This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/H8cTTnpAuLtew2tnTJcflZAFh6Y.roa File: H8cTTnpAuLtew2tnTJcflZAFh6Y.roa (raw, json) Hash identifier: 9lXDgfMHfweW9UIlba3eDwec/q7hxiQODfc3WbgSX8Y= Subject key identifier: 1F:C7:13:4E:7A:40:B8:BB:5E:C3:6B:67:4C:97:1F:95:90:05:87:A6 Certificate issuer: /CN=bd4e6edd26ef1b16d848e98130e6fc4450b32752 Certificate serial: 019B7AC7D6ED90B493C8682FC18F31BCC3AB Authority key identifier: BD:4E:6E:DD:26:EF:1B:16:D8:48:E9:81:30:E6:FC:44:50:B3:27:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/H8cTTnpAuLtew2tnTJcflZAFh6Y.roa Signing time: Thu 01 Jan 2026 18:17:55 +0000 ROA not before: Thu 01 Jan 2026 18:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 37480 IP address blocks: 80.89.176.0/24 maxlen: 24 80.89.177.0/24 maxlen: 24 80.89.178.0/24 maxlen: 24 80.89.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.crl rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.mft rsync://rpki.ripe.net/repository/DEFAULT/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:d6:ed:90:b4:93:c8:68:2f:c1:8f:31:bc:c3:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd4e6edd26ef1b16d848e98130e6fc4450b32752 Validity Not Before: Jan 1 18:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1fc7134e7a40b8bb5ec36b674c971f95900587a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:81:e7:6c:a0:c1:ae:f3:75:c2:cd:9f:29:fa: 76:cf:a2:ca:39:36:41:ee:10:3d:ff:d3:e5:b0:89: be:b9:2b:97:b7:19:ce:0b:7e:b7:0c:61:fb:40:9d: 55:ab:ac:d8:41:74:d6:bd:ea:1d:51:e3:89:47:db: 54:0a:ea:e7:dc:9f:95:27:8e:6a:22:05:40:2d:48: bc:58:75:d7:56:3d:66:b4:1e:f0:c5:25:49:b3:ed: 16:27:52:4d:bd:1a:1b:82:af:9d:52:76:87:3c:52: 20:a0:d5:81:b5:b5:e0:b0:0f:bb:21:30:cd:7c:22: 2c:2a:c4:b4:f3:33:24:5f:f9:79:1d:16:7a:99:87: 72:1e:ad:64:b1:91:32:68:19:14:c0:de:3f:ad:d7: d1:26:1a:5f:93:c7:dc:1e:43:bf:96:23:5a:84:d1: 4d:1b:68:46:71:ca:13:78:67:d7:c2:8d:33:96:d5: 9a:e7:80:db:f5:0b:89:8d:d2:71:4d:de:6a:86:81: 1c:d0:e9:1d:e4:54:75:58:d5:7d:04:d5:a1:fd:48: fc:7b:43:c3:f0:c9:d3:d6:cf:ac:1b:a9:9e:a2:a5: 35:24:5f:71:d4:a4:b8:1c:74:2c:ed:19:83:ef:70: ab:15:6f:1d:fe:13:2d:e3:4a:94:31:23:3d:70:1d: 30:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:C7:13:4E:7A:40:B8:BB:5E:C3:6B:67:4C:97:1F:95:90:05:87:A6 X509v3 Authority Key Identifier: keyid:BD:4E:6E:DD:26:EF:1B:16:D8:48:E9:81:30:E6:FC:44:50:B3:27:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/H8cTTnpAuLtew2tnTJcflZAFh6Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.89.176.0/22 Signature Algorithm: sha256WithRSAEncryption 4f:30:0b:10:d7:6b:60:78:46:8a:8f:35:04:e6:bc:9e:db:06: bc:87:50:e4:fa:07:fa:27:38:fb:24:35:b6:91:1c:19:9e:d1: 06:d4:ea:40:a2:ac:88:ee:35:29:09:ef:c2:1e:27:77:4a:70: 7e:19:2f:ed:1e:a9:18:2f:bd:e4:65:6b:ca:50:1c:9f:0b:3b: f6:92:9f:9c:f5:06:9a:38:65:cb:b7:53:2b:4e:9a:a9:f5:f2: 8f:ee:18:a4:fb:64:15:7f:32:44:b3:d8:4f:b9:e9:af:96:1a: c0:9a:4e:3d:95:df:ed:fc:ee:0e:ad:73:e0:16:32:00:37:ff: db:61:93:23:a8:5d:08:8e:1a:fe:d0:43:5b:01:f5:e8:9c:ea: d2:45:2f:50:22:96:d2:cf:c2:ac:a3:1f:94:36:2b:57:13:06: 9c:c4:7a:f5:b5:51:09:93:ce:b4:e7:d5:64:d7:5c:9c:b3:09: 94:c4:9c:10:65:ad:10:90:7c:57:db:3f:48:0b:c1:d4:cf:d3: 90:4d:d1:f2:84:e6:98:66:b6:3d:bf:32:c0:2c:00:99:61:66: a6:8b:7e:f7:9c:bf:59:c0:88:c3:d4:71:48:05:fe:f6:81:81: 99:9a:03:50:cb:dd:5c:b1:96:8f:01:3e:84:1a:0d:53:ce:5c: 6a:f7:d2:4f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x9btkLSTyGgvwY8xvMOrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkNGU2ZWRkMjZlZjFiMTZkODQ4ZTk4MTMwZTZmYzQ0NTBi MzI3NTIwHhcNMjYwMTAxMTgxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZmM3MTM0ZTdhNDBiOGJiNWVjMzZiNjc0Yzk3MWY5NTkwMDU4N2E2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYHnbKDBrvN1ws2fKfp2z6LKOTZB 7hA9/9PlsIm+uSuXtxnOC363DGH7QJ1Vq6zYQXTWveodUeOJR9tUCurn3J+VJ45q IgVALUi8WHXXVj1mtB7wxSVJs+0WJ1JNvRobgq+dUnaHPFIgoNWBtbXgsA+7ITDN fCIsKsS08zMkX/l5HRZ6mYdyHq1ksZEyaBkUwN4/rdfRJhpfk8fcHkO/liNahNFN G2hGccoTeGfXwo0zltWa54Db9QuJjdJxTd5qhoEc0Okd5FR1WNV9BNWh/Uj8e0PD 8MnT1s+sG6meoqU1JF9x1KS4HHQs7RmD73CrFW8d/hMt40qUMSM9cB0wmwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB/HE056QLi7XsNrZ0yXH5WQBYemMB8GA1UdIwQY MBaAFL1Obt0m7xsW2EjpgTDm/ERQsydSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlU1dTNTYnZHeGJZU09tQk1PYjhSRkN6SjFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9hY2UzNzMtYjgxYi00MDBjLTg0NWMt OTYyOGY1MjY2NTQyLzEvSDhjVFRucEF1THRldzJ0blRKY2ZsWkFGaDZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy9hY2UzNzMtYjgxYi00MDBjLTg0NWMtOTYyOGY1MjY2NTQy LzEvdlU1dTNTYnZHeGJZU09tQk1PYjhSRkN6SjFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCUFmwMA0G CSqGSIb3DQEBCwUAA4IBAQBPMAsQ12tgeEaKjzUE5rye2wa8h1Dk+gf6Jzj7JDW2 kRwZntEG1OpAoqyI7jUpCe/CHid3SnB+GS/tHqkYL73kZWvKUByfCzv2kp+c9Qaa OGXLt1MrTpqp9fKP7hik+2QVfzJEs9hPuemvlhrAmk49ld/t/O4OrXPgFjIAN//b YZMjqF0Ijhr+0ENbAfXonOrSRS9QIpbSz8Ksox+UNitXEwacxHr1tVEJk86059Vk 11ycswmUxJwQZa0QkHxX2z9IC8HUz9OQTdHyhOaYZrY9vzLALACZYWami373nL9Z wIjD1HFIBf72gYGZmgNQy91csZaPAT6EGg1Tzlxq99JP -----END CERTIFICATE-----Generated at Mon Jan 26 08:39:44 2026 by rpki-client