This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/X3OoEc4wVuVwfk_vi-BedRHiVe8.roa File: X3OoEc4wVuVwfk_vi-BedRHiVe8.roa (raw, json) Hash identifier: IkEEbLoP+8jmiN0OcnpPt7LEqVzNMYcyeFyPjMqY22I= Subject key identifier: 5F:73:A8:11:CE:30:56:E5:70:7E:4F:EF:8B:E0:5E:75:11:E2:55:EF Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f Certificate serial: 019B7F13F0F477FFE0A8932D25DC5ACE128D Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/X3OoEc4wVuVwfk_vi-BedRHiVe8.roa Signing time: Fri 02 Jan 2026 14:19:31 +0000 ROA not before: Fri 02 Jan 2026 14:19:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42901 IP address blocks: 80.90.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 23:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:f0:f4:77:ff:e0:a8:93:2d:25:dc:5a:ce:12:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f Validity Not Before: Jan 2 14:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f73a811ce3056e5707e4fef8be05e7511e255ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7b:c0:d3:56:93:61:68:a0:6b:2c:d2:75:64: bf:de:95:2d:5c:93:be:19:b8:c5:08:ac:41:f4:d2: 52:af:30:a5:5e:ca:2d:db:a2:37:a4:94:4c:cd:37: 13:6a:3c:10:1c:60:01:b2:54:8e:83:cf:67:38:f1: be:bc:78:a4:15:b7:b7:35:71:13:6b:48:a1:9f:df: 0b:7d:51:83:88:c6:d6:04:8e:b2:a2:3c:0f:e4:95: ee:09:29:58:fb:28:bc:95:97:32:11:ff:4e:51:6f: 79:a6:e2:96:d8:46:f4:5d:89:d8:f9:64:8b:84:7d: 7b:d9:80:94:34:7e:7a:2c:6b:8d:dd:02:58:17:a0: f7:0f:0e:b6:48:0c:4e:86:d5:b6:99:b4:8a:f7:3a: 55:e2:61:a4:b3:f3:1f:0d:29:ee:ae:28:62:f6:05: 48:52:a0:93:27:f3:58:a7:0a:94:f7:f0:f3:fe:7f: 66:57:82:28:18:f1:52:69:a5:72:49:62:bb:1a:3a: 3e:95:2d:5a:12:3f:0b:9e:29:05:a3:d8:81:15:aa: a6:3c:0a:87:f9:82:05:8d:08:45:1e:3d:40:b8:c6: 54:ce:42:45:97:7d:f0:4b:0e:e1:7f:75:3f:a2:7e: 08:7f:62:21:09:de:c5:ff:48:bd:f3:bf:41:57:6f: 93:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:73:A8:11:CE:30:56:E5:70:7E:4F:EF:8B:E0:5E:75:11:E2:55:EF X509v3 Authority Key Identifier: keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/X3OoEc4wVuVwfk_vi-BedRHiVe8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.90.241.0/24 Signature Algorithm: sha256WithRSAEncryption b7:5d:35:5d:8d:e8:a5:3c:59:15:d6:91:5c:f2:62:af:e7:e5: 2e:10:c6:00:53:0c:eb:6f:e4:04:df:78:f7:3d:e9:5c:c3:b8: 0c:09:ab:9b:4b:7b:4b:06:a5:0b:56:82:79:5b:33:0d:7e:0b: 0f:cb:59:0e:cd:c9:96:00:9f:99:c0:d3:1a:28:79:9d:d2:1f: da:b3:05:dc:5f:fe:66:62:7c:d3:f5:a0:5d:25:1a:7f:f9:fb: 93:78:42:96:b7:f8:d7:5f:56:16:43:f7:46:8e:c3:ed:b6:f9: f6:b3:40:43:0c:10:4b:d2:3f:5d:b4:7c:80:db:aa:e1:f5:6e: b3:9a:1b:d2:77:a7:24:48:80:dd:c9:31:48:2a:14:74:b5:6c: 75:66:b5:e7:cd:0d:e2:ad:20:98:a2:7e:df:6a:98:da:87:80: 00:ba:8e:ea:1a:7c:93:cb:64:c2:10:11:5d:f4:70:3a:46:d4: 40:df:78:f8:18:1f:fb:ad:d7:79:34:38:07:fa:8a:f0:9c:e7: 5a:93:3d:be:53:91:b2:9d:f8:9e:f0:52:19:b0:3b:65:35:6b: 82:e7:74:48:fd:1b:c3:29:95:0e:83:75:9c:f7:98:6f:12:f6: 31:e6:1f:e5:3e:75:a1:37:d5:07:10:19:5a:22:0e:ce:d5:17: 51:c1:b6:4c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/E/D0d//gqJMtJdxazhKNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MDJiOTVjZTYyMzlkNTI2YzM1YWU3YThlMmNlYjQ4YWVi ODJiNWYwHhcNMjYwMTAyMTQxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjczYTgxMWNlMzA1NmU1NzA3ZTRmZWY4YmUwNWU3NTExZTI1NWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHvA01aTYWigayzSdWS/3pUtXJO+ GbjFCKxB9NJSrzClXsot26I3pJRMzTcTajwQHGABslSOg89nOPG+vHikFbe3NXET a0ihn98LfVGDiMbWBI6yojwP5JXuCSlY+yi8lZcyEf9OUW95puKW2Eb0XYnY+WSL hH172YCUNH56LGuN3QJYF6D3Dw62SAxOhtW2mbSK9zpV4mGks/MfDSnurihi9gVI UqCTJ/NYpwqU9/Dz/n9mV4IoGPFSaaVySWK7Gjo+lS1aEj8LnikFo9iBFaqmPAqH +YIFjQhFHj1AuMZUzkJFl33wSw7hf3U/on4If2IhCd7F/0i9879BV2+TRQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF9zqBHOMFblcH5P74vgXnUR4lXvMB8GA1UdIwQY MBaAFAgCuVzmI51SbDWueo4s60iuuCtfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDIt Y2YwYWEzZWNhZDI4LzEvWDNPb0VjNHdWdVZ3ZmtfdmktQmVkUkhpVmU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDItY2YwYWEzZWNhZDI4 LzEvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUFrxMA0G CSqGSIb3DQEBCwUAA4IBAQC3XTVdjeilPFkV1pFc8mKv5+UuEMYAUwzrb+QE33j3 Pelcw7gMCaubS3tLBqULVoJ5WzMNfgsPy1kOzcmWAJ+ZwNMaKHmd0h/aswXcX/5m YnzT9aBdJRp/+fuTeEKWt/jXX1YWQ/dGjsPttvn2s0BDDBBL0j9dtHyA26rh9W6z mhvSd6ckSIDdyTFIKhR0tWx1ZrXnzQ3irSCYon7fapjah4AAuo7qGnyTy2TCEBFd 9HA6RtRA33j4GB/7rdd5NDgH+orwnOdakz2+U5Gynfie8FIZsDtlNWuC53RI/RvD KZUOg3Wc95hvEvYx5h/lPnWhN9UHEBlaIg7O1RdRwbZM -----END CERTIFICATE-----Generated at Thu Feb 5 05:57:40 2026 by rpki-client