This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/RbXFao0zNfSbtJ3sUZUKCiS9_Sc.roa File: RbXFao0zNfSbtJ3sUZUKCiS9_Sc.roa (raw, json) Hash identifier: H36onPAZgGkM8Gj/4vPHfKYw673MWHLo+rCT27hgkEo= Subject key identifier: 45:B5:C5:6A:8D:33:35:F4:9B:B4:9D:EC:51:95:0A:0A:24:BD:FD:27 Certificate issuer: /CN=c9265b8ba9e6190f2609787cd9d92efd48efbd9d Certificate serial: 019B77C737834EE6058F7CE447E70EE6627E Authority key identifier: C9:26:5B:8B:A9:E6:19:0F:26:09:78:7C:D9:D9:2E:FD:48:EF:BD:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ySZbi6nmGQ8mCXh82dku_UjvvZ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/RbXFao0zNfSbtJ3sUZUKCiS9_Sc.roa Signing time: Thu 01 Jan 2026 04:18:23 +0000 ROA not before: Thu 01 Jan 2026 04:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12933 IP address blocks: 193.41.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.crl rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.mft rsync://rpki.ripe.net/repository/DEFAULT/ySZbi6nmGQ8mCXh82dku_UjvvZ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:37:83:4e:e6:05:8f:7c:e4:47:e7:0e:e6:62:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9265b8ba9e6190f2609787cd9d92efd48efbd9d Validity Not Before: Jan 1 04:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=45b5c56a8d3335f49bb49dec51950a0a24bdfd27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:72:91:fa:7d:9c:ad:51:f9:1a:21:8d:3f:a3: 8c:ba:43:97:3b:bf:70:ac:b8:7e:35:b6:21:08:a5: b2:9d:9b:1d:51:db:3a:ca:8a:0f:82:42:99:78:45: 0d:b2:4a:fa:3f:2e:86:3e:d4:da:06:0e:86:7f:84: c8:33:5d:85:45:14:1b:8e:c6:99:60:68:b9:a5:be: 0c:1c:1f:4f:59:f0:26:11:23:3e:ff:0a:45:9b:b0: 69:5b:47:f3:8c:a6:41:d0:b0:a5:55:9e:3d:29:a0: d4:4b:60:bb:cb:7c:93:55:82:0d:d7:d8:9d:1c:48: 9c:64:f1:b7:f3:c4:bd:58:c2:4d:88:7d:d5:a2:27: 53:b2:a2:c8:d5:16:93:ba:e7:4e:0d:98:59:0f:b3: 77:fe:54:13:dc:f1:5b:d7:80:6c:51:1d:d5:d7:a4: 23:83:ce:f4:26:f9:ef:78:3d:89:d3:f1:77:c2:6b: 85:88:9b:e0:db:26:22:c8:4a:4f:0f:b9:46:5a:fb: bb:b7:d4:ff:c5:97:5a:cb:63:b8:fb:61:e9:82:01: be:e0:b8:bc:29:f1:5a:75:5b:e8:8e:f2:a4:d3:70: bd:76:3d:6a:2c:81:9e:1a:f3:27:91:7f:d4:24:56: aa:a4:c3:ed:b4:61:b4:39:07:b8:29:a1:c4:c6:dd: ce:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:B5:C5:6A:8D:33:35:F4:9B:B4:9D:EC:51:95:0A:0A:24:BD:FD:27 X509v3 Authority Key Identifier: keyid:C9:26:5B:8B:A9:E6:19:0F:26:09:78:7C:D9:D9:2E:FD:48:EF:BD:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ySZbi6nmGQ8mCXh82dku_UjvvZ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/RbXFao0zNfSbtJ3sUZUKCiS9_Sc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.41.80.