This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/PdkevrpF3oUdP6NYf__qRu2eJGQ.roa File: PdkevrpF3oUdP6NYf__qRu2eJGQ.roa (raw, json) Hash identifier: 6/Jf7bWiwH8GcWaq82/QO3p1jndML4uQsI4DJpc/gzU= Subject key identifier: 3D:D9:1E:BE:BA:45:DE:85:1D:3F:A3:58:7F:FF:EA:46:ED:9E:24:64 Certificate issuer: /CN=beba48c7e2c9e05eda546d899146b89f799df85d Certificate serial: 019B7A5B2500AC0541BF68070A70F61257A2 Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/PdkevrpF3oUdP6NYf__qRu2eJGQ.roa Signing time: Thu 01 Jan 2026 16:19:12 +0000 ROA not before: Thu 01 Jan 2026 16:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214887 IP address blocks: 80.73.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.mft rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:25:00:ac:05:41:bf:68:07:0a:70:f6:12:57:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d Validity Not Before: Jan 1 16:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3dd91ebeba45de851d3fa3587fffea46ed9e2464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:74:43:b7:e8:7c:50:04:95:70:24:71:cb:93: dc:3e:e1:02:9e:03:45:f8:cb:a2:ac:62:af:5f:c2: 4d:5c:6b:c2:73:c8:4a:07:cd:5e:38:b6:ee:d7:8b: cd:b2:5a:10:d6:49:63:22:e1:0a:64:3a:75:2d:0a: b7:7c:c7:43:63:c2:f4:8e:cb:00:39:be:e4:1e:10: 5d:33:8f:37:02:43:d7:6e:0f:c2:5d:97:60:ec:3f: 8e:6d:2e:9d:d4:73:8d:09:b6:5b:47:ef:c1:83:8c: 3a:82:ed:45:9e:64:65:30:c6:dc:52:bd:aa:14:30: 1f:a6:8f:e9:bc:fc:62:1a:77:e5:99:c3:a4:c6:a9: 8d:b9:bc:4a:c0:18:b3:b7:c7:68:a6:e0:04:82:ba: 34:4e:53:4d:9f:9a:00:70:b6:4a:ce:f8:18:1a:7d: 6d:29:4c:d0:44:47:34:d5:07:01:75:29:c7:5e:12: 1c:c3:1e:2f:75:20:14:c9:70:4f:60:b6:11:ea:58: f7:56:9f:b4:08:34:dd:4b:c5:f5:6a:be:cc:50:46: 8e:03:96:52:dc:c6:f0:dc:24:c8:bf:2c:fd:34:3b: bd:41:24:ba:55:b1:8a:40:0d:9f:9f:c1:1d:e3:22: 3d:49:50:02:fe:9d:ca:44:98:34:db:ee:68:01:5e: c8:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:D9:1E:BE:BA:45:DE:85:1D:3F:A3:58:7F:FF:EA:46:ED:9E:24:64 X509v3 Authority Key Identifier: keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/PdkevrpF3oUdP6NYf__qRu2eJGQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.73.193.0/24 Signature Algorithm: sha256WithRSAEncryption a8:cf:d7:d5:25:65:7e:49:9d:5a:d5:c9:47:d8:40:a5:e9:ea: e8:17:29:a7:b7:56:c6:08:f9:c6:5b:96:c9:c8:e4:39:b2:0b: 8a:c9:12:f5:cd:48:3e:2b:09:84:73:89:db:19:0c:a3:11:3c: 58:3d:42:29:31:da:1d:98:d2:9d:d3:b0:d2:cd:08:55:76:57: 98:66:e0:31:6d:4e:46:4f:d9:c6:0c:f0:2f:58:3a:04:1a:19: c0:99:fa:5e:07:da:23:2c:7d:aa:9e:29:fb:74:ef:d8:80:15: 63:53:26:90:ac:09:77:a6:4d:bc:cd:80:38:f9:a1:e4:01:64: 2d:a2:58:05:a0:66:1e:a1:83:61:b9:7a:e8:f2:57:30:08:df: 56:cc:d6:f4:4d:f9:c6:c5:e9:71:4c:07:29:d2:66:fb:27:4d: a6:3b:e9:01:2d:77:d2:2e:86:cf:53:55:82:d4:c7:83:3d:86: d9:dc:86:76:2b:d6:c4:80:62:30:ee:6a:71:7a:e5:49:47:c6: 15:58:39:1e:c5:9a:88:50:67:be:b4:1a:48:cd:26:ef:09:81: 89:53:f2:9e:f5:f2:f9:d8:be:50:3b:3b:d5:4c:b4:c3:fc:d1: be:e9:90:7c:f6:60:cc:da:28:57:69:89:ef:5c:a3:af:d1:6b: 97:5b:e5:d6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WyUArAVBv2gHCnD2EleiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlYmE0OGM3ZTJjOWUwNWVkYTU0NmQ4OTkxNDZiODlmNzk5 ZGY4NWQwHhcNMjYwMTAxMTYxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZGQ5MWViZWJhNDVkZTg1MWQzZmEzNTg3ZmZmZWE0NmVkOWUyNDY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3RDt+h8UASVcCRxy5PcPuECngNF +MuirGKvX8JNXGvCc8hKB81eOLbu14vNsloQ1kljIuEKZDp1LQq3fMdDY8L0jssA Ob7kHhBdM483AkPXbg/CXZdg7D+ObS6d1HONCbZbR+/Bg4w6gu1FnmRlMMbcUr2q FDAfpo/pvPxiGnflmcOkxqmNubxKwBizt8dopuAEgro0TlNNn5oAcLZKzvgYGn1t KUzQREc01QcBdSnHXhIcwx4vdSAUyXBPYLYR6lj3Vp+0CDTdS8X1ar7MUEaOA5ZS 3Mbw3CTIvyz9NDu9QSS6VbGKQA2fn8Ed4yI9SVAC/p3KRJg02+5oAV7IzwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD3ZHr66Rd6FHT+jWH//6kbtniRkMB8GA1UdIwQY MBaAFL66SMfiyeBe2lRtiZFGuJ95nfhdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnJwSXgtTEo0RjdhVkcySmtVYTRuM21kLUYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC83Zjg4MjEtMTU2Ni00M2Y0LWFiMjYt M2Q1MjIxODFhMmM0LzEvUGRrZXZycEYzb1VkUDZOWWZfX3FSdTJlSkdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC83Zjg4MjEtMTU2Ni00M2Y0LWFiMjYtM2Q1MjIxODFhMmM0 LzEvdnJwSXgtTEo0RjdhVkcySmtVYTRuM21kLUYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUEnBMA0G CSqGSIb3DQEBCwUAA4IBAQCoz9fVJWV+SZ1a1clH2ECl6eroFymnt1bGCPnGW5bJ yOQ5sguKyRL1zUg+KwmEc4nbGQyjETxYPUIpMdodmNKd07DSzQhVdleYZuAxbU5G T9nGDPAvWDoEGhnAmfpeB9ojLH2qnin7dO/YgBVjUyaQrAl3pk28zYA4+aHkAWQt olgFoGYeoYNhuXro8lcwCN9WzNb0TfnGxelxTAcp0mb7J02mO+kBLXfSLobPU1WC 1MeDPYbZ3IZ2K9bEgGIw7mpxeuVJR8YVWDkexZqIUGe+tBpIzSbvCYGJU/Ke9fL5 2L5QOzvVTLTD/NG+6ZB89mDM2ihXaYnvXKOv0WuXW+XW -----END CERTIFICATE-----Generated at Mon Jan 26 23:22:06 2026 by rpki-client