This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/HT3O9TO5wY9dXYSp34UlqcR2gXc.roa File: HT3O9TO5wY9dXYSp34UlqcR2gXc.roa (raw, json) Hash identifier: YCv7eiQWABbzqrb+yNGoCYk252WBY990atLC71YK5os= Subject key identifier: 1D:3D:CE:F5:33:B9:C1:8F:5D:5D:84:A9:DF:85:25:A9:C4:76:81:77 Certificate issuer: /CN=cd108c225f2478cd4230179890d07284be1636cd Certificate serial: 019B5E9F7F1B609E58278F3FA6FD09DF2997 Authority key identifier: CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/HT3O9TO5wY9dXYSp34UlqcR2gXc.roa Signing time: Sat 27 Dec 2025 07:04:29 +0000 ROA not before: Sat 27 Dec 2025 07:04:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 136038 IP address blocks: 2.59.152.0/22 maxlen: 22 2.59.152.0/24 maxlen: 24 2.59.154.0/24 maxlen: 24 2.59.155.0/24 maxlen: 24 45.91.224.0/22 maxlen: 22 45.91.226.0/24 maxlen: 24 45.91.227.0/24 maxlen: 24 45.142.152.0/22 maxlen: 22 45.142.152.0/24 maxlen: 24 45.142.155.0/24 maxlen: 24 91.204.224.0/22 maxlen: 22 91.204.225.0/24 maxlen: 24 185.202.100.0/22 maxlen: 22 185.202.103.0/24 maxlen: 24 193.239.150.0/23 maxlen: 23 193.239.150.0/24 maxlen: 24 193.239.154.0/23 maxlen: 23 193.239.154.0/24 maxlen: 24 194.126.202.0/24 maxlen: 24 194.126.215.0/24 maxlen: 24 194.126.219.0/24 maxlen: 24 194.126.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 07:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5e:9f:7f:1b:60:9e:58:27:8f:3f:a6:fd:09:df:29:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd108c225f2478cd4230179890d07284be1636cd Validity Not Before: Dec 27 07:04:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1d3dcef533b9c18f5d5d84a9df8525a9c4768177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9f:26:99:30:5d:5c:22:89:40:f9:4a:03:5e: 15:63:03:6a:27:6c:15:e0:45:aa:2f:1c:75:48:2f: 40:ab:c7:d9:5b:39:01:21:d9:cc:40:88:53:66:9a: 6b:bc:86:23:5f:63:e9:1e:18:d3:25:a5:42:48:f2: cf:7d:77:4b:fa:92:c1:02:36:be:84:ec:f9:87:bc: 88:fc:b7:bd:f7:93:2d:76:b5:8c:e3:90:f9:1b:96: 49:a1:a4:c9:f5:f5:1f:9b:bf:d6:ae:57:ff:7d:0d: 14:f0:41:ef:77:a5:91:27:a7:8f:55:3f:58:a1:c8: a1:12:30:e4:ce:96:f1:53:85:14:23:15:4f:89:c3: 96:c8:68:9d:b5:e2:5a:f8:5a:d5:c3:9b:fd:53:19: 9c:7c:eb:05:02:e0:eb:fc:39:d9:d2:2a:06:19:f4: b4:0e:86:24:1f:80:6f:70:a6:2e:1c:c9:62:bc:32: c9:96:30:3f:23:07:83:d6:3b:4f:40:bb:1f:0d:39: 7f:1d:a7:c8:00:a4:68:6f:73:22:25:1e:90:ec:70: e3:64:c7:d1:b4:b3:40:46:b4:23:3c:e7:6e:52:3f: 68:bb:99:ec:e1:05:79:21:87:07:ac:02:1a:ac:66: fc:08:01:28:88:1f:c8:48:91:df:4a:ec:ab:12:fa: 0e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:3D:CE:F5:33:B9:C1:8F:5D:5D:84:A9:DF:85:25:A9:C4:76:81:77 X509v3 Authority Key Identifier: