This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/q0hXo__MCYbBoR7iChz8rniPI6M.roa File: q0hXo__MCYbBoR7iChz8rniPI6M.roa (raw, json) Hash identifier: iTsszB/0K2SiC8hyLh2CRCMWHvU50TZNj9sPsIVxWo8= Subject key identifier: AB:48:57:A3:FF:CC:09:86:C1:A1:1E:E2:0A:1C:FC:AE:78:8F:23:A3 Certificate issuer: /CN=9b200d0e7ad3cef72238b5164c4b2cdde23a6a1e Certificate serial: 019B78A25382DD1CBD0D48558843757B6C6C Authority key identifier: 9B:20:0D:0E:7A:D3:CE:F7:22:38:B5:16:4C:4B:2C:DD:E2:3A:6A:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/q0hXo__MCYbBoR7iChz8rniPI6M.roa Signing time: Thu 01 Jan 2026 08:17:42 +0000 ROA not before: Thu 01 Jan 2026 08:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205139 IP address blocks: 89.45.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:53:82:dd:1c:bd:0d:48:55:88:43:75:7b:6c:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b200d0e7ad3cef72238b5164c4b2cdde23a6a1e Validity Not Before: Jan 1 08:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab4857a3ffcc0986c1a11ee20a1cfcae788f23a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6d:bd:b3:82:a9:fb:89:80:18:dc:ee:b2:5b: ea:a1:2c:7e:cd:87:4d:a4:4f:1e:8e:e7:95:e0:a6: e7:d8:54:e4:8e:6e:a9:0c:0a:07:a4:18:fd:2e:83: 99:63:4d:22:fb:35:49:b3:66:41:33:a0:22:13:06: c7:25:8c:c9:a4:f6:b2:e1:c4:90:2c:38:de:8d:39: 29:80:11:1f:6f:8b:b2:3e:92:71:aa:28:e3:b5:2b: 11:03:87:5d:1d:fa:3a:4d:ee:7f:0c:6e:a0:35:ef: 72:09:e8:5e:e2:3d:b1:76:29:9e:da:85:1e:99:fe: 5a:48:9a:42:cd:74:df:7d:90:23:da:66:4a:1f:7f: a1:ec:b7:76:71:53:c3:7e:70:94:a1:94:86:3b:48: 92:5f:fa:f8:1b:ec:c6:f9:02:6e:5b:39:b4:0f:06: e2:5e:25:4e:8b:64:40:78:70:45:a7:a3:dc:06:22: f9:4e:23:f3:ce:ed:e2:e8:c3:6e:b7:83:08:90:b5: bc:ad:55:c8:e3:39:df:d4:0d:e3:b6:e7:0c:b0:97: 76:d3:af:63:d3:f1:2d:83:05:0a:94:26:f1:29:7f: 83:7c:d5:d2:b5:7c:f5:f0:2b:e6:a0:62:84:8f:6e: 74:43:b9:16:24:c2:a5:a4:85:b1:54:47:97:43:0b: 19:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:48:57:A3:FF:CC:09:86:C1:A1:1E:E2:0A:1C:FC:AE:78:8F:23:A3 X509v3 Authority Key Identifier: keyid:9B:20:0D:0E:7A:D3:CE:F7:22:38:B5:16:4C:4B:2C:DD:E2:3A:6A:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/q0hXo__MCYbBoR7iChz8rniPI6M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.45.216.0/22 Signature Algorithm: sha256WithRSAEncryption 97:73:25:2f:ee:19:04:69:6e:ef:e0:78:80:f0:fe:15:c3:f1: 56:f9:88:ed:c1:93:34:95:ee:e8:9d:8b:98:64:de:af:7e:94: f2:b5:19:bf:cd:80:35:b6:b6:77:d0:8f:c3:06:b5:91:c6:2a: 5b:e1:87:12:22:69:aa:fe:4a:de:24:64:c9:01:da:35:8c:5b: 2a:47:d2:c4:99:7b:93:e4:ab:6a:5a:fe:97:76:1a:0e:8b:7c: 05:df:e5:70:68:1e:44:ff:b7:3b:3f:a4:cf:9b:ef:94:2e:9a: df:2a:fa:9a:e3:0a:48:75:f8:09:35:b4:35:a8:b4:7f:f6:98: 6b:12:7e:15:15:4d:74:14:fb:9d:37:1b:56:8b:4b:a7:40:88: ad:d0:de:cd:b0:98:d0:6e:e5:e4:22:e5:80:82:d9:1c:09:43: f4:b4:13:e4:c4:4c:82:c1:32:7b:03:dc:df:4f:2e:24:77:7f: 05:74:8d:d2:5b:cf:4c:15:c7:b9:23:ff:96:2d:92:63:dd:7a: 07:61:99:8b:c5:4b:58:82:da:be:56:a9:fc:80:ba:79:f4:71: f5:aa:64:52:62:20:1d:15:0b:09:7d:0c:09:79:cc:cf:58:e1: f4:85:f6:1b:ff:2c:1f:9e:5f:a5:1a:a4:70:df:71:f1:b7:b8: 84:af:44:2e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4olOC3Ry9DUhViEN1e2xsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliMjAwZDBlN2FkM2NlZjcyMjM4YjUxNjRjNGIyY2RkZTIz YTZhMWUwHhcNMjYwMTAxMDgxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjQ4NTdhM2ZmY2MwOTg2YzFhMTFlZTIwYTFjZmNhZTc4OGYyM2EzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoW29s4Kp+4mAGNzuslvqoSx+zYdN pE8ejueV4Kbn2FTkjm6pDAoHpBj9LoOZY00i+zVJs2ZBM6AiEwbHJYzJpPay4cSQ LDjejTkpgBEfb4uyPpJxqijjtSsRA4ddHfo6Te5/DG6gNe9yCehe4j2xdime2oUe mf5aSJpCzXTffZAj2mZKH3+h7Ld2cVPDfnCUoZSGO0iSX/r4G+zG+QJuWzm0Dwbi XiVOi2RAeHBFp6PcBiL5TiPzzu3i6MNut4MIkLW8rVXI4znf1A3jtucMsJd2069j 0/EtgwUKlCbxKX+DfNXStXz18CvmoGKEj250Q7kWJMKlpIWxVEeXQwsZlQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKtIV6P/zAmGwaEe4goc/K54jyOjMB8GA1UdIwQY MBaAFJsgDQ560873Iji1FkxLLN3iOmoeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXlBTkRuclR6dmNpT0xVV1RFc3MzZUk2YWg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9mY2JjYzYtNzM5Yi00ZjVjLWFlM2Mt YTRmMDhkYmI4NWE1LzEvcTBoWG9fX01DWWJCb1I3aUNoejhybmlQSTZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9mY2JjYzYtNzM5Yi00ZjVjLWFlM2MtYTRmMDhkYmI4NWE1 LzEvbXlBTkRuclR6dmNpT0xVV1RFc3MzZUk2YWg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCWS3YMA0G CSqGSIb3DQEBCwUAA4IBAQCXcyUv7hkEaW7v4HiA8P4Vw/FW+YjtwZM0le7onYuY ZN6vfpTytRm/zYA1trZ30I/DBrWRxipb4YcSImmq/kreJGTJAdo1jFsqR9LEmXuT 5KtqWv6XdhoOi3wF3+VwaB5E/7c7P6TPm++ULprfKvqa4wpIdfgJNbQ1qLR/9phr En4VFU10FPudNxtWi0unQIit0N7NsJjQbuXkIuWAgtkcCUP0tBPkxEyCwTJ7A9zf Ty4kd38FdI3SW89MFce5I/+WLZJj3XoHYZmLxUtYgtq+Vqn8gLp59HH1qmRSYiAd FQsJfQwJeczPWOH0hfYb/ywfnl+lGqRw33Hxt7iEr0Qu -----END CERTIFICATE-----Generated at Mon Feb 9 23:42:45 2026 by rpki-client