This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/IY7fhcpZn8V1nFJzcjkAB2G_wy8.roa File: IY7fhcpZn8V1nFJzcjkAB2G_wy8.roa (raw, json) Hash identifier: kypNUV6hOKnyhwHaYDOZf/jJOmWZK2acEUl1kQxKdoM= Subject key identifier: 21:8E:DF:85:CA:59:9F:C5:75:9C:52:73:72:39:00:07:61:BF:C3:2F Certificate issuer: /CN=52a5c90ca928313bc70d2683bb0f64d632b273a1 Certificate serial: 019B7F15E3AC0F6AE596941DDB0A4390B9C8 Authority key identifier: 52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/IY7fhcpZn8V1nFJzcjkAB2G_wy8.roa Signing time: Fri 02 Jan 2026 14:21:39 +0000 ROA not before: Fri 02 Jan 2026 14:21:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 174 IP address blocks: 80.73.120.0/21 maxlen: 24 80.88.76.0/22 maxlen: 24 185.76.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:e3:ac:0f:6a:e5:96:94:1d:db:0a:43:90:b9:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52a5c90ca928313bc70d2683bb0f64d632b273a1 Validity Not Before: Jan 2 14:21:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=218edf85ca599fc5759c52737239000761bfc32f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f3:ab:ab:3c:2b:2f:b6:34:d2:17:a7:47:39: a0:26:6b:98:37:da:67:70:99:00:c7:5d:39:4b:02: 49:80:9b:ed:38:4c:bc:bc:4e:3d:03:4d:a6:fb:d9: 19:78:de:ac:c0:08:fb:33:b8:17:e4:a1:b2:61:75: 03:2f:81:52:87:aa:0c:3e:b0:f8:ce:86:bf:64:8b: f5:37:34:a9:b8:89:97:71:28:28:95:27:40:f5:ad: 87:7a:4e:61:6f:4c:e3:32:74:3a:d2:1e:22:af:35: 02:21:e9:c9:21:43:c2:02:2c:ae:ce:c0:2b:27:25: ca:a4:e4:85:9c:f0:42:1c:2f:cc:bd:92:ad:7b:2b: a4:6f:ff:21:b9:04:d7:af:e0:f3:79:fd:1f:61:bf: 04:11:d9:0c:eb:87:c3:e5:44:13:b7:ac:a5:c1:6e: 20:e8:cb:5e:e7:92:ea:c0:d5:1a:32:dc:b8:df:65: 42:e2:ef:03:7c:ee:67:b4:f2:ce:b8:00:e2:27:0e: 88:bc:14:b4:84:d5:82:7e:8f:d3:b3:48:ff:33:30: 96:76:5d:ab:ed:cb:ff:f2:f3:d9:99:a5:19:91:5f: 3a:cb:00:7f:9e:53:93:44:34:38:9c:cb:82:94:88: b1:c3:10:50:35:01:1c:02:3a:91:27:c8:5d:96:a3: 0f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:8E:DF:85:CA:59:9F:C5:75:9C:52:73:72:39:00:07:61:BF:C3:2F X509v3 Authority Key Identifier: keyid:52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/IY7fhcpZn8V1nFJzcjkAB2G_wy8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.73.120.0/21 80.88.76.0/22 185.76.40.0/22 Signature Algorithm: sha256WithRSAEncryption ab:c7:07:f4:a7:41:c3:ce:56:0a:19:48:72:86:24:7c:3f:76: 0e:bb:5a:35:4e:3c:7b:85:db:a5:43:48:7d:46:cf:75:75:54: f3:86:20:d4:0f:fa:3c:f1:4b:82:f7:e6:4e:92:3d:22:80:cb: c1:66:7b:fb:dd:24:ff:ae:fd:31:d2:63:f2:59:c0:e9:35:97: 8d:d3:ac:33:f5:df:86:89:d5:2d:25:e7:be:fe:93:20:7a:6a: 3b:7f:38:03:fc:f8:3e:a4:26:ac:2b:9a:cc:56:89:24:e6:7b: e3:e1:bc:fa:5c:55:d0:37:39:9d:d2:94:c3:c9:14:ef:4d:f9: ad:0e:b5:30:d2:24:70:d6:28:24:11:c2:14:13:6d:c9:5c:80: 7a:6f:76:69:59:ee:1a:d8:84:99:bb:bc:7a:60:10:84:62:b2: 91:9c:09:a8:41:13:b1:45:ba:bf:4b:01:91:04:10:07:af:03: 3b:8b:f6:02:e1:f3:54:ef:e8:3e:58:60:bf:c7:00:a1:51:fe: c7:dc:f8:3f:8d:1c:39:71:fa:d1:cb:23:c4:ec:12:d2:54:86: cb:87:f9:30:8a:cd:a2:36:89:23:b6:c3:db:fe:68:79:1d:7a: 75:68:a8:ec:59:3b:bb:55:5e:06:b2:29:76:99:61:58:a7:f6: d5:0b:0b:f0 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/FeOsD2rllpQd2wpDkLnIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyYTVjOTBjYTkyODMxM2JjNzBkMjY4M2JiMGY2NGQ2MzJi MjczYTEwHhcNMjYwMTAyMTQyMTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMThlZGY4NWNhNTk5ZmM1NzU5YzUyNzM3MjM5MDAwNzYxYmZjMzJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfOrqzwrL7Y00henRzmgJmuYN9pn cJkAx105SwJJgJvtOEy8vE49A02m+9kZeN6swAj7M7gX5KGyYXUDL4FSh6oMPrD4 zoa/ZIv1NzSpuImXcSgolSdA9a2Hek5hb0zjMnQ60h4irzUCIenJIUPCAiyuzsAr JyXKpOSFnPBCHC/MvZKteyukb/8huQTXr+Dzef0fYb8EEdkM64fD5UQTt6ylwW4g 6Mte55LqwNUaMty432VC4u8DfO5ntPLOuADiJw6IvBS0hNWCfo/Ts0j/MzCWdl2r 7cv/8vPZmaUZkV86ywB/nlOTRDQ4nMuClIixwxBQNQEcAjqRJ8hdlqMPkwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFCGO34XKWZ/FdZxSc3I5AAdhv8MvMB8GA1UdIwQY MBaAFFKlyQypKDE7xw0mg7sPZNYysnOhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXFYSkRLa29NVHZIRFNhRHV3OWsxakt5YzZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9jNGI3YTAtMWU1MC00MDNjLWIyNGUt MTNlZDYzM2Y5MjJhLzEvSVk3ZmhjcFpuOFYxbkZKemNqa0FCMkdfd3k4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9jNGI3YTAtMWU1MC00MDNjLWIyNGUtMTNlZDYzM2Y5MjJh LzEvVXFYSkRLa29NVHZIRFNhRHV3OWsxakt5YzZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDUEl4AwQC UFhMAwQCuUwoMA0GCSqGSIb3DQEBCwUAA4IBAQCrxwf0p0HDzlYKGUhyhiR8P3YO u1o1Tjx7hdulQ0h9Rs91dVTzhiDUD/o88UuC9+ZOkj0igMvBZnv73ST/rv0x0mPy WcDpNZeN06wz9d+GidUtJee+/pMgemo7fzgD/Pg+pCasK5rMVokk5nvj4bz6XFXQ Nzmd0pTDyRTvTfmtDrUw0iRw1igkEcIUE23JXIB6b3ZpWe4a2ISZu7x6YBCEYrKR nAmoQROxRbq/SwGRBBAHrwM7i/YC4fNU7+g+WGC/xwChUf7H3Pg/jRw5cfrRyyPE 7BLSVIbLh/kwis2iNokjtsPb/mh5HXp1aKjsWTu7VV4Gsil2mWFYp/bVCwvw -----END CERTIFICATE-----Generated at Mon Jan 12 00:51:33 2026 by rpki-client