This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/8lsaObGBgJUeg8r86nteoKBn_oA.roa File: 8lsaObGBgJUeg8r86nteoKBn_oA.roa (raw, json) Hash identifier: TNWMT15GsrSSF3wEacdQ1yVse+6A+RfMdj4BIxDbhXQ= Subject key identifier: F2:5B:1A:39:B1:81:80:95:1E:83:CA:FC:EA:7B:5E:A0:A0:67:FE:80 Certificate issuer: /CN=325e98947fc948d5b62dfb85a7cb3a72a0672656 Certificate serial: 019B7D5CE2841997413DD9FE4D3EF7E1522A Authority key identifier: 32:5E:98:94:7F:C9:48:D5:B6:2D:FB:85:A7:CB:3A:72:A0:67:26:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/8lsaObGBgJUeg8r86nteoKBn_oA.roa Signing time: Fri 02 Jan 2026 06:19:57 +0000 ROA not before: Fri 02 Jan 2026 06:19:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24978 IP address blocks: 80.79.224.0/20 maxlen: 20 80.79.232.0/22 maxlen: 22 185.133.104.0/22 maxlen: 22 2a03:89c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.crl rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.mft rsync://rpki.ripe.net/repository/DEFAULT/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:e2:84:19:97:41:3d:d9:fe:4d:3e:f7:e1:52:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=325e98947fc948d5b62dfb85a7cb3a72a0672656 Validity Not Before: Jan 2 06:19:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f25b1a39b18180951e83cafcea7b5ea0a067fe80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:0e:ed:a6:13:bb:68:bc:9b:e7:9d:70:ab:d7: 52:4e:0f:87:f7:63:b0:9f:7d:74:17:40:3d:fa:d7: ba:4b:9e:52:ef:20:7d:46:72:2e:77:d8:81:8a:4f: ca:1f:98:54:dc:87:c7:78:30:20:a9:00:e5:c7:0e: 89:ed:5f:0c:cb:26:7a:5b:9b:f1:55:cd:8e:f5:bb: ff:98:06:81:3e:ef:a7:1b:fb:f5:93:6d:d0:24:92: 86:28:0f:66:7d:c3:90:c4:24:c1:90:f9:6b:b1:da: 79:af:0c:82:5f:ca:53:40:cf:cc:be:8e:8e:10:d4: d0:43:e6:cb:6e:f7:6f:b6:2c:cb:6d:54:48:05:ea: ff:28:94:07:4d:5b:f0:99:12:8a:21:64:a2:2f:0d: 5b:d1:db:3f:ce:6d:76:96:4f:8e:d7:c9:e7:8d:61: 5f:40:ac:1c:87:cd:94:76:bb:31:81:49:37:8e:54: 5f:ae:d8:07:d4:ee:ca:0c:2a:86:bb:a0:ef:36:e7: 41:23:a3:5f:58:6a:22:b9:d4:09:26:8a:11:8f:33: 57:25:e3:d9:97:c0:c4:e7:7c:9d:3b:e3:6c:0c:27: 4d:81:da:6e:9c:f9:d7:79:38:5f:4e:0c:c8:ce:ad: d6:3e:82:1f:6f:f8:d6:a1:b0:7b:4b:cf:25:1e:5c: 45:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:5B:1A:39:B1:81:80:95:1E:83:CA:FC:EA:7B:5E:A0:A0:67:FE:80 X509v3 Authority Key Identifier: keyid:32:5E:98:94:7F:C9:48:D5:B6:2D:FB:85:A7:CB:3A:72:A0:67:26:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/8lsaObGBgJUeg8r86nteoKBn_oA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.79.224.0/20 185.133.104.0/22 IPv6: 2a03:89c0::/32 Signature Algorithm: