This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/Rir5qUdiM3zzTUT-Xkj3rqlToCI.roa File: Rir5qUdiM3zzTUT-Xkj3rqlToCI.roa (raw, json) Hash identifier: AEK9ReBz0aDKpQLz2sCl8uFxNfkDOQwbvwIUAoemDV4= Subject key identifier: 46:2A:F9:A9:47:62:33:7C:F3:4D:44:FE:5E:48:F7:AE:A9:53:A0:22 Certificate issuer: /CN=1a6a1413cc8965ee92416b6059f90b18778c8b38 Certificate serial: 019B7F8424EAB54E1C77E620100316CDA7F8 Authority key identifier: 1A:6A:14:13:CC:89:65:EE:92:41:6B:60:59:F9:0B:18:77:8C:8B:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GmoUE8yJZe6SQWtgWfkLGHeMizg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/Rir5qUdiM3zzTUT-Xkj3rqlToCI.roa Signing time: Fri 02 Jan 2026 16:22:05 +0000 ROA not before: Fri 02 Jan 2026 16:22:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20882 IP address blocks: 80.75.224.0/20 maxlen: 20 80.75.224.0/24 maxlen: 24 80.75.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.mft rsync://rpki.ripe.net/repository/DEFAULT/GmoUE8yJZe6SQWtgWfkLGHeMizg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:24:ea:b5:4e:1c:77:e6:20:10:03:16:cd:a7:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a6a1413cc8965ee92416b6059f90b18778c8b38 Validity Not Before: Jan 2 16:22:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=462af9a94762337cf34d44fe5e48f7aea953a022 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6d:49:eb:5a:eb:d6:f1:ac:74:20:ff:da:df: 2d:e2:8b:cc:f6:e2:fd:6b:77:12:a5:82:65:bc:b1: 3f:a2:25:8b:a7:1b:0e:49:69:95:ba:66:61:80:6e: e4:95:95:4d:90:04:30:b4:fe:ba:67:64:4d:79:81: 55:b1:97:01:d1:37:49:4f:a5:a2:85:e7:52:61:d8: 84:fd:02:64:bb:5a:29:7f:85:96:ad:44:ff:f9:60: ab:04:42:4b:29:f4:1b:da:d9:4a:88:90:aa:cb:aa: 25:da:79:92:7d:ef:49:d0:f0:d1:5a:a9:ab:b4:5f: c0:15:32:fd:2d:50:31:f5:e1:db:7a:c2:6a:87:9f: ee:39:30:36:07:ad:3e:be:56:3b:0b:ac:c5:5b:d6: 35:7b:88:73:b2:7f:af:f7:e2:fa:6b:cb:ac:88:0d: 20:a4:dc:e1:62:96:e7:1b:8c:97:0d:b7:af:12:dc: 86:ff:0a:9b:ec:29:4e:d6:7c:a7:49:1c:fc:ce:17: 35:bc:f8:b8:be:db:ea:b6:5f:f0:59:2e:ee:c1:f3: 8d:93:99:06:53:12:1f:b8:24:60:ac:58:97:49:74: 27:fc:62:2b:44:56:25:57:c9:b7:72:64:d1:55:92: eb:12:9e:b1:d6:f9:0a:69:cf:9d:62:89:85:a4:7e: 7c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:2A:F9:A9:47:62:33:7C:F3:4D:44:FE:5E:48:F7:AE:A9:53:A0:22 X509v3 Authority Key Identifier: keyid:1A:6A:14:13:CC:89:65:EE:92:41:6B:60:59:F9:0B:18:77:8C:8B:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GmoUE8yJZe6SQWtgWfkLGHeMizg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/Rir5qUdiM3zzTUT-Xkj3rqlToCI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.75.224.0/20 