This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/hq3y9Sdmbq2aYF5nGdc6SehQvnQ.roa File: hq3y9Sdmbq2aYF5nGdc6SehQvnQ.roa (raw, json) Hash identifier: LEtUsnx2enz1xXPb75ExcnyoapD60AYn9bvDFjrUga8= Subject key identifier: 86:AD:F2:F5:27:66:6E:AD:9A:60:5E:67:19:D7:3A:49:E8:50:BE:74 Certificate issuer: /CN=8e57b1447642c14f11c04b641cf1d8de8adac784 Certificate serial: 019B7EA6446300D3E2D52FF6EF9F39A26ECE Authority key identifier: 8E:57:B1:44:76:42:C1:4F:11:C0:4B:64:1C:F1:D8:DE:8A:DA:C7:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlexRHZCwU8RwEtkHPHY3orax4Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/hq3y9Sdmbq2aYF5nGdc6SehQvnQ.roa Signing time: Fri 02 Jan 2026 12:19:44 +0000 ROA not before: Fri 02 Jan 2026 12:19:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209106 IP address blocks: 91.239.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft rsync://rpki.ripe.net/repository/DEFAULT/jlexRHZCwU8RwEtkHPHY3orax4Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:44:63:00:d3:e2:d5:2f:f6:ef:9f:39:a2:6e:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e57b1447642c14f11c04b641cf1d8de8adac784 Validity Not Before: Jan 2 12:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=86adf2f527666ead9a605e6719d73a49e850be74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:14:08:a8:e6:8b:f7:73:7d:45:40:77:3b:32: 40:bc:4c:7d:77:02:33:b6:84:a2:33:16:18:31:14: 52:22:a9:f9:2a:d3:6c:3b:54:07:fa:64:61:f3:94: 8f:53:34:f7:80:12:7a:bd:95:0d:77:0c:ae:54:63: dd:52:de:a2:f1:93:74:65:50:14:ac:60:35:40:48: 76:f5:88:d5:89:11:99:02:7e:30:e9:c9:19:b9:ef: a5:87:50:0f:ba:4c:be:eb:2b:53:46:6d:69:d5:cb: c8:7e:8d:93:35:88:4a:2e:bc:21:23:48:6f:89:60: f9:67:81:4d:ce:da:4c:7e:db:c1:f3:0d:28:95:c9: 33:2a:ce:52:1a:f7:77:20:71:af:90:38:31:02:2b: 55:04:66:5b:00:e9:9f:93:c0:5c:e3:68:f4:64:74: 17:4c:47:37:f1:74:4e:52:eb:e8:77:44:20:d4:d6: 90:9b:41:b7:94:88:d1:73:5b:3c:9d:24:ae:21:62: 1b:f0:ba:3b:6c:01:ab:10:a2:78:77:c5:f7:a3:ce: 04:3b:f2:29:ec:ec:61:59:81:09:be:eb:96:7b:8d: d6:fd:f8:83:27:af:52:70:70:ab:85:b3:8e:f4:5d: 6c:e6:f3:2d:0e:c0:ac:61:8a:3c:8c:52:b0:e9:f6: e0:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:AD:F2:F5:27:66:6E:AD:9A:60:5E:67:19:D7:3A:49:E8:50:BE:74 X509v3 Authority Key Identifier: keyid:8E:57:B1:44:76:42:C1:4F:11:C0:4B:64:1C:F1:D8:DE:8A:DA:C7:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlexRHZCwU8RwEtkHPHY3orax4Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/hq3y9Sdmbq2aYF5nGdc6SehQvnQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.239.139.0/24 