This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/1f3m5WIt2ZvCZFCMEpdrMwuuSa0.roa File: 1f3m5WIt2ZvCZFCMEpdrMwuuSa0.roa (raw, json) Hash identifier: zBndpFW3MOOklCRMcrwC7cRmH+rM6cBDTwopgPRh+HE= Subject key identifier: D5:FD:E6:E5:62:2D:D9:9B:C2:64:50:8C:12:97:6B:33:0B:AE:49:AD Certificate issuer: /CN=4432f61bbd3fd11d7facbb1543a751a65a3f64c3 Certificate serial: 019B7758BA1A88F2355B963FD3DB841FBB15 Authority key identifier: 44:32:F6:1B:BD:3F:D1:1D:7F:AC:BB:15:43:A7:51:A6:5A:3F:64:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RDL2G70_0R1_rLsVQ6dRplo_ZMM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/1f3m5WIt2ZvCZFCMEpdrMwuuSa0.roa Signing time: Thu 01 Jan 2026 02:17:42 +0000 ROA not before: Thu 01 Jan 2026 02:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43096 IP address blocks: 80.83.90.0/24 maxlen: 24 185.61.236.0/24 maxlen: 24 185.61.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft rsync://rpki.ripe.net/repository/DEFAULT/RDL2G70_0R1_rLsVQ6dRplo_ZMM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:ba:1a:88:f2:35:5b:96:3f:d3:db:84:1f:bb:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4432f61bbd3fd11d7facbb1543a751a65a3f64c3 Validity Not Before: Jan 1 02:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d5fde6e5622dd99bc264508c12976b330bae49ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:97:c6:a4:c4:d8:fc:37:d7:90:51:4b:8a:71: 67:39:22:9b:19:7f:6b:3c:80:17:9d:a2:3b:6f:9f: 38:54:73:b0:5a:a7:87:6d:14:e1:08:50:15:cb:2a: 3f:21:62:b8:50:36:e3:ab:32:df:1d:26:97:41:e5: a5:54:03:4d:0f:68:d8:c2:bf:c5:15:31:17:a5:69: 7a:8f:25:af:ad:b4:b6:a2:3d:20:88:a0:fd:7d:96: a7:cd:07:4b:80:47:e9:30:d4:44:fb:c2:66:cf:f8: d5:43:f6:8e:ed:3a:f6:72:6f:3c:20:aa:9d:23:cc: 86:99:15:95:a1:f4:42:ef:c5:c3:27:a3:41:46:0d: 4f:99:d5:2d:86:c3:8d:ac:39:1c:7a:8e:07:e9:50: bb:f9:57:8f:67:38:8e:b9:40:02:6f:59:d5:71:51: ea:48:c2:f6:7f:0e:03:c9:d7:9b:33:f6:76:d0:b3: 8f:c2:62:70:c5:14:e9:78:fd:65:55:0f:ba:fb:88: 5f:2e:ad:66:4c:69:4c:11:03:1e:bb:ee:d1:21:90: d0:11:be:4f:7e:57:20:a7:65:52:5a:75:7f:a4:6a: 15:c3:e0:13:f8:be:aa:39:0e:0e:f1:8f:b0:92:e1: 98:3c:a5:ff:d3:f1:c4:9f:f3:6a:f5:ab:91:ec:e6: b5:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:FD:E6:E5:62:2D:D9:9B:C2:64:50:8C:12:97:6B:33:0B:AE:49:AD X509v3 Authority Key Identifier: keyid:44:32:F6:1B:BD:3F:D1:1D:7F:AC:BB:15:43:A7:51:A6:5A:3F:64:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDL2G70_0R1_rLsVQ6dRplo_ZMM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/1f3m5WIt2ZvCZFCMEpdrMwuuSa0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.83.90.0/24 