This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/0YZtTmmCK8uDJ_NrkfevzGMNNso.roa File: 0YZtTmmCK8uDJ_NrkfevzGMNNso.roa (raw, json) Hash identifier: 6Ainezg6BcOqKKKEtPKxa2vRRGnNyqWUZ83d7KhIAYw= Subject key identifier: D1:86:6D:4E:69:82:2B:CB:83:27:F3:6B:91:F7:AF:CC:63:0D:36:CA Certificate issuer: /CN=deb180ddc7143103f02e69cb9cda19c2395e57a1 Certificate serial: 019B78A2BA84DF8542531D4216F76D85A24B Authority key identifier: DE:B1:80:DD:C7:14:31:03:F0:2E:69:CB:9C:DA:19:C2:39:5E:57:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/0YZtTmmCK8uDJ_NrkfevzGMNNso.roa Signing time: Thu 01 Jan 2026 08:18:09 +0000 ROA not before: Thu 01 Jan 2026 08:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58243 IP address blocks: 80.246.112.0/20 maxlen: 20 80.246.112.0/22 maxlen: 22 80.246.120.0/23 maxlen: 23 80.246.124.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.crl rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:ba:84:df:85:42:53:1d:42:16:f7:6d:85:a2:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=deb180ddc7143103f02e69cb9cda19c2395e57a1 Validity Not Before: Jan 1 08:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d1866d4e69822bcb8327f36b91f7afcc630d36ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ca:ea:10:0f:f1:c5:71:be:95:01:1a:a6:c9: 7f:f3:46:f7:bc:da:3f:2c:c0:64:92:be:c4:ad:85: c5:e5:da:39:33:91:d4:f5:5e:c3:91:74:f1:e1:73: 3f:3a:d5:11:ba:7f:9d:30:27:62:4e:9d:de:ca:c3: f8:13:c0:df:67:7e:50:bc:1e:92:b9:90:99:15:b3: db:41:a6:bd:29:d7:67:00:85:84:12:ed:ad:a0:f0: f9:5a:b8:e5:ae:1b:27:09:92:ad:1b:cb:b7:3e:51: 8a:e6:5a:25:64:9a:90:4a:15:7c:d3:f2:11:94:1f: 3e:31:8d:d5:22:e6:1d:24:26:5c:cc:f0:fd:f6:5e: 8a:13:05:39:0f:14:d9:cf:0d:fa:c7:ef:45:f2:52: af:7b:d4:7d:b0:85:b1:f1:cb:df:07:10:00:5f:ee: 4f:56:51:14:1f:f1:b4:63:fa:4e:59:a1:a6:b9:c7: bd:75:da:65:ca:78:f7:80:52:2d:0d:16:20:81:f0: 82:60:b3:3d:72:9a:6a:62:a0:d8:4f:d2:2a:3f:d4: ac:aa:66:a1:c7:d2:bf:a9:b8:3a:4a:9c:ca:d5:7b: 04:03:8f:5c:ba:20:88:04:f3:2b:f2:72:17:42:4d: 50:8e:a3:1d:fd:8e:4b:32:6f:c3:0b:2f:d0:37:24: 17:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:86:6D:4E:69:82:2B:CB:83:27:F3:6B:91:F7:AF:CC:63:0D:36:CA X509v3 Authority Key Identifier: keyid:DE:B1:80:DD:C7:14:31:03:F0:2E:69:CB:9C:DA:19:C2:39:5E:57:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/0YZtTmmCK8uDJ_NrkfevzGMNNso.