This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/hMC8ouPga06DMuQ-1nVP3iL6_yU.roa File: hMC8ouPga06DMuQ-1nVP3iL6_yU.roa (raw, json) Hash identifier: bNzck35dxk6Gqi9cN9AAQtvE47sk8feFX04wDlazWdw= Subject key identifier: 84:C0:BC:A2:E3:E0:6B:4E:83:32:E4:3E:D6:75:4F:DE:22:FA:FF:25 Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80 Certificate serial: 019B7D5B7D13196859F48FDBF43D117EBF3D Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/hMC8ouPga06DMuQ-1nVP3iL6_yU.roa Signing time: Fri 02 Jan 2026 06:18:26 +0000 ROA not before: Fri 02 Jan 2026 06:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20473 IP address blocks: 89.167.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:7d:13:19:68:59:f4:8f:db:f4:3d:11:7e:bf:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80 Validity Not Before: Jan 2 06:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=84c0bca2e3e06b4e8332e43ed6754fde22faff25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:44:97:51:af:c9:68:a8:6e:ed:e1:60:dd:14: 99:bc:99:8a:9d:a7:1d:ae:b9:f5:64:d8:6e:db:23: a7:bd:13:3b:32:7b:b4:67:25:b9:6b:f1:c0:be:d6: 46:d3:7a:3d:4c:9d:7e:6a:fb:94:bc:6b:5f:66:3b: 62:2e:a3:bd:06:55:d1:d0:e6:fd:6f:f6:4d:83:c4: b8:d0:b6:32:ba:f9:3f:e8:1b:57:29:88:ab:81:b9: b9:e8:7e:ac:12:29:0e:fb:6d:d2:16:1f:b2:9e:0c: b3:2c:9f:e8:18:85:50:13:fc:0a:61:08:49:10:ea: e1:03:61:56:5b:db:36:dd:bf:32:d5:11:38:e6:21: 88:47:75:01:0d:23:cb:1b:9c:95:8f:60:b4:f7:77: a0:bd:87:a0:42:36:a0:44:94:d0:1d:f8:ab:7e:31: c6:a5:6c:7a:69:e2:59:32:0c:bd:1f:49:c1:db:d0: 45:47:94:11:e8:4c:74:94:94:b0:75:e8:d3:2e:72: da:ae:b2:68:d8:fb:24:54:d7:84:df:97:6e:0e:23: 07:c5:91:c0:4a:3d:98:be:eb:e5:c9:36:6a:26:55: ec:c4:ae:7f:3d:d6:ce:22:f0:51:68:e5:71:8e:8d: d8:df:66:98:cd:81:58:c7:fe:53:55:8b:f2:83:61: 8e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:C0:BC:A2:E3:E0:6B:4E:83:32:E4:3E:D6:75:4F:DE:22:FA:FF:25 X509v3 Authority Key Identifier: keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/hMC8ouPga06DMuQ-1nVP3iL6_yU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.167.134.0/24 Signature Algorithm: sha256WithRSAEncryption 69:32:c8:9d:46:b9:c8:05:12:1b:20:fb:50:24:67:62:0a:d8: 38:6b:ac:30:2c:71:6f:14:e3:ff:84:c5:b2:aa:4c:cb:cb:97: b7:64:7e:a9:67:98:0f:99:29:b9:21:63:b4:69:db:2c:2c:9f: 0a:82:8f:4c:64:f3:35:6b:7d:49:e1:39:6f:37:86:46:f1:0f: 38:8e:06:ad:1a:9c:42:88:d6:e3:b7:d3:e1:b4:7d:9f:e5:2a: 90:c8:2e:70:c4:0a:bb:1d:f3:a4:e3:ec:70:14:62:12:74:19: 25:33:06:ec:90:5d:d6:1d:a1:7a:8a:62:58:70:cc:18:66:85: 40:78:5e:b7:32:5e:65:27:89:ad:47:56:85:50:f3:c1:1c:25: 18:8c:93:10:f9:07:e3:7a:b5:ab:91:12:05:7f:9c:ca:cf:be: 41:93:60:ac:c9:b2:8d:d9:9a:3f:cb:e0:7d:26:5a:0e:48:a9: 68:b6:26:db:e7:05:ed:f8:ce:c8:ab:76:33:28:c1:d4:54:e5: 06:71:41:3a:8a:67:e1:40:61:f4:1c:c9:66:f9:e9:fb:13:07: 15:c0:7b:0c:c9:a7:20:7c:fb:90:29:bd:45:a9:61:91:59:ea: 29:b8:21:db:0f:ab:08:2d:0d:08:3b:e4:a6:56:f6:d9:f4:5c: 00:b5:50:fb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9W30TGWhZ9I/b9D0Rfr89MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZjNlMTYwMTcyZWNjNzVjOGNhYjFiYWUyNzFiZTNlYmY0 MDdhODAwHhcNMjYwMTAyMDYxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NGMwYmNhMmUzZTA2YjRlODMzMmU0M2VkNjc1NGZkZTIyZmFmZjI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0SXUa/JaKhu7eFg3RSZvJmKnacd rrn1ZNhu2yOnvRM7Mnu0ZyW5a/HAvtZG03o9TJ1+avuUvGtfZjtiLqO9BlXR0Ob9 b/ZNg8S40LYyuvk/6BtXKYirgbm56H6sEikO+23SFh+yngyzLJ/oGIVQE/wKYQhJ EOrhA2FWW9s23b8y1RE45iGIR3UBDSPLG5yVj2C093egvYegQjagRJTQHfirfjHG pWx6aeJZMgy9H0nB29BFR5QR6Ex0lJSwdejTLnLarrJo2PskVNeE35duDiMHxZHA Sj2YvuvlyTZqJlXsxK5/PdbOIvBRaOVxjo3Y32aYzYFYx/5TVYvyg2GOoQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFITAvKLj4GtOgzLkPtZ1T94i+v8lMB8GA1UdIwQY MBaAFAXz4WAXLsx1yMqxuuJxvj6/QHqAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0Nzkt NWQ1NjA5ODljZjdiLzEvaE1DOG91UGdhMDZETXVRLTFuVlAzaUw2X3lVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0NzktNWQ1NjA5ODljZjdi LzEvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWaeGMA0G CSqGSIb3DQEBCwUAA4IBAQBpMsidRrnIBRIbIPtQJGdiCtg4a6wwLHFvFOP/hMWy qkzLy5e3ZH6pZ5gPmSm5IWO0adssLJ8Kgo9MZPM1a31J4TlvN4ZG8Q84jgatGpxC iNbjt9PhtH2f5SqQyC5wxAq7HfOk4+xwFGISdBklMwbskF3WHaF6imJYcMwYZoVA eF63Ml5lJ4mtR1aFUPPBHCUYjJMQ+QfjerWrkRIFf5zKz75Bk2CsybKN2Zo/y+B9 JloOSKlotibb5wXt+M7Iq3YzKMHUVOUGcUE6imfhQGH0HMlm+en7EwcVwHsMyacg fPuQKb1FqWGRWeopuCHbD6sILQ0IO+SmVvbZ9FwAtVD7 -----END CERTIFICATE-----Generated at Sun Jan 25 15:02:31 2026 by rpki-client