keyid:CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/HT3O9TO5wY9dXYSp34UlqcR2gXc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.59.152.0/22 45.91.224.0/22 45.142.152.0/22 91.204.224.0/22 185.202.100.0/22 193.239.150.0/23 193.239.154.0/23 194.126.202.0/24 194.126.215.0/24 194.126.219.0/24 194.126.227.0/24 Signature Algorithm: sha256WithRSAEncryption 26:2a:ed:7f:a8:6c:d1:47:16:61:ff:68:c5:51:f7:33:af:8d: d3:a0:d6:0a:25:13:ff:7d:23:5a:05:f7:8b:74:40:de:d6:e0: 17:9d:5b:a5:d7:99:75:a3:05:ba:30:a6:ad:a6:92:c3:4e:56: 6a:b0:35:93:1e:8c:15:6e:f1:9b:ca:08:0a:87:69:8a:af:77: b9:43:ae:90:79:27:27:6c:37:aa:5b:f0:35:fd:d4:2c:6d:66: 52:f2:16:35:1f:ad:64:b6:08:eb:eb:d3:c3:74:18:94:19:2d: db:ab:2c:e4:66:da:f1:51:99:fe:9b:8d:66:ba:70:af:00:2b: 6c:6d:0b:c1:2e:67:b4:ed:96:6a:dd:c8:fa:53:12:62:4e:9e: 79:59:20:6b:58:b2:86:f4:39:cf:e9:03:85:df:ba:06:fa:46: 77:e1:32:13:e3:b2:bb:f4:71:d1:c6:06:03:79:4c:9f:17:b6: 0f:e2:b9:b1:a4:5d:dc:c8:41:14:93:5c:c3:99:98:30:af:31: 40:2c:a8:7f:32:70:4e:69:6e:53:46:99:c6:f3:98:14:7c:d4: 40:1d:57:03:3d:ae:1c:75:cd:3a:55:36:62:3d:8e:b1:af:f5: 42:c4:99:42:65:40:57:73:36:66:58:bc:1c:00:90:26:0d:13: fc:ef:d3:22 -----BEGIN CERTIFICATE----- MIIFOTCCBCGgAwIBAgISAZten38bYJ5YJ48/pv0J3ymXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMTA4YzIyNWYyNDc4Y2Q0MjMwMTc5ODkwZDA3Mjg0YmUx NjM2Y2QwHhcNMjUxMjI3MDcwNDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZDNkY2VmNTMzYjljMThmNWQ1ZDg0YTlkZjg1MjVhOWM0NzY4MTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyp8mmTBdXCKJQPlKA14VYwNqJ2wV 4EWqLxx1SC9Aq8fZWzkBIdnMQIhTZpprvIYjX2PpHhjTJaVCSPLPfXdL+pLBAja+ hOz5h7yI/Le995MtdrWM45D5G5ZJoaTJ9fUfm7/Wrlf/fQ0U8EHvd6WRJ6ePVT9Y ocihEjDkzpbxU4UUIxVPicOWyGidteJa+FrVw5v9UxmcfOsFAuDr/DnZ0ioGGfS0 DoYkH4BvcKYuHMlivDLJljA/IweD1jtPQLsfDTl/HafIAKRob3MiJR6Q7HDjZMfR tLNARrQjPOduUj9ou5ns4QV5IYcHrAIarGb8CAEoiB/ISJHfSuyrEvoOKQIDAQAB o4ICRTCCAkEwHQYDVR0OBBYEFB09zvUzucGPXV2Eqd+FJanEdoF3MB8GA1UdIwQY MBaAFM0QjCJfJHjNQjAXmJDQcoS+FjbNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQt YWU1MDI3MzY4MWE3LzEvSFQzTzlUTzV3WTlkWFlTcDM0VWxxY1IyZ1hjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQtYWU1MDI3MzY4MWE3 LzEvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQCAjuYAwQC LVvgAwQCLY6YAwQCW8zgAwQCucpkAwQBwe+WAwQBwe+aAwQAwn7KAwQAwn7XAwQA wn7bAwQAwn7jMA0GCSqGSIb3DQEBCwUAA4IBAQAmKu1/qGzRRxZh/2jFUfczr43T oNYKJRP/fSNaBfeLdEDe1uAXnVul15l1owW6MKatppLDTlZqsDWTHowVbvGbyggK h2mKr3e5Q66QeScnbDeqW/A1/dQsbWZS8hY1H61ktgjr69PDdBiUGS3bqyzkZtrx UZn+m41munCvACtsbQvBLme07ZZq3cj6UxJiTp55WSBrWLKG9DnP6QOF37oG+kZ3 4TIT47K79HHRxgYDeUyfF7YP4rmxpF3cyEEUk1zDmZgwrzFALKh/MnBOaW5TRpnG 85gUfNRAHVcDPa4cdc06VTZiPY6xr/VCxJlCZUBXczZmWLwcAJAmDRP879Mi -----END CERTIFICATE-----Generated at Tue Dec 30 16:31:04 2025 by rpki-client