This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/h8tYcFJRiwCP-N9lJk7eDpWjBZo.roa File: h8tYcFJRiwCP-N9lJk7eDpWjBZo.roa (raw, json) Hash identifier: Posoe4h9QxCnSfxoiia3nysdUx7K23dYEEIkgUc7lgM= Subject key identifier: 87:CB:58:70:52:51:8B:00:8F:F8:DF:65:26:4E:DE:0E:95:A3:05:9A Certificate issuer: /CN=3919f2ad91584baff0467447bac8fb978d1f9dd3 Certificate serial: 019B78A367D2B38DD35A5387122C78CD5DF5 Authority key identifier: 39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/h8tYcFJRiwCP-N9lJk7eDpWjBZo.roa Signing time: Thu 01 Jan 2026 08:18:53 +0000 ROA not before: Thu 01 Jan 2026 08:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7155 IP address blocks: 90.159.208.0/20 maxlen: 20 90.159.220.0/24 maxlen: 24 90.159.224.0/20 maxlen: 20 90.159.224.0/21 maxlen: 21 90.159.232.0/22 maxlen: 22 90.159.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:67:d2:b3:8d:d3:5a:53:87:12:2c:78:cd:5d:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3919f2ad91584baff0467447bac8fb978d1f9dd3 Validity Not Before: Jan 1 08:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=87cb587052518b008ff8df65264ede0e95a3059a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:98:6b:90:96:09:45:a5:a4:fb:9c:b1:85:72: 4a:d4:61:ed:c9:75:d1:82:19:08:c4:54:c4:c0:64: f1:b7:45:ff:1e:09:96:9a:59:c6:e9:64:53:62:40: 8f:b5:b4:5c:c7:c3:ed:60:f4:c2:96:6b:18:9e:4a: c3:71:ac:a5:3b:7f:c5:79:18:40:10:53:e4:e6:b4: 0b:cf:84:a2:ee:28:c8:3f:18:e2:2e:dc:b3:81:f5: a4:fb:4a:55:bc:e5:ed:ab:70:75:8c:7d:28:d1:ba: cf:e8:75:5c:f0:0d:f8:66:59:9f:c1:69:fb:85:bc: 23:35:f4:bc:b8:9c:4a:1c:50:71:86:00:45:44:be: d9:8a:1a:0c:5b:f0:40:22:40:79:85:89:f7:59:e3: 99:cf:f2:29:ab:9c:87:9c:3b:5c:06:ca:2e:04:36: 66:84:c3:f0:97:6d:4e:06:66:35:a8:6a:90:69:58: 16:6c:49:24:ec:9a:3b:72:18:b3:f2:6a:08:a2:b7: 47:56:8c:f8:bc:e9:3a:a6:a7:1c:27:28:1e:56:03: 05:ad:9f:64:dc:bc:76:4a:ec:8f:1f:12:30:45:cb: e8:33:7c:d1:0a:72:e7:f3:29:be:74:38:d8:46:e5: d4:fc:b3:de:27:ca:48:9c:06:7d:30:19:0c:61:ce: 03:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:CB:58:70:52:51:8B:00:8F:F8:DF:65:26:4E:DE:0E:95:A3:05:9A X509v3 Authority Key Identifier: keyid:39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/h8tYcFJRiwCP-N9lJk7eDpWjBZo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 90.159.208.0-90.159.239.255 Signature Algorithm: sha256WithRSAEncryption 03:bb:3f:df:9b:eb:4f:c4:9a:09:d0:91:4a:f5:48:33:0e:9d: 31:c3:1f:e8:f1:0f:fc:82:e1:b5:b6:aa:2e:80:a7:c5:e2:77: 