This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/h8WHPE-DLjC-fOR5gMRdseFV3jc.roa File: h8WHPE-DLjC-fOR5gMRdseFV3jc.roa (raw, json) Hash identifier: YQ88sWnqWVrNelZLFoTBX4eB7iIKZuZNquUMZZMKO9E= Subject key identifier: 87:C5:87:3C:4F:83:2E:30:BE:7C:E4:79:80:C4:5D:B1:E1:55:DE:37 Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa Certificate serial: 019B7E379D23DA39615B300BA3B1B6A9D756 Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/h8WHPE-DLjC-fOR5gMRdseFV3jc.roa Signing time: Fri 02 Jan 2026 10:18:52 +0000 ROA not before: Fri 02 Jan 2026 10:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56871 IP address blocks: 86.104.132.0/23 maxlen: 23 89.42.232.0/24 maxlen: 24 89.42.233.0/24 maxlen: 24 89.44.100.0/23 maxlen: 23 89.45.92.0/24 maxlen: 24 89.45.93.0/24 maxlen: 24 185.104.196.0/22 maxlen: 22 188.213.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:9d:23:da:39:61:5b:30:0b:a3:b1:b6:a9:d7:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa Validity Not Before: Jan 2 10:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=87c5873c4f832e30be7ce47980c45db1e155de37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:c3:9e:75:ee:98:e9:c4:cc:ed:a7:e5:89:c1: f6:06:a2:d3:0a:4e:52:b9:d0:59:8c:2e:b0:1a:62: 99:2b:86:df:98:7f:0c:3d:83:0e:51:d3:ba:1e:b5: 67:e6:d1:b7:1e:96:ca:c5:6a:28:33:37:a6:08:ff: 25:6d:31:89:c9:db:71:63:06:f5:06:9d:48:80:7e: 75:1c:a8:e7:bd:62:cb:68:31:68:73:42:4c:ae:d9: 34:ee:7c:90:9c:88:af:cb:53:46:9a:12:7f:48:9d: db:58:73:f2:ca:91:3d:3a:ac:3d:66:6d:ec:e7:d0: 4d:ea:01:a7:9b:b5:0d:b4:91:eb:89:94:04:cf:73: 07:c0:bf:03:0d:43:e0:2f:59:b5:71:2e:0f:06:dc: 5a:9b:a4:70:fd:75:e7:b9:ae:c5:4e:fe:c9:eb:00: 5f:61:e6:0f:18:85:a1:d5:3a:b5:7f:42:a4:82:2f: 0c:a7:df:4e:fd:7d:0f:1f:d4:b1:4e:2e:2a:3e:29: 6f:db:89:56:a2:a0:68:86:b6:2c:d7:cc:51:9f:6a: 8d:ff:7b:e2:55:7f:b6:f5:30:79:c6:aa:af:60:a6: 81:21:ab:99:d2:1c:26:a4:e2:5c:97:13:55:f6:48: 33:2b:8e:73:65:ff:a4:55:27:77:39:2d:be:19:6d: 63:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:C5:87:3C:4F:83:2E:30:BE:7C:E4:79:80:C4:5D:B1:E1:55:DE:37 X509v3 Authority Key Identifier: keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/h8WHPE-DLjC-fOR5gMRdseFV3jc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.104.132.0/23 89.42.232.0/23 89.44.100.0/23 89.45.92.0/23 185.104.196.0/22 188.213.233.