This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/80dI9feXzE2T2t1bf2lPrI9UTCM.roa File: 80dI9feXzE2T2t1bf2lPrI9UTCM.roa (raw, json) Hash identifier: Q8e0O49tibA3BkTmL30HyVvrm1M+ka9VvoTMNCf2EJE= Subject key identifier: F3:47:48:F5:F7:97:CC:4D:93:DA:DD:5B:7F:69:4F:AC:8F:54:4C:23 Certificate issuer: /CN=ecccc2b909c7c815caccb5fce531c32526fadd5a Certificate serial: 019B7DCB308545C053DCDF355C2D498F1DFD Authority key identifier: EC:CC:C2:B9:09:C7:C8:15:CA:CC:B5:FC:E5:31:C3:25:26:FA:DD:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7MzCuQnHyBXKzLX85THDJSb63Vo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/80dI9feXzE2T2t1bf2lPrI9UTCM.roa Signing time: Fri 02 Jan 2026 08:20:26 +0000 ROA not before: Fri 02 Jan 2026 08:20:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29044 IP address blocks: 195.68.196.0/23 maxlen: 23 195.68.196.0/24 maxlen: 24 195.68.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.mft rsync://rpki.ripe.net/repository/DEFAULT/7MzCuQnHyBXKzLX85THDJSb63Vo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:30:85:45:c0:53:dc:df:35:5c:2d:49:8f:1d:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecccc2b909c7c815caccb5fce531c32526fadd5a Validity Not Before: Jan 2 08:20:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f34748f5f797cc4d93dadd5b7f694fac8f544c23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:36:84:16:04:f5:05:6b:1b:34:6e:8c:3a:76: cc:43:a3:44:11:01:9a:a3:a0:06:4b:e3:0c:f9:bf: cd:2a:53:f0:0c:2b:a5:ab:50:86:8f:92:16:d6:5e: 32:9c:25:a7:fd:db:35:e3:3d:73:1d:25:33:6e:04: 1c:58:f0:87:57:f0:4f:c6:d5:3b:b9:33:7b:4a:36: b8:41:1b:72:4b:b3:f4:0e:34:86:c2:b1:2c:05:c3: 97:e0:b4:14:7e:3a:0f:ae:e4:d8:9a:79:c2:77:51: 7f:06:c3:09:94:56:9e:86:e2:71:49:cd:e6:9c:d8: 51:c7:b7:88:aa:ce:02:05:43:65:54:1b:0f:61:c9: 50:44:98:05:69:3a:c4:d3:40:0d:68:2b:c5:d6:4d: 2e:71:7e:22:49:ff:49:17:ae:dc:bf:fd:dc:d5:11: 58:86:9c:99:56:8f:8e:2a:d4:ba:74:10:75:ac:66: b9:7e:11:cf:c4:2d:aa:1e:7f:ca:9d:be:33:ef:e9: 02:c4:c0:9c:5f:08:e8:d5:db:a8:ee:ff:d3:b7:d0: 67:b5:f9:ca:4e:ef:eb:3f:cc:a7:a1:92:9b:ed:0e: 6e:97:4f:ca:30:ff:e7:96:d1:b0:ae:c7:fb:56:22: e1:26:e8:15:97:cf:a2:f6:33:67:b9:7e:87:f6:0f: 37:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:47:48:F5:F7:97:CC:4D:93:DA:DD:5B:7F:69:4F:AC:8F:54:4C:23 X509v3 Authority Key Identifier: keyid:EC:CC:C2:B9:09:C7:C8:15:CA:CC:B5:FC:E5:31:C3:25:26:FA:DD:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7MzCuQnHyBXKzLX85THDJSb63Vo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/80dI9feXzE2T2t1bf2lPrI9UTCM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.68.196.0/23 