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.246.112.0/20 Signature Algorithm: sha256WithRSAEncryption 0f:1e:1e:e0:6d:4e:7e:cb:72:13:d0:ef:a0:2a:51:33:3d:fb: e4:df:77:dd:87:b7:83:4a:8c:17:a3:c4:88:5a:81:8b:4c:d0: 9b:67:b3:ab:54:8b:c2:f7:dc:ec:b1:15:23:c3:5b:83:c5:3c: 8e:05:50:f5:c5:2f:60:f1:c2:5d:99:82:f1:96:95:59:39:73: cd:cf:74:7a:b7:16:64:0b:51:62:f3:52:2e:cc:33:66:24:e2: 1b:3b:6f:9c:82:8a:c2:31:43:d6:4c:e0:86:8c:8e:31:e3:b7: 85:ce:63:75:0b:c1:52:da:26:a3:c1:a6:13:49:99:c9:ee:60: 59:10:50:b5:f1:c1:41:69:fc:b0:83:14:64:56:5a:ea:27:db: 2d:16:bb:2c:0d:75:36:4c:36:8b:21:ae:29:16:5f:79:25:9d: e9:b7:20:02:b1:af:fa:5f:4a:63:59:82:16:5e:9d:38:95:5c: 16:4a:91:17:ea:ff:4c:1e:7d:aa:9f:7f:5d:69:ae:8e:9e:3f: 27:5e:59:24:4a:81:5f:47:c2:51:b5:40:72:ad:e0:21:82:49: 22:f7:b8:d3:b0:aa:41:e4:93:f6:b7:fe:4d:7c:4c:1d:a8:74: a3:ac:65:62:38:5f:a7:75:32:40:27:91:9b:6f:eb:a5:22:8b: d6:40:ef:50 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4orqE34VCUx1CFvdthaJLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlYjE4MGRkYzcxNDMxMDNmMDJlNjljYjljZGExOWMyMzk1 ZTU3YTEwHhcNMjYwMTAxMDgxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMTg2NmQ0ZTY5ODIyYmNiODMyN2YzNmI5MWY3YWZjYzYzMGQzNmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8rqEA/xxXG+lQEapsl/80b3vNo/ LMBkkr7ErYXF5do5M5HU9V7DkXTx4XM/OtURun+dMCdiTp3eysP4E8DfZ35QvB6S uZCZFbPbQaa9KddnAIWEEu2toPD5WrjlrhsnCZKtG8u3PlGK5lolZJqQShV80/IR lB8+MY3VIuYdJCZczPD99l6KEwU5DxTZzw36x+9F8lKve9R9sIWx8cvfBxAAX+5P VlEUH/G0Y/pOWaGmuce9ddplynj3gFItDRYggfCCYLM9cppqYqDYT9IqP9Ssqmah x9K/qbg6SpzK1XsEA49cuiCIBPMr8nIXQk1QjqMd/Y5LMm/DCy/QNyQXGwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNGGbU5pgivLgyfza5H3r8xjDTbKMB8GA1UdIwQY MBaAFN6xgN3HFDED8C5py5zaGcI5XlehMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3JHQTNjY1VNUVB3TG1uTG5Ob1p3amxlVjZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9mOTA4ODMtZTQ4MC00Y2YxLWFiZDIt OTA5MWNkNzNkMzhjLzEvMFladFRtbUNLOHVESl9OcmtmZXZ6R01OTnNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy9mOTA4ODMtZTQ4MC00Y2YxLWFiZDItOTA5MWNkNzNkMzhj LzEvM3JHQTNjY1VNUVB3TG1uTG5Ob1p3amxlVjZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEUPZwMA0G CSqGSIb3DQEBCwUAA4IBAQAPHh7gbU5+y3IT0O+gKlEzPfvk33fdh7eDSowXo8SI WoGLTNCbZ7OrVIvC99zssRUjw1uDxTyOBVD1xS9g8cJdmYLxlpVZOXPNz3R6txZk C1Fi81IuzDNmJOIbO2+cgorCMUPWTOCGjI4x47eFzmN1C8FS2iajwaYTSZnJ7mBZ EFC18cFBafywgxRkVlrqJ9stFrssDXU2TDaLIa4pFl95JZ3ptyACsa/6X0pjWYIW Xp04lVwWSpEX6v9MHn2qn39daa6Onj8nXlkkSoFfR8JRtUByreAhgkki97jTsKpB 5JP2t/5NfEwdqHSjrGViOF+ndTJAJ5Gbb+ulIovWQO9Q -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:48 2026 by rpki-client