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:8f:36:6f:dc:cb:14:03:01:86:9b:b3:b1:86:f1:87:c8:c9: b1:4f:51:9d:9b:3f:e2:fe:dc:71:10:9b:e0:56:62:b3:d6:30: 88:dd:aa:ef:d7:3e:2f:36:c1:b1:84:eb:01:fc:8c:b1:cc:2f: 9f:62:12:08:55:f6:cf:bc:3a:d4:50:e0:ac:47:dc:eb:d5:9c: 7e:c4:6b:60:cd:54:f1:3f:9b:5a:f2:e6:1a:84:1c:ec:4c:0f: 3a:6a:55:d0:51:07:6f:c7:9c:dc:b5:21:fb:a0:51:1e:10:8e: 09:c0:99:90:67:8e:c5:20:da:ac:ca:f2:c5:8c:91:41:ed:0d: ae:82:09:a2:d4:ab:0d:01:f0:dd:1b:3e:59:ec:8b:37:ff:f4: 27:9f:1d:94:06:b2:b2:d3:11:5f:6a:04:8c:91:90:5c:e5:5f: 8b:13:2e:b0:9a:9c:82:57:bf:40:c8:a8:76:18:6a:b2:38:94: 00:fd:77:c0:24:90:8b:9d:5c:e6:e8:aa:c0:03:07:63:20:6c: d3:64:13:7a:60:90:bf:b9:2b:73:20:82:11:d4:0a:bc:6f:31: 6f:6a:5c:93:a0:b8:2f:ca:d9:85:8c:ee:ed:ee:7f:ef:9c:c0: 83:62:ee:23:02:b0:b3:e0:29:c7:a6:61:ac:35:c5:71:8e:d7: 5c:df:4d:ce -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt+N50j2jlhWzALo7G2qddWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0OWNiYmQ1YzJjZjQxOTVjYzZlYzdmMjFmNjA3NTgxYTAy MjRkYWEwHhcNMjYwMTAyMTAxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4N2M1ODczYzRmODMyZTMwYmU3Y2U0Nzk4MGM0NWRiMWUxNTVkZTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4MOede6Y6cTM7aflicH2BqLTCk5S udBZjC6wGmKZK4bfmH8MPYMOUdO6HrVn5tG3HpbKxWooMzemCP8lbTGJydtxYwb1 Bp1IgH51HKjnvWLLaDFoc0JMrtk07nyQnIivy1NGmhJ/SJ3bWHPyypE9Oqw9Zm3s 59BN6gGnm7UNtJHriZQEz3MHwL8DDUPgL1m1cS4PBtxam6Rw/XXnua7FTv7J6wBf YeYPGIWh1Tq1f0Kkgi8Mp99O/X0PH9SxTi4qPilv24lWoqBohrYs18xRn2qN/3vi VX+29TB5xqqvYKaBIauZ0hwmpOJclxNV9kgzK45zZf+kVSd3OS2+GW1jIwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFIfFhzxPgy4wvnzkeYDEXbHhVd43MB8GA1UdIwQY MBaAFDScu9XCz0GVzG7H8h9gdYGgIk2qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUt ZGMwNmRkODA1OTYwLzEvaDhXSFBFLURMakMtZk9SNWdNUmRzZUZWM2pjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUtZGMwNmRkODA1OTYw LzEvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQBVmiEAwQB WSroAwQBWSxkAwQBWS1cAwQCuWjEAwQAvNXpMA0GCSqGSIb3DQEBCwUAA4IBAQAu jzZv3MsUAwGGm7OxhvGHyMmxT1Gdmz/i/txxEJvgVmKz1jCI3arv1z4vNsGxhOsB /IyxzC+fYhIIVfbPvDrUUOCsR9zr1Zx+xGtgzVTxP5ta8uYahBzsTA86alXQUQdv x5zctSH7oFEeEI4JwJmQZ47FINqsyvLFjJFB7Q2uggmi1KsNAfDdGz5Z7Is3//Qn nx2UBrKy0xFfagSMkZBc5V+LEy6wmpyCV79AyKh2GGqyOJQA/XfAJJCLnVzm6KrA AwdjIGzTZBN6YJC/uStzIIIR1Aq8bzFvalyToLgvytmFjO7t7n/vnMCDYu4jArCz 4CnHpmGsNcVxjtdc303O -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:08 2026 by rpki-client