This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/hoqonLcixGOse9XNJgoeFQV8jS0.roa File: hoqonLcixGOse9XNJgoeFQV8jS0.roa (raw, json) Hash identifier: wxy/iAlcRlwLJ9zqBBHoE9Kmygd21D/X2jI5AKbdq90= Subject key identifier: 86:8A:A8:9C:B7:22:C4:63:AC:7B:D5:CD:26:0A:1E:15:05:7C:8D:2D Certificate issuer: /CN=621310302018a387c692146a35efd33a6ed6b1ef Certificate serial: 019A590AF815D0FA4B333BBD2F46026016E5 Authority key identifier: 62:13:10:30:20:18:A3:87:C6:92:14:6A:35:EF:D3:3A:6E:D6:B1:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/hoqonLcixGOse9XNJgoeFQV8jS0.roa Signing time: Thu 06 Nov 2025 12:01:22 +0000 ROA not before: Thu 06 Nov 2025 12:01:22 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 401443 IP address blocks: 185.151.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 01 Dec 2025 01:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:59:0a:f8:15:d0:fa:4b:33:3b:bd:2f:46:02:60:16:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=621310302018a387c692146a35efd33a6ed6b1ef Validity Not Before: Nov 6 12:01:22 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=868aa89cb722c463ac7bd5cd260a1e15057c8d2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:20:87:b8:9b:59:d7:cc:4c:db:a2:6f:31:b2: 04:71:4e:df:79:ad:7d:24:50:1b:48:e8:50:21:eb: 72:cc:cc:ae:4c:3b:83:21:ad:a8:fa:8b:f0:99:1c: 03:4c:3f:c7:f9:c0:81:51:66:47:39:5c:0a:b0:8e: 01:4f:61:5d:57:29:71:fa:56:4c:df:68:94:76:e0: cc:bf:dd:37:f7:16:7c:83:6a:b7:6a:67:71:6d:5e: e7:d0:7a:44:ac:33:8c:da:42:03:05:a6:6d:ed:26: 28:2c:03:ec:91:c9:d2:24:50:38:ed:7a:d0:3b:6c: 10:c1:63:7c:f7:ec:2f:19:86:45:a2:27:f7:08:f7: 3a:52:4c:06:ab:58:29:bf:d1:21:7f:f4:a5:d7:88: 2b:b5:50:2a:ae:3f:52:12:d6:e5:4c:b5:d1:b6:67: 10:5e:45:78:e8:b8:5c:57:fe:0c:ee:f5:34:35:56: 2f:04:07:4d:77:1b:2e:e5:22:b9:24:81:79:41:79: 4d:d3:f3:d0:da:59:3f:cb:a6:8a:6e:90:8d:3f:99: e2:89:0c:b0:c5:b0:7f:1f:ad:4e:45:6a:56:35:7b: 72:82:16:1c:ff:05:a2:8b:bc:78:59:74:6a:ff:70: 16:3a:ba:22:7b:d5:94:b4:1d:25:43:be:e9:c2:81: 97:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:8A:A8:9C:B7:22:C4:63:AC:7B:D5:CD:26:0A:1E:15:05:7C:8D:2D X509v3 Authority Key Identifier: keyid:62:13:10:30:20:18:A3:87:C6:92:14:6A:35:EF:D3:3A:6E:D6:B1:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/hoqonLcixGOse9XNJgoeFQV8jS0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.151.146.0/24 Signature Algorithm: sha256WithRSAEncryption 05:24:d2:6e:d7:73:fa:c3:d8:01:23:35:d4:ba:02:0d:00:33: