This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/f62382-99dd-47d4-8de4-1fe6912f8e7e/1/ni8xOmyPG8GcK3Z8TZmDGUp0yPU.roa File: ni8xOmyPG8GcK3Z8TZmDGUp0yPU.roa (raw, json) Hash identifier: iTNz2JkVG0lyLMF9W3w/Ic91Eg7OidyUS/S/a+cGNtM= Subject key identifier: 9E:2F:31:3A:6C:8F:1B:C1:9C:2B:76:7C:4D:99:83:19:4A:74:C8:F5 Certificate issuer: /CN=80235937adf4dab8925d58045a3371816c980531 Certificate serial: 019B7C129B019142A6167ED0C7CECE423084 Authority key identifier: 80:23:59:37:AD:F4:DA:B8:92:5D:58:04:5A:33:71:81:6C:98:05:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gCNZN6302riSXVgEWjNxgWyYBTE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/f62382-99dd-47d4-8de4-1fe6912f8e7e/1/ni8xOmyPG8GcK3Z8TZmDGUp0yPU.roa Signing time: Fri 02 Jan 2026 00:19:12 +0000 ROA not before: Fri 02 Jan 2026 00:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39875 IP address blocks: 80.247.16.0/20 maxlen: 20 185.147.108.0/22 maxlen: 22 2a02:308::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/f62382-99dd-47d4-8de4-1fe6912f8e7e/1/gCNZN6302riSXVgEWjNxgWyYBTE.crl rsync://rpki.ripe.net/repository/DEFAULT/59/f62382-99dd-47d4-8de4-1fe6912f8e7e/1/gCNZN6302riSXVgEWjNxgWyYBTE.mft rsync://rpki.ripe.net/repository/DEFAULT/gCNZN6302riSXVgEWjNxgWyYBTE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:9b:01:91:42:a6:16:7e:d0:c7:ce:ce:42:30:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80235937adf4dab8925d58045a3371816c980531 Validity Not Before: Jan 2 00:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e2f313a6c8f1bc19c2b767c4d9983194a74c8f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f8:98:63:6b:a7:88:b1:52:24:22:b7:71:8b: 3e:ab:ae:06:69:ff:cf:4b:70:0d:62:70:38:ef:ff: f8:c5:cf:d0:b3:a1:86:79:60:6e:27:af:24:01:59: cc:da:22:3a:ab:a7:3b:d4:80:2f:d0:c5:4e:eb:47: af:0f:1b:d6:e2:e2:a9:28:62:6f:29:ef:6b:22:ab: 7b:c3:4a:8b:45:b6:b4:8b:92:5e:27:f7:cd:76:ec: 29:1c:da:27:5a:f9:7e:a8:50:97:7d:fd:cd:9a:ed: d0:64:20:2e:7c:38:fd:55:6d:b8:f5:5d:cd:54:09: 42:00:17:58:ae:d5:8d:02:a6:37:6a:4c:08:59:55: 2a:18:5f:99:9a:f3:29:b2:1d:8f:3e:57:78:5b:f8: 06:74:44:53:55:ee:45:e7:ee:2f:36:e6:cd:0f:97: e2:24:52:d8:db:08:37:50:a7:04:5f:e8:bd:de:52: 19:68:84:87:e0:87:6f:71:e1:86:fb:21:98:28:50: 38:b8:dd:ec:b6:58:29:64:22:72:f0:27:a2:c7:9d: 21:ea:99:b2:49:cb:21:51:f7:01:70:cf:4c:c1:6b: d4:f3:52:1b:c1:b0:25:5e:ef:03:67:9e:ce:b8:4c: 1d:ae:92:a3:6e:dd:39:cd:07:24:14:cb:cf:24:79: 7d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:2F:31:3A:6C:8F:1B:C1:9C:2B:76:7C:4D:99:83:19:4A:74:C8:F5 X509v3 Authority Key Identifier: keyid:80:23:59:37:AD:F4:DA:B8:92:5D:58:04:5A:33:71:81:6C:98:05:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gCNZN6302riSXVgEWjNxgWyYBTE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f62382-99dd-47d4-8de4-1fe6912f8e7e/1/ni8xOmyPG8GcK3Z8TZmDGUp0yPU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f62382-99dd-47d4-8de4-1fe6912f8e7e/1/gCNZN6302riSXVgEWjNxgWyYBTE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.247.16.0/20 