sha256WithRSAEncryption 56:f2:1d:6f:0b:a0:63:38:f9:f3:b8:75:ea:2d:4f:67:13:73: 43:a2:3c:d5:e2:b1:06:bc:14:f5:1a:a3:d8:86:4f:2d:92:12: 13:3b:42:a4:58:9a:a8:76:7b:25:e1:03:66:a7:ec:29:bf:08: 6b:c4:5b:b7:75:f8:e6:ab:fb:48:6c:a4:39:95:08:96:a0:0c: 7b:32:69:08:7b:0c:c7:21:c0:db:3f:e6:30:dd:9e:ec:84:f7: 56:cd:e9:73:66:86:ed:70:88:5e:1c:9d:05:36:c2:20:fe:d5: f3:d2:8c:4d:db:db:fe:e9:0e:62:3c:15:f3:b7:2b:fd:52:21: b5:ee:ff:f0:75:b4:0a:2e:19:c6:88:4a:6a:b9:3d:b8:e7:c3: 86:61:3b:bf:35:3a:59:ab:36:10:5b:c4:e0:36:b4:80:9b:c0: 0f:70:ba:05:d0:26:23:a5:b5:9a:58:25:c5:1e:cd:54:bc:b2: a5:43:4b:cf:51:c8:02:75:76:18:77:88:0c:a5:e5:d7:2f:54: 81:d2:47:ba:27:06:fe:cb:46:dc:44:d1:53:74:8b:5f:4b:0f: 1a:3a:40:b6:49:ea:4a:a6:0a:87:0b:05:44:56:44:76:ea:8b: 48:16:16:29:5f:48:43:0c:21:46:68:31:a9:28:5c:7d:47:18: e3:33:28:2b -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt9XOKEGZdBPdn+TT734VIqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNWU5ODk0N2ZjOTQ4ZDViNjJkZmI4NWE3Y2IzYTcyYTA2 NzI2NTYwHhcNMjYwMTAyMDYxOTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjViMWEzOWIxODE4MDk1MWU4M2NhZmNlYTdiNWVhMGEwNjdmZTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1w7tphO7aLyb551wq9dSTg+H92Ow n310F0A9+te6S55S7yB9RnIud9iBik/KH5hU3IfHeDAgqQDlxw6J7V8MyyZ6W5vx Vc2O9bv/mAaBPu+nG/v1k23QJJKGKA9mfcOQxCTBkPlrsdp5rwyCX8pTQM/Mvo6O ENTQQ+bLbvdvtizLbVRIBer/KJQHTVvwmRKKIWSiLw1b0ds/zm12lk+O18nnjWFf QKwch82UdrsxgUk3jlRfrtgH1O7KDCqGu6DvNudBI6NfWGoiudQJJooRjzNXJePZ l8DE53ydO+NsDCdNgdpunPnXeThfTgzIzq3WPoIfb/jWobB7S88lHlxF/QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFPJbGjmxgYCVHoPK/Op7XqCgZ/6AMB8GA1UdIwQY MBaAFDJemJR/yUjVti37hafLOnKgZyZWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWw2WWxIX0pTTlcyTGZ1RnA4czZjcUJuSmxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9kNmY4YTktZDZjNy00ZDUyLTkxY2It NGNhZWM5N2Y3ZDkyLzEvOGxzYU9iR0JnSlVlZzhyODZudGVvS0JuX29BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9kNmY4YTktZDZjNy00ZDUyLTkxY2ItNGNhZWM5N2Y3ZDky LzEvTWw2WWxIX0pTTlcyTGZ1RnA4czZjcUJuSmxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEUE/gAwQC uYVoMA0EAgACMAcDBQAqA4nAMA0GCSqGSIb3DQEBCwUAA4IBAQBW8h1vC6BjOPnz uHXqLU9nE3NDojzV4rEGvBT1GqPYhk8tkhITO0KkWJqodnsl4QNmp+wpvwhrxFu3 dfjmq/tIbKQ5lQiWoAx7MmkIewzHIcDbP+Yw3Z7shPdWzelzZobtcIheHJ0FNsIg /tXz0oxN29v+6Q5iPBXztyv9UiG17v/wdbQKLhnGiEpquT2458OGYTu/NTpZqzYQ W8TgNrSAm8APcLoF0CYjpbWaWCXFHs1UvLKlQ0vPUcgCdXYYd4gMpeXXL1SB0ke6 Jwb+y0bcRNFTdItfSw8aOkC2SepKpgqHCwVEVkR26otIFhYpX0hDDCFGaDGpKFx9 RxjjMygr -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:37 2026 by rpki-client