:d6:5a: 51:ac:1a:62:11:36:78:00:2c:1e:55:56:8f:20:e9:cd:26:19: ac:85:68:03:15:18:f3:8e:36:59:7b:42:e3:d7:4f:a4:ed:87: 51:b0:a7:2b -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZq7IQj7xobnCwccbkKRN4SWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2YmEzZjgwMDM5YjllNzg0Y2ZiMjRiZjJjN2RkYjI0ZTE5 MDBhNzYwHhcNMjUxMTI1MTMwODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjRhMjE1ZDJmNTdlNDJiOGQ5OWQwMDEwMTlhM2I0MTU5ZTA3YWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSkDzbTphjxVsI3smzg7nI3PRcto GcPj+9keG2ToLCoaqXPGZ1tGbVhJrGD8PezSRvI7cSlOGW5pSwawEEs8OCmDObEa Y2/jYk3SbPCQ5eD5gUqIzBJQy0G7oLKdFKFoXi5abAhEkxXCXkLtrmEZeCbB2W4I njC94aL558WhGrC5bnuRaRz/j/c5n7iFhH1NPKpBykLHr+Ah13VHr5AGcL8vLuDX 7ynfR/ZtPS8k8QgeBr7VZCpGdYnGX+Vs4JovHr0qH98PIKIxgStewTjpHb6o7NKC oUofolz2cOvy0/yoRyyrsxvmesFzinO3FBV7E5Wujha/qiQFl9MjpmFyTQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFB9KIV0vV+QrjZnQAQGaO0FZ4Hr4MB8GA1UdIwQY MBaAFEa6P4ADm554TPskvyx92yThkAp2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnJvX2dBT2JubmhNLXlTX0xIM2JKT0dRQ25ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9jZmEyYWUtZTUyNC00YmQwLTg3NWIt ODlhY2UzODIyMGZiLzEvSDBvaFhTOVg1Q3VObWRBQkFabzdRVm5nZXZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9jZmEyYWUtZTUyNC00YmQwLTg3NWItODlhY2UzODIyMGZi LzEvUnJvX2dBT2JubmhNLXlTX0xIM2JKT0dRQ25ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQCWpz0MBgE AgACMBIDBwAqAwcgAGADBwAqAwcgEGAwDQYJKoZIhvcNAQELBQADggEBAGKe39OU TpdyhuN4VWWzAN4YR2wMN7c0sk6c7jR3JBXj2DfIXrs3d8XbqnTJBalibd82/Qg/ zhydHz1tBDhNyEAMX9nf5NnPEaZEjes7SmHMcst2hDzAEeJORqwyjvfSWDLw/Xwd d+GG8ksDs+iO9f7kGZVBcQbkqT83hM0uSVPxtMf6EckgziBOd/7NfaVDlwn9QgZ7 WQoMi/69GVZXxdBY7aq0TQsoIxm0nzw6b74laPsH+JbINXAeZWogB8yfk8mE1WDi GZIoKIG2/LKrUfOpc8IFoI3WWlGsGmIRNngALB5VVo8g6c0mGayFaAMVGPOONll7 QuPXT6Tth1Gwpys= -----END CERTIFICATE-----Generated at Sun Dec 7 02:10:04 2025 by rpki-client