This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/hMODoSj-9P4gLboKMAqUf5Bu4_E.roa File: hMODoSj-9P4gLboKMAqUf5Bu4_E.roa (raw, json) Hash identifier: SsBxO8mkob31PV+Kiall4+Yvn2cFzKDtgM9aBq7Lnq8= Subject key identifier: 84:C3:83:A1:28:FE:F4:FE:20:2D:BA:0A:30:0A:94:7F:90:6E:E3:F1 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019A791BD3ABFABF8B8D2EED2AA23AB3D85E Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/hMODoSj-9P4gLboKMAqUf5Bu4_E.roa Signing time: Wed 12 Nov 2025 17:27:38 +0000 ROA not before: Wed 12 Nov 2025 17:27:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 135402 IP address blocks: 194.105.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 24 Nov 2025 06:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:79:1b:d3:ab:fa:bf:8b:8d:2e:ed:2a:a2:3a:b3:d8:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Nov 12 17:27:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=84c383a128fef4fe202dba0a300a947f906ee3f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f4:f2:03:44:da:16:71:f9:00:70:c4:37:ec: 13:b5:7a:e5:3e:eb:41:a9:ff:8f:3c:70:1f:42:24: 25:8d:40:a7:34:97:a8:cd:7d:c8:d3:5f:f7:44:60: f7:b4:dd:17:f6:f4:5b:2d:99:76:31:23:53:38:62: ea:55:43:0e:10:a1:9f:51:12:b7:ef:2c:0d:9b:ad: 21:c2:c9:bb:cb:fb:16:b1:9a:56:30:01:e8:2f:c0: cf:1d:ce:13:13:f2:a1:cf:a4:e9:e0:b8:4d:3a:d9: b1:0a:61:63:ae:9d:4a:bb:d2:f9:e0:5a:e8:04:b1: 4f:2f:8e:6d:b6:1e:82:cf:18:a4:c1:ad:96:2b:1a: 32:fc:39:ff:39:76:58:36:37:51:a1:2e:f6:06:fa: 6b:34:da:f0:1b:9b:b5:a3:67:89:b8:c6:b5:96:20: 8f:44:c1:c9:1a:1d:df:ce:7d:78:76:fd:df:97:2a: bb:3e:87:ab:2f:4d:68:08:86:3b:7a:21:9f:7c:0e: 51:c3:9d:96:4a:a5:4f:bb:53:ff:8e:0d:e3:c3:98: 99:ff:66:ae:d1:8b:72:9e:e2:d7:75:6d:c2:24:cd: 5b:ad:2c:ce:3c:36:89:fa:64:fd:26:14:64:83:46: 1d:c4:79:da:0f:e8:37:a5:c0:9c:d1:a2:64:b1:1b: 66:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:C3:83:A1:28:FE:F4:FE:20:2D:BA:0A:30:0A:94:7F:90:6E:E3:F1 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/hMODoSj-9P4gLboKMAqUf5Bu4_E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.105.90.0/24 Signature Algorithm: sha256WithRSAEncryption 00:6e:97:00:35:e4:50:db:20:4b:65:c8:0f:fd:37:27:23:82: 10:ed:24:3a:b5:5f:fa:56:82:96:5d:34:b0:a8:7d:53:69:25: 93:4e:53:fe:ce:6f:a1:2b:32:a9:e6:a8:97:49:48:7d:af:c6: b7:57:c5:09:c3:85:47:ea:a3:a1:8d:83:e1:67:e8:b5:c6:61: 15:37:fc:3e:a8:25:e7:f3:cd:fe:17:a5:0b:9a:ef:b4:d1:ec: 5a:d8:a9:de:d5:0d:b7:84:90:26:ec:e5:77:d9:1d:19:d1:a1: 94:49:2d:2c:11:d3:e7:d2:80:6f:c7:59:bd:8b:50:93:cc:ad: 81:48:45:8a:5e:74:5e:69:8b:03:4e:45:e8:90:0c:9b:fc:05: 02:10:23:c6:86:a1:ad:eb:ec:c0:d7:9f:0c:42:dc:c5:b2:6b: be:f6:ce:4e:4e:fc:51:fd:3b:19:ce:12:94:8b:f6:93:91:ce: dc:ea:24:ae:0c:04:f2:15:e0:20:d7:ed:e0:3a:c5:b8:04:0a: b7:88:c2:15:e2:15:8e:0d:84:fe:fd:da:d3:9c:45:7b:91:c1: d7:58:bb:ec:22:26:56:25:da:2a:87:5a:fc:1a:13:52:03:54: 2a:dc:19:18:82:5e:20:c5:cc:0e:d7:b8:a0:9e:1f:f2:f7:79: 53:5d:71:d9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZp5G9Or+r+LjS7tKqI6s9heMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjUxMTEyMTcyNzM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NGMzODNhMTI4ZmVmNGZlMjAyZGJhMGEzMDBhOTQ3ZjkwNmVlM2YxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/TyA0TaFnH5AHDEN+wTtXrlPutB qf+PPHAfQiQljUCnNJeozX3I01/3RGD3tN0X9vRbLZl2MSNTOGLqVUMOEKGfURK3 7ywNm60hwsm7y/sWsZpWMAHoL8DPHc4TE/Khz6Tp4LhNOtmxCmFjrp1Ku9L54Fro BLFPL45tth6Czxikwa2WKxoy/Dn/OXZYNjdRoS72BvprNNrwG5u1o2eJuMa1liCP RMHJGh3fzn14dv3flyq7PoerL01oCIY7eiGffA5Rw52WSqVPu1P/jg3jw5iZ/2au 0YtynuLXdW3CJM1brSzOPDaJ+mT9JhRkg0YdxHnaD+g3pcCc0aJksRtmXQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFITDg6Eo/vT+IC26CjAKlH+QbuPxMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvaE1PRG9Tai05UDRnTGJvS01BcVVmNUJ1NF9FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwmlaMA0G CSqGSIb3DQEBCwUAA4IBAQAAbpcANeRQ2yBLZcgP/TcnI4IQ7SQ6tV/6VoKWXTSw qH1TaSWTTlP+zm+hKzKp5qiXSUh9r8a3V8UJw4VH6qOhjYPhZ+i1xmEVN/w+qCXn 883+F6ULmu+00exa2Kne1Q23hJAm7OV32R0Z0aGUSS0sEdPn0oBvx1m9i1CTzK2B SEWKXnReaYsDTkXokAyb/AUCECPGhqGt6+zA158MQtzFsmu+9s5OTvxR/TsZzhKU i/aTkc7c6iSuDATyFeAg1+3gOsW4BAq3iMIV4hWODYT+/drTnEV7kcHXWLvsIiZW Jdoqh1r8GhNSA1Qq3BkYgl4gxcwO17ignh/y93lTXXHZ -----END CERTIFICATE-----Generated at Sun Nov 23 12:07:17 2025 by rpki-client