This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/HtbMYs01D4cmAdAlFXNYzXOhs04.roa File: HtbMYs01D4cmAdAlFXNYzXOhs04.roa (raw, json) Hash identifier: n0Ze93hrHGGHOW22ZuB1Xc2tkSwX1VXykYJ+iILqIsE= Subject key identifier: 1E:D6:CC:62:CD:35:0F:87:26:01:D0:25:15:73:58:CD:73:A1:B3:4E Certificate issuer: /CN=59dda75f8110743d250c3068a356ce6acf1c4fe2 Certificate serial: 019A7CCAD08F6CD2231067CAAD6547F604AB Authority key identifier: 59:DD:A7:5F:81:10:74:3D:25:0C:30:68:A3:56:CE:6A:CF:1C:4F:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/HtbMYs01D4cmAdAlFXNYzXOhs04.roa Signing time: Thu 13 Nov 2025 10:37:37 +0000 ROA not before: Thu 13 Nov 2025 10:37:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 41897 IP address blocks: 45.158.16.0/22 maxlen: 22 46.40.0.0/18 maxlen: 18 46.40.1.0/24 maxlen: 24 46.40.4.0/24 maxlen: 24 46.40.6.0/24 maxlen: 24 46.40.8.0/22 maxlen: 22 46.40.8.0/24 maxlen: 24 46.40.9.0/24 maxlen: 24 46.40.10.0/24 maxlen: 24 46.40.11.0/24 maxlen: 24 46.40.12.0/23 maxlen: 23 46.40.14.0/24 maxlen: 24 46.40.15.0/24 maxlen: 24 46.40.16.0/21 maxlen: 21 46.40.16.0/24 maxlen: 24 46.40.17.0/24 maxlen: 24 46.40.18.0/24 maxlen: 24 46.40.19.0/24 maxlen: 24 46.40.20.0/24 maxlen: 24 46.40.21.0/24 maxlen: 24 46.40.22.0/24 maxlen: 24 46.40.23.0/24 maxlen: 24 46.40.26.0/24 maxlen: 24 46.40.27.0/24 maxlen: 24 46.40.29.0/24 maxlen: 24 46.40.30.0/23 maxlen: 23 46.40.30.0/24 maxlen: 24 46.40.31.0/24 maxlen: 24 46.40.32.0/24 maxlen: 24 46.40.33.0/24 maxlen: 24 46.40.34.0/24 maxlen: 24 46.40.35.0/24 maxlen: 24 46.40.37.0/24 maxlen: 24 46.40.40.0/21 maxlen: 21 46.40.40.0/24 maxlen: 24 46.40.41.0/24 maxlen: 24 46.40.42.0/24 maxlen: 24 46.40.43.0/24 maxlen: 24 46.40.44.0/23 maxlen: 23 46.40.46.0/23 maxlen: 23 46.40.48.0/21 maxlen: 21 46.40.48.0/24 maxlen: 24 46.40.49.0/24 maxlen: 24 46.40.50.0/24 maxlen: 24 46.40.51.0/24 maxlen: 24 46.40.52.0/24 maxlen: 24 46.40.53.0/24 maxlen: 24 46.40.54.0/24 maxlen: 24 46.40.55.0/24 maxlen: 24 46.40.56.0/22 maxlen: 22 46.40.56.0/24 maxlen: 24 46.40.57.0/24 maxlen: 24 46.40.58.0/24 maxlen: 24 46.40.59.0/24 maxlen: 24 46.40.60.0/23 maxlen: 23 46.40.62.0/24 maxlen: 24 46.40.63.0/24 maxlen: 24 46.251.8.0/22 maxlen: 22 80.245.96.0/22 maxlen: 22 81.24.240.0/21 maxlen: 21 81.24.247.0/24 maxlen: 24 85.222.176.0/20 maxlen: 20 85.222.176.0/21 maxlen: 21 85.222.176.0/24 maxlen: 24 85.222.177.0/24 maxlen: 24 85.222.178.0/24 maxlen: 24 85.222.179.0/24 