Signature Algorithm: sha256WithRSAEncryption 7b:0a:91:03:dd:a0:19:09:b5:0d:d4:63:b1:06:4c:bb:4b:04: 06:c5:da:0d:76:44:f1:a4:62:82:d6:a7:55:41:74:b0:64:08: 60:8f:52:95:6a:7c:bf:0e:12:8d:ee:13:7a:3b:91:dc:dc:93: 99:0c:d2:38:fe:63:dd:53:30:ef:5e:b1:87:38:77:5a:12:5e: e9:08:be:c1:c5:7e:e9:fe:bb:09:ce:39:34:23:e6:53:a3:d6: 7d:d4:19:28:81:df:3c:31:b1:71:96:8e:5e:2f:5d:17:cd:ad: 15:ce:b4:a7:96:eb:81:9e:4a:02:c1:7c:ac:22:4b:c0:5e:bb: d6:48:f8:35:fb:9c:c7:19:91:5f:80:2c:fc:ca:2f:cd:17:0e: 50:6a:10:cd:df:5d:e6:d5:4c:03:0b:36:e4:92:7e:84:1a:54: 10:19:79:fe:ba:60:4f:15:65:47:66:22:9d:52:42:ea:e6:91: f5:e8:12:3b:71:51:43:fc:c0:ee:0e:74:7f:c4:30:57:55:54: d4:d7:ce:04:66:f3:1c:18:ef:fd:7a:d6:35:cb:b1:ef:fe:db: 22:91:b5:67:7a:2c:fe:77:52:ab:c0:18:6b:04:28:18:4c:35: 54:9b:8c:4e:01:31:23:44:13:d4:aa:18:91:69:86:2d:91:59: 12:5e:7a:a9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yzCFRcBT3N81XC1Jjx39MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjY2NjMmI5MDljN2M4MTVjYWNjYjVmY2U1MzFjMzI1MjZm YWRkNWEwHhcNMjYwMTAyMDgyMDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzQ3NDhmNWY3OTdjYzRkOTNkYWRkNWI3ZjY5NGZhYzhmNTQ0YzIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2DaEFgT1BWsbNG6MOnbMQ6NEEQGa o6AGS+MM+b/NKlPwDCulq1CGj5IW1l4ynCWn/ds14z1zHSUzbgQcWPCHV/BPxtU7 uTN7Sja4QRtyS7P0DjSGwrEsBcOX4LQUfjoPruTYmnnCd1F/BsMJlFaehuJxSc3m nNhRx7eIqs4CBUNlVBsPYclQRJgFaTrE00ANaCvF1k0ucX4iSf9JF67cv/3c1RFY hpyZVo+OKtS6dBB1rGa5fhHPxC2qHn/Knb4z7+kCxMCcXwjo1duo7v/Tt9BntfnK Tu/rP8ynoZKb7Q5ul0/KMP/nltGwrsf7ViLhJugVl8+i9jNnuX6H9g83xwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPNHSPX3l8xNk9rdW39pT6yPVEwjMB8GA1UdIwQY MBaAFOzMwrkJx8gVysy1/OUxwyUm+t1aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN016Q3VRbkh5QlhLekxYODVUSERKU2I2M1ZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9kMjAxZTYtOTA2ZS00N2Q4LTg5MjMt NmVmYWI5YjE3NmQ5LzEvODBkSTlmZVh6RTJUMnQxYmYybFBySTlVVENNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC9kMjAxZTYtOTA2ZS00N2Q4LTg5MjMtNmVmYWI5YjE3NmQ5 LzEvN016Q3VRbkh5QlhLekxYODVUSERKU2I2M1ZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw0TEMA0G CSqGSIb3DQEBCwUAA4IBAQB7CpED3aAZCbUN1GOxBky7SwQGxdoNdkTxpGKC1qdV QXSwZAhgj1KVany/DhKN7hN6O5Hc3JOZDNI4/mPdUzDvXrGHOHdaEl7pCL7BxX7p /rsJzjk0I+ZTo9Z91Bkogd88MbFxlo5eL10Xza0VzrSnluuBnkoCwXysIkvAXrvW SPg1+5zHGZFfgCz8yi/NFw5QahDN313m1UwDCzbkkn6EGlQQGXn+umBPFWVHZiKd UkLq5pH16BI7cVFD/MDuDnR/xDBXVVTU184EZvMcGO/9etY1y7Hv/tsikbVneiz+ d1KrwBhrBCgYTDVUm4xOATEjRBPUqhiRaYYtkVkSXnqp -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:12 2026 by rpki-client