This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/0niShbwHtinfdOcyX-eB9nvMN5U.roa File: 0niShbwHtinfdOcyX-eB9nvMN5U.roa (raw, json) Hash identifier: NxNRyO/CDa98+QF8PESlbVbO+c6T2pxgQCeBwyf4+1Q= Subject key identifier: D2:78:92:85:BC:07:B6:29:DF:74:E7:32:5F:E7:81:F6:7B:CC:37:95 Certificate issuer: /CN=b911c7edbf1d3cc4fb075381a37f76256b87285d Certificate serial: 019B7A5B16282E451B5F95A84875B254F41D Authority key identifier: B9:11:C7:ED:BF:1D:3C:C4:FB:07:53:81:A3:7F:76:25:6B:87:28:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/0niShbwHtinfdOcyX-eB9nvMN5U.roa Signing time: Thu 01 Jan 2026 16:19:08 +0000 ROA not before: Thu 01 Jan 2026 16:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20751 IP address blocks: 80.64.128.0/21 maxlen: 21 80.64.131.0/24 maxlen: 24 80.64.136.0/22 maxlen: 22 83.216.208.0/20 maxlen: 20 83.216.208.0/21 maxlen: 21 83.216.216.0/22 maxlen: 22 83.216.220.0/22 maxlen: 22 185.136.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:16:28:2e:45:1b:5f:95:a8:48:75:b2:54:f4:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b911c7edbf1d3cc4fb075381a37f76256b87285d Validity Not Before: Jan 1 16:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d2789285bc07b629df74e7325fe781f67bcc3795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:90:0f:de:a9:c7:13:7a:97:b7:27:53:00:cc: be:6b:10:d5:32:83:51:d2:f8:37:21:64:50:e6:e5: c2:d2:f1:24:fd:06:f6:58:43:63:87:74:87:34:7e: 89:c2:92:2d:81:07:a3:1c:b2:80:61:20:0f:1e:4d: 29:23:c8:b2:9f:cc:84:3e:e9:a4:a7:74:fb:cc:8b: 4d:8f:c7:40:cc:95:f5:00:10:ea:1f:95:fc:eb:99: 67:2a:52:9d:6c:1f:26:e0:3b:35:ae:ed:49:84:5b: b2:0d:7b:c1:02:52:88:bd:90:70:da:f5:31:1a:eb: d5:cf:57:b7:18:14:b4:02:c6:f4:75:a9:44:27:22: d4:85:23:67:ef:2e:ff:33:a6:50:4a:4f:fe:fb:0c: 18:4d:99:c6:96:33:84:0f:2d:18:2a:70:b6:51:9f: 25:72:1c:a4:0a:53:ba:e1:15:e1:36:c1:24:32:fb: 37:d1:72:87:7d:0b:62:75:f9:0a:07:16:1c:c5:aa: 01:5a:c1:91:c6:0d:33:e7:dc:4a:9f:a4:89:2a:56: 02:fb:18:43:5a:37:14:c7:89:a1:2e:32:53:e5:7b: 04:bc:a0:3a:df:de:30:88:3d:3e:e8:fa:3c:07:4a: 7c:c1:2e:97:56:02:8e:40:56:90:84:99:3a:79:2f: 7c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:78:92:85:BC:07:B6:29:DF:74:E7:32:5F:E7:81:F6:7B:CC:37:95 X509v3 Authority Key Identifier: keyid:B9:11:C7:ED:BF:1D:3C:C4:FB:07:53:81:A3:7F:76:25:6B:87:28:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/0niShbwHtinfdOcyX-eB9nvMN5U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.64.128.0-80.64.139.255 83.216.208.0/20 185.136.212.0/22 Signature Algorithm: sha256WithRSAEncryption