This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/hn6uQjAtPH1HFa3nrHPl9L4Kr3g.roa File: hn6uQjAtPH1HFa3nrHPl9L4Kr3g.roa (raw, json) Hash identifier: e70msc/rpBEsJwNaP+nOdQYQ6gOSsQlw3JiSJ2WoRFs= Subject key identifier: 86:7E:AE:42:30:2D:3C:7D:47:15:AD:E7:AC:73:E5:F4:BE:0A:AF:78 Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Certificate serial: 019B7D5B019D600CA2850AFCA04678EBE81F Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/hn6uQjAtPH1HFa3nrHPl9L4Kr3g.roa Signing time: Fri 02 Jan 2026 06:17:54 +0000 ROA not before: Fri 02 Jan 2026 06:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60949 IP address blocks: 89.34.26.0/24 maxlen: 24 89.42.84.0/24 maxlen: 24 89.42.94.0/24 maxlen: 24 89.47.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 12:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:01:9d:60:0c:a2:85:0a:fc:a0:46:78:eb:e8:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Validity Not Before: Jan 2 06:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=867eae42302d3c7d4715ade7ac73e5f4be0aaf78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c4:dd:6c:92:3e:d4:66:ba:90:75:42:e0:8b: 3e:29:fd:cb:99:56:47:f6:92:76:73:90:a5:80:ff: be:35:5a:85:ae:6a:40:84:b5:6a:18:7a:28:ea:0c: 19:ae:0f:ed:7d:04:a0:52:87:68:45:41:a9:97:3f: 79:79:29:4c:49:c7:a2:88:f7:06:1b:04:1d:08:a0: 1b:dc:7e:38:83:0e:54:01:c1:4d:a5:d5:7e:b7:f4: 9a:b9:54:c1:78:8e:a9:ff:3e:2e:2e:9e:ba:a1:5d: e9:87:48:4e:bb:b8:b4:aa:5b:2e:e3:64:31:2b:ff: 2d:9d:05:31:52:f2:a3:a6:97:92:8f:16:f2:7a:b6: 66:21:c0:69:1c:f2:01:80:bf:e4:89:33:c7:0a:31: 4b:61:cb:67:bf:b7:21:6e:b2:7e:0c:74:19:ed:31: 2f:8b:2d:86:ca:96:e9:56:60:28:36:82:da:4a:eb: 66:95:1b:de:dd:25:36:bd:f5:48:9b:be:ed:9c:a5: 25:a5:bd:ce:d0:33:31:98:00:93:bd:0c:5a:ae:60: d8:bb:34:e9:69:f9:bd:74:49:90:0f:30:78:d8:e2: b6:e9:8b:3e:73:a0:dd:55:aa:73:5c:71:ce:96:9b: cc:78:71:89:02:96:f0:2e:5e:af:24:8a:f5:51:7f: 8f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:7E:AE:42:30:2D:3C:7D:47:15:AD:E7:AC:73:E5:F4:BE:0A:AF:78 X509v3 Authority Key Identifier: keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/hn6uQjAtPH1HFa3nrHPl9L4Kr3g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.34.26.0/24 89.42.84.0/24 89.42.94.0/24 89.47.112.0/24 Signature Algorithm: sha256WithRSAEncryption 41:a0:5d:6a:08:7c:ec:97:c5:e5:5e:6e:16:eb:49:b2:58:5d: 7b:af:f6:3c:59:8c:3b:4c:f0:aa:db:37:84:20:e8:55:51:d9: ac:2a:5a:9c:0f:c1:d7:2a:b4:4b:6b:26:fe:97:57:79:f3:82: 5c:01:27:0c:79:60:74:a4:06:bb:0d:fb:93:94:3f:9b:64:21: af:b8:ca:b1:4f:1b:46:0a:8e:a0:57:c3:97:84:5b:b4:c9:c0: d9:95:60:d9:56:45:8f:b4:01:28:05:dd:f1:74:0b:d6:16:4d: c2:df:f8:9f:8a:90:18:af:e8:59:06:8d:5b:d5:6e:00:bf:1e: 8e:8b:7a:ab:ad:a6:27:d4:95:be:39:28:16:40:ed:a5:33:7e: 6d:0e:c9:8a:3f:c6:b6:27:95:8e:ca:d3:c0:80:f2:ff:dc:e0: 6b:19:50:47:96:94:54:1f:4c:f9:ad:f6:33:5e:69:45:b5:17: 14:72:a8:09:a0:b0:6a:33:2f:b6:17:35:53:0d:ea:cc:42:50: 22:50:e8:ec:0d:a6:f7:f2:99:4e:5b:8e:c6:d8:93:80:ed:e6: 7f:61:f5:7e:af:99:49:b7:02:36:a8:93:c2:19:25:94:27:3c: 84:2e:9f:d4:1a:39:aa:af:b0:4f:f6:fd:4d:2c:13:77:42:cf: 6e:5f:c1:34 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt9WwGdYAyihQr8oEZ46+gfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm MDFjMWQwHhcNMjYwMTAyMDYxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NjdlYWU0MjMwMmQzYzdkNDcxNWFkZTdhYzczZTVmNGJlMGFhZjc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsTdbJI+1Ga6kHVC4Is+Kf3LmVZH 9pJ2c5ClgP++NVqFrmpAhLVqGHoo6gwZrg/tfQSgUodoRUGplz95eSlMSceiiPcG GwQdCKAb3H44gw5UAcFNpdV+t/SauVTBeI6p/z4uLp66oV3ph0hOu7i0qlsu42Qx K/8tnQUxUvKjppeSjxbyerZmIcBpHPIBgL/kiTPHCjFLYctnv7chbrJ+DHQZ7TEv iy2GypbpVmAoNoLaSutmlRve3SU2vfVIm77tnKUlpb3O0DMxmACTvQxarmDYuzTp afm9dEmQDzB42OK26Ys+c6DdVapzXHHOlpvMeHGJApbwLl6vJIr1UX+PGQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFIZ+rkIwLTx9RxWt56xz5fS+Cq94MB8GA1UdIwQY MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt YjQyZjIzZDgyOGMzLzEvaG42dVFqQXRQSDFIRmEzbnJIUGw5TDRLcjNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAWSIaAwQA WSpUAwQAWSpeAwQAWS9wMA0GCSqGSIb3DQEBCwUAA4IBAQBBoF1qCHzsl8XlXm4W 60myWF17r/Y8WYw7TPCq2zeEIOhVUdmsKlqcD8HXKrRLayb+l1d584JcAScMeWB0 pAa7DfuTlD+bZCGvuMqxTxtGCo6gV8OXhFu0ycDZlWDZVkWPtAEoBd3xdAvWFk3C 3/ifipAYr+hZBo1b1W4Avx6Oi3qrraYn1JW+OSgWQO2lM35tDsmKP8a2J5WOytPA gPL/3OBrGVBHlpRUH0z5rfYzXmlFtRcUcqgJoLBqMy+2FzVTDerMQlAiUOjsDab3 8plOW47G2JOA7eZ/YfV+r5lJtwI2qJPCGSWUJzyELp/UGjmqr7BP9v1NLBN3Qs9u X8E0 -----END CERTIFICATE-----Generated at Mon Jan 19 19:58:17 2026 by rpki-client