Signature Algorithm: sha256WithRSAEncryption 95:61:bf:b2:6f:b4:2c:26:5a:75:0d:ac:8e:3b:51:d0:64:2d: 0c:a8:93:40:9c:00:03:47:00:c8:af:ba:2d:a2:13:14:02:60: 15:86:e2:60:29:31:04:0c:b9:9a:e9:a1:40:25:14:b2:61:65: 79:ba:9a:db:f4:19:fd:db:3f:0e:62:ff:1b:a4:0a:cf:d1:56: 60:67:08:05:33:82:c7:46:32:57:a3:d7:73:de:11:d4:6e:72: fe:1b:d8:45:88:a7:b7:26:72:39:78:82:da:2c:44:50:75:be: 22:af:b6:4f:89:f0:2c:9c:0a:42:23:0a:e0:35:bf:8e:b6:90: 30:ee:67:26:31:02:47:cc:e6:97:7d:35:76:2d:07:95:8b:b6: ec:89:1a:ef:40:51:9b:35:2c:61:29:91:39:9a:c5:3b:3c:e1: 4e:6c:cc:4e:e9:38:df:c3:03:f5:a4:96:31:63:f3:7f:af:7e: ec:ec:24:e2:8d:e6:9b:dc:5a:98:54:1a:19:0b:8b:c4:22:32: 74:a0:61:14:4d:45:af:fd:aa:98:1c:af:fd:9e:f5:3a:97:be: 41:0c:ff:1e:6d:b0:ae:4d:0e:e1:6e:68:77:bc:cc:86:f7:f3: d8:5b:11:ad:57:1f:2e:93:16:8b:8f:76:1d:ea:d7:c9:36:af: 68:f2:36:6c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hCTqtU4cd+YgEAMWzaf4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNmExNDEzY2M4OTY1ZWU5MjQxNmI2MDU5ZjkwYjE4Nzc4 YzhiMzgwHhcNMjYwMTAyMTYyMjA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjJhZjlhOTQ3NjIzMzdjZjM0ZDQ0ZmU1ZTQ4ZjdhZWE5NTNhMDIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwW1J61rr1vGsdCD/2t8t4ovM9uL9 a3cSpYJlvLE/oiWLpxsOSWmVumZhgG7klZVNkAQwtP66Z2RNeYFVsZcB0TdJT6Wi hedSYdiE/QJku1opf4WWrUT/+WCrBEJLKfQb2tlKiJCqy6ol2nmSfe9J0PDRWqmr tF/AFTL9LVAx9eHbesJqh5/uOTA2B60+vlY7C6zFW9Y1e4hzsn+v9+L6a8usiA0g pNzhYpbnG4yXDbevEtyG/wqb7ClO1nynSRz8zhc1vPi4vtvqtl/wWS7uwfONk5kG UxIfuCRgrFiXSXQn/GIrRFYlV8m3cmTRVZLrEp6x1vkKac+dYomFpH58UQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEYq+alHYjN8801E/l5I966pU6AiMB8GA1UdIwQY MBaAFBpqFBPMiWXukkFrYFn5Cxh3jIs4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR21vVUU4eUpaZTZTUVd0Z1dma0xHSGVNaXpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC81OWE0M2YtODgxYS00OGVkLTljM2Ut ODJjMDg1YTkyNzc3LzEvUmlyNXFVZGlNM3p6VFVULVhrajNycWxUb0NJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC81OWE0M2YtODgxYS00OGVkLTljM2UtODJjMDg1YTkyNzc3 LzEvR21vVUU4eUpaZTZTUVd0Z1dma0xHSGVNaXpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEUEvgMA0G CSqGSIb3DQEBCwUAA4IBAQCVYb+yb7QsJlp1DayOO1HQZC0MqJNAnAADRwDIr7ot ohMUAmAVhuJgKTEEDLma6aFAJRSyYWV5uprb9Bn92z8OYv8bpArP0VZgZwgFM4LH RjJXo9dz3hHUbnL+G9hFiKe3JnI5eILaLERQdb4ir7ZPifAsnApCIwrgNb+OtpAw 7mcmMQJHzOaXfTV2LQeVi7bsiRrvQFGbNSxhKZE5msU7POFObMxO6TjfwwP1pJYx Y/N/r37s7CTijeab3FqYVBoZC4vEIjJ0oGEUTUWv/aqYHK/9nvU6l75BDP8ebbCu TQ7hbmh3vMyG9/PYWxGtVx8ukxaLj3Yd6tfJNq9o8jZs -----END CERTIFICATE-----Generated at Mon Feb 9 19:38:29 2026 by rpki-client