This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/i-N27op-z7hkiqBEGNqq-kz27FM.roa File: i-N27op-z7hkiqBEGNqq-kz27FM.roa (raw, json) Hash identifier: rCF63L7W07eBpUJCTAH9Z0zj4zxOfcnsBXrV71Po2W0= Subject key identifier: 8B:E3:76:EE:8A:7E:CF:B8:64:8A:A0:44:18:DA:AA:FA:4C:F6:EC:53 Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80 Certificate serial: 019B7D5B7975394C86A0C4909773FAB6DD48 Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/i-N27op-z7hkiqBEGNqq-kz27FM.roa Signing time: Fri 02 Jan 2026 06:18:25 +0000 ROA not before: Fri 02 Jan 2026 06:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3356 IP address blocks: 80.253.104.0/24 maxlen: 24 80.253.115.0/24 maxlen: 24 80.253.124.0/24 maxlen: 24 83.245.32.0/22 maxlen: 22 83.245.69.0/24 maxlen: 24 83.245.70.0/24 maxlen: 24 83.245.80.0/20 maxlen: 20 89.167.144.0/24 maxlen: 24 89.167.146.0/24 maxlen: 24 89.167.152.0/22 maxlen: 22 89.167.166.0/24 maxlen: 24 213.228.204.0/24 maxlen: 24 213.228.229.0/24 maxlen: 24 213.228.243.0/24 maxlen: 24 213.228.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 06:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:79:75:39:4c:86:a0:c4:90:97:73:fa:b6:dd:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80 Validity Not Before: Jan 2 06:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8be376ee8a7ecfb8648aa04418daaafa4cf6ec53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:98:c3:40:fe:fb:d1:0a:74:6d:d6:20:98:d7: 30:fc:cc:72:ed:85:a8:01:ec:9f:e0:43:6a:8a:61: aa:19:9e:25:49:47:b5:29:ad:c5:11:64:18:16:21: 01:c9:88:1f:6c:cf:8a:94:4f:fe:e4:b0:4e:0b:b6: a6:ec:a9:cb:1a:62:d0:0f:a1:d7:d9:c6:ec:9f:4d: dc:29:8f:04:2f:39:ba:89:a3:3d:f4:3e:b7:08:40: a2:59:c7:1a:46:20:cb:de:f0:2d:f6:67:69:3f:6a: 63:d3:8a:2d:10:6b:ad:d0:94:df:8d:92:dd:da:6a: 6b:a5:17:6e:f9:cc:17:63:40:42:f1:cf:d5:2b:0f: 08:96:70:12:65:e7:38:a1:16:5e:2f:76:9c:cb:0e: 86:6f:f4:ff:76:d3:51:c4:a6:ab:16:89:6c:3c:ac: 70:1c:c4:42:bc:64:78:0d:f6:85:0d:e2:b4:4b:d9: 88:b8:df:48:5d:8c:26:3d:e3:38:25:0c:21:23:a4: dd:7a:d7:a1:49:5c:17:45:04:b3:fe:7c:6d:24:b3: bd:1b:4f:bc:21:a5:55:8c:31:25:a6:80:e5:e1:63: 13:96:82:cf:bb:65:59:79:23:6f:4a:1a:12:8c:44: f0:46:b5:4c:89:7b:0e:48:1e:bb:e0:ef:7e:ca:09: 9e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:E3:76:EE:8A:7E:CF:B8:64:8A:A0:44:18:DA:AA:FA:4C:F6:EC:53 X509v3 Authority Key Identifier: keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/i-N27op-z7hkiqBEGNqq-kz27FM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.253.104.0/24 80.253.115.0/24 80.253.124.0/24 83.245.32.0/22 83.245.69.0-83.245.70.255 83.245.80.0/20 89.167.144.0/24 89.167.146.0/24 89.167.152.0/22 89.167.166.0/24 213.228.204.0/24 213.228.229.0/24 213.228.243.0/24 213.228.253.