This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/A80PxrMm_Ufx0vA3DxhZrXcX5fg.roa File: A80PxrMm_Ufx0vA3DxhZrXcX5fg.roa (raw, json) Hash identifier: NlbOfNMPHpTki4eHgoxzVdl7/dImbAIAT8h3ZO3gam4= Subject key identifier: 03:CD:0F:C6:B3:26:FD:47:F1:D2:F0:37:0F:18:59:AD:77:17:E5:F8 Certificate issuer: /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1 Certificate serial: 019BFF17384C4A02C8B474D87AA432A88BD7 Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/A80PxrMm_Ufx0vA3DxhZrXcX5fg.roa Signing time: Tue 27 Jan 2026 10:54:30 +0000 ROA not before: Tue 27 Jan 2026 10:54:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213705 IP address blocks: 153.51.160.0/22 maxlen: 22 153.51.164.0/22 maxlen: 22 153.51.168.0/22 maxlen: 22 153.51.172.0/22 maxlen: 22 153.51.176.0/22 maxlen: 22 153.51.180.0/22 maxlen: 22 153.51.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 21:21:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ff:17:38:4c:4a:02:c8:b4:74:d8:7a:a4:32:a8:8b:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1 Validity Not Before: Jan 27 10:54:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=03cd0fc6b326fd47f1d2f0370f1859ad7717e5f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ff:f8:e9:ea:4e:fe:86:28:b9:aa:1a:76:84: 28:d0:96:b4:94:da:a9:6a:ff:ee:87:97:e8:eb:ca: 39:c1:3d:7c:4d:f9:2a:68:1b:0d:65:4c:e9:84:54: 14:6f:b1:d3:89:71:dc:30:3b:9c:8b:94:11:b5:bf: 79:ca:17:44:87:5c:d0:79:d9:47:f0:ec:ba:c6:42: d2:eb:14:b6:61:00:c2:d9:bd:b6:0e:cc:01:24:9f: 28:ff:08:ce:1f:9c:db:df:21:04:24:8f:81:a0:ee: e3:b4:87:3c:87:46:ce:88:e4:66:32:b3:d5:1d:1d: ec:d0:97:f8:13:7f:8e:78:4c:70:a2:ea:38:70:26: 41:81:51:de:c6:b0:3c:08:e3:a0:f1:51:5a:6c:c5: ee:1d:5d:8f:3c:25:6f:ea:8d:b6:50:c5:c6:bc:e3: a4:3d:a4:37:97:3e:91:51:f3:9e:08:59:5b:1a:38: bd:55:cb:00:35:00:e9:ac:ee:ea:2a:82:64:73:22: 76:b8:ed:f7:e4:f1:91:72:d8:45:05:b5:b2:98:54: 39:6b:3e:4f:75:77:0a:0a:31:25:24:90:c4:ec:03: 84:50:ca:42:aa:8d:9f:e0:a7:e5:2c:11:a5:a2:67: 87:e9:a6:f8:f4:f6:37:64:3c:99:8e:78:45:a3:5e: 82:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:CD:0F:C6:B3:26:FD:47:F1:D2:F0:37:0F:18:59:AD:77:17:E5:F8 X509v3 Authority Key Identifier: keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/A80PxrMm_Ufx0vA3DxhZrXcX5fg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 153.51.160.0-153.51.187.255 Signature Algorithm: sha256WithRSAEncryption 