maxlen: 24 85.222.180.0/22 maxlen: 22 89.147.80.0/20 maxlen: 20 89.147.80.0/22 maxlen: 22 89.147.80.0/24 maxlen: 24 89.147.81.0/24 maxlen: 24 89.147.82.0/24 maxlen: 24 89.147.83.0/24 maxlen: 24 89.147.84.0/22 maxlen: 22 89.147.88.0/24 maxlen: 24 89.147.89.0/24 maxlen: 24 89.147.92.0/24 maxlen: 24 89.147.93.0/24 maxlen: 24 89.147.94.0/24 maxlen: 24 89.147.95.0/24 maxlen: 24 91.102.224.0/21 maxlen: 21 91.102.229.0/24 maxlen: 24 91.147.240.0/21 maxlen: 21 91.147.244.0/22 maxlen: 22 94.248.184.0/21 maxlen: 21 94.248.232.0/21 maxlen: 21 94.248.232.0/22 maxlen: 22 94.248.232.0/24 maxlen: 24 94.248.233.0/24 maxlen: 24 94.248.234.0/24 maxlen: 24 94.248.235.0/24 maxlen: 24 94.248.236.0/24 maxlen: 24 94.248.237.0/24 maxlen: 24 94.248.238.0/24 maxlen: 24 94.248.239.0/24 maxlen: 24 95.85.128.0/18 maxlen: 18 95.85.128.0/22 maxlen: 22 95.85.135.0/24 maxlen: 24 95.85.136.0/22 maxlen: 22 95.85.144.0/21 maxlen: 21 95.85.144.0/24 maxlen: 24 95.85.145.0/24 maxlen: 24 95.85.146.0/24 maxlen: 24 95.85.147.0/24 maxlen: 24 95.85.148.0/24 maxlen: 24 95.85.149.0/24 maxlen: 24 95.85.150.0/24 maxlen: 24 95.85.151.0/24 maxlen: 24 95.85.152.0/23 maxlen: 23 95.85.152.0/24 maxlen: 24 95.85.153.0/24 maxlen: 24 95.85.154.0/23 maxlen: 23 95.85.154.0/24 maxlen: 24 95.85.155.0/24 maxlen: 24 95.85.156.0/22 maxlen: 22 95.85.172.0/24 maxlen: 24 95.85.173.0/24 maxlen: 24 95.85.176.0/22 maxlen: 22 95.85.184.0/23 maxlen: 23 95.85.186.0/23 maxlen: 23 178.20.200.0/24 maxlen: 24 178.20.201.0/24 maxlen: 24 178.20.202.0/23 maxlen: 23 185.6.188.0/22 maxlen: 22 185.6.188.0/24 maxlen: 24 185.6.189.0/24 maxlen: 24 185.6.190.0/24 maxlen: 24 185.6.191.0/24 maxlen: 24 185.10.204.0/22 maxlen: 22 185.10.204.0/24 maxlen: 24 185.37.168.0/22 maxlen: 22 185.37.169.0/24 maxlen: 24 185.37.170.0/24 maxlen: 24 185.141.196.0/22 maxlen: 22 185.141.196.0/23 maxlen: 23 185.141.198.0/24 maxlen: 24 185.141.199.0/24 maxlen: 24 185.156.152.0/22 maxlen: 22 185.169.248.0/22 maxlen: 22 185.169.248.0/24 maxlen: 24 185.169.249.0/24 maxlen: 24 185.169.250.0/23 maxlen: 23 185.231.128.0/22 maxlen: 22 195.192.244.0/22 maxlen: 22 217.17.96.0/20 maxlen: 24 217.17.96.0/24 maxlen: 24 217.17.97.0/24 maxlen: 24 217.17.98.0/24 maxlen: 24 217.17.100.0/24 maxlen: 24 217.17.107.0/24 maxlen: 24 217.17.108.0/24 maxlen: 24 217.17.110.0/24 maxlen: 24 217.17.111.0/24 maxlen: 24 2a00:ad00::/29 maxlen: 29 2a00:ad00:2010::/44 maxlen: 44 2a00:ad03::/32 maxlen: 32 