This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/hgPa4aXOqt0xLovUzocA3CMc7zI.roa File: hgPa4aXOqt0xLovUzocA3CMc7zI.roa (raw, json) Hash identifier: sxFjKwc7TszoLtPUG0CpCLXiR0aUluckkClOIssUGP8= Subject key identifier: 86:03:DA:E1:A5:CE:AA:DD:31:2E:8B:D4:CE:87:00:DC:23:1C:EF:32 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5A9F04321F639C5D097B7900AEEE8F Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/hgPa4aXOqt0xLovUzocA3CMc7zI.roa Signing time: Thu 01 Jan 2026 16:18:37 +0000 ROA not before: Thu 01 Jan 2026 16:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29066 IP address blocks: 89.213.118.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:9f:04:32:1f:63:9c:5d:09:7b:79:00:ae:ee:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8603dae1a5ceaadd312e8bd4ce8700dc231cef32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:dd:5d:ff:52:68:e4:a9:4f:14:de:38:f4:bf: 09:f7:d1:30:06:e4:90:43:cd:b8:72:33:23:d8:fa: f7:88:94:24:d8:ab:a9:da:e6:ad:cc:b3:a4:6b:87: ac:5e:64:f3:23:20:e3:a2:fd:22:1b:16:81:7e:38: c8:51:2f:02:c4:7d:20:c5:83:a1:ee:a4:02:4c:02: cb:32:3c:b4:3f:9b:ed:be:89:f4:8a:a8:ba:77:74: b5:7b:ce:de:0f:fa:d5:87:23:e3:7d:cf:86:3a:8e: 74:e8:2b:79:b9:ec:69:7b:36:76:70:4e:9c:84:4a: f0:4c:22:d5:70:44:79:af:98:99:99:ba:45:87:03: 7d:6c:03:b7:de:7e:ab:2e:70:7b:84:f2:7b:11:0f: 40:de:34:6a:1c:ac:81:72:10:31:3a:c9:41:36:4b: 7b:d1:93:50:67:5c:c4:0f:37:4f:9d:10:4d:49:08: 34:c9:bc:9c:a6:7e:e6:2d:d8:19:b4:a0:de:f0:d0: 42:90:b2:e1:d4:24:a7:c8:8d:87:63:13:c0:d5:6e: 1c:21:fd:39:9c:98:48:25:42:bb:84:a1:1e:6a:c3: c5:e9:dd:95:62:83:71:37:6d:b9:fc:8b:03:da:a0: 76:00:21:d8:01:17:ac:37:b3:11:95:8e:6d:6d:f3: e5:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:03:DA:E1:A5:CE:AA:DD:31:2E:8B:D4:CE:87:00:DC:23:1C:EF:32 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/hgPa4aXOqt0xLovUzocA3CMc7zI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.213.118.0/23 Signature Algorithm: sha256WithRSAEncryption 9c:b5:69:33:c6:3e:3d:45:3c:ef:79:1f:41:3a:ee:9d:b6:74: 31:31:2d:db:6a:3c:e1:b4:96:9b:f9:96:6d:67:61:57:df:26: 4c:16:6c:99:44:1d:1c:86:60:f6:b3:3d:de:c1:8b:95:7c:fd: fa:d7:5d:3b:96:2f:c7:d3:59:ee:a5:05:e9:06:84:fe:22:bd: a1:97:61:83:98:2f:c6:7b:e9:4c:7b:36:d8:87:0d:0a:d7:63: 5b:29:75:21:90:10:f6:58:2e:25:32:7c:d4:bc:72:84:fc:ed: 07:87:17:7d:4f:a9:40:0a:84:3f:78:35:a2:40:9f:23:19:ce: ba:1b:7e:86:2d:6c:ac:27:9e:b3:e8:fd:d2:61:18:7b:f9:cd: 61:ef:ef:42:10:8a:ce:c4:34:58:9e:6e:6a:b6:00:41:d8:f9: 66:60:1e:34:35:82:a0:b1:04:e6:38:77:63:52:34:89:51:b1: 8c:4d:8c:0b:22:09:f7:1d:16:25:00:05:d6:e6:79:e7:25:5c: 90:31:11:28:6f:f3:56:82:56:04:98:c5:19:ad:0b:20:00:6f: 6e:33:67:32:61:cc:4e:ed:61:79:2f:38:6a:fe:da:75:84:af: 63:bf:96:1a:0d:ec:a4:67:af:30:f9:38:f8:21:d4:3b:a1:a6: 5d:29:f1:0b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wp8EMh9jnF0Je3kAru6PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NjAzZGFlMWE1Y2VhYWRkMzEyZThiZDRjZTg3MDBkYzIzMWNlZjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlN1d/1Jo5KlPFN449L8J99EwBuSQ Q824cjMj2Pr3iJQk2Kup2uatzLOka4esXmTzIyDjov0iGxaBfjjIUS8CxH0gxYOh 7qQCTALLMjy0P5vtvon0iqi6d3S1e87eD/rVhyPjfc+GOo506Ct5uexpezZ2cE6c hErwTCLVcER5r5iZmbpFhwN9bAO33n6rLnB7hPJ7EQ9A3jRqHKyBchAxOslBNkt7 0ZNQZ1zEDzdPnRBNSQg0ybycpn7mLdgZtKDe8NBCkLLh1CSnyI2HYxPA1W4cIf05 nJhIJUK7hKEeasPF6d2VYoNxN225/IsD2qB2ACHYAResN7MRlY5tbfPl4wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIYD2uGlzqrdMS6L1M6HANwjHO8yMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvaGdQYTRhWE9xdDB4TG92VXpvY0EzQ01jN3pJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBWdV2MA0G CSqGSIb3DQEBCwUAA4IBAQCctWkzxj49RTzveR9BOu6dtnQxMS3bajzhtJab+ZZt Z2FX3yZMFmyZRB0chmD2sz3ewYuVfP361107li/H01nupQXpBoT+Ir2hl2GDmC/G e+lMezbYhw0K12NbKXUhkBD2WC4lMnzUvHKE/O0Hhxd9T6lACoQ/eDWiQJ8jGc66 G36GLWysJ56z6P3SYRh7+c1h7+9CEIrOxDRYnm5qtgBB2PlmYB40NYKgsQTmOHdj UjSJUbGMTYwLIgn3HRYlAAXW5nnnJVyQMREob/NWglYEmMUZrQsgAG9uM2cyYcxO 7WF5Lzhq/tp1hK9jv5YaDeykZ68w+Tj4IdQ7oaZdKfEL -----END CERTIFICATE-----Generated at Mon Jan 19 17:33:04 2026 by rpki-client