This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/h_yiaR3EGim6MLv4wKm89eZLt8A.roa File: h_yiaR3EGim6MLv4wKm89eZLt8A.roa (raw, json) Hash identifier: E2gv1E8KeqioSiQ2UiAhiWEUqE/cYHvimtqkuYdbZCo= Subject key identifier: 87:FC:A2:69:1D:C4:1A:29:BA:30:BB:F8:C0:A9:BC:F5:E6:4B:B7:C0 Certificate issuer: /CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Certificate serial: 019B78A37C4C0216FE8E6EC5A8BB46A3842D Authority key identifier: 5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/h_yiaR3EGim6MLv4wKm89eZLt8A.roa Signing time: Thu 01 Jan 2026 08:18:58 +0000 ROA not before: Thu 01 Jan 2026 08:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210976 IP address blocks: 80.85.242.0/24 maxlen: 24 80.85.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 05:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:7c:4c:02:16:fe:8e:6e:c5:a8:bb:46:a3:84:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Validity Not Before: Jan 1 08:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=87fca2691dc41a29ba30bbf8c0a9bcf5e64bb7c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:19:7f:41:6a:c8:60:fd:c6:fd:36:70:75:fd: 03:fe:c5:35:d4:3f:f3:48:9f:f8:13:8e:f0:d6:6a: 19:09:4f:7e:33:d6:78:bb:7d:d8:35:5f:ae:ee:72: 88:a5:c8:82:e5:28:68:76:c9:d8:52:42:75:a9:4a: c7:91:6c:c5:0e:77:ae:86:e2:ce:50:76:2a:4b:72: 59:5c:94:8e:fd:08:f6:83:0d:a1:17:76:a1:63:33: 86:b9:33:e5:c8:f1:d5:b5:56:68:e5:77:46:53:dd: 24:e8:dc:98:51:6f:4d:fa:3f:43:c3:7d:f6:f6:04: 02:12:03:a3:d9:d0:0d:1f:46:59:03:86:1b:f1:a2: 41:a9:84:c8:5a:c5:ee:b7:5e:48:c1:b7:46:73:38: 92:d5:06:99:9d:0e:7a:79:11:aa:0b:96:d8:2a:7d: 83:80:6a:4f:d4:5e:15:59:47:8d:48:2b:18:6c:6b: 3e:d3:1b:e7:81:28:3f:22:7c:16:b4:c8:10:0b:ed: 40:06:ee:26:5e:d4:4a:b3:75:67:25:81:54:f6:84: a6:0a:2a:4b:ea:ef:a1:00:74:ca:bb:75:a3:2a:05: 62:fe:13:00:79:0b:41:34:a8:ca:65:c9:5a:14:83: 65:d8:7d:b7:4b:34:b9:90:1c:a0:b9:a6:0a:f1:6f: 0a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:FC:A2:69:1D:C4:1A:29:BA:30:BB:F8:C0:A9:BC:F5:E6:4B:B7:C0 X509v3 Authority Key Identifier: keyid:5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/h_yiaR3EGim6MLv4wKm89eZLt8A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.85.242.0/23 Signature Algorithm: sha256WithRSAEncryption 09:5d:77:fb:2a:0c:4d:51:a5:e0:3e:31:1f:ab:33:3c:02:d9: a8:24:93:97:f3:2d:e5:fb:84:07:90:c9:f4:c4:97:f7:c6:06: 24:29:41:4a:28:80:91:6d:cd:3f:20:96:d4:b3:a2:09:07:83: c4:d4:03:2b:d4:c5:e4:e4:57:5d:8c:51:c5:10:11:23:68:f9: 21:4d:28:43:df:9e:5c:29:78:f9:07:8f:27:3c:37:df:9d:89: 1b:6b:8b:c4:92:97:1f:9b:71:9b:4c:0d:73:8a:3b:bf:50:b3: 56:75:98:26:f8:52:8c:55:01:af:19:2e:8e:85:47:7c:6f:c3: 73:23:48:86:7a:94:78:37:c0:69:1b:9b:1d:42:9f:fd:b1:00: 17:c1:e2:02:c7:74:88:6f:29:1f:9f:12:b1:66:86:7b:01:7c: 3d:aa:b2:22:02:74:ae:99:a1:79:f5:3d:0b:b1:a2:4a:24:14: 01:8d:98:7e:45:8d:7f:3f:dd:09:77:70:1c:4f:8c:11:98:81: bb:bc:a4:66:5a:1a:72:61:f5:17:ed:0b:c5:96:2b:d7:82:89: 78:87:8d:67:10:8f:06:00:29:0f:f9:af:98:13:8c:0b:e6:d9: f6:8f:f1:2e:11:f6:f8:e5:db:9a:3d:c5:d8:ea:01:3b:24:9b: bb:ad:f1:f4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o3xMAhb+jm7FqLtGo4QtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMGZmOGFhZjc0NTMxMTQxNDcwMjhkNTRhZTFjNjkzYThh MTQ3YmMwHhcNMjYwMTAxMDgxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4N2ZjYTI2OTFkYzQxYTI5YmEzMGJiZjhjMGE5YmNmNWU2NGJiN2MwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRl/QWrIYP3G/TZwdf0D/sU11D/z SJ/4E47w1moZCU9+M9Z4u33YNV+u7nKIpciC5ShodsnYUkJ1qUrHkWzFDneuhuLO UHYqS3JZXJSO/Qj2gw2hF3ahYzOGuTPlyPHVtVZo5XdGU90k6NyYUW9N+j9Dw332 9gQCEgOj2dANH0ZZA4Yb8aJBqYTIWsXut15IwbdGcziS1QaZnQ56eRGqC5bYKn2D gGpP1F4VWUeNSCsYbGs+0xvngSg/InwWtMgQC+1ABu4mXtRKs3VnJYFU9oSmCipL 6u+hAHTKu3WjKgVi/hMAeQtBNKjKZclaFINl2H23SzS5kByguaYK8W8KQwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIf8omkdxBopujC7+MCpvPXmS7fAMB8GA1UdIwQY MBaAFF4P+Kr3RTEUFHAo1UrhxpOooUe8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEt ZDg3MjEzNzU2NDRhLzEvaF95aWFSM0VHaW02TUx2NHdLbTg5ZVpMdDhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEtZDg3MjEzNzU2NDRh LzEvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBUFXyMA0G CSqGSIb3DQEBCwUAA4IBAQAJXXf7KgxNUaXgPjEfqzM8AtmoJJOX8y3l+4QHkMn0 xJf3xgYkKUFKKICRbc0/IJbUs6IJB4PE1AMr1MXk5FddjFHFEBEjaPkhTShD355c KXj5B48nPDffnYkba4vEkpcfm3GbTA1ziju/ULNWdZgm+FKMVQGvGS6OhUd8b8Nz I0iGepR4N8BpG5sdQp/9sQAXweICx3SIbykfnxKxZoZ7AXw9qrIiAnSumaF59T0L saJKJBQBjZh+RY1/P90Jd3AcT4wRmIG7vKRmWhpyYfUX7QvFlivXgol4h41nEI8G ACkP+a+YE4wL5tn2j/EuEfb45duaPcXY6gE7JJu7rfH0 -----END CERTIFICATE-----Generated at Wed Jan 21 11:15:53 2026 by rpki-client