This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/aLZv5zfSsWmyyFeeVsMlO2WoEOI.roa File: aLZv5zfSsWmyyFeeVsMlO2WoEOI.roa (raw, json) Hash identifier: 3bBdTpTJvuXiahizaCJvEqZFOKH3JQrv3q1L3oXewkc= Subject key identifier: 68:B6:6F:E7:37:D2:B1:69:B2:C8:57:9E:56:C3:25:3B:65:A8:10:E2 Certificate issuer: /CN=99f2f4b02246e604e237f37945a382bfada1277f Certificate serial: 019B7CECF54232F798E9513909FBB0E51160 Authority key identifier: 99:F2:F4:B0:22:46:E6:04:E2:37:F3:79:45:A3:82:BF:AD:A1:27:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfL0sCJG5gTiN_N5RaOCv62hJ38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/aLZv5zfSsWmyyFeeVsMlO2WoEOI.roa Signing time: Fri 02 Jan 2026 04:17:42 +0000 ROA not before: Fri 02 Jan 2026 04:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216230 IP address blocks: 80.75.208.0/24 maxlen: 24 2a13:f540::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.crl rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.mft rsync://rpki.ripe.net/repository/DEFAULT/mfL0sCJG5gTiN_N5RaOCv62hJ38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:f5:42:32:f7:98:e9:51:39:09:fb:b0:e5:11:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99f2f4b02246e604e237f37945a382bfada1277f Validity Not Before: Jan 2 04:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=68b66fe737d2b169b2c8579e56c3253b65a810e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:56:17:0f:38:60:e1:5a:cc:cf:39:78:a8:42: f4:14:5d:a2:64:4a:56:72:5f:75:95:b9:b6:46:46: 3c:7a:be:db:df:9a:cc:f2:46:c7:b7:50:ab:77:3d: f4:9f:bd:e9:3e:78:bd:43:b5:49:cb:c4:d2:53:0e: fd:b3:2c:ff:79:20:00:ea:cf:47:52:21:34:8e:ee: b5:c8:61:0a:50:14:0f:fa:f7:37:13:67:41:a4:85: 1c:35:4c:d0:ed:37:82:43:30:a5:8d:ba:96:0b:6d: ba:d9:43:3f:db:11:4e:58:cf:18:3d:cf:90:9d:97: f9:80:86:90:d8:eb:e6:81:0a:79:8d:8e:1c:4e:52: 7f:6c:d4:98:5b:f2:06:06:d8:e8:2b:4d:11:c9:e8: e9:2d:d2:94:cd:53:df:47:4b:f8:a4:5f:77:15:8c: 8e:8d:31:32:c6:1c:71:da:48:eb:0f:cc:f2:9b:89: 84:b9:af:ba:12:0b:2e:1c:19:aa:ae:80:0c:9c:06: 18:d3:36:29:80:3b:45:9a:55:9b:91:ff:bc:a3:b3: 5f:d4:c7:4b:76:af:44:b8:b1:7a:09:72:93:e8:bb: d1:b6:63:58:05:86:f7:dc:35:2a:be:9c:3b:76:61: a0:a7:57:58:22:f8:ef:87:f0:77:8a:8f:7b:0d:ef: ac:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:B6:6F:E7:37:D2:B1:69:B2:C8:57:9E:56:C3:25:3B:65:A8:10:E2 X509v3 Authority Key Identifier: keyid:99:F2:F4:B0:22:46:E6:04:E2:37:F3:79:45:A3:82:BF:AD:A1:27:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfL0sCJG5gTiN_N5RaOCv62hJ38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/aLZv5zfSsWmyyFeeVsMlO2WoEOI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.75.208.0/24 