This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/iWdn0SfXIARXAoGavF-tJqA__v8.roa
File: iWdn0SfXIARXAoGavF-tJqA__v8.roa (raw, json)
Hash identifier: L7H4nDBc7qcTPVHc0qlRD2IQzpDawAZ7Ei6t4itV5to=
Subject key identifier: 89:67:67:D1:27:D7:20:04:57:02:81:9A:BC:5F:AD:26:A0:3F:FE:FF
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 019B7F13FD92C95AA139D374AF7C23F872C7
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/iWdn0SfXIARXAoGavF-tJqA__v8.roa
Signing time: Fri 02 Jan 2026 14:19:35 +0000
ROA not before: Fri 02 Jan 2026 14:19:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60944
IP address blocks: 80.90.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Feb 2026 23:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:13:fd:92:c9:5a:a1:39:d3:74:af:7c:23:f8:72:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 2 14:19:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=896767d127d720045702819abc5fad26a03ffeff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d5:d5:ab:fe:bf:f3:75:fd:4f:08:3b:2c:d5:
c2:42:3b:51:49:52:0b:52:ab:0c:ee:2b:ef:37:b8:
18:7b:fd:fc:76:49:f3:ee:1d:10:60:3d:b4:2d:a2:
4b:0f:38:d7:11:1f:3e:2b:1e:f4:e8:32:9b:a1:f2:
fb:a6:9c:21:6a:22:b2:13:42:66:de:0b:6a:00:a1:
fd:2b:b7:50:3d:9a:ff:d9:2e:26:8b:23:b0:30:82:
01:cd:3c:03:7a:31:29:54:20:ed:6a:77:68:25:db:
c1:87:eb:d8:57:6d:77:89:53:6e:40:68:76:a7:d7:
2b:2a:9b:c7:51:05:81:c2:75:c4:45:c7:2f:40:ad:
50:d1:c4:85:e2:8f:e3:49:df:58:9e:d0:06:2b:35:
bc:79:b5:65:98:54:ab:98:e3:5d:24:d8:3e:01:a8:
3d:af:93:04:a3:1f:36:b9:f5:52:c6:72:78:b2:d0:
79:15:bf:3c:a3:37:ab:66:ff:74:54:3b:80:8a:92:
79:1f:bf:97:82:85:b3:a6:84:8a:fc:e3:f3:b6:ec:
86:c6:df:3c:82:30:a0:ef:b8:17:0b:18:18:91:df:
1a:c9:64:d0:2b:89:40:47:48:77:03:a4:99:38:3e:
dc:ff:7d:cd:a2:32:4d:50:e0:56:2b:d0:11:02:a1:
a7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:67:67:D1:27:D7:20:04:57:02:81:9A:BC:5F:AD:26:A0:3F:FE:FF
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/iWdn0SfXIARXAoGavF-tJqA__v8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.90.243.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:c0:58:df:96:f6:70:a8:3b:32:fb:d0:cc:e8:cf:64:3c:07:
e4:14:c5:93:dd:03:4f:24:4b:cf:3c:1c:78:ab:fe:bf:75:ef:
7d:c2:c5:8d:cc:cc:ec:f9:6f:5f:ef:58:81:e4:e0:04:00:47:
26:cd:21:61:1f:2f:d7:46:22:9c:56:e6:2c:34:7d:da:92:ff:
02:fe:ce:f1:01:20:2f:70:60:03:2f:b0:0e:2f:25:f5:d0:61:
a2:9a:f1:74:26:58:2b:b0:5d:53:1b:2c:48:ca:2d:80:06:44:
4b:0c:17:2a:72:49:fe:b3:8b:19:7b:2f:4b:67:fe:1e:5b:d2:
89:2b:b8:fc:a3:62:4a:a2:a1:da:66:63:f2:d8:03:0f:e0:ea:
bf:3b:94:65:3d:9b:25:c1:03:bf:14:ca:87:44:ba:55:c2:cd:
a0:d7:9d:10:b5:36:a4:45:7b:be:e7:24:a7:5d:66:36:d1:32:
eb:51:10:6e:ab:f9:f9:06:31:52:db:b7:c4:e5:36:13:30:54:
b0:85:16:ee:6d:9a:fc:2d:fb:f0:79:13:4f:d7:15:39:df:02:
9f:51:60:9d:c2:cb:12:1e:58:ba:25:8b:3f:48:5d:0e:aa:73:
12:47:c3:36:42:39:4c:ef:3a:3d:5a:0f:09:d9:94:f2:5f:b9:
a3:30:d4:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 5 05:55:58 2026 by rpki-client