185.61.236.0/23 Signature Algorithm: sha256WithRSAEncryption af:57:a8:c6:e7:49:1f:95:e5:55:91:a1:35:83:2f:44:05:7e: ce:88:50:0b:d6:e4:69:8d:3f:5b:f4:e2:3a:ac:4e:d2:db:16: 98:62:36:d8:0d:d6:b3:7d:a1:7d:cd:8b:72:d5:d2:29:7a:06: 34:1f:64:ec:c9:1e:97:2d:0b:f0:5d:22:83:0e:4b:e5:4d:fd: 5d:3b:72:01:0d:63:e4:cc:bf:80:93:0d:b4:95:40:68:e3:62: 3d:58:31:00:60:70:a4:db:be:ed:bd:f8:9f:c0:dd:38:68:8f: 09:e7:50:47:97:46:37:e1:ae:b8:60:f0:4d:6a:aa:9e:d8:3b: eb:aa:ac:fd:1a:b3:77:a0:f0:34:a0:63:a4:5d:81:2e:0d:ab: 79:81:8a:ec:7e:c1:94:18:31:d5:75:57:b1:73:8e:60:dd:14: 9d:12:f3:66:f5:82:81:be:fd:4c:f8:4d:f9:68:ab:f0:cd:64: 4f:d5:f8:fc:3a:d3:53:88:af:91:fb:f3:da:16:60:16:08:47: a9:de:70:db:c8:e7:e3:a3:fc:53:8f:15:0e:38:12:d7:98:a5: 47:db:31:c8:0b:d6:dc:6f:f2:f3:48:56:0e:06:09:13:94:6a: 11:37:7d:a1:0c:22:93:df:33:93:5c:2e:28:e5:cf:43:db:f5: 6f:58:d3:75 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3WLoaiPI1W5Y/09uEH7sVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0MzJmNjFiYmQzZmQxMWQ3ZmFjYmIxNTQzYTc1MWE2NWEz ZjY0YzMwHhcNMjYwMTAxMDIxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNWZkZTZlNTYyMmRkOTliYzI2NDUwOGMxMjk3NmIzMzBiYWU0OWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZfGpMTY/DfXkFFLinFnOSKbGX9r PIAXnaI7b584VHOwWqeHbRThCFAVyyo/IWK4UDbjqzLfHSaXQeWlVANND2jYwr/F FTEXpWl6jyWvrbS2oj0giKD9fZanzQdLgEfpMNRE+8Jmz/jVQ/aO7Tr2cm88IKqd I8yGmRWVofRC78XDJ6NBRg1PmdUthsONrDkceo4H6VC7+VePZziOuUACb1nVcVHq SML2fw4DydebM/Z20LOPwmJwxRTpeP1lVQ+6+4hfLq1mTGlMEQMeu+7RIZDQEb5P flcgp2VSWnV/pGoVw+AT+L6qOQ4O8Y+wkuGYPKX/0/HEn/Nq9auR7Oa1mwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNX95uViLdmbwmRQjBKXazMLrkmtMB8GA1UdIwQY MBaAFEQy9hu9P9Edf6y7FUOnUaZaP2TDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkRMMkc3MF8wUjFfckxzVlE2ZFJwbG9fWk1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82NjRlYjEtZjIyMC00ODA0LThjNWEt OTI3ODg0MGM0OTcwLzEvMWYzbTVXSXQyWnZDWkZDTUVwZHJNd3V1U2EwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS82NjRlYjEtZjIyMC00ODA0LThjNWEtOTI3ODg0MGM0OTcw LzEvUkRMMkc3MF8wUjFfckxzVlE2ZFJwbG9fWk1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUFNaAwQB uT3sMA0GCSqGSIb3DQEBCwUAA4IBAQCvV6jG50kfleVVkaE1gy9EBX7OiFAL1uRp jT9b9OI6rE7S2xaYYjbYDdazfaF9zYty1dIpegY0H2TsyR6XLQvwXSKDDkvlTf1d O3IBDWPkzL+Akw20lUBo42I9WDEAYHCk277tvfifwN04aI8J51BHl0Y34a64YPBN aqqe2Dvrqqz9GrN3oPA0oGOkXYEuDat5gYrsfsGUGDHVdVexc45g3RSdEvNm9YKB vv1M+E35aKvwzWRP1fj8OtNTiK+R+/PaFmAWCEep3nDbyOfjo/xTjxUOOBLXmKVH 2zHIC9bcb/LzSFYOBgkTlGoRN32hDCKT3zOTXC4o5c9D2/VvWNN1 -----END CERTIFICATE-----Generated at Tue Feb 10 04:32:26 2026 by rpki-client