This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/oPwG9ExReYsnz5p8vqlzN-e5OB0.roa File: oPwG9ExReYsnz5p8vqlzN-e5OB0.roa (raw, json) Hash identifier: a55Jgbq5JGC8OLRc6+/t9QpTipFlzpXiFcszhhlrsgc= Subject key identifier: A0:FC:06:F4:4C:51:79:8B:27:CF:9A:7C:BE:A9:73:37:E7:B9:38:1D Certificate issuer: /CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Certificate serial: 019B78A37A2BD34BE61AC8863A7FCDF25EC5 Authority key identifier: 5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/oPwG9ExReYsnz5p8vqlzN-e5OB0.roa Signing time: Thu 01 Jan 2026 08:18:58 +0000 ROA not before: Thu 01 Jan 2026 08:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198769 IP address blocks: 80.85.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 14:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:7a:2b:d3:4b:e6:1a:c8:86:3a:7f:cd:f2:5e:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Validity Not Before: Jan 1 08:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a0fc06f44c51798b27cf9a7cbea97337e7b9381d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:12:3f:45:30:8f:89:48:a5:33:4e:0d:5d:0d: c4:31:b1:64:ea:7c:a9:9b:cd:fa:e5:19:00:22:2a: 60:ee:9e:13:ed:d4:a5:64:50:e1:63:50:2a:db:eb: d3:ea:a3:ac:58:c5:05:4c:f7:90:f7:1e:84:5b:73: 0c:80:8a:23:e9:a5:1e:1f:e7:1c:54:05:99:3f:e5: 9f:4f:c1:a4:e7:28:99:6a:c1:57:ea:51:12:50:82: 61:fb:42:b7:ab:f9:c2:3c:56:3f:df:91:27:6b:63: 68:48:c2:b3:7e:73:bf:d3:1e:b9:30:4e:db:98:b3: be:bc:74:71:03:e5:fb:5b:fc:34:a0:ef:90:5f:f9: 38:ab:07:5b:4b:96:ef:02:2f:20:31:e4:df:8a:1c: 19:2a:1b:81:6a:b6:7d:92:49:f9:01:0e:68:a9:e3: 6c:b3:79:60:40:3c:04:47:0d:a2:bb:75:ae:5e:0d: 96:ca:0b:ca:92:9a:f1:30:da:1b:dd:e8:1a:41:9d: 3d:53:d4:c7:4a:00:af:89:ba:ac:0c:ed:26:7f:19: 3a:81:66:c7:ca:2f:93:ea:e4:0f:6c:39:ee:30:09: ad:df:27:76:b1:c9:ee:51:80:ad:6b:ea:09:d4:f7: 22:54:68:54:31:74:c4:6d:03:dc:d7:e6:45:3f:70: 0e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:FC:06:F4:4C:51:79:8B:27:CF:9A:7C:BE:A9:73:37:E7:B9:38:1D X509v3 Authority Key Identifier: keyid:5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/oPwG9ExReYsnz5p8vqlzN-e5OB0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.85.240.0/24 Signature Algorithm: sha256WithRSAEncryption 69:2b:d9:91:6f:b5:91:54:bf:2a:ae:71:ef:c2:ef:b8:23:4a: 92:af:80:78:85:f0:10:5d:73:94:1a:48:29:28:65:17:33:69: d2:26:bf:5c:bd:73:99:c6:54:ce:59:80:ac:f4:65:40:22:42: da:11:55:de:c1:45:82:77:8e:7b:37:a2:fc:11:62:7a:e9:e9: a0:c9:7b:b6:7a:f9:74:9a:f0:84:27:3a:f1:00:1d:28:99:a7: 4e:5d:c3:96:d4:15:af:3e:24:d4:7d:6d:c1:e9:61:40:69:d0: 8c:57:5c:42:d1:59:9e:e2:9a:ee:4b:22:8d:12:55:3e:9f:4d: 96:aa:1d:d9:50:43:2e:10:88:8f:23:27:1d:ad:0a:eb:27:e0: c5:fd:53:16:b4:d7:66:61:25:5a:ce:30:65:ba:d8:5c:d3:db: ef:10:1e:f4:21:11:96:2d:79:e3:e2:66:ac:c8:06:b5:b3:e7: 34:99:6e:e3:1c:f9:09:7d:e9:c7:e4:09:2a:8b:58:a4:43:67: af:9a:d9:70:6e:90:c8:e2:8c:c7:64:e6:40:6b:44:d0:ac:61: 9a:aa:42:2f:57:87:a1:13:fb:d9:eb:26:2d:60:f3:d9:79:8c: 92:57:b7:2b:b6:16:7f:6a:40:3b:18:22:50:9d:55:10:ff:38: c9:56:28:a4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o3or00vmGsiGOn/N8l7FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMGZmOGFhZjc0NTMxMTQxNDcwMjhkNTRhZTFjNjkzYThh MTQ3YmMwHhcNMjYwMTAxMDgxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMGZjMDZmNDRjNTE3OThiMjdjZjlhN2NiZWE5NzMzN2U3YjkzODFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRI/RTCPiUilM04NXQ3EMbFk6nyp m8365RkAIipg7p4T7dSlZFDhY1Aq2+vT6qOsWMUFTPeQ9x6EW3MMgIoj6aUeH+cc VAWZP+WfT8Gk5yiZasFX6lESUIJh+0K3q/nCPFY/35Ena2NoSMKzfnO/0x65ME7b mLO+vHRxA+X7W/w0oO+QX/k4qwdbS5bvAi8gMeTfihwZKhuBarZ9kkn5AQ5oqeNs s3lgQDwERw2iu3WuXg2WygvKkprxMNob3egaQZ09U9THSgCvibqsDO0mfxk6gWbH yi+T6uQPbDnuMAmt3yd2scnuUYCta+oJ1PciVGhUMXTEbQPc1+ZFP3AOgQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKD8BvRMUXmLJ8+afL6pczfnuTgdMB8GA1UdIwQY MBaAFF4P+Kr3RTEUFHAo1UrhxpOooUe8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEt ZDg3MjEzNzU2NDRhLzEvb1B3RzlFeFJlWXNuejVwOHZxbHpOLWU1T0IwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEtZDg3MjEzNzU2NDRh LzEvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUFXwMA0G CSqGSIb3DQEBCwUAA4IBAQBpK9mRb7WRVL8qrnHvwu+4I0qSr4B4hfAQXXOUGkgp KGUXM2nSJr9cvXOZxlTOWYCs9GVAIkLaEVXewUWCd457N6L8EWJ66emgyXu2evl0 mvCEJzrxAB0omadOXcOW1BWvPiTUfW3B6WFAadCMV1xC0Vme4pruSyKNElU+n02W qh3ZUEMuEIiPIycdrQrrJ+DF/VMWtNdmYSVazjBluthc09vvEB70IRGWLXnj4mas yAa1s+c0mW7jHPkJfenH5Akqi1ikQ2evmtlwbpDI4ozHZOZAa0TQrGGaqkIvV4eh E/vZ6yYtYPPZeYySV7crthZ/akA7GCJQnVUQ/zjJViik -----END CERTIFICATE-----Generated at Wed Jan 21 23:11:45 2026 by rpki-client