This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/81Tn4UOT-STQR0S2LKi1Fkeb39A.roa File: 81Tn4UOT-STQR0S2LKi1Fkeb39A.roa (raw, json) Hash identifier: H9vhMh1yOq8AyMCdWdyT5N1VPH5W7KOnfH94i52sBpM= Subject key identifier: F3:54:E7:E1:43:93:F9:24:D0:47:44:B6:2C:A8:B5:16:47:9B:DF:D0 Certificate issuer: /CN=93c244be6b3affb6d4e547f2e1e3c5eac1b26ab2 Certificate serial: 019B7EA520847214D06D85604CAACB3F8682 Authority key identifier: 93:C2:44:BE:6B:3A:FF:B6:D4:E5:47:F2:E1:E3:C5:EA:C1:B2:6A:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8JEvms6_7bU5Ufy4ePF6sGyarI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/81Tn4UOT-STQR0S2LKi1Fkeb39A.roa Signing time: Fri 02 Jan 2026 12:18:29 +0000 ROA not before: Fri 02 Jan 2026 12:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24585 IP address blocks: 80.255.96.0/20 maxlen: 20 80.255.96.0/22 maxlen: 22 2a0a:d000::/29 maxlen: 29 2a0a:d000::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.crl rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.mft rsync://rpki.ripe.net/repository/DEFAULT/k8JEvms6_7bU5Ufy4ePF6sGyarI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 14:41:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:20:84:72:14:d0:6d:85:60:4c:aa:cb:3f:86:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93c244be6b3affb6d4e547f2e1e3c5eac1b26ab2 Validity Not Before: Jan 2 12:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f354e7e14393f924d04744b62ca8b516479bdfd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0a:5c:61:9e:12:51:9a:f2:82:45:f0:c9:f3: 44:3b:01:23:7a:21:69:fa:37:bd:17:ea:74:8f:6e: 86:eb:37:86:9d:7c:2c:e0:05:6f:fb:53:98:8e:26: 78:bf:d1:9a:f0:80:70:fd:fd:c9:ea:65:88:e5:21: a7:86:d9:92:fb:a1:2e:8c:98:c4:3d:bd:58:5c:b3: d9:af:b2:59:f5:d6:e4:00:ef:c2:4d:db:7e:ac:bc: 80:c6:40:85:23:90:4a:f7:5a:55:dc:8c:78:69:bc: 1b:1d:ff:c4:17:67:1c:de:75:ea:9f:68:ae:4d:f2: 4c:db:c7:3e:53:c1:80:d3:8e:63:29:95:fb:ed:6d: 4e:77:8c:48:1a:03:6f:b1:16:c8:d3:17:c3:73:e9: 26:95:5d:d0:97:19:91:ed:8a:ab:8d:30:20:48:fe: 68:7e:c6:2c:25:72:0b:dc:80:d9:60:e7:59:ff:b7: e1:85:13:ad:b5:1c:72:57:ab:1b:88:f6:da:ad:0d: 8c:1c:32:80:51:11:a2:d9:bc:7f:b5:4f:3f:03:ba: cf:dd:36:92:1c:00:65:60:f7:31:48:21:cb:63:35: 8f:5c:e5:26:cd:6d:7b:d7:fe:e8:d2:92:d9:68:59: 75:67:87:83:76:59:15:16:64:0d:f2:d5:02:68:a7: 20:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:54:E7:E1:43:93:F9:24:D0:47:44:B6:2C:A8:B5:16:47:9B:DF:D0 X509v3 Authority Key Identifier: keyid:93:C2:44:BE:6B:3A:FF:B6:D4:E5:47:F2:E1:E3:C5:EA:C1:B2:6A:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8JEvms6_7bU5Ufy4ePF6sGyarI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/81Tn4UOT-STQR0S2LKi1Fkeb39A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.255.96.0/20 