This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/zOEbGJULluKjsKP-6SB80Ki-zPM.roa File: zOEbGJULluKjsKP-6SB80Ki-zPM.roa (raw, json) Hash identifier: CbTOwAg9UzNbOO3cwH9W5POV271hMLj4rly3u023LhE= Subject key identifier: CC:E1:1B:18:95:0B:96:E2:A3:B0:A3:FE:E9:20:7C:D0:A8:BE:CC:F3 Certificate issuer: /CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Certificate serial: 019B78A37BF448DE3E6392C9780EA6819C4B Authority key identifier: 5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/zOEbGJULluKjsKP-6SB80Ki-zPM.roa Signing time: Thu 01 Jan 2026 08:18:58 +0000 ROA not before: Thu 01 Jan 2026 08:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210644 IP address blocks: 80.85.241.0/24 maxlen: 24 2a0b:4140::/32 maxlen: 36 2a0b:4140:7028::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:7b:f4:48:de:3e:63:92:c9:78:0e:a6:81:9c:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Validity Not Before: Jan 1 08:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cce11b18950b96e2a3b0a3fee9207cd0a8beccf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:20:22:12:c9:0b:fb:46:e0:73:69:8f:db:52: 04:95:53:88:40:5c:ce:58:be:16:f6:20:b3:a9:73: ce:81:0b:a6:1f:d4:a8:0d:94:f3:91:34:32:69:53: d8:ff:63:3b:6b:c8:5f:5d:b8:19:f6:0c:74:79:45: 7b:d5:eb:18:e4:a2:69:57:e8:63:d3:9a:c2:d7:5d: fa:6d:4b:a8:f5:21:8c:86:e8:a4:29:57:c4:ce:f4: 75:b5:49:b9:93:33:28:cd:e1:61:bb:e4:9d:34:5b: ec:b6:f0:de:82:87:e0:19:b2:be:b3:95:92:28:47: 8c:79:30:a9:23:3c:28:00:3c:eb:4e:99:a2:ae:f7: 68:6c:f6:71:88:89:25:5c:81:17:28:b8:6e:a4:82: 9b:6b:24:79:9a:d3:92:48:04:09:6c:e4:87:78:9f: 65:22:ad:3b:12:12:e0:f9:dc:e6:68:b0:9e:7c:87: 7b:f2:d8:47:40:d7:70:05:d4:07:0b:b5:5a:a0:cc: 50:2e:dd:85:cb:73:20:22:7a:03:31:c3:c8:61:44: 92:21:3a:ff:a9:d8:a9:dd:4a:2d:f9:a1:3b:ec:df: f9:35:3e:b5:eb:57:67:a3:05:ab:83:2c:ed:69:78: 21:0a:b5:05:33:a9:22:f0:e2:6c:d4:12:5c:63:46: 6d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:E1:1B:18:95:0B:96:E2:A3:B0:A3:FE:E9:20:7C:D0:A8:BE:CC:F3 X509v3 Authority Key Identifier: keyid:5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/zOEbGJULluKjsKP-6SB80Ki-zPM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.85.241.0/24 IPv6: 2a0b:4140::/32 Signature Algorithm: sha256WithRSAEncryption 51:ac:4f:01:3d:31:4e:9b:c5:e1:1f:a7:61:7e:95:04:58:25: 64:c9:b1:d4:79:25:ac:97:40:5d:db:77:30:3e:99:9e:51:13: 34:09:3b:2f:68:f5:f7:57:6b:60:11:9f:4d:8a:63:b0:3b:5a: c3:a3:67:1d:3e:a4:c9:43:a7:7d:2f:b0:fe:26:94:28:68:03: 22:af:fa:9f:64:da:84:c8:48:1e:7f:28:88:8a:de:0c:15:46: cd:87:5c:24:b9:b4:41:f7:cb:bd:e7:d4:9d:94:47:f9:f2:a0: 23:7b:63:3a:38:52:f6:9c:1e:5a:c3:6e:b5:03:4f:8b:83:7c: b1:3d:8d:d9:7b:b8:6b:b1:d7:61:90:3f:86:ce:38:4b:44:ba: 81:f7:3d:2c:c1:fc:18:81:e4:58:21:db:55:9f:1d:c4:14:60: 4f:43:16:4a:b2:22:70:26:2c:fc:c3:18:be:2e:fc:88:32:20: 10:bc:9f:da:9b:c7:fb:5f:9e:8e:f6:86:61:8f:3c:01:d4:56: 92:fe:81:cc:dc:83:77:09:c1:38:c1:d0:9d:3f:f9:1a:ae:46: 73:be:ff:0c:38:d0:a3:c0:79:31:0c:63:61:00:1a:a0:e6:41: 22:3c:8f:c6:37:45:16:61:96:78:27:d7:6b:94:90:61:f5:58: 86:58:a8:5d -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4o3v0SN4+Y5LJeA6mgZxLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMGZmOGFhZjc0NTMxMTQxNDcwMjhkNTRhZTFjNjkzYThh MTQ3YmMwHhcNMjYwMTAxMDgxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjY2UxMWIxODk1MGI5NmUyYTNiMGEzZmVlOTIwN2NkMGE4YmVjY2YzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiAiEskL+0bgc2mP21IElVOIQFzO WL4W9iCzqXPOgQumH9SoDZTzkTQyaVPY/2M7a8hfXbgZ9gx0eUV71esY5KJpV+hj 05rC1136bUuo9SGMhuikKVfEzvR1tUm5kzMozeFhu+SdNFvstvDegofgGbK+s5WS KEeMeTCpIzwoADzrTpmirvdobPZxiIklXIEXKLhupIKbayR5mtOSSAQJbOSHeJ9l Iq07EhLg+dzmaLCefId78thHQNdwBdQHC7VaoMxQLt2Fy3MgInoDMcPIYUSSITr/ qdip3Uot+aE77N/5NT6161dnowWrgyztaXghCrUFM6ki8OJs1BJcY0ZtTwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFMzhGxiVC5bio7Cj/ukgfNCovszzMB8GA1UdIwQY MBaAFF4P+Kr3RTEUFHAo1UrhxpOooUe8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEt ZDg3MjEzNzU2NDRhLzEvek9FYkdKVUxsdUtqc0tQLTZTQjgwS2ktelBNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEtZDg3MjEzNzU2NDRh LzEvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAUFXxMA0E AgACMAcDBQAqC0FAMA0GCSqGSIb3DQEBCwUAA4IBAQBRrE8BPTFOm8XhH6dhfpUE WCVkybHUeSWsl0Bd23cwPpmeURM0CTsvaPX3V2tgEZ9NimOwO1rDo2cdPqTJQ6d9 L7D+JpQoaAMir/qfZNqEyEgefyiIit4MFUbNh1wkubRB98u959SdlEf58qAje2M6 OFL2nB5aw261A0+Lg3yxPY3Ze7hrsddhkD+GzjhLRLqB9z0swfwYgeRYIdtVnx3E FGBPQxZKsiJwJiz8wxi+LvyIMiAQvJ/am8f7X56O9oZhjzwB1FaS/oHM3IN3CcE4 wdCdP/karkZzvv8MONCjwHkxDGNhABqg5kEiPI/GN0UWYZZ4J9drlJBh9ViGWKhd -----END CERTIFICATE-----Generated at Tue Jan 20 06:05:04 2026 by rpki-client