This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/hn8HZ87MGm21OeAakwo0L7epBvo.roa File: hn8HZ87MGm21OeAakwo0L7epBvo.roa (raw, json) Hash identifier: K2tDb7I5NoqsKa5/k7EGMMNhy8l68r1VCX67mnoFnXs= Subject key identifier: 86:7F:07:67:CE:CC:1A:6D:B5:39:E0:1A:93:0A:34:2F:B7:A9:06:FA Certificate issuer: /CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13 Certificate serial: 019B79ED456CD6B96A581A3DC48C9830FAF4 Authority key identifier: B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/hn8HZ87MGm21OeAakwo0L7epBvo.roa Signing time: Thu 01 Jan 2026 14:19:11 +0000 ROA not before: Thu 01 Jan 2026 14:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9123 IP address blocks: 80.90.178.0/24 maxlen: 24 80.90.180.0/22 maxlen: 24 80.90.184.0/22 maxlen: 24 80.90.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 02:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:45:6c:d6:b9:6a:58:1a:3d:c4:8c:98:30:fa:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13 Validity Not Before: Jan 1 14:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=867f0767cecc1a6db539e01a930a342fb7a906fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b8:4d:04:23:55:7c:eb:4a:59:40:36:9c:f5: 8b:97:08:c4:fc:6c:4c:d6:be:3a:ba:47:f3:76:fb: f7:79:6a:23:07:c9:f5:5a:8a:a4:27:03:54:aa:10: ce:a7:ac:98:77:a2:ab:ce:9b:97:13:4e:65:e1:53: ca:7d:5a:28:39:6d:bd:30:d9:b1:aa:49:65:9d:83: e1:e0:7f:e7:f4:0e:e1:42:4e:34:53:7d:b8:e3:18: 12:d1:7c:35:13:eb:91:c4:ea:a7:c8:46:51:ce:67: 01:8a:f7:d6:8b:0f:53:55:7a:b0:2e:6d:ec:36:b1: 5f:c3:e8:97:c0:28:b0:12:55:03:87:dc:d7:36:84: 3a:db:23:40:78:b1:30:6b:21:c6:a3:7f:e7:1a:90: a8:34:34:62:42:c1:da:c9:69:84:ed:3b:8b:d5:8b: b5:0c:90:00:6f:2d:78:d5:83:56:da:f1:60:ab:94: ac:dd:13:bc:39:d9:2a:79:42:de:e3:0b:b8:d6:8e: 7b:08:54:c7:6d:c2:14:a0:51:48:42:52:2b:91:ed: 61:40:dd:9b:0c:3b:ee:67:73:bf:1e:50:5e:4a:47: ae:a6:af:64:f5:f7:46:53:2e:a1:bf:0e:26:35:5a: 85:62:96:aa:0c:f2:1c:70:40:6e:c2:5a:81:00:31: ac:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:7F:07:67:CE:CC:1A:6D:B5:39:E0:1A:93:0A:34:2F:B7:A9:06:FA X509v3 Authority Key Identifier: keyid:B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/hn8HZ87MGm21OeAakwo0L7epBvo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.90.178.0/24 80.90.180.0-80.90.191.255 Signature Algorithm: sha256WithRSAEncryption 22:47:91:90:01:f1:84:81:e8:46:65:da:ec:4e:82:63:3c:34: e2:2e:4d:10:f5:c1:de:60:de:ce:63:ea:62:b7:ed:05:46:b3: 49:3f:7b:0b:9a:a6:6c:e3:d7:51:02:a1:fc:17:9c:12:78:c6: 93:cc:b7:7c:17:07:0a:ed:84:b7:b4:4b:23:65:66:2b:d4:89: be:27:42:ab:ef:5e:93:20:99:f8:2e:c4:cd:c8:8b:c6:c7:f1: 3f:01:07:1a:11:48:ea:17:2c:ca:75:c0:49:26:9d:28:3f:e2: f3:b4:bf:bd:25:05:4c:b8:81:93:3f:6d:5d:93:b2:dd:35:c7: 24:71:cb:ad:a4:c3:e2:f0:3a:2b:95:07:06:ee:83:e9:fc:bc: 9d:4b:88:d6:0a:74:71:25:3d:30:6f:c1:a4:af:87:38:15:05: 30:8b:a9:b8:16:60:2f:18:94:b3:6f:b5:61:21:6e:f3:e5:97: ff:cb:45:6d:07:19:6a:da:d8:f9:0f:65:dc:ce:f7:c9:e1:08: 45:4f:15:d9:2a:3f:17:9f:69:f0:15:f3:6e:1a:07:8f:38:7d: ea:6f:3e:4c:85:cd:2d:23:25:26:d1:cb:73:71:64:36:2a:22: 87:f5:9a:d9:ef:b5:a8:dd:98:f9:64:74:14:37:04:69:7a:ba: e9:ce:61:3c -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt57UVs1rlqWBo9xIyYMPr0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5ZWE4OTM2ZjhlNTMwNjNiNGIzYmRmMGYzYjE1YjJhZTY2 N2VmMTMwHhcNMjYwMTAxMTQxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NjdmMDc2N2NlY2MxYTZkYjUzOWUwMWE5MzBhMzQyZmI3YTkwNmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLhNBCNVfOtKWUA2nPWLlwjE/GxM 1r46ukfzdvv3eWojB8n1WoqkJwNUqhDOp6yYd6KrzpuXE05l4VPKfVooOW29MNmx qkllnYPh4H/n9A7hQk40U3244xgS0Xw1E+uRxOqnyEZRzmcBivfWiw9TVXqwLm3s NrFfw+iXwCiwElUDh9zXNoQ62yNAeLEwayHGo3/nGpCoNDRiQsHayWmE7TuL1Yu1 DJAAby141YNW2vFgq5Ss3RO8OdkqeULe4wu41o57CFTHbcIUoFFIQlIrke1hQN2b DDvuZ3O/HlBeSkeupq9k9fdGUy6hvw4mNVqFYpaqDPIccEBuwlqBADGslQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFIZ/B2fOzBpttTngGpMKNC+3qQb6MB8GA1UdIwQY MBaAFLnqiTb45TBjtLO98POxWyrmZ+8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9lYzI5ZTItMzQ0MC00MDlhLTk4NmEt YjI1MDk5N2ZjNzVkLzEvaG44SFo4N01HbTIxT2VBYWt3bzBMN2VwQnZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9lYzI5ZTItMzQ0MC00MDlhLTk4NmEtYjI1MDk5N2ZjNzVk LzEvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAUFqyMAwD BAJQWrQDBAZQWoAwDQYJKoZIhvcNAQELBQADggEBACJHkZAB8YSB6EZl2uxOgmM8 NOIuTRD1wd5g3s5j6mK37QVGs0k/ewuapmzj11ECofwXnBJ4xpPMt3wXBwrthLe0 SyNlZivUib4nQqvvXpMgmfguxM3Ii8bH8T8BBxoRSOoXLMp1wEkmnSg/4vO0v70l BUy4gZM/bV2Tst01xyRxy62kw+LwOiuVBwbug+n8vJ1LiNYKdHElPTBvwaSvhzgV BTCLqbgWYC8YlLNvtWEhbvPll//LRW0HGWra2PkPZdzO98nhCEVPFdkqPxefafAV 824aB484fepvPkyFzS0jJSbRy3NxZDYqIof1mtnvtajdmPlkdBQ3BGl6uunOYTw= -----END CERTIFICATE-----Generated at Wed Jan 21 11:16:13 2026 by rpki-client