185.147.108.0/22 IPv6: 2a02:308::/29 Signature Algorithm: sha256WithRSAEncryption 5c:20:e3:26:0f:4e:3f:5a:36:5a:8f:99:7e:31:7a:e8:d5:1e: af:36:b5:56:02:15:06:f8:39:b3:64:59:69:0f:9a:bb:37:91: d2:9a:4f:8b:ef:98:39:2e:68:2f:82:43:61:2c:00:df:ca:f3: 81:40:0f:d7:92:3e:bf:4b:8d:66:0d:c9:dd:78:b7:44:6f:5a: 8f:65:66:8f:be:1e:d9:18:77:77:a3:37:a0:7f:ea:d6:08:5d: f4:19:40:c5:79:a8:5c:d7:0c:c3:fc:39:dd:fa:c5:e7:22:c3: ca:57:d3:8d:cc:d4:14:49:57:5f:85:aa:bc:2b:51:63:28:cc: b2:9f:7b:bb:64:4a:c5:c4:bf:71:97:87:f7:06:80:76:4d:de: c0:c0:c2:2b:31:86:eb:76:ff:5c:f4:81:96:b3:b3:fa:18:d6: f1:a9:bd:da:7c:28:c9:22:a7:e7:52:28:0b:97:a8:60:e4:57: 91:53:d5:69:3d:79:aa:53:b2:6a:fe:c5:b1:4a:db:ef:53:7a: 48:d5:60:04:80:ae:1b:51:a5:a7:17:ee:94:ee:7a:93:26:cd: 94:b0:81:57:61:fa:0b:7b:b3:5e:d6:cf:7a:cc:54:30:20:f7: 2a:d1:0d:0d:68:01:ca:b8:94:95:2b:ce:68:bc:38:90:4e:47: 75:f0:9f:4b -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt8EpsBkUKmFn7Qx87OQjCEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwMjM1OTM3YWRmNGRhYjg5MjVkNTgwNDVhMzM3MTgxNmM5 ODA1MzEwHhcNMjYwMTAyMDAxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTJmMzEzYTZjOGYxYmMxOWMyYjc2N2M0ZDk5ODMxOTRhNzRjOGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofiYY2uniLFSJCK3cYs+q64Gaf/P S3ANYnA47//4xc/Qs6GGeWBuJ68kAVnM2iI6q6c71IAv0MVO60evDxvW4uKpKGJv Ke9rIqt7w0qLRba0i5JeJ/fNduwpHNonWvl+qFCXff3Nmu3QZCAufDj9VW249V3N VAlCABdYrtWNAqY3akwIWVUqGF+ZmvMpsh2PPld4W/gGdERTVe5F5+4vNubND5fi JFLY2wg3UKcEX+i93lIZaISH4IdvceGG+yGYKFA4uN3stlgpZCJy8Ceix50h6pmy ScshUfcBcM9MwWvU81IbwbAlXu8DZ57OuEwdrpKjbt05zQckFMvPJHl90QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFJ4vMTpsjxvBnCt2fE2ZgxlKdMj1MB8GA1UdIwQY MBaAFIAjWTet9Nq4kl1YBFozcYFsmAUxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0NOWk42MzAycmlTWFZnRVdqTnhnV3lZQlRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9mNjIzODItOTlkZC00N2Q0LThkZTQt MWZlNjkxMmY4ZTdlLzEvbmk4eE9teVBHOEdjSzNaOFRabURHVXAweVBVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9mNjIzODItOTlkZC00N2Q0LThkZTQtMWZlNjkxMmY4ZTdl LzEvZ0NOWk42MzAycmlTWFZnRVdqTnhnV3lZQlRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEUPcQAwQC uZNsMA0EAgACMAcDBQMqAgMIMA0GCSqGSIb3DQEBCwUAA4IBAQBcIOMmD04/WjZa j5l+MXro1R6vNrVWAhUG+DmzZFlpD5q7N5HSmk+L75g5LmgvgkNhLADfyvOBQA/X kj6/S41mDcndeLdEb1qPZWaPvh7ZGHd3ozegf+rWCF30GUDFeahc1wzD/Dnd+sXn IsPKV9ONzNQUSVdfhaq8K1FjKMyyn3u7ZErFxL9xl4f3BoB2Td7AwMIrMYbrdv9c 9IGWs7P6GNbxqb3afCjJIqfnUigLl6hg5FeRU9VpPXmqU7Jq/sWxStvvU3pI1WAE gK4bUaWnF+6U7nqTJs2UsIFXYfoLe7Ne1s96zFQwIPcq0Q0NaAHKuJSVK85ovDiQ Tkd18J9L -----END CERTIFICATE-----Generated at Mon Feb 9 18:43:57 2026 by rpki-client