This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/Hx4xdNwCvgB9fLiWs9xvE8usxW8.roa File: Hx4xdNwCvgB9fLiWs9xvE8usxW8.roa (raw, json) Hash identifier: Y7e1WnGcVWNvFMUYbkyeqz5FloZW76Eh6KqSDa6fAQI= Subject key identifier: 1F:1E:31:74:DC:02:BE:00:7D:7C:B8:96:B3:DC:6F:13:CB:AC:C5:6F Certificate issuer: /CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3 Certificate serial: 019B7C1133C4B635913B97C16DCAEC534984 Authority key identifier: B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/Hx4xdNwCvgB9fLiWs9xvE8usxW8.roa Signing time: Fri 02 Jan 2026 00:17:40 +0000 ROA not before: Fri 02 Jan 2026 00:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15730 IP address blocks: 89.46.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:33:c4:b6:35:91:3b:97:c1:6d:ca:ec:53:49:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3 Validity Not Before: Jan 2 00:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f1e3174dc02be007d7cb896b3dc6f13cbacc56f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:da:bf:48:39:78:a2:ab:7a:fe:04:4a:22:9b: 0f:b6:e3:6a:83:ef:e9:ee:c8:39:ac:cb:3b:f4:f9: 25:7d:d9:14:c2:39:65:fa:ce:e5:37:13:55:69:2d: 96:67:3f:1f:45:fd:38:7a:7c:1a:2f:b0:b1:d4:35: 36:8d:1d:a5:b1:ed:bd:51:dd:d7:17:32:e1:c0:30: 0d:3c:8f:67:61:e6:21:84:c1:34:93:6e:dd:d6:df: a4:5a:4d:b6:32:7a:e4:1a:12:a9:97:b9:30:7f:62: 46:43:84:90:a0:7e:a5:e3:c4:6a:f2:df:f1:db:25: 6f:27:d3:ae:d9:35:95:bb:0e:9c:23:22:12:20:bb: 44:6b:ce:ce:57:e5:80:f8:2f:e4:44:eb:04:fb:57: ac:fa:42:7b:91:01:20:7e:01:06:47:4d:9b:23:97: 3a:c0:48:b2:ea:76:5a:5c:40:f4:76:d8:a8:31:f6: dd:a6:76:3f:ae:f3:b6:57:04:6e:09:16:05:f0:fe: 0e:49:b4:74:15:00:bb:91:ff:71:bd:a8:56:e9:dc: de:e0:c4:7e:98:2e:45:ca:b0:02:a4:5d:91:f0:34: 61:6b:49:98:0d:2a:27:aa:64:35:aa:7e:74:46:67: 93:74:35:67:24:65:44:c1:ce:53:fb:98:06:82:78: cc:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:1E:31:74:DC:02:BE:00:7D:7C:B8:96:B3:DC:6F:13:CB:AC:C5:6F X509v3 Authority Key Identifier: keyid:B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/Hx4xdNwCvgB9fLiWs9xvE8usxW8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.46.120.0/24 Signature Algorithm: sha256WithRSAEncryption aa:2d:1c:59:36:d2:03:56:6d:22:c4:21:e1:11:b8:cc:9e:73: 88:1e:26:4b:39:89:19:04:e3:c1:7f:c3:1f:ca:c9:51:e1:80: df:88:4c:9b:79:8e:b6:99:56:68:20:3d:64:6d:1f:5a:d2:1b: 22:c6:9a:96:11:7d:17:a6:2c:e6:d3:ff:8c:54:f9:d3:5c:39: 7d:4e:77:df:0f:42:81:a0:77:ff:36:75:87:3d:2f:4c:10:7f: 62:9e:71:2c:10:ac:44:2d:2f:90:83:9c:8d:3f:3c:39:98:55: 60:84:06:7a:f3:d3:4d:48:ec:15:44:a2:f0:1c:c2:5a:99:0a: e4:51:c6:fc:ed:8d:e5:62:43:a8:cf:7c:ea:67:25:8f:8b:52: aa:30:f0:d0:bc:eb:22:64:e8:3f:38:7d:a7:a5:df:d5:7e:91: 21:d4:04:ef:9c:1b:a9:93:ae:a8:4f:0d:22:f7:02:16:14:15: db:2c:98:e0:0b:03:a2:e1:b6:41:34:26:d7:d7:27:f8:ae:cd: 8a:99:0d:69:00:f5:21:16:4c:77:ea:ca:cd:08:1b:5f:45:9b: c0:b4:71:cb:73:f5:28:8f:da:ad:9f:20:e4:bd:0a:8a:ae:6f: 41:85:45:d7:c5:92:e2:a5:49:ad:c2:3e:98:a9:cb:23:13:a1: 1b:76:82:16 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8ETPEtjWRO5fBbcrsU0mEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYzIwYWUxZGFjY2EzMTgxNWIyNzQ3MDI5MjdjMWE1YTlk YmM3YjMwHhcNMjYwMTAyMDAxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjFlMzE3NGRjMDJiZTAwN2Q3Y2I4OTZiM2RjNmYxM2NiYWNjNTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdq/SDl4oqt6/gRKIpsPtuNqg+/p 7sg5rMs79PklfdkUwjll+s7lNxNVaS2WZz8fRf04enwaL7Cx1DU2jR2lse29Ud3X FzLhwDANPI9nYeYhhME0k27d1t+kWk22MnrkGhKpl7kwf2JGQ4SQoH6l48Rq8t/x 2yVvJ9Ou2TWVuw6cIyISILtEa87OV+WA+C/kROsE+1es+kJ7kQEgfgEGR02bI5c6 wEiy6nZaXED0dtioMfbdpnY/rvO2VwRuCRYF8P4OSbR0FQC7kf9xvahW6dze4MR+ mC5FyrACpF2R8DRha0mYDSonqmQ1qn50RmeTdDVnJGVEwc5T+5gGgnjM6QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB8eMXTcAr4AfXy4lrPcbxPLrMVvMB8GA1UdIwQY MBaAFLDCCuHazKMYFbJ0cCknwaWp28ezMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc01JSzRkck1veGdWc25Sd0tTZkJwYW5ieDdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ODg4NjktN2E2NS00MTViLWI2OGYt NTQ4NDQwMmNlYjdhLzEvSHg0eGROd0N2Z0I5ZkxpV3M5eHZFOHVzeFc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS84ODg4NjktN2E2NS00MTViLWI2OGYtNTQ4NDQwMmNlYjdh LzEvc01JSzRkck1veGdWc25Sd0tTZkJwYW5ieDdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWS54MA0G CSqGSIb3DQEBCwUAA4IBAQCqLRxZNtIDVm0ixCHhEbjMnnOIHiZLOYkZBOPBf8Mf yslR4YDfiEybeY62mVZoID1kbR9a0hsixpqWEX0Xpizm0/+MVPnTXDl9TnffD0KB oHf/NnWHPS9MEH9innEsEKxELS+Qg5yNPzw5mFVghAZ689NNSOwVRKLwHMJamQrk Ucb87Y3lYkOoz3zqZyWPi1KqMPDQvOsiZOg/OH2npd/VfpEh1ATvnBupk66oTw0i 9wIWFBXbLJjgCwOi4bZBNCbX1yf4rs2KmQ1pAPUhFkx36srNCBtfRZvAtHHLc/Uo j9qtnyDkvQqKrm9BhUXXxZLipUmtwj6YqcsjE6EbdoIW -----END CERTIFICATE-----Generated at Mon Feb 9 22:26:47 2026 by rpki-client