This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/867DHR_gPpsXfR_6NxjJjeTNrfw.roa File: 867DHR_gPpsXfR_6NxjJjeTNrfw.roa (raw, json) Hash identifier: TRrByCoKZXdTUeNEKq7vGJkpkob7vYLVejRCbzVB1kQ= Subject key identifier: F3:AE:C3:1D:1F:E0:3E:9B:17:7D:1F:FA:37:18:C9:8D:E4:CD:AD:FC Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d Certificate serial: 019B7AC829E3ECBA94EE88D4CD4020C29E71 Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/867DHR_gPpsXfR_6NxjJjeTNrfw.roa Signing time: Thu 01 Jan 2026 18:18:16 +0000 ROA not before: Thu 01 Jan 2026 18:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 40676 IP address blocks: 89.117.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 16:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:29:e3:ec:ba:94:ee:88:d4:cd:40:20:c2:9e:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d Validity Not Before: Jan 1 18:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f3aec31d1fe03e9b177d1ffa3718c98de4cdadfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2b:d5:09:1d:5a:c3:2e:8a:a1:dc:fd:70:03: be:fb:2d:99:de:16:bd:50:ac:e2:ad:18:60:8d:70: bd:23:7d:1a:98:2e:9b:78:c0:55:de:9a:ec:43:40: ca:0a:2a:bd:1b:23:1a:3b:21:bc:9f:fd:af:79:cf: 32:12:3e:19:8e:8c:a1:cf:cd:29:0f:c4:8b:72:5d: c8:5c:e4:58:95:7d:da:b7:44:aa:41:99:7c:b7:e2: 4d:fc:fd:8d:73:dc:48:a9:4f:28:5a:ac:cb:fd:7c: 9d:67:9d:a7:fc:9a:ec:81:1d:b2:80:46:a0:3f:cb: ee:ca:bd:84:17:fa:fd:4c:40:48:21:04:a9:f8:2c: 58:48:3d:73:66:2b:47:0d:37:1b:37:9c:11:e2:9c: 9c:69:7e:1c:78:2f:67:d1:3d:5c:e4:ab:f7:74:6c: 6c:78:0f:05:51:4b:91:67:fd:12:bd:ef:ff:2f:9c: 9b:c6:af:9b:1f:f5:bd:03:ee:e0:9f:17:d7:a7:8b: ad:90:e6:b8:4e:a2:d7:79:26:07:e1:9f:c8:9a:d3: a7:a2:96:f2:b2:f2:93:3d:1f:b5:60:9f:44:82:f0: a3:67:c7:17:88:02:21:8b:3c:ec:ee:75:d6:60:59: 5d:de:97:52:a3:e9:bf:5b:0a:6a:29:b6:a4:60:1d: 1a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:AE:C3:1D:1F:E0:3E:9B:17:7D:1F:FA:37:18:C9:8D:E4:CD:AD:FC X509v3 Authority Key Identifier: keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/867DHR_gPpsXfR_6NxjJjeTNrfw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.117.208.0/24 Signature Algorithm: sha256WithRSAEncryption 47:01:38:1d:4f:44:84:3c:db:05:f5:c5:fd:0f:2c:b7:ea:5c: f8:39:30:49:06:4d:f3:80:d6:0b:b0:4d:bb:3b:6e:de:b6:3f: 24:5e:3b:87:30:cb:9e:44:6a:ce:77:1e:35:34:0e:eb:1b:e9: a2:cf:d5:71:94:9d:0d:9b:a7:2c:dc:6d:26:9a:7b:34:1e:5b: 1c:8e:92:22:28:64:45:f4:36:cb:e5:e8:ef:9e:60:55:0f:a7: d3:76:01:67:0f:be:90:e9:db:38:3b:60:ae:91:83:d9:ce:ce: f1:a6:ce:40:31:74:cf:30:4f:34:74:ce:01:f7:54:0a:15:05: e1:a2:34:a4:9f:46:23:cc:57:79:47:e9:85:25:06:91:4a:37: b4:ab:8f:29:ad:ba:90:b5:88:4e:d5:79:fb:ea:92:15:ed:25: 07:79:fa:30:42:b8:b4:2d:6d:0f:46:ae:0f:9b:1a:70:5d:f4: 75:d8:b7:a8:56:84:c1:6c:a4:76:aa:6d:c3:bb:2b:19:7f:8c: e6:da:7a:e6:a2:02:c2:88:99:cb:fe:20:b5:a3:c1:2f:34:63: a9:25:31:a0:64:1b:2c:d9:e9:85:f1:c3:32:ae:0d:71:28:71: 91:75:55:74:a3:50:66:47:15:ff:ae:dc:8d:0b:7f:e4:bc:76: ae:ed:19:82 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yCnj7LqU7ojUzUAgwp5xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZGQ4MWE4MzNkOWIwNDNjN2ZmZDYzNWE1OTg3ZjUzNjk3 MTE4MGQwHhcNMjYwMTAxMTgxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmM2FlYzMxZDFmZTAzZTliMTc3ZDFmZmEzNzE4Yzk4ZGU0Y2RhZGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSvVCR1awy6Kodz9cAO++y2Z3ha9 UKzirRhgjXC9I30amC6beMBV3prsQ0DKCiq9GyMaOyG8n/2vec8yEj4Zjoyhz80p D8SLcl3IXORYlX3at0SqQZl8t+JN/P2Nc9xIqU8oWqzL/XydZ52n/JrsgR2ygEag P8vuyr2EF/r9TEBIIQSp+CxYSD1zZitHDTcbN5wR4pycaX4ceC9n0T1c5Kv3dGxs eA8FUUuRZ/0Sve//L5ybxq+bH/W9A+7gnxfXp4utkOa4TqLXeSYH4Z/ImtOnopby svKTPR+1YJ9EgvCjZ8cXiAIhizzs7nXWYFld3pdSo+m/WwpqKbakYB0azQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPOuwx0f4D6bF30f+jcYyY3kza38MB8GA1UdIwQY MBaAFPDdgagz2bBDx//WNaWYf1NpcRgNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9hOGViZTQtZDBiMy00ZTdkLWFmMjUt MDQ2ODA0MjQ4NmRjLzEvODY3REhSX2dQcHNYZlJfNk54akpqZVROcmZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9hOGViZTQtZDBiMy00ZTdkLWFmMjUtMDQ2ODA0MjQ4NmRj LzEvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWXXQMA0G CSqGSIb3DQEBCwUAA4IBAQBHATgdT0SEPNsF9cX9Dyy36lz4OTBJBk3zgNYLsE27 O27etj8kXjuHMMueRGrOdx41NA7rG+miz9VxlJ0Nm6cs3G0mmns0HlscjpIiKGRF 9DbL5ejvnmBVD6fTdgFnD76Q6ds4O2CukYPZzs7xps5AMXTPME80dM4B91QKFQXh ojSkn0YjzFd5R+mFJQaRSje0q48prbqQtYhO1Xn76pIV7SUHefowQri0LW0PRq4P mxpwXfR12LeoVoTBbKR2qm3DuysZf4zm2nrmogLCiJnL/iC1o8EvNGOpJTGgZBss 2emF8cMyrg1xKHGRdVV0o1BmRxX/rtyNC3/kvHau7RmC -----END CERTIFICATE-----Generated at Fri Jan 23 02:00:03 2026 by rpki-client