This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/sM3-PVw7H2S2QCTsd9xAReC1Zz4.roa File: sM3-PVw7H2S2QCTsd9xAReC1Zz4.roa (raw, json) Hash identifier: HErOiReW/QS9bORmD9/1nLbG9V5jF7k+5+v0K8DY6i0= Subject key identifier: B0:CD:FE:3D:5C:3B:1F:64:B6:40:24:EC:77:DC:40:45:E0:B5:67:3E Certificate issuer: /CN=df91845e65e4f0394f1e6c3ff9e7732f6aa46fdc Certificate serial: 019B7DCA1F9B7D7B95D4D1B81DA1B66D298A Authority key identifier: DF:91:84:5E:65:E4:F0:39:4F:1E:6C:3F:F9:E7:73:2F:6A:A4:6F:DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35GEXmXk8DlPHmw_-edzL2qkb9w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/sM3-PVw7H2S2QCTsd9xAReC1Zz4.roa Signing time: Fri 02 Jan 2026 08:19:16 +0000 ROA not before: Fri 02 Jan 2026 08:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203751 IP address blocks: 80.80.82.0/23 maxlen: 24 185.124.140.0/22 maxlen: 24 185.124.141.0/24 maxlen: 24 185.132.184.0/23 maxlen: 24 2a06:ab80::/29 maxlen: 56 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.mft rsync://rpki.ripe.net/repository/DEFAULT/35GEXmXk8DlPHmw_-edzL2qkb9w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:1f:9b:7d:7b:95:d4:d1:b8:1d:a1:b6:6d:29:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df91845e65e4f0394f1e6c3ff9e7732f6aa46fdc Validity Not Before: Jan 2 08:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b0cdfe3d5c3b1f64b64024ec77dc4045e0b5673e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:25:16:c1:c5:43:2f:5a:94:cb:2a:26:7a:93: 54:85:63:a3:f9:df:16:18:46:6d:93:8f:e7:28:ba: b4:65:a0:f4:af:f5:f4:6c:21:b5:52:dd:5e:0c:7a: c8:cd:5a:b4:a9:7e:25:14:9c:02:6c:90:0d:b1:79: 26:24:2a:8e:87:0a:86:d5:10:2f:67:89:0a:f6:c4: a6:4c:cb:4b:92:8c:5d:ef:68:05:3f:d6:81:d1:d0: bf:b1:85:fb:21:bc:92:79:51:2f:70:6b:13:ec:af: 4c:ba:7b:86:a5:02:ed:96:e5:d0:a9:97:49:db:6c: 8a:09:4a:36:b3:f3:9e:c8:c9:fd:07:1f:b8:22:e8: f6:7f:c4:e9:48:30:25:37:37:ea:9f:22:7a:4d:9c: cf:1a:b4:be:1f:69:40:c6:84:44:9e:e8:7c:0c:57: cd:f6:35:49:e7:a0:eb:05:74:65:44:46:a0:34:b6: 49:29:84:1c:54:11:61:1f:b8:02:ad:c5:df:bd:72: cb:7e:ba:c0:c3:12:8d:1a:a3:94:da:04:e4:6c:ae: 62:6e:9a:3e:67:93:c2:15:7a:22:40:bf:8a:69:37: 04:82:4b:b7:f8:e5:c4:2c:af:77:9b:3b:62:f6:fd: c7:66:dc:f1:63:94:ff:8d:70:f0:d6:c3:e9:81:e9: 7b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:CD:FE:3D:5C:3B:1F:64:B6:40:24:EC:77:DC:40:45:E0:B5:67:3E X509v3 Authority Key Identifier: keyid:DF:91:84:5E:65:E4:F0:39:4F:1E:6C:3F:F9:E7:73:2F:6A:A4:6F:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35GEXmXk8DlPHmw_-edzL2qkb9w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/sM3-PVw7H2S2QCTsd9xAReC1Zz4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.80.82.0/23 