This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/wHn4Idt9pbw0xNqo1xXnrZAME_c.roa File: wHn4Idt9pbw0xNqo1xXnrZAME_c.roa (raw, json) Hash identifier: 1V81c+Xq4YaFlhjRvvqZvgJ/aOSF31vxmGkYy8VJT/Q= Subject key identifier: C0:79:F8:21:DB:7D:A5:BC:34:C4:DA:A8:D7:15:E7:AD:90:0C:13:F7 Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe Certificate serial: 019B7AC7E4DE9AA3DF088D0F2F1B560AE1FF Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/wHn4Idt9pbw0xNqo1xXnrZAME_c.roa Signing time: Thu 01 Jan 2026 18:17:59 +0000 ROA not before: Thu 01 Jan 2026 18:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5511 IP address blocks: 80.174.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 02:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:e4:de:9a:a3:df:08:8d:0f:2f:1b:56:0a:e1:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe Validity Not Before: Jan 1 18:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c079f821db7da5bc34c4daa8d715e7ad900c13f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:7e:9e:3d:6b:41:3b:fb:d2:97:b6:bb:a5:59: 35:b7:14:db:90:71:68:29:c1:8f:e6:74:ef:c0:b2: 3d:42:0a:0d:07:86:dd:13:53:4f:08:5d:c3:89:8a: 5e:bf:eb:93:15:e7:da:4a:b5:e9:36:b7:9c:bc:73: 98:77:ea:85:2d:32:33:82:00:6e:cf:fd:c0:9b:c5: 7f:54:3f:cb:bf:89:2a:b8:3b:f7:5e:c1:cb:29:cc: de:72:3c:50:ac:ce:d7:da:63:8f:09:c8:5a:ea:c5: c1:49:d6:9e:60:5f:4d:c1:3c:02:9a:90:7d:9b:bf: 32:39:17:26:07:55:22:35:12:f7:38:96:cb:72:cc: a5:c3:88:47:5c:f1:d4:8f:f5:b6:a1:28:80:5e:05: fc:fc:cc:6d:68:d7:f4:5c:bb:42:75:92:39:9e:cd: f5:bf:ee:de:6c:93:bf:64:3e:fb:70:66:97:c0:94: 02:58:58:6f:22:91:20:59:18:6a:ce:a4:00:2f:0a: 08:3f:5d:df:fd:9e:8d:06:5b:79:1d:58:5f:74:90: 35:f6:d2:45:8f:ab:5c:7c:a0:fa:f5:34:3e:12:f7: 9d:44:f8:1f:5d:79:0c:a3:99:1d:d3:1c:d6:6b:fe: 21:61:4f:21:6a:bd:f3:98:e7:03:e1:53:24:37:e5: b4:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:79:F8:21:DB:7D:A5:BC:34:C4:DA:A8:D7:15:E7:AD:90:0C:13:F7 X509v3 Authority Key Identifier: keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/wHn4Idt9pbw0xNqo1xXnrZAME_c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.174.112.0/24 Signature Algorithm: sha256WithRSAEncryption cd:6f:f2:c4:1b:d1:91:93:23:95:4d:c0:f6:f9:9c:36:d0:10: ba:1e:e5:78:65:d2:e3:cc:09:57:00:17:c2:27:6e:66:2e:46: 4b:f9:ba:6f:eb:33:be:6c:5b:79:7d:3b:9c:23:be:24:43:c3: 53:c4:1d:94:0f:ba:41:e4:14:7f:6f:de:13:81:10:24:c4:f5: a3:16:73:93:ae:22:75:b1:32:39:9f:59:c5:62:56:16:4a:6e: 5c:b1:02:f0:84:19:e7:59:63:b2:f6:1e:27:95:87:79:26:f2: ed:73:c1:6b:dd:b8:17:1e:96:54:ca:84:f0:1b:c6:e4:26:cb: 94:af:d6:23:4d:61:7c:8a:0a:ff:39:8e:26:fb:1a:70:c2:89: 2d:e4:32:cb:d3:9c:52:db:c8:d1:48:d7:a3:09:72:2c:e4:2d: f3:5c:c5:23:a9:f5:ee:61:70:a1:8e:32:2b:9e:ef:b2:4f:6d: 66:1e:dc:89:51:01:2d:a7:b7:3f:40:34:1f:05:cf:31:f9:6f: 64:c2:c1:bd:8f:4c:73:7b:6e:c3:22:0d:84:27:3a:b6:14:fa: 81:b2:e7:e1:4c:1e:ea:31:65:37:20:68:f3:b3:5a:61:48:e9: 31:8d:56:20:f4:c5:80:3d:3d:3a:ee:7c:ac:c9:e9:89:3b:d1: 53:6a:af:14 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x+TemqPfCI0PLxtWCuH/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NTk5OTg5OWY3NmQyZTJlNGNjZGZjODE3Zjk4NzljZmFj MDZiYmUwHhcNMjYwMTAxMTgxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDc5ZjgyMWRiN2RhNWJjMzRjNGRhYThkNzE1ZTdhZDkwMGMxM2Y3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4n6ePWtBO/vSl7a7pVk1txTbkHFo KcGP5nTvwLI9QgoNB4bdE1NPCF3DiYpev+uTFefaSrXpNrecvHOYd+qFLTIzggBu z/3Am8V/VD/Lv4kquDv3XsHLKczecjxQrM7X2mOPCcha6sXBSdaeYF9NwTwCmpB9 m78yORcmB1UiNRL3OJbLcsylw4hHXPHUj/W2oSiAXgX8/MxtaNf0XLtCdZI5ns31 v+7ebJO/ZD77cGaXwJQCWFhvIpEgWRhqzqQALwoIP13f/Z6NBlt5HVhfdJA19tJF j6tcfKD69TQ+EvedRPgfXXkMo5kd0xzWa/4hYU8har3zmOcD4VMkN+W0ewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMB5+CHbfaW8NMTaqNcV562QDBP3MB8GA1UdIwQY MBaAFLRZmYmfdtLi5MzfyBf5h5z6wGu+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUt NzM0MjhmOWM3YmZmLzEvd0huNElkdDlwYncweE5xbzF4WG5yWkFNRV9jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUtNzM0MjhmOWM3YmZm LzEvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUK5wMA0G CSqGSIb3DQEBCwUAA4IBAQDNb/LEG9GRkyOVTcD2+Zw20BC6HuV4ZdLjzAlXABfC J25mLkZL+bpv6zO+bFt5fTucI74kQ8NTxB2UD7pB5BR/b94TgRAkxPWjFnOTriJ1 sTI5n1nFYlYWSm5csQLwhBnnWWOy9h4nlYd5JvLtc8Fr3bgXHpZUyoTwG8bkJsuU r9YjTWF8igr/OY4m+xpwwokt5DLL05xS28jRSNejCXIs5C3zXMUjqfXuYXChjjIr nu+yT21mHtyJUQEtp7c/QDQfBc8x+W9kwsG9j0xze27DIg2EJzq2FPqBsufhTB7q MWU3IGjzs1phSOkxjVYg9MWAPT067nysyemJO9FTaq8U -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:24 2026 by rpki-client