This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/kH3_ORzlZypEL6QAaRMdE9LuJO0.roa File: kH3_ORzlZypEL6QAaRMdE9LuJO0.roa (raw, json) Hash identifier: fwWghc9Glrm1avQLaUen43NQ30EpzRbvQeuJPKkKHbQ= Subject key identifier: 90:7D:FF:39:1C:E5:67:2A:44:2F:A4:00:69:13:1D:13:D2:EE:24:ED Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47 Certificate serial: 019C1EFF3C57CAB2918306B4300BB85047FF Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/kH3_ORzlZypEL6QAaRMdE9LuJO0.roa Signing time: Mon 02 Feb 2026 15:36:09 +0000 ROA not before: Mon 02 Feb 2026 15:36:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211673 IP address blocks: 80.71.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 03:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1e:ff:3c:57:ca:b2:91:83:06:b4:30:0b:b8:50:47:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47 Validity Not Before: Feb 2 15:36:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=907dff391ce5672a442fa40069131d13d2ee24ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4d:4a:60:0b:1d:5c:76:c9:ae:63:80:c9:20: e1:70:87:c9:78:c6:36:c1:04:e3:63:48:0a:c2:59: 0e:2f:08:ac:62:f7:70:9a:fe:db:cb:be:24:26:42: 75:a3:ca:b0:ca:4a:fe:b2:f1:62:17:eb:93:e7:2a: 1f:68:5c:79:04:59:60:bd:d0:22:85:c3:fc:03:22: 9c:e4:d0:6b:f1:92:81:46:53:be:dd:f9:69:02:2a: 72:24:54:b3:3e:49:8e:47:ea:78:7b:d9:13:78:37: b3:18:e5:16:46:b8:66:53:a1:05:bc:62:cc:82:94: b4:02:fe:03:a7:51:8f:5e:d0:b8:ae:bd:8d:59:4c: a8:a7:c4:85:09:77:0c:eb:57:f2:12:a5:c8:74:2f: f6:e8:60:32:13:e2:ad:9d:89:29:a5:e3:05:8a:d5: cc:75:d9:a4:58:1e:4f:f9:42:4f:38:6c:75:24:55: 3a:de:53:dc:33:02:98:1e:d7:5f:6b:02:48:3e:16: bf:ff:b8:b5:c7:93:be:09:43:94:c8:3f:b1:62:bc: c2:29:bb:82:ec:42:64:5f:b4:56:99:a1:38:2b:3d: 9c:1b:8d:ca:3a:4b:94:0b:9d:dd:56:f4:b0:75:06: 3a:51:22:02:1c:d7:92:97:a0:cb:da:12:89:7a:51: 89:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:7D:FF:39:1C:E5:67:2A:44:2F:A4:00:69:13:1D:13:D2:EE:24:ED X509v3 Authority Key Identifier: keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/kH3_ORzlZypEL6QAaRMdE9LuJO0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.71.235.0/24 Signature Algorithm: sha256WithRSAEncryption 83:0b:26:ee:60:7b:dc:ae:16:40:25:f3:32:11:3a:40:f3:9f: 0e:e7:3d:f8:be:4b:bd:cf:2f:d6:34:f3:3b:02:46:99:56:f4: 82:0a:d8:8a:27:75:d1:28:e4:37:e2:24:f4:89:0a:09:91:4b: ac:46:f5:af:1d:c6:4a:92:bc:06:4b:44:fa:f0:e5:cf:28:e2: 4c:c9:8e:bf:ce:30:34:e0:8a:d5:a1:72:e6:2f:e2:b2:77:89: d2:be:71:f3:87:5b:88:64:23:96:46:06:6e:19:13:62:6c:09: 5e:35:33:4f:be:03:4c:d4:86:2f:ec:f3:76:23:83:58:57:e8: d5:23:dd:5b:a5:24:24:61:5e:e1:b8:da:51:6e:71:e1:af:05: 82:39:43:00:d4:45:1d:6c:df:36:68:20:c8:85:8d:c8:fd:ef: 95:a4:4a:36:dc:78:7c:47:25:ab:b2:77:bb:2f:a1:a3:61:76: bd:8c:a3:75:24:05:a8:38:66:b5:e0:b3:31:6e:5a:ed:95:10: 66:cc:f6:a2:af:0b:95:a5:6a:07:90:21:81:df:07:ba:38:3b: 6a:7d:e6:2c:eb:3e:d3:1f:63:49:d9:a4:0d:26:fd:92:c9:5c: 40:61:ae:8f:09:b4:51:71:c8:0e:bf:ae:90:25:2d:81:36:72: ef:f5:08:7e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwe/zxXyrKRgwa0MAu4UEf/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZTUxNjk0YzRkNDZiNGZjYzAyZmFlNzFlNWRiOTQyYTcx MDhlNDcwHhcNMjYwMjAyMTUzNjA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDdkZmYzOTFjZTU2NzJhNDQyZmE0MDA2OTEzMWQxM2QyZWUyNGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvU1KYAsdXHbJrmOAySDhcIfJeMY2 wQTjY0gKwlkOLwisYvdwmv7by74kJkJ1o8qwykr+svFiF+uT5yofaFx5BFlgvdAi hcP8AyKc5NBr8ZKBRlO+3flpAipyJFSzPkmOR+p4e9kTeDezGOUWRrhmU6EFvGLM gpS0Av4Dp1GPXtC4rr2NWUyop8SFCXcM61fyEqXIdC/26GAyE+KtnYkppeMFitXM ddmkWB5P+UJPOGx1JFU63lPcMwKYHtdfawJIPha//7i1x5O+CUOUyD+xYrzCKbuC 7EJkX7RWmaE4Kz2cG43KOkuUC53dVvSwdQY6USICHNeSl6DL2hKJelGJyQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJB9/zkc5WcqRC+kAGkTHRPS7iTtMB8GA1UdIwQY MBaAFEnlFpTE1GtPzAL65x5duUKnEI5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQt MTkxODliM2M5YzdkLzEva0gzX09SemxaeXBFTDZRQWFSTWRFOUx1Sk8wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQtMTkxODliM2M5Yzdk LzEvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUEfrMA0G CSqGSIb3DQEBCwUAA4IBAQCDCybuYHvcrhZAJfMyETpA858O5z34vku9zy/WNPM7 AkaZVvSCCtiKJ3XRKOQ34iT0iQoJkUusRvWvHcZKkrwGS0T68OXPKOJMyY6/zjA0 4IrVoXLmL+Kyd4nSvnHzh1uIZCOWRgZuGRNibAleNTNPvgNM1IYv7PN2I4NYV+jV I91bpSQkYV7huNpRbnHhrwWCOUMA1EUdbN82aCDIhY3I/e+VpEo23Hh8RyWrsne7 L6GjYXa9jKN1JAWoOGa14LMxblrtlRBmzPairwuVpWoHkCGB3we6ODtqfeYs6z7T H2NJ2aQNJv2SyVxAYa6PCbRRccgOv66QJS2BNnLv9Qh+ -----END CERTIFICATE-----Generated at Wed Feb 4 13:15:20 2026 by rpki-client