185.124.140.0/22 185.132.184.0/23 IPv6: 2a06:ab80::/29 Signature Algorithm: sha256WithRSAEncryption 33:1d:5b:c6:67:3d:c3:40:86:cf:92:32:b8:fd:43:7d:a9:45: cc:65:7f:dc:09:33:ee:fa:3f:78:26:58:15:0a:fa:2b:82:b1: ee:16:97:e7:a9:44:a7:72:fb:0f:05:54:6e:17:53:cf:b5:bf: 8c:99:f2:65:34:da:11:b3:cd:28:3a:90:df:61:c3:6d:31:09: eb:09:69:d6:17:5f:5d:f1:08:89:37:e7:30:e3:0c:5c:d7:e2: f7:79:03:20:0d:81:e6:36:8a:5e:6b:2c:3d:37:bb:52:bb:b2: f3:20:e5:ee:4f:bc:62:7e:95:71:57:b8:9e:23:bd:ac:ad:83: 8d:42:76:bf:d0:bd:16:bd:f5:37:0b:bc:66:a6:73:9e:01:ee: 70:ea:c6:52:91:ae:82:7f:92:1d:5a:57:55:6e:73:7d:65:0b: 5c:46:00:9e:da:b0:82:fb:92:7e:b3:65:07:83:db:7c:f7:bb: ba:75:02:9e:0d:96:1f:47:27:b9:56:4a:60:a5:29:ff:d2:43: 8b:83:85:37:4f:7c:42:9c:d5:66:18:da:fc:65:ea:37:10:46: a5:31:04:21:1d:2e:93:47:32:7a:ef:8e:64:ed:db:28:52:6d: f4:2d:43:27:2b:24:32:74:22:a8:a0:b8:7a:50:20:77:1b:ed: c7:fa:c7:c5 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt9yh+bfXuV1NG4HaG2bSmKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmOTE4NDVlNjVlNGYwMzk0ZjFlNmMzZmY5ZTc3MzJmNmFh NDZmZGMwHhcNMjYwMTAyMDgxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMGNkZmUzZDVjM2IxZjY0YjY0MDI0ZWM3N2RjNDA0NWUwYjU2NzNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSUWwcVDL1qUyyomepNUhWOj+d8W GEZtk4/nKLq0ZaD0r/X0bCG1Ut1eDHrIzVq0qX4lFJwCbJANsXkmJCqOhwqG1RAv Z4kK9sSmTMtLkoxd72gFP9aB0dC/sYX7IbySeVEvcGsT7K9MunuGpQLtluXQqZdJ 22yKCUo2s/OeyMn9Bx+4Iuj2f8TpSDAlNzfqnyJ6TZzPGrS+H2lAxoREnuh8DFfN 9jVJ56DrBXRlREagNLZJKYQcVBFhH7gCrcXfvXLLfrrAwxKNGqOU2gTkbK5ibpo+ Z5PCFXoiQL+KaTcEgku3+OXELK93mzti9v3HZtzxY5T/jXDw1sPpgel74QIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFLDN/j1cOx9ktkAk7HfcQEXgtWc+MB8GA1UdIwQY MBaAFN+RhF5l5PA5Tx5sP/nncy9qpG/cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzVHRVhtWGs4RGxQSG13Xy1lZHpMMnFrYjl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8wZThlYjktZjY1Ni00Y2NmLWE4MTQt Zjg5YWI5ZjEyODZjLzEvc00zLVBWdzdIMlMyUUNUc2Q5eEFSZUMxWno0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi8wZThlYjktZjY1Ni00Y2NmLWE4MTQtZjg5YWI5ZjEyODZj LzEvMzVHRVhtWGs4RGxQSG13Xy1lZHpMMnFrYjl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQBUFBSAwQC uXyMAwQBuYS4MA0EAgACMAcDBQMqBquAMA0GCSqGSIb3DQEBCwUAA4IBAQAzHVvG Zz3DQIbPkjK4/UN9qUXMZX/cCTPu+j94JlgVCvorgrHuFpfnqUSncvsPBVRuF1PP tb+MmfJlNNoRs80oOpDfYcNtMQnrCWnWF19d8QiJN+cw4wxc1+L3eQMgDYHmNope ayw9N7tSu7LzIOXuT7xifpVxV7ieI72srYONQna/0L0WvfU3C7xmpnOeAe5w6sZS ka6Cf5IdWldVbnN9ZQtcRgCe2rCC+5J+s2UHg9t897u6dQKeDZYfRye5VkpgpSn/ 0kOLg4U3T3xCnNVmGNr8Zeo3EEalMQQhHS6TRzJ6745k7dsoUm30LUMnKyQydCKo oLh6UCB3G+3H+sfF -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:06 2026 by rpki-client