Signature Algorithm: sha256WithRSAEncryption 52:88:a0:bf:a3:50:6e:15:05:4a:0e:d6:d3:8c:3e:86:9b:55: ed:7b:3e:0f:17:de:31:92:be:68:52:dc:b5:c4:ac:a6:dd:00: a7:d7:00:45:b2:58:ec:4d:bc:3b:12:4a:68:99:86:6b:a0:37: 90:b6:ad:ca:0c:b1:bf:51:32:2c:da:f0:78:ba:8f:78:85:04: 6f:9c:ef:9b:1d:6b:38:07:ae:7c:d7:ee:6b:e5:48:e3:b0:95: 60:cb:cf:23:12:2d:be:d5:b7:7a:29:aa:9b:a3:04:9c:97:be: 65:ea:da:49:82:70:64:28:be:10:ae:68:ec:ff:8b:33:82:e1: 47:e2:be:10:38:b1:89:f5:df:a4:32:97:b2:6b:e3:de:3d:6a: 86:75:94:30:cf:61:fd:b4:4a:1b:69:a8:f4:0a:8b:ea:97:46: 35:72:7b:4d:64:5c:45:ec:05:7f:8d:b7:32:a5:13:04:be:f0: a1:b5:0c:7e:d7:18:f8:e8:3a:7a:28:ea:7b:8c:98:7f:32:ed: ba:88:6d:f1:a3:e8:04:47:a4:80:a5:cc:8d:c4:7b:cc:e5:74: 67:69:91:86:79:49:f1:c6:01:2a:d2:8a:5f:2b:52:79:95:4f: 5a:69:e4:2e:6b:44:84:30:36:ee:34:e8:82:16:3c:f2:81:59: 31:bf:d6:71 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pkRjANPi1S/27585om7OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlNTdiMTQ0NzY0MmMxNGYxMWMwNGI2NDFjZjFkOGRlOGFk YWM3ODQwHhcNMjYwMTAyMTIxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NmFkZjJmNTI3NjY2ZWFkOWE2MDVlNjcxOWQ3M2E0OWU4NTBiZTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xQIqOaL93N9RUB3OzJAvEx9dwIz toSiMxYYMRRSIqn5KtNsO1QH+mRh85SPUzT3gBJ6vZUNdwyuVGPdUt6i8ZN0ZVAU rGA1QEh29YjViRGZAn4w6ckZue+lh1APuky+6ytTRm1p1cvIfo2TNYhKLrwhI0hv iWD5Z4FNztpMftvB8w0olckzKs5SGvd3IHGvkDgxAitVBGZbAOmfk8Bc42j0ZHQX TEc38XROUuvod0Qg1NaQm0G3lIjRc1s8nSSuIWIb8Lo7bAGrEKJ4d8X3o84EO/Ip 7OxhWYEJvuuWe43W/fiDJ69ScHCrhbOO9F1s5vMtDsCsYYo8jFKw6fbgXwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIat8vUnZm6tmmBeZxnXOknoUL50MB8GA1UdIwQY MBaAFI5XsUR2QsFPEcBLZBzx2N6K2seEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamxleFJIWkN3VThSd0V0a0hQSFkzb3JheDRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9lMWM3YzktY2M4MC00NWQ3LWE2ZDgt YWYzMzRhMGExZTkzLzEvaHEzeTlTZG1icTJhWUY1bkdkYzZTZWhRdm5RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9lMWM3YzktY2M4MC00NWQ3LWE2ZDgtYWYzMzRhMGExZTkz LzEvamxleFJIWkN3VThSd0V0a0hQSFkzb3JheDRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW++LMA0G CSqGSIb3DQEBCwUAA4IBAQBSiKC/o1BuFQVKDtbTjD6Gm1Xtez4PF94xkr5oUty1 xKym3QCn1wBFsljsTbw7EkpomYZroDeQtq3KDLG/UTIs2vB4uo94hQRvnO+bHWs4 B6581+5r5UjjsJVgy88jEi2+1bd6KaqbowScl75l6tpJgnBkKL4Qrmjs/4szguFH 4r4QOLGJ9d+kMpeya+PePWqGdZQwz2H9tEobaaj0Covql0Y1cntNZFxF7AV/jbcy pRMEvvChtQx+1xj46Dp6KOp7jJh/Mu26iG3xo+gER6SApcyNxHvM5XRnaZGGeUnx xgEq0opfK1J5lU9aaeQua0SEMDbuNOiCFjzygVkxv9Zx -----END CERTIFICATE-----Generated at Mon Feb 9 22:32:04 2026 by rpki-client