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:32:49:6d:44:e6:c0:7e:d8:86:86:cc:a4:a2:ef:1f:9f:24: 82:a9:ff:d6:48:93:d6:c9:d4:58:e3:78:19:a0:44:c2:64:cb: b7:1b:11:41:b6:08:ce:b0:c1:78:d1:34:ba:07:0c:ea:f8:c2: 2f:b7:cf:e7:a3:0a:21:88:fa:ac:57:ff:86:6c:89:a6:f2:f1: a8:db:97:49:17:98:50:0c:82:35:cd:71:c1:e3:89:15:cb:6f: bd:f7:12:3d:2c:01:53:87:32:0b:8a:d8:56:47:00:6f:53:2c: 66:02:2b:87:21:21:84:51:d6:ab:e6:a7:e8:90:77:2e:6e:5d: 52:11:d6:86:fd:d8:74:af:5d:77:23:6d:8a:84:d4:ef:a5:a4: 65:41:83:61:af:00:1e:72:07:5d:e9:a0:d9:39:08:48:8f:5c: 55:50:82:42:b4:3f:4a:0c:13:b9:82:c1:03:e2:af:2f:2d:a4: c2:40:59:3e:8e:ab:46:6f:98:66:db:b5:49:74:f1:d7:bf:31: 95:90:12:89:b3:be:b2:15:cf:60:55:d6:e6:0d:28:fd:76:42: 78:3f:5b:16:e7:a5:94:d3:3a:b4:ee:b5:ea:c5:8d:88:ed:d7: c2:dd:cd:be:f0:e0:7c:8e:df:f9:2f:be:f2:6a:67:0b:61:83: 1b:3d:f9:df -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xzeDTuYFj3zkR+cO5mJ+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5MjY1YjhiYTllNjE5MGYyNjA5Nzg3Y2Q5ZDkyZWZkNDhl ZmJkOWQwHhcNMjYwMTAxMDQxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NWI1YzU2YThkMzMzNWY0OWJiNDlkZWM1MTk1MGEwYTI0YmRmZDI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXKR+n2crVH5GiGNP6OMukOXO79w rLh+NbYhCKWynZsdUds6yooPgkKZeEUNskr6Py6GPtTaBg6Gf4TIM12FRRQbjsaZ YGi5pb4MHB9PWfAmESM+/wpFm7BpW0fzjKZB0LClVZ49KaDUS2C7y3yTVYIN19id HEicZPG388S9WMJNiH3VoidTsqLI1RaTuudODZhZD7N3/lQT3PFb14BsUR3V16Qj g870JvnveD2J0/F3wmuFiJvg2yYiyEpPD7lGWvu7t9T/xZday2O4+2HpggG+4Li8 KfFadVvojvKk03C9dj1qLIGeGvMnkX/UJFaqpMPttGG0OQe4KaHExt3OYQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEW1xWqNMzX0m7Sd7FGVCgokvf0nMB8GA1UdIwQY MBaAFMkmW4up5hkPJgl4fNnZLv1I772dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVNaYmk2bm1HUThtQ1hoODJka3VfVWp2dlowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9lMjdkOWItY2FkNi00ZTFkLTlkMDct YjdhNjYwOGE4ZmJjLzEvUmJYRmFvMHpOZlNidEozc1VaVUtDaVM5X1NjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9lMjdkOWItY2FkNi00ZTFkLTlkMDctYjdhNjYwOGE4ZmJj LzEveVNaYmk2bm1HUThtQ1hoODJka3VfVWp2dlowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSlQMA0G CSqGSIb3DQEBCwUAA4IBAQAdMkltRObAftiGhsykou8fnySCqf/WSJPWydRY43gZ oETCZMu3GxFBtgjOsMF40TS6Bwzq+MIvt8/nowohiPqsV/+GbImm8vGo25dJF5hQ DII1zXHB44kVy2+99xI9LAFThzILithWRwBvUyxmAiuHISGEUdar5qfokHcubl1S EdaG/dh0r113I22KhNTvpaRlQYNhrwAecgdd6aDZOQhIj1xVUIJCtD9KDBO5gsED 4q8vLaTCQFk+jqtGb5hm27VJdPHXvzGVkBKJs76yFc9gVdbmDSj9dkJ4P1sW56WU 0zq07rXqxY2I7dfC3c2+8OB8jt/5L77yamcLYYMbPfnf -----END CERTIFICATE-----Generated at Mon Feb 9 20:05:16 2026 by rpki-client