This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/c57b75-10a7-4723-94ea-e857477a7008/1/HoLUKNiHefs7C839qM4kpC7iogo.roa File: HoLUKNiHefs7C839qM4kpC7iogo.roa (raw, json) Hash identifier: 4W1sL873O1FNcwjP+lR05LZ1odW83y0n+qfD07LPf8E= Subject key identifier: 1E:82:D4:28:D8:87:79:FB:3B:0B:CD:FD:A8:CE:24:A4:2E:E2:A2:0A Certificate issuer: /CN=467350d5975a272a88bfb8810af45981cd55935a Certificate serial: 019B7F15E1C7F9CFB68857968DABEC478F8D Authority key identifier: 46:73:50:D5:97:5A:27:2A:88:BF:B8:81:0A:F4:59:81:CD:55:93:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/c57b75-10a7-4723-94ea-e857477a7008/1/HoLUKNiHefs7C839qM4kpC7iogo.roa Signing time: Fri 02 Jan 2026 14:21:39 +0000 ROA not before: Fri 02 Jan 2026 14:21:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12590 IP address blocks: 185.118.220.0/24 maxlen: 24 185.118.221.0/24 maxlen: 24 185.118.222.0/24 maxlen: 24 185.118.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/c57b75-10a7-4723-94ea-e857477a7008/1/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.crl rsync://rpki.ripe.net/repository/DEFAULT/22/c57b75-10a7-4723-94ea-e857477a7008/1/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.mft rsync://rpki.ripe.net/repository/DEFAULT/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:e1:c7:f9:cf:b6:88:57:96:8d:ab:ec:47:8f:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=467350d5975a272a88bfb8810af45981cd55935a Validity Not Before: Jan 2 14:21:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1e82d428d88779fb3b0bcdfda8ce24a42ee2a20a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:0d:19:90:f1:9b:60:09:e7:31:db:55:cc:25: c0:b0:5e:1e:0c:97:b3:68:96:7d:a1:22:05:22:cd: ff:db:ea:c6:4d:f0:6e:33:12:7c:f0:ac:86:b9:52: 7e:3c:00:d9:5f:82:49:3f:85:70:e7:4a:54:dd:2e: 44:95:ee:ef:22:a1:73:72:66:66:60:58:ce:85:7b: 40:5f:e8:9c:ff:b6:e8:6d:2f:27:8e:73:88:e5:4d: d9:f3:7e:ff:82:f4:db:7a:c3:40:2c:e1:5e:93:1e: 05:ff:b0:6b:48:e5:39:dd:27:e2:c0:31:75:a4:98: 9f:f0:cd:67:15:1d:34:fe:c0:18:05:b5:f4:08:71: 5e:1a:fa:2b:e5:1e:73:09:7a:bf:dc:91:94:66:2c: f6:59:66:4d:3f:00:c1:3b:2e:f1:99:a4:04:b2:97: 76:d4:ca:36:28:88:59:c2:15:db:33:10:94:18:5b: 39:13:29:b0:b4:61:69:e7:36:82:56:41:cb:c4:bd: 0c:c5:00:1a:56:08:da:23:9c:68:5e:14:91:76:2f: 84:dc:df:84:d6:73:35:9d:0f:25:dc:50:b3:bb:25: 03:fa:cc:be:ee:3e:5a:77:05:26:a9:34:44:e0:f6: 19:2d:9d:e5:71:23:98:69:c4:54:11:f7:25:78:1f: c0:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:82:D4:28:D8:87:79:FB:3B:0B:CD:FD:A8:CE:24:A4:2E:E2:A2:0A X509v3 Authority Key Identifier: keyid:46:73:50:D5:97:5A:27:2A:88:BF:B8:81:0A:F4:59:81:CD:55:93:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/c57b75-10a7-4723-94ea-e857477a7008/1/HoLUKNiHefs7C839qM4kpC7iogo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/c57b75-10a7-4723-94ea-e857477a7008/1/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.118.220.0/22 Signature Algorithm: sha256WithRSAEncryption 38:4e:da:51:0b:47:0a:2e:05:93:1f:8a:cb:e4:37:28:e8:bd: 5c:d9:79:2b:28:3b:1b:0c:aa:ab:d9:95:18:b3:09:fa:fe:db: 76:ae:ee:ff:ef:94:8c:3f:79:e7:0d:90:c7:71:42:fa:79:fc: 43:85:05:5f:04:7d:36:54:b8:cd:04:59:42:b1:ee:f7:13:a0: 9a:be:c2:42:f8:a6:a8:b7:04:22:79:a0:f9:b8:aa:de:46:58: 24:43:45:6a:a7:c6:a9:de:de:8f:6d:71:3c:16:f7:d2:31:57: cd:e6:86:7b:c2:6a:aa:0d:64:3b:fa:fe:60:6c:b3:43:69:e4: a0:3e:b9:88:45:20:0c:da:a0:f9:b2:78:d4:ef:5f:2e:a0:52: 04:5c:41:fc:84:ee:fa:b2:e2:63:8c:aa:f3:01:26:eb:ff:8d: 95:83:10:21:08:ca:16:e3:c1:f7:df:a0:20:da:7f:0d:d6:4d: a5:d3:9c:94:03:a2:52:bc:6d:c5:d0:1d:3c:ce:6c:52:c3:60: 8e:22:87:f4:38:6a:94:92:d0:f9:f2:51:ee:a7:82:3f:a7:e8: 95:f5:ed:ef:a7:f1:74:36:01:db:fb:48:2f:c8:7f:8c:d7:ff: 3f:17:11:2c:b1:04:47:f5:df:19:39:32:4c:d0:8d:cb:1a:a5: 9b:bb:05:1c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FeHH+c+2iFeWjavsR4+NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NzM1MGQ1OTc1YTI3MmE4OGJmYjg4MTBhZjQ1OTgxY2Q1 NTkzNWEwHhcNMjYwMTAyMTQyMTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZTgyZDQyOGQ4ODc3OWZiM2IwYmNkZmRhOGNlMjRhNDJlZTJhMjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlA0ZkPGbYAnnMdtVzCXAsF4eDJez aJZ9oSIFIs3/2+rGTfBuMxJ88KyGuVJ+PADZX4JJP4Vw50pU3S5Ele7vIqFzcmZm YFjOhXtAX+ic/7bobS8njnOI5U3Z837/gvTbesNALOFekx4F/7BrSOU53SfiwDF1 pJif8M1nFR00/sAYBbX0CHFeGvor5R5zCXq/3JGUZiz2WWZNPwDBOy7xmaQEspd2 1Mo2KIhZwhXbMxCUGFs5EymwtGFp5zaCVkHLxL0MxQAaVgjaI5xoXhSRdi+E3N+E 1nM1nQ8l3FCzuyUD+sy+7j5adwUmqTRE4PYZLZ3lcSOYacRUEfcleB/AYwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB6C1CjYh3n7OwvN/ajOJKQu4qIKMB8GA1UdIwQY MBaAFEZzUNWXWicqiL+4gQr0WYHNVZNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUm5OUTFaZGFKeXFJdjdpQkN2UlpnYzFWazFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9jNTdiNzUtMTBhNy00NzIzLTk0ZWEt ZTg1NzQ3N2E3MDA4LzEvSG9MVUtOaUhlZnM3QzgzOXFNNGtwQzdpb2dvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9jNTdiNzUtMTBhNy00NzIzLTk0ZWEtZTg1NzQ3N2E3MDA4 LzEvUm5OUTFaZGFKeXFJdjdpQkN2UlpnYzFWazFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXbcMA0G CSqGSIb3DQEBCwUAA4IBAQA4TtpRC0cKLgWTH4rL5Dco6L1c2XkrKDsbDKqr2ZUY swn6/tt2ru7/75SMP3nnDZDHcUL6efxDhQVfBH02VLjNBFlCse73E6CavsJC+Kao twQieaD5uKreRlgkQ0Vqp8ap3t6PbXE8FvfSMVfN5oZ7wmqqDWQ7+v5gbLNDaeSg PrmIRSAM2qD5snjU718uoFIEXEH8hO76suJjjKrzASbr/42VgxAhCMoW48H336Ag 2n8N1k2l05yUA6JSvG3F0B08zmxSw2COIof0OGqUktD58lHup4I/p+iV9e3vp/F0 NgHb+0gvyH+M1/8/FxEssQRH9d8ZOTJM0I3LGqWbuwUc -----END CERTIFICATE-----Generated at Mon Feb 9 18:43:50 2026 by rpki-client