This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/8OxDlCEl3lB-3kIpiJQaHVQ4IyA.roa File: 8OxDlCEl3lB-3kIpiJQaHVQ4IyA.roa (raw, json) Hash identifier: JPo/b3U7GJdqKgxMFuML6bnht3EJ1tJ9OiBD+teV5iI= Subject key identifier: F0:EC:43:94:21:25:DE:50:7E:DE:42:29:88:94:1A:1D:54:38:23:20 Certificate issuer: /CN=4cd47b8b8aa9fbcccff3d507814fc74464a2abf0 Certificate serial: 019B7EA678CFB1AB866FD203CEC9C2333DD5 Authority key identifier: 4C:D4:7B:8B:8A:A9:FB:CC:CF:F3:D5:07:81:4F:C7:44:64:A2:AB:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TNR7i4qp-8zP89UHgU_HRGSiq_A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/8OxDlCEl3lB-3kIpiJQaHVQ4IyA.roa Signing time: Fri 02 Jan 2026 12:19:57 +0000 ROA not before: Fri 02 Jan 2026 12:19:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60090 IP address blocks: 89.200.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.crl rsync://rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.mft rsync://rpki.ripe.net/repository/DEFAULT/TNR7i4qp-8zP89UHgU_HRGSiq_A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:78:cf:b1:ab:86:6f:d2:03:ce:c9:c2:33:3d:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cd47b8b8aa9fbcccff3d507814fc74464a2abf0 Validity Not Before: Jan 2 12:19:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f0ec43942125de507ede422988941a1d54382320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c2:d2:b0:a0:26:43:86:a7:48:88:26:5e:a8: 03:7e:c4:0f:e2:fb:89:ba:a6:8f:20:97:ed:f3:c0: 7e:62:c4:e0:75:3a:e6:8c:de:b1:9d:0b:e0:5a:89: 70:85:b5:8d:6b:74:5d:83:e4:94:7a:e8:eb:e8:35: bc:69:e4:40:09:62:1b:76:e1:9b:bb:d4:e9:52:35: 6a:17:ad:73:ea:23:d1:fe:9a:e9:5b:5b:58:11:d7: a6:b2:8d:25:b2:a5:9f:d9:1e:ab:f7:ac:12:de:95: 2d:3c:24:f0:d8:40:a0:f8:1a:be:4a:c0:97:65:ce: 5d:ba:6e:4e:04:d3:da:5c:56:e8:ee:26:20:3d:8c: 9a:4c:a1:49:ab:d2:2f:4b:b0:f9:bb:9e:2f:25:56: 90:2c:78:2e:95:14:6c:a0:46:54:75:11:ff:0e:34: c1:bd:fe:00:43:4d:09:79:f1:cc:19:75:86:f4:c4: 19:9d:c5:1d:0b:e9:23:a3:2c:95:ca:1c:40:37:79: be:1a:ec:47:7e:49:b2:77:59:b3:85:1c:8a:3a:a2: 82:44:8d:51:31:58:fd:c3:8b:15:dc:ed:3c:4e:dc: b4:fd:b6:39:e5:fd:89:12:2b:b2:a5:49:ef:2f:a9: ec:c8:1d:f8:c4:3b:90:81:98:13:8b:e1:79:62:90: 95:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:EC:43:94:21:25:DE:50:7E:DE:42:29:88:94:1A:1D:54:38:23:20 X509v3 Authority Key Identifier: keyid:4C:D4:7B:8B:8A:A9:FB:CC:CF:F3:D5:07:81:4F:C7:44:64:A2:AB:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNR7i4qp-8zP89UHgU_HRGSiq_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/8OxDlCEl3lB-3kIpiJQaHVQ4IyA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.200.243.0/24 