94:69:5f:fb:ba:d9:1c:09:d7:1d:63:bc:74:e1:4e:3d:05:d9: 5e:92:6c:81:47:79:a8:3a:7e:05:09:c7:ea:ae:0c:03:a6:bb: cf:12:d2:46:0b:78:36:76:a5:d7:86:25:72:af:1c:55:fb:77: de:f7:f7:99:de:af:9c:d6:e3:c1:ff:ef:dc:11:4f:4a:6e:94: 53:10:4a:7e:34:66:10:4c:8b:5b:5f:48:41:19:e3:85:e1:56: f5:38:46:65:79:49:95:e2:68:1d:75:cd:63:da:34:3d:96:3c: e9:29:97:9a:6e:37:7d:08:49:cc:49:c3:bd:42:dd:dc:cb:b1: 00:f0:d6:90:73:25:1e:79:19:a7:35:fe:c7:ab:8c:46:32:d5: e1:7f:77:7a:11:21:10:dd:66:6c:c3:2f:40:b8:52:7e:98:cb: 64:85:08:9a:4e:6e:5b:9e:76:1c:d1:f9:a7:0c:79:40:3c:92: 16:b4:30:8d:f1:38:87:6e:75:0c:66:a3:1c:99:4b:2b:c5:a2: 6b:3b:d1:13:2d:57:f5:2f:47:eb:23:88:7d:cb:4e:58:cb:09: 27:77:e5:3f -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt4o2fSs43TWlOHEix4zV31MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MTlmMmFkOTE1ODRiYWZmMDQ2NzQ0N2JhYzhmYjk3OGQx ZjlkZDMwHhcNMjYwMTAxMDgxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4N2NiNTg3MDUyNTE4YjAwOGZmOGRmNjUyNjRlZGUwZTk1YTMwNTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyphrkJYJRaWk+5yxhXJK1GHtyXXR ghkIxFTEwGTxt0X/HgmWmlnG6WRTYkCPtbRcx8PtYPTClmsYnkrDcaylO3/FeRhA EFPk5rQLz4Si7ijIPxjiLtyzgfWk+0pVvOXtq3B1jH0o0brP6HVc8A34ZlmfwWn7 hbwjNfS8uJxKHFBxhgBFRL7ZihoMW/BAIkB5hYn3WeOZz/Ipq5yHnDtcBsouBDZm hMPwl21OBmY1qGqQaVgWbEkk7Jo7chiz8moIordHVoz4vOk6pqccJygeVgMFrZ9k 3Lx2SuyPHxIwRcvoM3zRCnLn8ym+dDjYRuXU/LPeJ8pInAZ9MBkMYc4D8QIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFIfLWHBSUYsAj/jfZSZO3g6VowWaMB8GA1UdIwQY MBaAFDkZ8q2RWEuv8EZ0R7rI+5eNH53TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1JueXJaRllTNl93Um5SSHVzajdsNDBmbmRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85MTE4ZTItYWU3NC00YzI0LWE3NzUt MzJhYTY3MzFjMjkxLzEvaDh0WWNGSlJpd0NQLU45bEprN2VEcFdqQlpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS85MTE4ZTItYWU3NC00YzI0LWE3NzUtMzJhYTY3MzFjMjkx LzEvT1JueXJaRllTNl93Um5SSHVzajdsNDBmbmRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBARan9AD BARan+AwDQYJKoZIhvcNAQELBQADggEBAAO7P9+b60/EmgnQkUr1SDMOnTHDH+jx D/yC4bW2qi6Ap8Xid5RpX/u62RwJ1x1jvHThTj0F2V6SbIFHeag6fgUJx+quDAOm u88S0kYLeDZ2pdeGJXKvHFX7d97395ner5zW48H/79wRT0pulFMQSn40ZhBMi1tf SEEZ44XhVvU4RmV5SZXiaB11zWPaND2WPOkpl5puN30IScxJw71C3dzLsQDw1pBz JR55Gac1/serjEYy1eF/d3oRIRDdZmzDL0C4Un6Yy2SFCJpObluedhzR+acMeUA8 kha0MI3xOIdudQxmoxyZSyvFoms70RMtV/UvR+sjiH3LTljLCSd35T8= -----END CERTIFICATE-----Generated at Sun Jan 25 20:31:16 2026 by rpki-client