This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/TXQWqwg-_fg03GSnLtq9K2P-qXo.roa File: TXQWqwg-_fg03GSnLtq9K2P-qXo.roa (raw, json) Hash identifier: Ax0Uac+SRfpjnik5CivlZoRajYWhAEb1KtSZ4OnL+e0= Subject key identifier: 4D:74:16:AB:08:3E:FD:F8:34:DC:64:A7:2E:DA:BD:2B:63:FE:A9:7A Certificate issuer: /CN=8dc8972b4dba0d2049d37c848a4a21d4a43b2e3b Certificate serial: 019B77C6F4469A456E94880EF37C47AF2C6B Authority key identifier: 8D:C8:97:2B:4D:BA:0D:20:49:D3:7C:84:8A:4A:21:D4:A4:3B:2E:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jciXK026DSBJ03yEikoh1KQ7Ljs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/TXQWqwg-_fg03GSnLtq9K2P-qXo.roa Signing time: Thu 01 Jan 2026 04:18:05 +0000 ROA not before: Thu 01 Jan 2026 04:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215264 IP address blocks: 89.187.93.0/24 maxlen: 24 91.234.238.0/24 maxlen: 24 2a14:2540::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.crl rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.mft rsync://rpki.ripe.net/repository/DEFAULT/jciXK026DSBJ03yEikoh1KQ7Ljs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:f4:46:9a:45:6e:94:88:0e:f3:7c:47:af:2c:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8dc8972b4dba0d2049d37c848a4a21d4a43b2e3b Validity Not Before: Jan 1 04:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d7416ab083efdf834dc64a72edabd2b63fea97a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:9a:ef:a5:57:6f:68:b9:1d:9e:c9:00:8b:81: 11:de:f2:fe:0c:1e:c6:1d:fe:66:d3:1e:56:05:6f: 65:b5:13:9e:c2:d3:78:43:17:06:a6:a3:f2:a1:14: ca:f6:44:b3:b4:a7:cc:66:2d:53:60:e3:03:44:51: a9:7c:bd:cd:81:e1:53:07:7e:d8:3e:c9:b0:c0:c8: 18:8e:49:1c:63:35:26:a4:7c:04:20:17:cd:8a:13: d8:a4:96:87:24:9e:9d:2e:2b:44:fd:a1:af:af:46: 9a:e5:78:8f:5f:bd:21:9c:0d:0a:ef:29:ad:37:b6: f4:df:dd:d0:de:ef:84:ac:ee:72:6f:e5:ca:f6:43: 7a:0a:87:c9:38:23:49:06:e6:c6:ea:ec:d3:cb:84: 5c:ae:8b:fa:99:d9:2f:9f:7d:5c:6a:f7:24:18:19: eb:67:96:7b:4c:36:eb:a5:24:fd:85:ad:4a:a5:5b: 92:88:d0:93:de:bb:cf:44:67:1b:04:10:35:7b:d9: 7b:80:31:8f:31:50:95:f6:ad:e4:77:10:42:c2:83: f2:e1:61:83:f3:fc:b0:b0:f6:e6:e6:bd:09:bb:41: aa:52:b5:ca:8e:16:a5:4c:4e:01:5a:15:09:a1:62: 07:d3:10:dc:b5:3d:fc:1b:fc:07:6f:3e:9d:dc:23: bd:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:74:16:AB:08:3E:FD:F8:34:DC:64:A7:2E:DA:BD:2B:63:FE:A9:7A X509v3 Authority Key Identifier: keyid:8D:C8:97:2B:4D:BA:0D:20:49:D3:7C:84:8A:4A:21:D4:A4:3B:2E:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jciXK026DSBJ03yEikoh1KQ7Ljs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/TXQWqwg-_fg03GSnLtq9K2P-qXo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.187.93.0/24 