This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/80TWm90S-Onuw8UVk_a_YMpnv6o.roa File: 80TWm90S-Onuw8UVk_a_YMpnv6o.roa (raw, json) Hash identifier: LGB62Xi1tWHUNYhIK2dTQ5Ol/KsHpiWlWcXLvkE/TC0= Subject key identifier: F3:44:D6:9B:DD:12:F8:E9:EE:C3:C5:15:93:F6:BF:60:CA:67:BF:AA Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Certificate serial: 019B7B35FDCE878D55F5A8ADC805201654AE Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/80TWm90S-Onuw8UVk_a_YMpnv6o.roa Signing time: Thu 01 Jan 2026 20:18:14 +0000 ROA not before: Thu 01 Jan 2026 20:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44477 IP address blocks: 194.61.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:fd:ce:87:8d:55:f5:a8:ad:c8:05:20:16:54:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Validity Not Before: Jan 1 20:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f344d69bdd12f8e9eec3c51593f6bf60ca67bfaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:cf:f3:c5:29:7d:e3:20:89:31:7d:64:90:06: f1:c1:bd:fa:76:e9:4d:9b:98:09:66:8e:5c:50:b6: 77:f7:a4:b5:90:c2:42:73:f1:93:bf:42:5d:9a:7c: 02:42:9f:73:c3:40:ea:9f:9d:63:0f:5c:64:ce:d3: 37:e9:8f:6c:ca:12:8b:e2:2f:77:ed:2d:1d:a5:35: 61:09:e7:20:86:62:03:c7:98:ee:15:f8:2f:cd:d1: e9:b4:23:d8:a2:ba:9e:18:86:82:86:fc:91:e2:bb: 63:0c:9e:d1:c0:29:ec:be:b9:d4:c0:d3:37:e6:8c: fe:9f:0b:71:98:db:62:b8:25:3e:5f:ba:50:cb:a9: c5:28:11:86:bd:b1:b7:78:ee:99:f1:96:56:86:71: e4:f6:6d:05:cf:e8:04:89:51:05:4f:56:39:22:b8: c7:72:5e:a8:82:70:87:81:c4:b4:fb:03:42:6a:cf: 6c:c8:16:7e:a2:97:2e:fb:ee:0d:34:e2:87:ac:14: 08:ac:54:9a:31:f4:93:e9:22:a8:a3:fd:a1:af:57: 01:f0:88:70:af:ce:f4:6e:dc:f2:1a:71:a6:99:98: 93:a6:10:67:ae:d3:ed:73:4a:e8:bd:57:de:8d:ae: 3f:6b:4d:72:14:f5:b0:d7:e6:1f:ad:a9:e3:f2:99: 4f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:44:D6:9B:DD:12:F8:E9:EE:C3:C5:15:93:F6:BF:60:CA:67:BF:AA X509v3 Authority Key Identifier: keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/80TWm90S-Onuw8UVk_a_YMpnv6o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.61.9.0/24 Signature Algorithm: sha256WithRSAEncryption 54:eb:a2:de:09:bb:b1:68:d7:6e:7b:dd:c2:8a:1a:d5:09:30: 51:9d:df:d3:52:62:b3:7e:e6:a7:8a:89:6e:36:76:27:99:63: ed:4a:60:5d:c2:05:8c:ed:0b:3a:38:7f:bb:ee:59:8b:9f:61: 03:66:9d:8a:5e:9e:1e:a5:7b:19:65:c3:5f:28:da:59:7b:2d: 14:c0:e3:e7:64:2e:39:7c:c6:61:5a:dc:fa:cb:29:68:e0:88: 33:e8:ca:27:cc:2e:b6:34:c4:1d:1b:ec:8c:80:28:bc:a8:4f: 0f:02:9e:1a:5e:f9:fe:59:50:01:b2:cb:f8:e6:88:91:c7:76: c1:8b:fb:70:24:e0:95:f1:df:3a:49:17:67:06:03:32:32:b4: 25:8c:33:fa:b6:46:9e:ce:eb:bc:19:f9:78:7e:b2:e1:c0:a4: a3:7a:78:12:86:f2:2a:ef:7c:d6:ab:2e:7a:c2:76:34:f5:ce: 05:76:8b:6d:8b:14:60:4f:9d:04:16:e0:fb:67:e9:a3:96:26: 5e:c9:ce:1f:78:08:ab:c2:c4:3d:c9:d5:57:78:dc:bd:13:9c: 68:02:1e:71:2a:cb:2d:c7:1b:35:55:44:cf:3d:ff:73:e6:90: 16:d7:c3:6b:37:f9:14:68:29:6a:5e:85:23:aa:75:06:e5:1c: fe:d6:51:30 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Nf3Oh41V9aityAUgFlSuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw N2VlNTYwHhcNMjYwMTAxMjAxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzQ0ZDY5YmRkMTJmOGU5ZWVjM2M1MTU5M2Y2YmY2MGNhNjdiZmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/M/zxSl94yCJMX1kkAbxwb36dulN m5gJZo5cULZ396S1kMJCc/GTv0JdmnwCQp9zw0Dqn51jD1xkztM36Y9syhKL4i93 7S0dpTVhCecghmIDx5juFfgvzdHptCPYorqeGIaChvyR4rtjDJ7RwCnsvrnUwNM3 5oz+nwtxmNtiuCU+X7pQy6nFKBGGvbG3eO6Z8ZZWhnHk9m0Fz+gEiVEFT1Y5IrjH cl6ognCHgcS0+wNCas9syBZ+opcu++4NNOKHrBQIrFSaMfST6SKoo/2hr1cB8Ihw r870btzyGnGmmZiTphBnrtPtc0rovVfeja4/a01yFPWw1+Yfranj8plPFwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPNE1pvdEvjp7sPFFZP2v2DKZ7+qMB8GA1UdIwQY MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt OGJmYmRkNDVjYjYyLzEvODBUV205MFMtT251dzhVVmtfYV9ZTXBudjZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwj0JMA0G CSqGSIb3DQEBCwUAA4IBAQBU66LeCbuxaNdue93CihrVCTBRnd/TUmKzfuaniolu NnYnmWPtSmBdwgWM7Qs6OH+77lmLn2EDZp2KXp4epXsZZcNfKNpZey0UwOPnZC45 fMZhWtz6yylo4Igz6MonzC62NMQdG+yMgCi8qE8PAp4aXvn+WVABssv45oiRx3bB i/twJOCV8d86SRdnBgMyMrQljDP6tkaezuu8Gfl4frLhwKSjengShvIq73zWqy56 wnY09c4FdottixRgT50EFuD7Z+mjliZeyc4feAirwsQ9ydVXeNy9E5xoAh5xKsst xxs1VUTPPf9z5pAW18NrN/kUaClqXoUjqnUG5Rz+1lEw -----END CERTIFICATE-----Generated at Fri Jan 9 12:06:13 2026 by rpki-client