ec:29:fa:78:50:f7:5f:e1:1e:c1:4d:4b:9c:93:28:c6:5d:3d: f8:36:17:1f:6e:c0:02:03:82:ed:7f:36:52:f4:c9:66:68:b2: 83:6f:8f:84:a5:0f:81:cf:2a:39:2a:b0:8b:3f:2f:3b:f6:fd: 0e:7c:ab:d2:26:84:1d:b2:d2:7d:0a:df:6c:a9:03:45:1f:fe: 63:f3:02:87:60:80:10:88:be:f2:cc:c8:8b:e7:5a:df:27:e0: 17:32:98:d6:80:cf:c0:d2:1f:d6:09:40:98:93:e9:84:f5:34: 87:66:9e:f2:c3:95:c1:c0:39:62:04:80:5b:81:86:c6:cf:32: be:d8:83:4d:f4:41:15:e4:86:44:2e:7f:db:68:44:11:2d:9a: bf:82:c0:64:ec:a6:c6:3c:2e:25:27:1b:e6:df:da:04:5c:65: ae:85:be:6a:a5:ab:50:ae:c8:cc:b1:fc:45:cb:82:51:da:1d: 53:80:8c:2b:4d:5f:7b:c7:de:a4:be:70:42:57:a7:b4:5f:dc: 2e:5c:57:e3:e5:ea:ab:7a:0f:44:78:d5:57:0f:3e:7c:0e:53: ff:dc:77:e1:ae:fa:11:2b:d8:d0:90:32:11:9f:52:23:ae:ed: 5d:1e:eb:b5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZpZCvgV0PpLMzu9L0YCYBblMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMTMxMDMwMjAxOGEzODdjNjkyMTQ2YTM1ZWZkMzNhNmVk NmIxZWYwHhcNMjUxMTA2MTIwMTIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NjhhYTg5Y2I3MjJjNDYzYWM3YmQ1Y2QyNjBhMWUxNTA1N2M4ZDJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriCHuJtZ18xM26JvMbIEcU7fea19 JFAbSOhQIetyzMyuTDuDIa2o+ovwmRwDTD/H+cCBUWZHOVwKsI4BT2FdVylx+lZM 32iUduDMv9039xZ8g2q3amdxbV7n0HpErDOM2kIDBaZt7SYoLAPskcnSJFA47XrQ O2wQwWN89+wvGYZFoif3CPc6UkwGq1gpv9Ehf/Sl14grtVAqrj9SEtblTLXRtmcQ XkV46LhcV/4M7vU0NVYvBAdNdxsu5SK5JIF5QXlN0/PQ2lk/y6aKbpCNP5niiQyw xbB/H61ORWpWNXtyghYc/wWii7x4WXRq/3AWOroie9WUtB0lQ77pwoGX/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIaKqJy3IsRjrHvVzSYKHhUFfI0tMB8GA1UdIwQY MBaAFGITEDAgGKOHxpIUajXv0zpu1rHvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWhNUU1DQVlvNGZHa2hScU5lX1RPbTdXc2U4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9mNThhYzgtNTNlOS00Y2E2LWFjYjIt YmU1N2Q3ZGZhMGRlLzEvaG9xb25MY2l4R09zZTlYTkpnb2VGUVY4alMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9mNThhYzgtNTNlOS00Y2E2LWFjYjItYmU1N2Q3ZGZhMGRl LzEvWWhNUU1DQVlvNGZHa2hScU5lX1RPbTdXc2U4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZeSMA0G CSqGSIb3DQEBCwUAA4IBAQAFJNJu13P6w9gBIzXUugINADPsKfp4UPdf4R7BTUuc kyjGXT34NhcfbsACA4LtfzZS9MlmaLKDb4+EpQ+Bzyo5KrCLPy879v0OfKvSJoQd stJ9Ct9sqQNFH/5j8wKHYIAQiL7yzMiL51rfJ+AXMpjWgM/A0h/WCUCYk+mE9TSH Zp7yw5XBwDliBIBbgYbGzzK+2INN9EEV5IZELn/baEQRLZq/gsBk7KbGPC4lJxvm 39oEXGWuhb5qpatQrsjMsfxFy4JR2h1TgIwrTV97x96kvnBCV6e0X9wuXFfj5eqr eg9EeNVXDz58DlP/3HfhrvoRK9jQkDIRn1Ijru1dHuu1 -----END CERTIFICATE-----Generated at Sun Nov 30 09:12:32 2025 by rpki-client