2a00:ad07:3000::/36 maxlen: 36 2a04:f040::/29 maxlen: 29 2a0c:6300::/30 maxlen: 30 2a0f:7bc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 22:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7c:ca:d0:8f:6c:d2:23:10:67:ca:ad:65:47:f6:04:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59dda75f8110743d250c3068a356ce6acf1c4fe2 Validity Not Before: Nov 13 10:37:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1ed6cc62cd350f872601d025157358cd73a1b34e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:33:07:9a:57:a8:28:28:5f:8e:f0:92:28:2f: 7b:8b:e0:61:c4:04:a9:1d:43:ac:e8:a9:c2:44:ed: fa:cd:52:bf:8a:d9:c0:59:c8:98:72:0c:90:40:05: 70:00:03:3f:ec:4a:e1:4b:17:e6:33:c0:f7:44:1f: e5:ed:cd:d0:34:a5:66:43:1c:80:25:90:5a:27:35: 3f:7f:93:37:63:de:55:a4:21:6d:5a:31:34:fe:1a: dd:59:92:68:b3:e9:ad:46:0c:de:d7:10:43:7d:73: 50:be:60:b0:1e:d4:54:ce:64:8f:5f:c1:7a:dc:e4: 6f:f7:4e:49:90:3f:97:6d:c7:e6:53:d9:70:c4:f5: a7:48:36:0c:1a:4d:d8:dc:ba:40:9e:1e:d8:4e:59: 78:e6:46:74:ad:e3:fb:51:d4:b9:74:04:66:45:07: 99:97:6a:e2:d0:ad:86:a8:34:2e:00:9b:b5:dd:cd: db:3f:1b:ef:86:e7:43:1e:5a:ef:0f:cc:5f:cd:6a: 16:96:a3:08:d8:9a:c8:53:f7:43:d2:cb:c0:4d:fc: 65:97:58:29:dd:98:fe:cd:91:aa:74:7e:11:e9:57: 48:cb:d3:81:47:01:40:89:7d:f4:6e:c6:25:d4:41: 42:9b:a1:aa:40:18:e9:f3:2d:32:3a:bd:cf:17:19: 87:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:D6:CC:62:CD:35:0F:87:26:01:D0:25:15:73:58:CD:73:A1:B3:4E X509v3 Authority Key Identifier: keyid:59:DD:A7:5F:81:10:74:3D:25:0C:30:68:A3:56:CE:6A:CF:1C:4F:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/HtbMYs01D4cmAdAlFXNYzXOhs04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.158.16.0/22 46.40.0.0/18 46.251.8.0/22 80.245.96.0/22 81.24.240.0/21 85.222.176.0/20 89.147.80.0/20 91.102.224.0/21 91.147.240.0/21 94.248.184.0/21 94.248.232.0/21 95.85.128.0/18 178.20.200.0/22 185.6.188.0/22 185.10.204.0/22 185.37.168.0/22 185.141.196.0/22 185.156.152.0/22 185.169.248.0/22 185.231.128.0/22 195.192.244.0/22 217.17.96.0/20 IPv6: 2a00:ad00::/29 2a04:f040::/29 2a0c:6300::/30 2a0f:7bc0::/29 Signature Algorithm: sha256WithRSAEncryption 71:ae:b5:2f:27:14:5d:0e:3f:84:d9:aa:bd:97:94:22:ba:41: 06:09:c9:b9:c2:9a:0f:0c:7e:9a:a3:e9:8c:c5:34:0e:3a:11: a2:8d:10:24:a5:09:de:c6:72:43:1b:b5:8b:78:6f:9b:0e:c6: b1:e0:10:97:58:6d:bc:74:55:ac:ff:a4:ec:0e:86:17:31:38: 27:68:39:d3:3b:1e:4e:34:ae:26:ef:06:a0:67:93:3d:10:4e: d8:89:b5:b9:91:bd:6b:24:32:5d:1a:f4:16:fb:d3:86:d5:30: 