91.234.238.0/24 IPv6: 2a14:2540::/29 Signature Algorithm: sha256WithRSAEncryption 99:64:3d:3c:59:fc:e9:00:6d:a1:6f:5c:48:99:bc:0c:29:b6: 95:cf:fc:e2:37:19:73:f3:57:5f:69:94:25:5a:96:54:06:cf: 41:9d:8a:19:dc:d4:04:8a:5e:03:22:89:bb:c1:15:94:19:7b: 6b:8a:39:2c:52:a4:b2:47:3a:fd:3c:7c:2b:2b:9e:9c:ef:7f: 54:8c:38:f9:2d:e2:4e:7b:83:64:f1:e6:27:c2:79:8e:43:9a: 8d:ae:e7:82:1f:d2:f9:55:f3:10:e6:11:89:de:15:23:ff:90: fb:9e:ed:b6:f4:21:c8:f8:15:28:ab:5b:9a:86:4c:42:bd:5f: fe:14:f9:e6:6f:f8:69:6c:e3:56:14:61:17:9f:e9:21:ff:e4: 51:28:57:f1:49:a2:64:bb:79:91:7c:39:4f:18:63:54:10:13: 96:5a:f6:3d:db:a6:5f:a0:ce:d8:a8:a5:16:7b:1e:d9:9f:fd: ee:9b:01:3e:71:65:ce:1e:97:7b:98:3d:75:ce:3a:e3:cb:7e: 11:58:ed:45:31:c5:b5:33:b1:75:0e:83:c0:cd:dc:3c:ea:ca: 45:5d:e8:a5:cb:50:ca:1d:be:46:c9:3d:0f:f9:34:86:5d:0e: bf:de:64:71:66:6a:8a:e2:33:1f:3c:4a:c3:5d:8e:48:96:72: 42:5c:1a:1e -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt3xvRGmkVulIgO83xHryxrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkYzg5NzJiNGRiYTBkMjA0OWQzN2M4NDhhNGEyMWQ0YTQz YjJlM2IwHhcNMjYwMTAxMDQxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDc0MTZhYjA4M2VmZGY4MzRkYzY0YTcyZWRhYmQyYjYzZmVhOTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ZrvpVdvaLkdnskAi4ER3vL+DB7G Hf5m0x5WBW9ltROewtN4QxcGpqPyoRTK9kSztKfMZi1TYOMDRFGpfL3NgeFTB37Y PsmwwMgYjkkcYzUmpHwEIBfNihPYpJaHJJ6dLitE/aGvr0aa5XiPX70hnA0K7ymt N7b0393Q3u+ErO5yb+XK9kN6CofJOCNJBubG6uzTy4Rcrov6mdkvn31cavckGBnr Z5Z7TDbrpST9ha1KpVuSiNCT3rvPRGcbBBA1e9l7gDGPMVCV9q3kdxBCwoPy4WGD 8/ywsPbm5r0Ju0GqUrXKjhalTE4BWhUJoWIH0xDctT38G/wHbz6d3CO96QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFE10FqsIPv34NNxkpy7avStj/ql6MB8GA1UdIwQY MBaAFI3IlytNug0gSdN8hIpKIdSkOy47MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamNpWEswMjZEU0JKMDN5RWlrb2gxS1E3TGpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi84NzE2ZDEtZWVkYS00NTA1LWEwYzkt MDc4ZmQzOTU4NTlmLzEvVFhRV3F3Zy1fZmcwM0dTbkx0cTlLMlAtcVhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi84NzE2ZDEtZWVkYS00NTA1LWEwYzktMDc4ZmQzOTU4NTlm LzEvamNpWEswMjZEU0JKMDN5RWlrb2gxS1E3TGpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAWbtdAwQA W+ruMA0EAgACMAcDBQMqFCVAMA0GCSqGSIb3DQEBCwUAA4IBAQCZZD08WfzpAG2h b1xImbwMKbaVz/ziNxlz81dfaZQlWpZUBs9BnYoZ3NQEil4DIom7wRWUGXtrijks UqSyRzr9PHwrK56c739UjDj5LeJOe4Nk8eYnwnmOQ5qNrueCH9L5VfMQ5hGJ3hUj /5D7nu229CHI+BUoq1uahkxCvV/+FPnmb/hpbONWFGEXn+kh/+RRKFfxSaJku3mR fDlPGGNUEBOWWvY926ZfoM7YqKUWex7Zn/3umwE+cWXOHpd7mD11zjrjy34RWO1F McW1M7F1DoPAzdw86spFXeily1DKHb5GyT0P+TSGXQ6/3mRxZmqK4jMfPErDXY5I lnJCXBoe -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:58 2026 by rpki-client