This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/iLNpsH5sQgKCwekV5rgPGnMfzKE.roa File: iLNpsH5sQgKCwekV5rgPGnMfzKE.roa (raw, json) Hash identifier: RwjZuN1jrdzwn1SBSVFpZYYoKBswRMbYm4F6OicSmhU= Subject key identifier: 88:B3:69:B0:7E:6C:42:02:82:C1:E9:15:E6:B8:0F:1A:73:1F:CC:A1 Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f Certificate serial: 019B7EA7191FA1ED1F78DF5012108D460CD4 Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/iLNpsH5sQgKCwekV5rgPGnMfzKE.roa Signing time: Fri 02 Jan 2026 12:20:38 +0000 ROA not before: Fri 02 Jan 2026 12:20:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209241 IP address blocks: 80.78.134.0/24 maxlen: 24 2a0d:2146:8050::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:19:1f:a1:ed:1f:78:df:50:12:10:8d:46:0c:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f Validity Not Before: Jan 2 12:20:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=88b369b07e6c420282c1e915e6b80f1a731fcca1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:75:b8:e1:d5:95:a8:18:ae:85:20:04:a5:64: 3d:f5:8c:1e:0d:a9:c9:86:7f:12:99:ca:4c:f4:e5: 4b:d5:b0:13:0d:df:a9:64:6b:9e:d7:cf:75:58:41: fd:61:e2:64:a6:da:7d:3c:89:41:40:af:17:a1:91: ca:ac:9a:e2:1a:03:a7:59:30:55:85:2d:f7:18:35: f7:ba:69:12:1c:23:a6:2c:23:aa:9b:cd:7f:cc:17: ed:90:61:12:fa:a9:ea:44:b9:cd:d0:b0:26:02:d2: ba:a7:17:53:1d:36:eb:a2:94:10:9b:df:00:27:66: 08:94:e0:d7:34:f3:27:8e:39:bc:52:4e:85:b2:82: c6:81:d5:cb:32:a4:9b:df:60:31:b7:07:0c:b1:6e: c8:b3:ce:78:80:71:9c:36:bd:01:7b:56:66:8c:90: 58:c0:3b:7d:39:49:1c:5d:e4:2c:40:b7:1e:71:5e: e3:90:9e:26:6e:f4:48:f1:8a:8e:e9:a5:eb:5a:38: 2a:d4:db:43:5f:f3:c5:eb:d8:5c:4c:6e:a0:50:e2: ce:b3:e5:66:b8:a0:ca:c2:af:e7:c7:0b:a9:19:71: 99:05:12:df:c4:61:f9:40:97:da:08:8f:5d:b1:0e: 26:c1:1c:36:8d:d3:b9:c4:fc:28:62:23:da:2e:10: d1:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:B3:69:B0:7E:6C:42:02:82:C1:E9:15:E6:B8:0F:1A:73:1F:CC:A1 X509v3 Authority Key Identifier: keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/iLNpsH5sQgKCwekV5rgPGnMfzKE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.78.134.0/24 IPv6: 2a0d:2146:8050::/44 Signature Algorithm: sha256WithRSAEncryption 63:56:23:7d:72:fa:f3:32:67:d8:5e:72:68:92:8d:11:85:15: 93:56:64:10:bb:b8:0b:a1:c6:c7:67:85:ac:2f:de:8b:e8:01: bb:d1:4b:4f:4f:3d:e1:f0:7d:d0:6a:f0:af:ad:d2:af:c7:cd: 79:d7:f6:8f:74:49:13:7a:07:3a:a4:04:c4:75:e7:b3:ff:c2: 64:41:b6:36:89:f7:c1:28:1e:20:39:26:d0:b9:ed:e7:c1:60: 10:8b:52:97:db:82:14:3a:bc:ef:37:b5:80:e8:c7:2f:31:6d: 0d:06:f0:54:3b:cf:3f:d4:4e:8e:4f:01:41:22:3b:27:de:33: 3b:6c:d8:86:ce:3f:54:62:2c:04:fb:d2:70:6b:24:26:9b:fd: 10:47:00:11:0f:b8:0c:ac:30:b6:ff:f2:f3:49:12:ef:14:bd: 0f:a1:be:ab:4b:f0:7c:81:78:48:35:ae:b6:31:7b:e8:cf:dc: 72:bd:4d:e5:00:ef:bb:f8:6e:1b:66:66:1c:a6:97:73:5c:cb: 9a:28:3e:0f:de:3b:92:65:f8:c1:34:20:ac:1c:23:50:51:a7: 6f:f6:06:45:18:6e:40:cc:af:ed:6f:ab:a6:78:34:fe:f3:ab: f5:f6:37:77:30:7a:db:9a:bb:ec:45:6f:4b:97:5b:50:85:2e: d2:ba:5b:c0 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt+pxkfoe0feN9QEhCNRgzUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNGFjNjExNjE0ZGQxNjVkOTQ1NTcyOTZlZDdlZDQ2Yzhm YzAyNWYwHhcNMjYwMTAyMTIyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OGIzNjliMDdlNmM0MjAyODJjMWU5MTVlNmI4MGYxYTczMWZjY2ExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3W44dWVqBiuhSAEpWQ99YweDanJ hn8SmcpM9OVL1bATDd+pZGue1891WEH9YeJkptp9PIlBQK8XoZHKrJriGgOnWTBV hS33GDX3umkSHCOmLCOqm81/zBftkGES+qnqRLnN0LAmAtK6pxdTHTbropQQm98A J2YIlODXNPMnjjm8Uk6FsoLGgdXLMqSb32AxtwcMsW7Is854gHGcNr0Be1ZmjJBY wDt9OUkcXeQsQLcecV7jkJ4mbvRI8YqO6aXrWjgq1NtDX/PF69hcTG6gUOLOs+Vm uKDKwq/nxwupGXGZBRLfxGH5QJfaCI9dsQ4mwRw2jdO5xPwoYiPaLhDReQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFIizabB+bEICgsHpFea4DxpzH8yhMB8GA1UdIwQY MBaAFOFKxhFhTdFl2UVXKW7X7UbI/AJfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82ZTc5YjgtMmI4Zi00ZWNjLTlhNmUt NzBlODk4YmIzOGRkLzEvaUxOcHNINXNRZ0tDd2VrVjVyZ1BHbk1mektFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS82ZTc5YjgtMmI4Zi00ZWNjLTlhNmUtNzBlODk4YmIzOGRk LzEvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAUE6GMA8E AgACMAkDBwQqDSFGgFAwDQYJKoZIhvcNAQELBQADggEBAGNWI31y+vMyZ9hecmiS jRGFFZNWZBC7uAuhxsdnhawv3ovoAbvRS09PPeHwfdBq8K+t0q/HzXnX9o90SRN6 BzqkBMR157P/wmRBtjaJ98EoHiA5JtC57efBYBCLUpfbghQ6vO83tYDoxy8xbQ0G 8FQ7zz/UTo5PAUEiOyfeMzts2IbOP1RiLAT70nBrJCab/RBHABEPuAysMLb/8vNJ Eu8UvQ+hvqtL8HyBeEg1rrYxe+jP3HK9TeUA77v4bhtmZhyml3Ncy5ooPg/eO5Jl +ME0IKwcI1BRp2/2BkUYbkDMr+1vq6Z4NP7zq/X2N3cwetuau+xFb0uXW1CFLtK6 W8A= -----END CERTIFICATE-----Generated at Wed Jan 21 12:19:13 2026 by rpki-client