84:1f:d0:e5:c7:be:cd:ab:88:35:ae:d8:d5:c1:14:d2:d7:d8: ab:81:a0:a0:62:fa:ce:e4:2d:df:b1:d9:28:d4:ad:5a:68:91: 2d:29:76:33:58:33:f0:c0:61:37:82:6e:7c:51:a5:22:0b:87: 37:69:ec:a2:3d:5b:1c:4c:e4:04:35:38:36:f7:73:83:c7:15: 75:9d:45:05:2a:80:20:52:7d:2a:af:55:0d:8a:b6:cc:fa:0a: ef:c3:08:0f:b7:5a:d2:f4:e5:db:73:49:20:b1:f9:4c:d8:0c: b9:5a:2c:2e:09:ff:76:46:6d:ca:3a:f7:a5:96:12:16:51:70: af:75:28:e9:07:48:c2:13:8b:26:44:0a:b9:2a:60:9b:d5:da: 7c:29:90:42:46:67:8f:11:3c:23:d3:f5:80:6b:56:38:51:96: 88:3a:f7:2f:ca:29:0b:65:bd:70:95:e0:8f:c1:fb:5f:cf:82: bc:2e:f5:39:2a:1a:bc:45:5e:f4:4f:a2:5e:ec:0f:d0:e3:94: 02:fd:24:57:00:eb:fa:6f:4d:f0:62:5e:a3:39:41:ca:1d:0a: ae:5c:65:4b:2e:2c:75:d5:b3:76:c0:85:7c:c8:1f:69:59:51: 54:89:6d:56:ad:c2:c1:71:e4:8a:c1:fb:4a:08:ff:04:fb:a2: a1:31:f1:02 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZv/FzhMSgLItHTYeqQyqIvXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMTA0ZjFlNGFiYWVjMWVmZjgwZjI2MmM2MmY5NmMyNTQz OGM4ZTEwHhcNMjYwMTI3MTA1NDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwM2NkMGZjNmIzMjZmZDQ3ZjFkMmYwMzcwZjE4NTlhZDc3MTdlNWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0f/46epO/oYouaoadoQo0Ja0lNqp av/uh5fo68o5wT18TfkqaBsNZUzphFQUb7HTiXHcMDuci5QRtb95yhdEh1zQedlH 8Oy6xkLS6xS2YQDC2b22DswBJJ8o/wjOH5zb3yEEJI+BoO7jtIc8h0bOiORmMrPV HR3s0Jf4E3+OeExwouo4cCZBgVHexrA8COOg8VFabMXuHV2PPCVv6o22UMXGvOOk PaQ3lz6RUfOeCFlbGji9VcsANQDprO7qKoJkcyJ2uO335PGRcthFBbWymFQ5az5P dXcKCjElJJDE7AOEUMpCqo2f4KflLBGlomeH6ab49PY3ZDyZjnhFo16C/wIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFAPND8azJv1H8dLwNw8YWa13F+X4MB8GA1UdIwQY MBaAFGsQTx5Kuuwe/4DyYsYvlsJUOMjhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS82NTNjMjQtNjhlNS00YWQ4LWI3NjMt MzBjOWRlMjA1YWZjLzEvQTgwUHhyTW1fVWZ4MHZBM0R4aFpyWGNYNWZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS82NTNjMjQtNjhlNS00YWQ4LWI3NjMtMzBjOWRlMjA1YWZj LzEvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAWZM6AD BAKZM7gwDQYJKoZIhvcNAQELBQADggEBAIQf0OXHvs2riDWu2NXBFNLX2KuBoKBi +s7kLd+x2SjUrVpokS0pdjNYM/DAYTeCbnxRpSILhzdp7KI9WxxM5AQ1ODb3c4PH FXWdRQUqgCBSfSqvVQ2Ktsz6Cu/DCA+3WtL05dtzSSCx+UzYDLlaLC4J/3ZGbco6 96WWEhZRcK91KOkHSMITiyZECrkqYJvV2nwpkEJGZ48RPCPT9YBrVjhRlog69y/K KQtlvXCV4I/B+1/Pgrwu9TkqGrxFXvRPol7sD9DjlAL9JFcA6/pvTfBiXqM5Qcod Cq5cZUsuLHXVs3bAhXzIH2lZUVSJbVatwsFx5IrB+0oI/wT7oqEx8QI= -----END CERTIFICATE-----Generated at Tue Feb 3 05:38:27 2026 by rpki-client