04:67:f8:3d:8b:c7:49:5f:e9:cb:9f:dc:00:8f:3d:a4:62:a2: a2:b2:55:0f:55:35:6b:37:b1:f6:04:17:7c:79:f3:5e:29:76: 87:e4:75:ca:ba:fe:8d:ea:f8:2d:18:66:55:e7:b3:34:e0:03: ee:91:38:94:3f:8a:e1:3c:dc:e1:3b:17:47:41:11:a7:33:32: 6d:bd:55:87:21:ea:6a:4a:6d:2e:07:c2:8b:b6:9c:ab:d2:f2: 43:a7:9f:21:29:fb:47:ee:52:e1:d2:14:12:c8:c6:bd:0e:39: 7d:bd:35:c4:92:d7:a2:5b:d7:79:e2:cd:ba:1e:be:88:2a:db: dc:88:d9:60:f8:49:d4:f5:dc:ee:f4:85:c2:d5:c1:3a:c9:c6: f9:d8:73:7a -----BEGIN CERTIFICATE----- MIIFpDCCBIygAwIBAgISAZp8ytCPbNIjEGfKrWVH9gSrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5ZGRhNzVmODExMDc0M2QyNTBjMzA2OGEzNTZjZTZhY2Yx YzRmZTIwHhcNMjUxMTEzMTAzNzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZWQ2Y2M2MmNkMzUwZjg3MjYwMWQwMjUxNTczNThjZDczYTFiMzRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDMHmleoKChfjvCSKC97i+BhxASp HUOs6KnCRO36zVK/itnAWciYcgyQQAVwAAM/7ErhSxfmM8D3RB/l7c3QNKVmQxyA JZBaJzU/f5M3Y95VpCFtWjE0/hrdWZJos+mtRgze1xBDfXNQvmCwHtRUzmSPX8F6 3ORv905JkD+XbcfmU9lwxPWnSDYMGk3Y3LpAnh7YTll45kZ0reP7UdS5dARmRQeZ l2ri0K2GqDQuAJu13c3bPxvvhudDHlrvD8xfzWoWlqMI2JrIU/dD0svATfxll1gp 3Zj+zZGqdH4R6VdIy9OBRwFAiX30bsYl1EFCm6GqQBjp8y0yOr3PFxmHkQIDAQAB o4ICsDCCAqwwHQYDVR0OBBYEFB7WzGLNNQ+HJgHQJRVzWM1zobNOMB8GA1UdIwQY MBaAFFndp1+BEHQ9JQwwaKNWzmrPHE/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2Qyblg0RVFkRDBsRERCb28xYk9hczhjVC1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9lYmYzZjctZTNhYi00ZjhjLTg2ZTgt NzA4N2UzZmUyYTVkLzEvSHRiTVlzMDFENGNtQWRBbEZYTll6WE9oczA0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi9lYmYzZjctZTNhYi00ZjhjLTg2ZTgtNzA4N2UzZmUyYTVk LzEvV2Qyblg0RVFkRDBsRERCb28xYk9hczhjVC1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHFBggrBgEFBQcBBwEB/wSBtTCBsjCBiwQCAAEwgYQDBAIt nhADBAYuKAADBAIu+wgDBAJQ9WADBANRGPADBARV3rADBARZk1ADBANbZuADBANb k/ADBANe+LgDBANe+OgDBAZfVYADBAKyFMgDBAK5BrwDBAK5CswDBAK5JagDBAK5 jcQDBAK5nJgDBAK5qfgDBAK554ADBALDwPQDBATZEWAwIgQCAAIwHAMFAyoArQAD BQMqBPBAAwUCKgxjAAMFAyoPe8AwDQYJKoZIhvcNAQELBQADggEBAHGutS8nFF0O P4TZqr2XlCK6QQYJybnCmg8Mfpqj6YzFNA46EaKNECSlCd7GckMbtYt4b5sOxrHg EJdYbbx0Vaz/pOwOhhcxOCdoOdM7Hk40ribvBqBnkz0QTtiJtbmRvWskMl0a9Bb7 04bVMARn+D2Lx0lf6cuf3ACPPaRioqKyVQ9VNWs3sfYEF3x5814pdofkdcq6/o3q +C0YZlXnszTgA+6ROJQ/iuE83OE7F0dBEaczMm29VYch6mpKbS4Hwou2nKvS8kOn nyEp+0fuUuHSFBLIxr0OOX29NcSS16Jb13nizboevogq29yI2WD4SdT13O70hcLV wTrJxvnYc3o= -----END CERTIFICATE-----Generated at Sun Dec 21 06:26:18 2025 by rpki-client