IPv6: 2a13:f540::/29 Signature Algorithm: sha256WithRSAEncryption 66:25:f2:00:a2:35:03:b3:8d:20:89:f5:0b:bd:6a:34:8d:30: a4:d1:71:ac:bc:ab:9c:e9:f9:85:5c:2b:46:b9:4a:e4:7e:c0: ed:44:1a:90:2b:b7:7a:47:1a:34:ca:40:69:49:03:86:6e:99: b8:c8:e4:fb:9f:4d:c7:c4:31:c3:60:4b:58:ca:a5:cb:69:3d: 59:bf:ea:3f:72:41:90:f9:68:e8:46:90:5f:7a:64:6b:ac:79: 93:d3:5c:2b:21:c5:30:5a:2b:40:46:ed:60:e7:3c:25:95:8e: 80:84:06:b0:93:2e:9b:d2:d7:1d:9c:04:7f:5f:4e:a1:30:93: 3f:36:8d:1e:18:93:bf:30:a9:4f:8f:b9:7d:44:3c:5d:17:9f: f1:af:fa:72:4c:1b:d5:c8:ef:13:2a:49:62:0b:05:1a:70:8a: 3e:32:87:57:6c:c4:02:8e:bb:7d:30:9e:76:6e:63:0c:5e:44: 46:38:39:e3:e4:83:47:ff:53:98:b5:9f:d7:cb:f0:02:71:a1: dc:d0:00:f3:f0:75:86:69:a3:25:b4:cd:30:08:0f:0e:58:c8: 74:e9:f1:b0:93:9f:0c:9c:d8:d5:35:c4:81:78:c9:cc:18:86: 0f:f7:87:c2:96:ae:be:7a:b5:0e:8b:39:e0:5e:a1:dc:65:c6: f6:a7:a8:67 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt87PVCMveY6VE5Cfuw5RFgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ZjJmNGIwMjI0NmU2MDRlMjM3ZjM3OTQ1YTM4MmJmYWRh MTI3N2YwHhcNMjYwMTAyMDQxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OGI2NmZlNzM3ZDJiMTY5YjJjODU3OWU1NmMzMjUzYjY1YTgxMGUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFYXDzhg4VrMzzl4qEL0FF2iZEpW cl91lbm2RkY8er7b35rM8kbHt1Crdz30n73pPni9Q7VJy8TSUw79syz/eSAA6s9H UiE0ju61yGEKUBQP+vc3E2dBpIUcNUzQ7TeCQzCljbqWC2262UM/2xFOWM8YPc+Q nZf5gIaQ2OvmgQp5jY4cTlJ/bNSYW/IGBtjoK00RyejpLdKUzVPfR0v4pF93FYyO jTEyxhxx2kjrD8zym4mEua+6EgsuHBmqroAMnAYY0zYpgDtFmlWbkf+8o7Nf1MdL dq9EuLF6CXKT6LvRtmNYBYb33DUqvpw7dmGgp1dYIvjvh/B3io97De+smwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFGi2b+c30rFpsshXnlbDJTtlqBDiMB8GA1UdIwQY MBaAFJny9LAiRuYE4jfzeUWjgr+toSd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWZMMHNDSkc1Z1RpTl9ONVJhT0N2NjJoSjM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS82MGJjMDYtYzcyMS00ZTMwLWE3NTct NmY0ZDgxODk0MWE4LzEvYUxadjV6ZlNzV215eUZlZVZzTWxPMldvRU9JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS82MGJjMDYtYzcyMS00ZTMwLWE3NTctNmY0ZDgxODk0MWE4 LzEvbWZMMHNDSkc1Z1RpTl9ONVJhT0N2NjJoSjM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAUEvQMA0E AgACMAcDBQMqE/VAMA0GCSqGSIb3DQEBCwUAA4IBAQBmJfIAojUDs40gifULvWo0 jTCk0XGsvKuc6fmFXCtGuUrkfsDtRBqQK7d6Rxo0ykBpSQOGbpm4yOT7n03HxDHD YEtYyqXLaT1Zv+o/ckGQ+WjoRpBfemRrrHmT01wrIcUwWitARu1g5zwllY6AhAaw ky6b0tcdnAR/X06hMJM/No0eGJO/MKlPj7l9RDxdF5/xr/pyTBvVyO8TKkliCwUa cIo+ModXbMQCjrt9MJ52bmMMXkRGODnj5INH/1OYtZ/Xy/ACcaHc0ADz8HWGaaMl tM0wCA8OWMh06fGwk58MnNjVNcSBeMnMGIYP94fClq6+erUOizngXqHcZcb2p6hn -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:32 2026 by rpki-client