af:29:e2:10:a6:77:2c:a4:61:e1:a7:31:79:c5:04:72:4d:6c: 85:8c:0d:0d:73:4c:f0:ce:1d:35:07:6d:8a:dd:13:ba:cc:ea: ee:96:a3:67:2f:53:34:b4:33:81:88:dd:57:67:d2:9b:b1:5b: d3:09:ab:86:b6:1b:24:00:04:6e:c4:c4:29:a3:2b:8d:f1:fe: 71:a3:4a:ca:4e:9d:62:69:cd:5d:d8:98:43:9b:9e:ae:c8:5b: 81:bb:13:95:59:fa:bb:39:05:18:24:dd:51:6f:55:d9:90:52: 06:73:46:a2:1d:de:b8:86:a2:b5:59:2e:c9:75:b7:03:60:e0: 87:03:08:73:a7:73:5c:f0:2b:2b:80:5b:84:3d:1e:47:c0:2a: f4:01:f0:87:b6:41:12:45:d3:45:22:e8:2b:c7:4c:aa:51:5e: d1:d0:b8:79:a5:04:9d:27:6c:b5:1e:7b:ab:bd:e2:d6:2e:58: e7:ab:3f:94:c4:22:2a:5e:35:04:97:81:65:ae:04:19:3c:0d: 9e:15:61:70:50:40:75:70:ab:59:e3:0b:16:b8:ea:0b:d0:f2: 89:20:7a:aa:b4:b2:da:cb:45:ae:b6:04:19:8d:2d:ad:b5:da: 00:93:8c:c4:c2:8b:25:ca:04:65:e6:9b:9c:a5:99:b6:5c:ec: 69:ed:c0:35 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt6WxYoLkUbX5WoSHWyVPQdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MTFjN2VkYmYxZDNjYzRmYjA3NTM4MWEzN2Y3NjI1NmI4 NzI4NWQwHhcNMjYwMTAxMTYxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMjc4OTI4NWJjMDdiNjI5ZGY3NGU3MzI1ZmU3ODFmNjdiY2MzNzk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ZAP3qnHE3qXtydTAMy+axDVMoNR 0vg3IWRQ5uXC0vEk/Qb2WENjh3SHNH6JwpItgQejHLKAYSAPHk0pI8iyn8yEPumk p3T7zItNj8dAzJX1ABDqH5X865lnKlKdbB8m4Ds1ru1JhFuyDXvBAlKIvZBw2vUx GuvVz1e3GBS0Asb0dalEJyLUhSNn7y7/M6ZQSk/++wwYTZnGljOEDy0YKnC2UZ8l chykClO64RXhNsEkMvs30XKHfQtidfkKBxYcxaoBWsGRxg0z59xKn6SJKlYC+xhD WjcUx4mhLjJT5XsEvKA6394wiD0+6Po8B0p8wS6XVgKOQFaQhJk6eS98OQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFNJ4koW8B7Yp33TnMl/ngfZ7zDeVMB8GA1UdIwQY MBaAFLkRx+2/HTzE+wdTgaN/diVrhyhdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJISDdiOGRQTVQ3QjFPQm8zOTJKV3VIS0YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8yM2IxNDgtZTBkZC00ZmE2LWFmNDQt NjEzMDE3ODg2ZThiLzEvMG5pU2hid0h0aW5mZE9jeVgtZUI5bnZNTjVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8yM2IxNDgtZTBkZC00ZmE2LWFmNDQtNjEzMDE3ODg2ZThi LzEvdVJISDdiOGRQTVQ3QjFPQm8zOTJKV3VIS0YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAdQQIAD BAJQQIgDBART2NADBAK5iNQwDQYJKoZIhvcNAQELBQADggEBAK8p4hCmdyykYeGn MXnFBHJNbIWMDQ1zTPDOHTUHbYrdE7rM6u6Wo2cvUzS0M4GI3Vdn0puxW9MJq4a2 GyQABG7ExCmjK43x/nGjSspOnWJpzV3YmEObnq7IW4G7E5VZ+rs5BRgk3VFvVdmQ UgZzRqId3riGorVZLsl1twNg4IcDCHOnc1zwKyuAW4Q9HkfAKvQB8Ie2QRJF00Ui 6CvHTKpRXtHQuHmlBJ0nbLUee6u94tYuWOerP5TEIipeNQSXgWWuBBk8DZ4VYXBQ QHVwq1njCxa46gvQ8okgeqq0strLRa62BBmNLa212gCTjMTCiyXKBGXmm5ylmbZc 7GntwDU= -----END CERTIFICATE-----Generated at Mon Feb 9 21:23:31 2026 by rpki-client