IPv6: 2a0a:d000::/29 Signature Algorithm: sha256WithRSAEncryption 63:9e:03:a4:bd:04:46:e8:39:fb:8c:b4:de:17:a7:7b:2f:1a: 8a:d2:5b:b0:b8:58:6f:5a:e0:ce:8a:92:c8:e7:45:eb:f2:a0: b9:cb:c7:de:d9:46:cd:3e:5a:8e:ad:15:b8:4a:97:b1:cf:9e: 18:95:8d:e8:40:d9:ab:22:fa:1c:cf:7d:1a:c6:f4:1e:bd:92: f6:97:ac:10:f8:96:a3:7a:c1:8f:b4:f9:42:3e:3a:cb:be:d2: 55:b0:74:81:81:98:0b:7a:bd:ac:28:90:8f:5a:7e:25:fd:9e: cd:9c:f1:ab:f4:8e:ab:5b:d7:5c:59:ae:04:46:42:1a:44:f7: a1:83:29:40:75:07:d3:0d:bf:83:e8:f8:af:9e:d1:14:54:e9: c4:7e:7d:a7:fc:d8:7d:ff:1b:f4:d3:16:ff:14:52:d5:c8:f3: 5b:30:ab:57:04:a8:93:54:e0:5f:2e:c0:0d:ce:1a:02:07:81: e7:19:bf:db:78:97:b2:20:ea:2a:4e:d8:fd:4b:e4:37:68:f6: 42:ec:ec:8b:db:59:ca:59:89:b1:d6:d7:35:55:b7:11:29:db: b8:09:b0:12:ae:92:09:2d:0c:47:90:af:79:f4:02:a3:2b:f9: 42:da:05:ca:36:83:2a:b4:4b:a9:fb:b7:17:3e:fd:60:01:d9: 14:c8:53:ec -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+pSCEchTQbYVgTKrLP4aCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzYzI0NGJlNmIzYWZmYjZkNGU1NDdmMmUxZTNjNWVhYzFi MjZhYjIwHhcNMjYwMTAyMTIxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzU0ZTdlMTQzOTNmOTI0ZDA0NzQ0YjYyY2E4YjUxNjQ3OWJkZmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsApcYZ4SUZrygkXwyfNEOwEjeiFp +je9F+p0j26G6zeGnXws4AVv+1OYjiZ4v9Ga8IBw/f3J6mWI5SGnhtmS+6EujJjE Pb1YXLPZr7JZ9dbkAO/CTdt+rLyAxkCFI5BK91pV3Ix4abwbHf/EF2cc3nXqn2iu TfJM28c+U8GA045jKZX77W1Od4xIGgNvsRbI0xfDc+kmlV3QlxmR7YqrjTAgSP5o fsYsJXIL3IDZYOdZ/7fhhROttRxyV6sbiPbarQ2MHDKAURGi2bx/tU8/A7rP3TaS HABlYPcxSCHLYzWPXOUmzW171/7o0pLZaFl1Z4eDdlkVFmQN8tUCaKcgsQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFPNU5+FDk/kk0EdEtiyotRZHm9/QMB8GA1UdIwQY MBaAFJPCRL5rOv+21OVH8uHjxerBsmqyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazhKRXZtczZfN2JVNVVmeTRlUEY2c0d5YXJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS81MDFlOGYtYzdlMS00YWE0LTg1ODMt NjZkNzRlNzNmMjU0LzEvODFUbjRVT1QtU1RRUjBTMkxLaTFGa2ViMzlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS81MDFlOGYtYzdlMS00YWE0LTg1ODMtNjZkNzRlNzNmMjU0 LzEvazhKRXZtczZfN2JVNVVmeTRlUEY2c0d5YXJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQEUP9gMA0E AgACMAcDBQMqCtAAMA0GCSqGSIb3DQEBCwUAA4IBAQBjngOkvQRG6Dn7jLTeF6d7 LxqK0luwuFhvWuDOipLI50Xr8qC5y8fe2UbNPlqOrRW4Spexz54YlY3oQNmrIvoc z30axvQevZL2l6wQ+JajesGPtPlCPjrLvtJVsHSBgZgLer2sKJCPWn4l/Z7NnPGr 9I6rW9dcWa4ERkIaRPehgylAdQfTDb+D6PivntEUVOnEfn2n/Nh9/xv00xb/FFLV yPNbMKtXBKiTVOBfLsANzhoCB4HnGb/beJeyIOoqTtj9S+Q3aPZC7OyL21nKWYmx 1tc1VbcRKdu4CbASrpIJLQxHkK959AKjK/lC2gXKNoMqtEup+7cXPv1gAdkUyFPs -----END CERTIFICATE-----Generated at Sun Jan 18 19:22:21 2026 by rpki-client