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:6e:1e:2d:8c:c3:e2:d3:89:30:5e:bf:f1:9e:fc:dc:bb:5b: 40:6b:a0:22:5b:da:cb:a4:f7:3e:12:3f:b5:11:ff:7b:13:26: 9b:eb:b8:98:09:58:e6:f2:b4:9b:7a:23:4f:9a:78:1d:23:c4: c0:a4:80:15:80:7f:e6:39:64:21:5a:4f:e9:75:f2:26:9c:36: 0c:c8:f9:0c:80:4e:b2:b3:bb:df:ae:1a:8e:72:29:a4:01:8e: 6f:1c:ac:3f:da:1c:77:85:11:68:72:bd:17:fa:f9:a9:9a:c8: f6:0d:54:e6:f6:82:15:6e:f9:88:13:3c:07:12:5b:68:2e:52: 44:c2:05:be:20:ae:e3:9d:3e:b2:1e:9f:8c:07:79:10:39:02: 5b:22:10:7a:d7:69:43:1a:05:6d:a7:31:3e:30:3b:84:d9:a6: 87:75:43:71:43:82:58:f4:03:e4:2a:fe:77:e1:4a:64:ec:56: 9e:df:69:88:e8:25:46:7e:49:ea:25:5e:3e:12:af:be:d5:a9: 23:28:ae:33:11:e5:6c:11:e3:28:af:79:07:71:68:f1:74:d9: d9:54:d4:00:07:db:70:c2:a9:9e:39:ec:c7:c9:9a:53:9e:79: 13:fa:8d:09:a9:e7:7b:1c:5b:d1:ad:51:64:2f:ff:0e:95:ed: 46:de:c7:db -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgISAZt9W3l1OUyGoMSQl3P6tt1IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZjNlMTYwMTcyZWNjNzVjOGNhYjFiYWUyNzFiZTNlYmY0 MDdhODAwHhcNMjYwMTAyMDYxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YmUzNzZlZThhN2VjZmI4NjQ4YWEwNDQxOGRhYWFmYTRjZjZlYzUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJjDQP770Qp0bdYgmNcw/Mxy7YWo Aeyf4ENqimGqGZ4lSUe1Ka3FEWQYFiEByYgfbM+KlE/+5LBOC7am7KnLGmLQD6HX 2cbsn03cKY8ELzm6iaM99D63CECiWccaRiDL3vAt9mdpP2pj04otEGut0JTfjZLd 2mprpRdu+cwXY0BC8c/VKw8IlnASZec4oRZeL3acyw6Gb/T/dtNRxKarFolsPKxw HMRCvGR4DfaFDeK0S9mIuN9IXYwmPeM4JQwhI6TdetehSVwXRQSz/nxtJLO9G0+8 IaVVjDElpoDl4WMTloLPu2VZeSNvShoSjETwRrVMiXsOSB674O9+ygmeowIDAQAB o4ICXzCCAlswHQYDVR0OBBYEFIvjdu6Kfs+4ZIqgRBjaqvpM9uxTMB8GA1UdIwQY MBaAFAXz4WAXLsx1yMqxuuJxvj6/QHqAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0Nzkt NWQ1NjA5ODljZjdiLzEvaS1OMjdvcC16N2hraXFCRUdOcXEta3oyN0ZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0NzktNWQ1NjA5ODljZjdi LzEvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHUGCCsGAQUFBwEHAQH/BGYwZDBiBAIAATBcAwQAUP1oAwQA UP1zAwQAUP18AwQCU/UgMAwDBABT9UUDBABT9UYDBART9VADBABZp5ADBABZp5ID BAJZp5gDBABZp6YDBADV5MwDBADV5OUDBADV5PMDBADV5P0wDQYJKoZIhvcNAQEL BQADggEBAD9uHi2Mw+LTiTBev/Ge/Ny7W0BroCJb2suk9z4SP7UR/3sTJpvruJgJ WObytJt6I0+aeB0jxMCkgBWAf+Y5ZCFaT+l18iacNgzI+QyATrKzu9+uGo5yKaQB jm8crD/aHHeFEWhyvRf6+amayPYNVOb2ghVu+YgTPAcSW2guUkTCBb4gruOdPrIe n4wHeRA5AlsiEHrXaUMaBW2nMT4wO4TZpod1Q3FDglj0A+Qq/nfhSmTsVp7faYjo JUZ+SeolXj4Sr77VqSMorjMR5WwR4yiveQdxaPF02dlU1AAH23DCqZ457MfJmlOe eRP6jQmp53scW9GtUWQv/w6V7Ubex9s= -----END CERTIFICATE-----Generated at Fri Jan 23 16:04:50 2026 by rpki-client