Signature Algorithm: sha256WithRSAEncryption 19:e8:59:3c:2a:4e:a2:4e:f0:43:49:3c:0d:3f:83:b6:44:6f: 70:22:23:b1:30:f3:45:08:cb:ea:ac:4c:db:5c:c1:f7:e3:27: 39:d0:20:72:67:78:7a:28:d4:52:be:f6:c7:8f:9e:73:23:08: 90:3a:21:cf:48:3f:50:99:96:3a:f2:0a:e3:96:c9:bd:c8:6d: f0:a5:54:0f:7e:a8:cb:ac:dd:ef:bd:0c:f0:94:48:6c:3a:4d: 4f:0c:58:62:46:a8:30:7e:9e:4c:1e:f5:33:15:f7:49:45:30: 22:7e:e6:74:eb:ac:73:b5:50:30:38:79:9e:84:40:cf:7d:24: 0b:e6:1b:5a:27:cf:33:39:04:71:bd:85:f4:c2:80:67:b2:5c: b1:1d:8e:6f:9f:6b:f8:98:b4:9a:04:9e:cb:a5:9a:13:86:7a: 21:15:8d:ca:8d:75:38:23:02:29:5e:74:b0:9a:fe:a3:a5:cf: a4:ee:dc:55:bf:6e:38:b2:34:0c:e7:53:2b:80:23:e9:49:d4: bb:a6:80:74:37:cd:c2:ea:92:4d:e4:78:19:46:c7:2c:39:00: 7c:2f:95:ec:90:b2:08:84:3e:9d:ed:99:f5:72:7d:fb:72:d9: bb:da:95:1b:34:06:dc:b9:9f:78:13:87:56:8d:ba:9f:3a:59: 79:a8:56:49 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pnjPsauGb9IDzsnCMz3VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjZDQ3YjhiOGFhOWZiY2NjZmYzZDUwNzgxNGZjNzQ0NjRh MmFiZjAwHhcNMjYwMTAyMTIxOTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMGVjNDM5NDIxMjVkZTUwN2VkZTQyMjk4ODk0MWExZDU0MzgyMzIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMLSsKAmQ4anSIgmXqgDfsQP4vuJ uqaPIJft88B+YsTgdTrmjN6xnQvgWolwhbWNa3Rdg+SUeujr6DW8aeRACWIbduGb u9TpUjVqF61z6iPR/prpW1tYEdemso0lsqWf2R6r96wS3pUtPCTw2ECg+Bq+SsCX Zc5dum5OBNPaXFbo7iYgPYyaTKFJq9IvS7D5u54vJVaQLHgulRRsoEZUdRH/DjTB vf4AQ00JefHMGXWG9MQZncUdC+kjoyyVyhxAN3m+GuxHfkmyd1mzhRyKOqKCRI1R MVj9w4sV3O08Tty0/bY55f2JEiuypUnvL6nsyB34xDuQgZgTi+F5YpCVzwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPDsQ5QhJd5Qft5CKYiUGh1UOCMgMB8GA1UdIwQY MBaAFEzUe4uKqfvMz/PVB4FPx0RkoqvwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVE5SN2k0cXAtOHpQODlVSGdVX0hSR1NpcV9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC81Y2EyOTQtODk3Yi00ZTQ5LWE5Yzct YmM0OGI0MWY0OThiLzEvOE94RGxDRWwzbEItM2tJcGlKUWFIVlE0SXlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC81Y2EyOTQtODk3Yi00ZTQ5LWE5YzctYmM0OGI0MWY0OThi LzEvVE5SN2k0cXAtOHpQODlVSGdVX0hSR1NpcV9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWcjzMA0G CSqGSIb3DQEBCwUAA4IBAQAZ6Fk8Kk6iTvBDSTwNP4O2RG9wIiOxMPNFCMvqrEzb XMH34yc50CByZ3h6KNRSvvbHj55zIwiQOiHPSD9QmZY68grjlsm9yG3wpVQPfqjL rN3vvQzwlEhsOk1PDFhiRqgwfp5MHvUzFfdJRTAifuZ066xztVAwOHmehEDPfSQL 5htaJ88zOQRxvYX0woBnslyxHY5vn2v4mLSaBJ7LpZoThnohFY3KjXU4IwIpXnSw mv6jpc+k7txVv244sjQM51MrgCPpSdS7poB0N83C6pJN5HgZRscsOQB8L5XskLII hD6d7Zn1cn37ctm72pUbNAbcuZ94E4dWjbqfOll5qFZJ -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:30 2026 by rpki-client