This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/T1HaQCOa922ywanRdZuOyFcSnLM.roa File: T1HaQCOa922ywanRdZuOyFcSnLM.roa (raw, json) Hash identifier: 0qKkM2h/9bHDgIcIK/Uz+qlsAYQ0n2pteQdmrD0+CB0= Subject key identifier: 4F:51:DA:40:23:9A:F7:6D:B2:C1:A9:D1:75:9B:8E:C8:57:12:9C:B3 Certificate issuer: /CN=c3b4351e0a495c26efdc6e415f0bb189fbbd6edf Certificate serial: 019B797F1CF379DF9488625223B57800B2F0 Authority key identifier: C3:B4:35:1E:0A:49:5C:26:EF:DC:6E:41:5F:0B:B1:89:FB:BD:6E:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w7Q1HgpJXCbv3G5BXwuxifu9bt8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/T1HaQCOa922ywanRdZuOyFcSnLM.roa Signing time: Thu 01 Jan 2026 12:18:52 +0000 ROA not before: Thu 01 Jan 2026 12:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50910 IP address blocks: 80.85.209.0/24 maxlen: 24 80.85.210.0/23 maxlen: 23 80.85.212.0/22 maxlen: 22 80.85.212.0/24 maxlen: 24 80.85.213.0/24 maxlen: 24 80.85.214.0/23 maxlen: 23 80.85.216.0/21 maxlen: 21 80.85.216.0/22 maxlen: 22 80.85.219.0/24 maxlen: 24 80.85.220.0/23 maxlen: 23 80.85.222.0/24 maxlen: 24 80.85.223.0/24 maxlen: 24 109.232.152.0/21 maxlen: 21 109.232.152.0/22 maxlen: 22 109.232.152.0/24 maxlen: 24 109.232.153.0/24 maxlen: 24 109.232.154.0/24 maxlen: 24 109.232.155.0/24 maxlen: 24 109.232.156.0/23 maxlen: 23 109.232.158.0/24 maxlen: 24 109.232.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.crl rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.mft rsync://rpki.ripe.net/repository/DEFAULT/w7Q1HgpJXCbv3G5BXwuxifu9bt8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:1c:f3:79:df:94:88:62:52:23:b5:78:00:b2:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3b4351e0a495c26efdc6e415f0bb189fbbd6edf Validity Not Before: Jan 1 12:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4f51da40239af76db2c1a9d1759b8ec857129cb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f2:8a:39:b5:6b:79:6e:44:a8:74:83:ae:aa: db:3b:c1:c1:ff:bb:83:34:f6:39:6d:a0:10:8d:81: 23:5d:28:ff:9c:6a:67:96:30:bc:17:27:8d:20:6b: e6:b3:ac:e4:6d:e3:e4:ff:1d:ff:8c:c9:11:28:1d: bd:c0:ba:f5:51:ca:9e:4e:26:6e:47:85:a2:be:bf: 65:28:55:1e:58:ea:4a:2a:e4:7e:83:c9:00:50:fc: cc:8b:75:28:c3:d4:3f:f4:ad:87:76:e8:d3:49:27: 58:e5:98:c0:30:96:16:2a:13:31:1d:8a:eb:2b:90: fc:72:9d:94:db:84:91:f5:b5:31:20:7a:79:e4:04: ab:f6:cf:e7:f2:df:9c:02:99:9e:1b:9a:b5:90:b6: 69:46:08:d8:b4:49:6d:4b:b1:23:04:cc:45:b6:d4: 8c:4d:a4:ac:65:66:ee:1e:00:6b:7b:46:ec:e9:d9: 72:06:4c:10:66:47:f8:ec:a4:1a:68:9d:8c:9a:4c: 58:90:56:5e:a1:b6:b1:34:b5:44:f1:a9:59:50:cc: 4d:ce:d3:2d:66:81:ce:96:43:e5:cc:9e:7d:8f:95: 86:ad:43:37:d9:9d:19:46:6d:84:e9:65:45:2d:97: 1b:7f:d0:67:e1:34:80:b9:22:db:59:d7:dd:ac:54: 76:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:51:DA:40:23:9A:F7:6D:B2:C1:A9:D1:75:9B:8E:C8:57:12:9C:B3 X509v3 Authority Key Identifier: keyid:C3:B4:35:1E:0A:49:5C:26:EF:DC:6E:41:5F:0B:B1:89:FB:BD:6E:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7Q1HgpJXCbv3G5BXwuxifu9bt8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/T1HaQCOa922ywanRdZuOyFcSnLM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.85.209.0-80.85.223.255 109.232.152.0/21 Signature Algorithm: sha256WithRSAEncryption 4c:9c:6d:34:4d:ac:dc:56:a3:b5:fd:a4:38:e8:ec:1a:d9:55: 6c:4e:b6:db:8a:9f:53:e1:b7:7d:b6:6e:13:a7:f2:52:ef:4c: f4:06:44:15:08:88:94:1e:e3:84:6f:2b:a8:95:99:c6:87:9c: 95:e6:4e:52:78:62:de:84:ae:c6:29:c5:b9:bf:5e:13:b5:23: 55:df:c2:3a:d1:e4:e9:96:a4:bb:8b:79:9a:8a:08:e9:aa:ad: fa:0d:9c:84:7f:06:b2:2b:46:b0:bf:82:30:ee:2e:71:90:69: 6a:47:db:21:bf:a6:6a:29:12:b9:e4:bd:75:f3:67:65:e0:86: 52:c5:3d:ad:e5:6c:57:08:71:17:55:de:3a:a6:81:b4:42:10: bf:17:b3:83:9e:11:cb:ee:60:d3:cf:cd:da:11:61:9e:7a:0c: 9e:04:35:32:81:64:a5:a1:71:9b:2d:ae:ff:e5:ab:f9:9c:6c: 03:45:04:4a:3d:07:41:99:8d:99:9d:03:2c:2e:53:69:9e:88: 1f:e5:1f:41:c7:ee:69:90:66:b0:3c:95:b1:60:0d:47:58:14: 00:16:41:53:f8:7c:2b:84:ce:89:70:87:dc:3e:42:40:95:a1: b2:53:8c:15:83:a8:67:d0:5d:44:1f:af:a3:9f:c3:16:72:68: 4d:88:81:d5 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt5fxzzed+UiGJSI7V4ALLwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzYjQzNTFlMGE0OTVjMjZlZmRjNmU0MTVmMGJiMTg5ZmJi ZDZlZGYwHhcNMjYwMTAxMTIxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZjUxZGE0MDIzOWFmNzZkYjJjMWE5ZDE3NTliOGVjODU3MTI5Y2IzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfKKObVreW5EqHSDrqrbO8HB/7uD NPY5baAQjYEjXSj/nGpnljC8FyeNIGvms6zkbePk/x3/jMkRKB29wLr1UcqeTiZu R4Wivr9lKFUeWOpKKuR+g8kAUPzMi3Uow9Q/9K2HdujTSSdY5ZjAMJYWKhMxHYrr K5D8cp2U24SR9bUxIHp55ASr9s/n8t+cApmeG5q1kLZpRgjYtEltS7EjBMxFttSM TaSsZWbuHgBre0bs6dlyBkwQZkf47KQaaJ2MmkxYkFZeobaxNLVE8alZUMxNztMt ZoHOlkPlzJ59j5WGrUM32Z0ZRm2E6WVFLZcbf9Bn4TSAuSLbWdfdrFR2QwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFE9R2kAjmvdtssGp0XWbjshXEpyzMB8GA1UdIwQY MBaAFMO0NR4KSVwm79xuQV8LsYn7vW7fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzdRMUhncEpYQ2J2M0c1Qlh3dXhpZnU5YnQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8zN2UzNjMtODRkMS00NzBlLTk2YTIt MGVmMWNhYzc0MThkLzEvVDFIYVFDT2E5MjJ5d2FuUmRadU95RmNTbkxNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8zN2UzNjMtODRkMS00NzBlLTk2YTItMGVmMWNhYzc0MThk LzEvdzdRMUhncEpYQ2J2M0c1Qlh3dXhpZnU5YnQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBABQVdED BAVQVcADBANt6JgwDQYJKoZIhvcNAQELBQADggEBAEycbTRNrNxWo7X9pDjo7BrZ VWxOttuKn1Pht322bhOn8lLvTPQGRBUIiJQe44RvK6iVmcaHnJXmTlJ4Yt6ErsYp xbm/XhO1I1XfwjrR5OmWpLuLeZqKCOmqrfoNnIR/BrIrRrC/gjDuLnGQaWpH2yG/ pmopErnkvXXzZ2XghlLFPa3lbFcIcRdV3jqmgbRCEL8Xs4OeEcvuYNPPzdoRYZ56 DJ4ENTKBZKWhcZstrv/lq/mcbANFBEo9B0GZjZmdAywuU2meiB/lH0HH7mmQZrA8 lbFgDUdYFAAWQVP4fCuEzolwh9w+QkCVobJTjBWDqGfQXUQfr6OfwxZyaE2IgdU= -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:31 2026 by rpki-client