This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/80iCgpPXOpxj2QuyhWAAhLXssPg.roa
File: 80iCgpPXOpxj2QuyhWAAhLXssPg.roa (raw, json)
Hash identifier: R9I/2lsnefslGYRmmPeJiUGqHF+AhkybIV+mxlt9CnQ=
Subject key identifier: F3:48:82:82:93:D7:3A:9C:63:D9:0B:B2:85:60:00:84:B5:EC:B0:F8
Certificate issuer: /CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Certificate serial: 019C232A0E0FD0474DA521F2BFCB067D8632
Authority key identifier: CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/80iCgpPXOpxj2QuyhWAAhLXssPg.roa
Signing time: Tue 03 Feb 2026 11:01:24 +0000
ROA not before: Tue 03 Feb 2026 11:01:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205719
IP address blocks: 88.210.62.0/24 maxlen: 24
216.162.45.0/24 maxlen: 24
2a14:a087:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Feb 2026 14:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:23:2a:0e:0f:d0:47:4d:a5:21:f2:bf:cb:06:7d:86:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Validity
Not Before: Feb 3 11:01:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f348828293d73a9c63d90bb285600084b5ecb0f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:25:9c:41:3b:53:1b:cd:f7:98:f1:7d:b6:22:
b0:8c:43:31:3e:8c:a1:df:7e:78:f1:1a:e0:a4:2a:
9c:93:48:dd:03:31:55:49:5d:3d:48:20:35:6f:ef:
e0:82:55:89:8c:20:a5:66:e8:f2:d9:8f:57:d8:aa:
30:b6:1f:d0:bd:9d:44:e1:87:0c:d2:33:2c:82:0d:
d9:40:f3:9d:45:f6:b8:2a:a4:e1:c7:52:0e:7c:3f:
0f:b0:48:b3:42:ca:10:27:a0:51:f8:b2:0f:43:c3:
7a:4e:18:d6:55:7e:07:07:28:db:09:76:07:84:c8:
69:e9:8b:97:23:f3:73:d2:72:dd:d5:0c:5a:c9:c1:
a9:b4:9f:e2:f9:a2:a4:7d:a2:79:9b:17:a5:0b:60:
d7:ac:a1:87:f5:52:37:e2:ba:54:4e:0c:29:3d:c5:
ed:79:df:8f:38:d1:15:6b:ab:f2:21:83:16:1b:6c:
3d:c5:9c:53:a7:f9:8f:2d:b5:e7:be:6f:1d:f7:c7:
af:ea:78:e0:41:0d:05:68:26:67:82:83:74:e6:cd:
07:4c:e3:e3:90:6f:e6:58:fa:4d:1e:57:06:d9:2b:
7a:ab:da:33:e5:ed:6f:d0:46:97:7b:02:58:be:94:
28:8e:6e:13:e3:4b:57:5f:5f:52:09:a6:3f:79:7c:
8f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:48:82:82:93:D7:3A:9C:63:D9:0B:B2:85:60:00:84:B5:EC:B0:F8
X509v3 Authority Key Identifier:
keyid:CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/80iCgpPXOpxj2QuyhWAAhLXssPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.210.62.0/24
216.162.45.0/24
IPv6:
2a14:a087:2::/48
Signature Algorithm: sha256WithRSAEncryption
16:d7:c2:f5:cf:37:df:7c:5e:fe:a5:b4:9f:64:d9:05:e2:f6:
59:a0:b4:e2:fc:1b:b7:55:3a:51:11:0e:64:e8:d4:50:cb:9d:
b4:a4:b0:99:fd:99:a8:0d:62:51:cc:6f:90:c5:5e:4a:f6:c3:
e4:2f:f7:d4:5a:7d:96:e4:f6:01:c1:6a:07:cb:5b:d2:4c:72:
ec:a2:f0:81:9e:3d:24:b1:a2:f0:b5:c9:2a:a6:93:72:20:d6:
d7:68:32:ec:0f:9c:8a:2e:8c:77:83:c1:ea:63:72:f9:fc:d7:
3e:37:97:74:6a:4b:06:63:f4:b4:f2:29:2c:ed:62:97:42:52:
8e:fd:e7:30:8b:f1:40:92:88:d9:b8:6a:f6:d5:a6:09:35:c4:
dc:0b:8a:5e:6e:38:aa:56:84:77:45:2a:e5:a2:44:3d:6a:fe:
ab:7d:57:0f:a7:e9:be:0a:97:ed:d1:c5:30:c0:5e:3a:17:aa:
2d:0a:2d:cf:ad:e2:b8:2f:1e:db:a9:2d:fd:63:9d:f0:5d:a4:
4c:65:d5:4c:22:79:41:27:06:11:3c:0c:68:ed:b2:28:91:81:
61:12:a7:03:e6:ce:f7:49:23:f7:6f:11:38:69:9d:d2:8d:e5:
89:55:06:8a:00:41:bf:51:2c:eb:b1:62:3e:0d:ee:3f:4b:d0:
c0:2f:f3:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 23:35:07 2026 by rpki-client