This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/oEY0i9r3K2XzpeIqb_uHhC_ZJf8.roa File: oEY0i9r3K2XzpeIqb_uHhC_ZJf8.roa (raw, json) Hash identifier: eStOq03pWfBN0BFsIv2si494zM3pBol5A5EHh+T2UJM= Subject key identifier: A0:46:34:8B:DA:F7:2B:65:F3:A5:E2:2A:6F:FB:87:84:2F:D9:25:FF Certificate issuer: /CN=86a8ff4c9c56667d99025d7f01591cbf77ad2f09 Certificate serial: 019B797E9C2C3CB2F40399FE0E9699A1F0BE Authority key identifier: 86:A8:FF:4C:9C:56:66:7D:99:02:5D:7F:01:59:1C:BF:77:AD:2F:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/oEY0i9r3K2XzpeIqb_uHhC_ZJf8.roa Signing time: Thu 01 Jan 2026 12:18:19 +0000 ROA not before: Thu 01 Jan 2026 12:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211043 IP address blocks: 89.46.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.crl rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 18:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:9c:2c:3c:b2:f4:03:99:fe:0e:96:99:a1:f0:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86a8ff4c9c56667d99025d7f01591cbf77ad2f09 Validity Not Before: Jan 1 12:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a046348bdaf72b65f3a5e22a6ffb87842fd925ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e0:73:ab:7a:21:10:a1:b2:17:07:33:2c:34: e2:f8:17:32:93:94:23:1c:bb:8f:c0:8a:bc:84:b0: 23:97:19:96:0e:fc:29:ea:4c:66:ac:83:a4:f9:5f: f3:62:1b:29:2d:b5:0f:9d:49:f2:3f:c4:b4:1f:93: 81:1b:f2:78:96:e3:ae:32:bb:6a:12:a3:1d:33:e5: 0f:e0:a5:8b:de:c2:91:5f:bc:29:1e:17:86:7a:1f: 95:91:67:17:fa:5a:8b:10:6e:5e:a4:ea:d4:c6:31: 10:3c:4a:c9:3d:94:b9:a7:eb:03:68:91:13:40:30: c2:12:08:d8:d4:f7:88:67:ac:23:a8:48:65:91:41: 2c:95:57:bc:08:db:1b:96:01:a2:1c:61:ff:10:f2: bb:4c:e0:55:82:08:86:d5:05:9b:69:d3:4e:d0:4a: 8b:d8:b9:73:fa:84:ea:23:a9:ab:f4:42:95:e6:41: 0a:08:fc:ef:be:1b:b7:37:91:10:39:c9:2f:08:1f: 92:a1:37:32:38:12:c5:c3:32:22:23:ab:de:f8:91: bf:b5:9b:f0:17:b8:b8:b2:b6:34:58:7b:dc:5f:c9: c0:d9:6f:7a:48:e8:6d:aa:df:76:a5:71:d2:90:07: b6:72:67:58:49:8a:30:a9:c4:70:76:47:eb:9a:a1: 06:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:46:34:8B:DA:F7:2B:65:F3:A5:E2:2A:6F:FB:87:84:2F:D9:25:FF X509v3 Authority Key Identifier: keyid:86:A8:FF:4C:9C:56:66:7D:99:02:5D:7F:01:59:1C:BF:77:AD:2F:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/oEY0i9r3K2XzpeIqb_uHhC_ZJf8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.46.123.0/24 Signature Algorithm: sha256WithRSAEncryption a5:4e:26:2a:ae:86:07:4c:68:41:21:4d:b5:5c:6d:ce:6c:53: ae:02:36:b8:8f:15:c5:f8:63:f4:f4:45:0e:1c:c4:63:bc:3b: d2:a2:36:6f:bc:3e:fa:1f:fb:13:5f:3f:11:89:93:12:d7:34: 5c:5a:de:74:5f:79:da:d5:41:fd:39:e9:79:41:b9:1d:80:70: c8:8d:1b:ba:d9:37:b8:91:23:c0:c4:93:3c:08:f4:53:d9:a2: 71:07:88:58:2d:9c:1c:94:59:6c:56:ba:59:57:33:09:10:89: db:2d:90:90:42:0c:f6:12:ea:74:3f:b0:5a:e2:54:6e:6a:fb: ea:2d:37:3f:0b:52:0e:1e:ab:59:73:29:36:0e:15:bb:58:c4: ce:b4:13:75:0b:6e:aa:6e:6c:a4:c3:18:55:c7:89:35:59:e8: 56:ab:f2:82:c6:ed:5d:b5:5c:9a:2b:b4:a4:3e:c8:2c:07:29: 84:da:05:5d:1a:c5:16:1c:a8:bc:7b:f0:59:ef:29:30:2d:96: 01:8c:5b:71:db:39:58:66:7a:ef:88:7b:48:bf:0f:a4:a9:05: d8:e0:32:7f:de:80:19:68:96:02:88:4f:a0:9b:0c:c4:61:d2: a2:ac:9d:09:a6:f1:00:ea:95:bd:b0:ee:10:cf:47:75:35:5e: bc:02:50:d3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fpwsPLL0A5n+DpaZofC+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2YThmZjRjOWM1NjY2N2Q5OTAyNWQ3ZjAxNTkxY2JmNzdh ZDJmMDkwHhcNMjYwMTAxMTIxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDQ2MzQ4YmRhZjcyYjY1ZjNhNWUyMmE2ZmZiODc4NDJmZDkyNWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOBzq3ohEKGyFwczLDTi+Bcyk5Qj HLuPwIq8hLAjlxmWDvwp6kxmrIOk+V/zYhspLbUPnUnyP8S0H5OBG/J4luOuMrtq EqMdM+UP4KWL3sKRX7wpHheGeh+VkWcX+lqLEG5epOrUxjEQPErJPZS5p+sDaJET QDDCEgjY1PeIZ6wjqEhlkUEslVe8CNsblgGiHGH/EPK7TOBVggiG1QWbadNO0EqL 2Llz+oTqI6mr9EKV5kEKCPzvvhu3N5EQOckvCB+SoTcyOBLFwzIiI6ve+JG/tZvw F7i4srY0WHvcX8nA2W96SOhtqt92pXHSkAe2cmdYSYowqcRwdkfrmqEGSwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKBGNIva9ytl86XiKm/7h4Qv2SX/MB8GA1UdIwQY MBaAFIao/0ycVmZ9mQJdfwFZHL93rS8JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHFqX1RKeFdabjJaQWwxX0FWa2N2M2V0THdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9jOTIxZTgtNmM5NC00Y2MyLWI5ZmQt MDZhNDk5NjhjMmQzLzEvb0VZMGk5cjNLMlh6cGVJcWJfdUhoQ19aSmY4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9jOTIxZTgtNmM5NC00Y2MyLWI5ZmQtMDZhNDk5NjhjMmQz LzEvaHFqX1RKeFdabjJaQWwxX0FWa2N2M2V0THdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWS57MA0G CSqGSIb3DQEBCwUAA4IBAQClTiYqroYHTGhBIU21XG3ObFOuAja4jxXF+GP09EUO HMRjvDvSojZvvD76H/sTXz8RiZMS1zRcWt50X3na1UH9Oel5QbkdgHDIjRu62Te4 kSPAxJM8CPRT2aJxB4hYLZwclFlsVrpZVzMJEInbLZCQQgz2Eup0P7Ba4lRuavvq LTc/C1IOHqtZcyk2DhW7WMTOtBN1C26qbmykwxhVx4k1WehWq/KCxu1dtVyaK7Sk PsgsBymE2gVdGsUWHKi8e/BZ7ykwLZYBjFtx2zlYZnrviHtIvw+kqQXY4DJ/3oAZ aJYCiE+gmwzEYdKirJ0JpvEA6pW9sO4Qz0d1NV68AlDT -----END CERTIFICATE-----Generated at Fri Jan 16 03:59:12 2026 by rpki-client