This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/H89M_EzTc8StQKIth4lnEHjKKN0.roa File: H89M_EzTc8StQKIth4lnEHjKKN0.roa (raw, json) Hash identifier: IDhPLp9HDBcx8Hw7u+pzfwTPs8upVVlGQyX+6R34mN0= Subject key identifier: 1F:CF:4C:FC:4C:D3:73:C4:AD:40:A2:2D:87:89:67:10:78:CA:28:DD Certificate issuer: /CN=143239651db6aab1bcb67325f785b5ee1f4025cb Certificate serial: 019B7B356EA45C1C85E2B47DAE639D9737DC Authority key identifier: 14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/H89M_EzTc8StQKIth4lnEHjKKN0.roa Signing time: Thu 01 Jan 2026 20:17:37 +0000 ROA not before: Thu 01 Jan 2026 20:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213640 IP address blocks: 45.155.126.0/24 maxlen: 24 91.213.182.0/24 maxlen: 24 194.62.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:6e:a4:5c:1c:85:e2:b4:7d:ae:63:9d:97:37:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=143239651db6aab1bcb67325f785b5ee1f4025cb Validity Not Before: Jan 1 20:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1fcf4cfc4cd373c4ad40a22d8789671078ca28dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:22:b7:6a:9f:f6:04:c2:b4:af:26:75:45:31: 93:6f:94:c9:a8:9c:b6:b7:00:23:7e:06:2d:07:d4: a1:1f:c5:58:20:f4:9e:f0:f8:96:92:c3:d7:0f:33: c8:3e:c4:6d:6d:79:9c:8d:e1:43:9d:eb:a4:9d:7e: 24:d4:bf:da:ab:7c:38:79:80:0d:2d:0a:e7:3a:de: 7c:df:ab:ff:ae:1e:91:20:f0:77:08:8a:e1:77:c0: 89:2c:c3:ce:dd:bd:e3:17:a8:98:b4:52:73:5f:5b: 3b:95:4f:0d:7f:0d:6d:33:db:1b:f8:7e:7b:28:79: 6f:ef:a3:b4:d5:ee:7d:23:1b:17:38:20:49:bf:4c: e9:bb:a9:02:67:b7:bd:c4:26:b4:a5:51:fa:fd:dc: 55:53:04:bd:00:67:16:c5:ec:67:d0:22:34:26:8d: d2:84:d8:c9:19:58:e2:54:c9:08:fb:22:82:a6:68: d1:b4:6a:6d:bc:36:91:3b:4c:ab:20:2e:d9:49:da: 41:ab:d3:b9:a0:0a:65:14:b6:1f:46:f9:9f:ba:91: c2:6b:bc:ac:54:00:03:7a:25:4b:33:5f:fe:1c:c1: 17:d3:d9:98:88:56:eb:ae:9e:e5:67:cb:b9:4a:58: eb:5f:06:ce:d6:33:75:55:2d:bf:9a:2b:46:3b:f2: 3c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:CF:4C:FC:4C:D3:73:C4:AD:40:A2:2D:87:89:67:10:78:CA:28:DD X509v3 Authority Key Identifier: keyid:14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/H89M_EzTc8StQKIth4lnEHjKKN0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.155.126.0/24 91.213.182.0/24 194.62.40.0/24 Signature Algorithm: sha256WithRSAEncryption 64:95:b3:cd:f4:d0:d2:63:cf:b2:75:d4:91:59:5c:e7:95:b9: 75:05:40:c5:22:3e:ad:f3:27:a9:1a:5e:43:35:82:23:58:8e: e8:ee:95:cd:20:6c:52:b7:4a:cb:9e:fb:fd:eb:a8:80:0e:52: 25:c8:04:b3:79:53:4e:5a:e2:78:f6:e4:42:08:c4:e5:d2:81: ec:d4:fa:a6:6c:ed:76:cb:4d:fd:d0:d0:30:63:b2:f3:7f:92: f5:11:d2:a3:10:f8:c0:97:1a:3a:65:4e:f6:ff:96:91:58:48: 12:4a:6b:52:ed:39:ea:38:1f:4e:a5:03:16:9c:14:e9:06:ce: 8c:56:27:ae:f3:3d:3d:c4:c4:49:83:b5:89:a7:d9:b2:9e:e3: e3:33:69:09:66:a7:0b:6d:d5:6a:eb:48:0a:55:b8:29:60:27: 22:11:60:3e:e4:b7:d2:7b:4e:54:12:6c:fa:ed:88:0b:16:8e: 1f:8c:71:f6:16:51:f0:0c:9e:e0:10:11:86:5f:b5:5b:c4:cf: a1:bc:90:2b:5d:1f:3b:0d:d8:cf:d8:76:cf:68:8f:c3:64:ae: b3:ef:00:df:57:57:f0:dd:95:61:b2:1e:0f:50:ce:55:eb:d7: 66:27:77:4d:48:63:0d:09:4a:4a:dd:77:8e:90:07:48:46:cb: ff:22:57:66 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7NW6kXByF4rR9rmOdlzfcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0MzIzOTY1MWRiNmFhYjFiY2I2NzMyNWY3ODViNWVlMWY0 MDI1Y2IwHhcNMjYwMTAxMjAxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZmNmNGNmYzRjZDM3M2M0YWQ0MGEyMmQ4Nzg5NjcxMDc4Y2EyOGRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyK3ap/2BMK0ryZ1RTGTb5TJqJy2 twAjfgYtB9ShH8VYIPSe8PiWksPXDzPIPsRtbXmcjeFDneuknX4k1L/aq3w4eYAN LQrnOt5836v/rh6RIPB3CIrhd8CJLMPO3b3jF6iYtFJzX1s7lU8Nfw1tM9sb+H57 KHlv76O01e59IxsXOCBJv0zpu6kCZ7e9xCa0pVH6/dxVUwS9AGcWxexn0CI0Jo3S hNjJGVjiVMkI+yKCpmjRtGptvDaRO0yrIC7ZSdpBq9O5oAplFLYfRvmfupHCa7ys VAADeiVLM1/+HMEX09mYiFbrrp7lZ8u5SljrXwbO1jN1VS2/mitGO/I8owIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFB/PTPxM03PErUCiLYeJZxB4yijdMB8GA1UdIwQY MBaAFBQyOWUdtqqxvLZzJfeFte4fQCXLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkRJNVpSMjJxckc4dG5NbDk0VzE3aDlBSmNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC82ZjQ2ZDktM2FmMC00MmFhLWIzMzQt NmVlYzc3ZDliOTg1LzEvSDg5TV9FelRjOFN0UUtJdGg0bG5FSGpLS04wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC82ZjQ2ZDktM2FmMC00MmFhLWIzMzQtNmVlYzc3ZDliOTg1 LzEvRkRJNVpSMjJxckc4dG5NbDk0VzE3aDlBSmNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALZt+AwQA W9W2AwQAwj4oMA0GCSqGSIb3DQEBCwUAA4IBAQBklbPN9NDSY8+yddSRWVznlbl1 BUDFIj6t8yepGl5DNYIjWI7o7pXNIGxSt0rLnvv966iADlIlyASzeVNOWuJ49uRC CMTl0oHs1PqmbO12y0390NAwY7Lzf5L1EdKjEPjAlxo6ZU72/5aRWEgSSmtS7Tnq OB9OpQMWnBTpBs6MVieu8z09xMRJg7WJp9mynuPjM2kJZqcLbdVq60gKVbgpYCci EWA+5LfSe05UEmz67YgLFo4fjHH2FlHwDJ7gEBGGX7VbxM+hvJArXR87DdjP2HbP aI/DZK6z7wDfV1fw3ZVhsh4PUM5V69dmJ3dNSGMNCUpK3XeOkAdIRsv/Ildm -----END CERTIFICATE-----Generated at Sun Jan 25 17:39:58 2026 by rpki-client