This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/ADb-8cFQ-NqBiNjB-9VRdEXxXGo.roa
File: ADb-8cFQ-NqBiNjB-9VRdEXxXGo.roa (raw, json)
Hash identifier: Z0tlGeHI28w/uWa6BzOx7bS4D0r8kubbhdFc5SfUT7M=
Subject key identifier: 00:36:FE:F1:C1:50:F8:DA:81:88:D8:C1:FB:D5:51:74:45:F1:5C:6A
Certificate issuer: /CN=df7f5eb8817f2da97f665507683b5c45a74d0ca0
Certificate serial: 019B797E531815F5526CA35B2B3715DB4EE2
Authority key identifier: DF:7F:5E:B8:81:7F:2D:A9:7F:66:55:07:68:3B:5C:45:A7:4D:0C:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/339euIF_Lal_ZlUHaDtcRadNDKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/ADb-8cFQ-NqBiNjB-9VRdEXxXGo.roa
Signing time: Thu 01 Jan 2026 12:18:00 +0000
ROA not before: Thu 01 Jan 2026 12:18:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35635
IP address blocks: 80.243.208.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/339euIF_Lal_ZlUHaDtcRadNDKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7e:53:18:15:f5:52:6c:a3:5b:2b:37:15:db:4e:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df7f5eb8817f2da97f665507683b5c45a74d0ca0
Validity
Not Before: Jan 1 12:18:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0036fef1c150f8da8188d8c1fbd5517445f15c6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1d:0a:c1:08:4a:47:e0:b8:76:bc:ad:a8:8e:
63:83:49:d0:25:1c:01:de:4f:5c:99:0f:da:af:54:
01:35:a1:90:ee:08:ac:59:eb:a0:eb:a9:f6:f1:57:
ce:21:84:a6:0f:55:5c:79:23:66:32:33:88:92:95:
5b:e3:63:b4:ab:44:3c:f9:df:07:38:42:8a:41:75:
e6:79:64:b2:10:06:e8:68:7a:17:be:54:83:69:9e:
1a:ac:6c:a6:8b:75:fb:33:d2:05:fa:69:ef:b6:c7:
62:32:33:0a:93:45:22:94:7d:65:6c:4b:94:60:9b:
d4:99:2d:4e:d6:9e:5c:c2:04:5c:c8:8e:0a:1c:9a:
0d:72:bd:ab:6a:ac:fa:6c:f4:c9:92:26:17:b3:e1:
67:bf:36:28:db:10:14:0f:d0:fd:fa:dd:64:d5:21:
81:49:70:67:33:98:5f:e0:14:6f:18:bd:bf:e7:c6:
07:1e:3f:40:f6:da:65:6c:ff:b7:6c:4b:8d:f7:ed:
e1:03:85:05:6f:42:b1:a5:d7:69:ca:16:0d:df:e3:
9a:c4:e3:8a:2b:f6:d5:57:15:6d:47:49:16:72:34:
46:7a:a5:8e:19:8f:5e:ba:69:34:e7:a4:b9:dd:c3:
5b:d9:2f:25:33:8c:75:e1:50:ed:31:bc:f5:9f:6c:
71:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:36:FE:F1:C1:50:F8:DA:81:88:D8:C1:FB:D5:51:74:45:F1:5C:6A
X509v3 Authority Key Identifier:
keyid:DF:7F:5E:B8:81:7F:2D:A9:7F:66:55:07:68:3B:5C:45:A7:4D:0C:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/339euIF_Lal_ZlUHaDtcRadNDKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/ADb-8cFQ-NqBiNjB-9VRdEXxXGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.243.208.0/20
Signature Algorithm: sha256WithRSAEncryption
d5:ff:03:12:e1:1c:d9:92:78:8b:41:ff:f4:77:9f:8c:d1:82:
85:b6:18:85:38:cd:48:4e:82:4d:37:4c:65:3b:ad:33:ea:fc:
91:bd:37:bf:6a:f5:7f:4e:b9:14:87:a9:16:bd:ae:99:62:cf:
4d:68:5b:f1:76:72:cc:49:14:21:17:3d:62:b4:ac:ff:7c:89:
1b:2e:08:4d:15:08:c4:94:8a:9a:85:05:82:57:75:4a:f5:32:
1f:16:48:cc:83:da:dd:a1:ef:fd:d6:c4:0a:c6:59:f8:6b:2d:
29:dd:d0:81:88:26:3b:5e:0a:68:0f:15:d6:1f:9c:eb:cc:08:
53:50:c0:bd:07:06:ad:49:68:60:72:22:59:e6:15:df:73:d7:
49:d7:b5:b4:4a:50:df:bf:1f:cd:2f:e1:73:42:da:0a:80:8e:
e7:cb:fe:29:90:12:30:d6:f4:0d:eb:80:65:92:f4:8f:87:bc:
07:b9:fc:31:20:6f:30:78:5f:7b:ae:c5:86:99:99:fc:18:28:
5d:12:69:d5:38:07:7e:54:c7:9b:fc:b1:7b:30:59:6c:7d:d2:
5c:d0:f1:e9:27:73:7b:ac:cb:2f:d6:cc:7b:ee:d0:0a:52:48:
34:be:1d:a6:ee:0e:89:46:74:7a:59:5f:03:48:22:5c:27:cd:
a4:b7:59:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:20:28 2026 by rpki-client