This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/hMYm9e8BNUMHL00M5rbkR4HXWqI.roa File: hMYm9e8BNUMHL00M5rbkR4HXWqI.roa (raw, json) Hash identifier: ge1867rWqQ285UC/FlVpl37XPU9yXofdfeXY425JJF0= Subject key identifier: 84:C6:26:F5:EF:01:35:43:07:2F:4D:0C:E6:B6:E4:47:81:D7:5A:A2 Certificate issuer: /CN=beba48c7e2c9e05eda546d899146b89f799df85d Certificate serial: 019B7A5B1D00F80CC33092E5B66A4F11F630 Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/hMYm9e8BNUMHL00M5rbkR4HXWqI.roa Signing time: Thu 01 Jan 2026 16:19:10 +0000 ROA not before: Thu 01 Jan 2026 16:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30952 IP address blocks: 80.79.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.mft rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:1d:00:f8:0c:c3:30:92:e5:b6:6a:4f:11:f6:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d Validity Not Before: Jan 1 16:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=84c626f5ef013543072f4d0ce6b6e44781d75aa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b2:74:f8:22:c7:8c:3c:0e:30:cd:c6:74:73: 30:2b:2d:7c:e2:53:ce:7b:7e:2e:5f:a9:96:c6:36: 9a:d2:97:57:54:2e:4e:d9:19:36:bf:66:08:d2:80: 7a:72:22:e2:80:94:9f:fc:e1:3b:4c:83:fc:86:34: 2e:e9:0c:36:eb:76:15:4e:0f:b9:fc:2e:a7:fd:7b: 3b:b4:96:20:d6:5d:3d:60:f8:b6:c3:db:b7:d2:41: d3:56:37:36:ed:dd:d4:93:ba:81:74:bf:29:b4:6d: 20:74:00:93:53:4b:f6:b9:56:b3:9a:01:5c:44:06: f3:0a:ba:ee:70:b8:c6:0c:75:a4:de:81:11:b7:e7: 9e:ff:6d:01:9d:dd:c4:9d:0a:ac:fb:6b:84:11:b4: 0d:63:3c:0d:d2:ab:44:b2:54:07:85:ba:6b:e5:a1: 2e:5d:8e:5e:b5:4a:17:2b:84:f0:ce:83:18:03:7d: 21:48:64:9b:55:f7:e6:5a:cc:8a:87:20:b5:d1:a2: 34:35:1a:67:35:bc:3f:ea:86:21:74:12:18:49:8c: fa:a4:54:26:e4:b5:65:8e:55:66:52:7d:b5:d2:c2: 1f:95:41:4b:02:09:20:04:6d:d9:96:55:0f:4a:f7: 2d:fe:bc:03:83:55:73:2b:8e:82:b2:f6:22:71:ac: b6:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:C6:26:F5:EF:01:35:43:07:2F:4D:0C:E6:B6:E4:47:81:D7:5A:A2 X509v3 Authority Key Identifier: keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/hMYm9e8BNUMHL00M5rbkR4HXWqI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.79.250.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:4d:7c:45:0c:f1:d6:9f:5f:74:82:5b:98:4e:7d:71:ac:66: b4:1c:37:e6:e1:f4:40:57:fc:fb:a9:75:d5:34:21:2e:ff:a2: f9:2c:85:d7:d6:d4:7f:23:1e:75:68:84:4e:0c:1d:c5:4c:74: 89:29:82:5e:73:ad:83:82:21:f3:ad:76:fa:cc:c2:75:dc:41: e7:fd:4c:66:10:be:ac:d5:b9:6e:d8:ba:d5:e5:4a:0f:8b:cc: 2b:28:aa:e2:0f:b8:7e:91:4c:74:31:48:3d:6f:1d:7c:93:a9: da:61:be:cb:a9:da:a8:95:1c:7c:73:b8:a2:24:60:bd:03:40: 9c:7a:11:1d:67:5b:4d:5b:05:07:fe:47:4f:1a:3b:ac:37:a5: 89:21:17:90:8c:11:2a:bf:55:81:36:8f:72:29:8a:a4:ff:37: c0:bc:d5:c4:fd:c7:2e:78:e8:98:b0:cf:fc:c5:c4:9a:c2:38: 49:41:6b:99:e0:9a:aa:9f:32:5c:74:36:bf:02:f2:d7:5b:47: f2:5b:78:30:42:5a:65:90:3f:c1:46:56:8a:0b:6b:50:6c:17: a6:6d:78:09:33:97:45:86:bd:63:e7:79:6f:36:8e:1e:5a:58: b0:60:e7:ea:7c:67:f6:3a:56:fa:c4:85:36:1f:e8:74:2d:7e: 5f:08:c2:81 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wx0A+AzDMJLltmpPEfYwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlYmE0OGM3ZTJjOWUwNWVkYTU0NmQ4OTkxNDZiODlmNzk5 ZGY4NWQwHhcNMjYwMTAxMTYxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NGM2MjZmNWVmMDEzNTQzMDcyZjRkMGNlNmI2ZTQ0NzgxZDc1YWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7J0+CLHjDwOMM3GdHMwKy184lPO e34uX6mWxjaa0pdXVC5O2Rk2v2YI0oB6ciLigJSf/OE7TIP8hjQu6Qw263YVTg+5 /C6n/Xs7tJYg1l09YPi2w9u30kHTVjc27d3Uk7qBdL8ptG0gdACTU0v2uVazmgFc RAbzCrrucLjGDHWk3oERt+ee/20Bnd3EnQqs+2uEEbQNYzwN0qtEslQHhbpr5aEu XY5etUoXK4TwzoMYA30hSGSbVffmWsyKhyC10aI0NRpnNbw/6oYhdBIYSYz6pFQm 5LVljlVmUn210sIflUFLAgkgBG3ZllUPSvct/rwDg1VzK46CsvYicay2rwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFITGJvXvATVDBy9NDOa25EeB11qiMB8GA1UdIwQY MBaAFL66SMfiyeBe2lRtiZFGuJ95nfhdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnJwSXgtTEo0RjdhVkcySmtVYTRuM21kLUYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC83Zjg4MjEtMTU2Ni00M2Y0LWFiMjYt M2Q1MjIxODFhMmM0LzEvaE1ZbTllOEJOVU1ITDAwTTVyYmtSNEhYV3FJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC83Zjg4MjEtMTU2Ni00M2Y0LWFiMjYtM2Q1MjIxODFhMmM0 LzEvdnJwSXgtTEo0RjdhVkcySmtVYTRuM21kLUYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUE/6MA0G CSqGSIb3DQEBCwUAA4IBAQBPTXxFDPHWn190gluYTn1xrGa0HDfm4fRAV/z7qXXV NCEu/6L5LIXX1tR/Ix51aIRODB3FTHSJKYJec62DgiHzrXb6zMJ13EHn/UxmEL6s 1blu2LrV5UoPi8wrKKriD7h+kUx0MUg9bx18k6naYb7LqdqolRx8c7iiJGC9A0Cc ehEdZ1tNWwUH/kdPGjusN6WJIReQjBEqv1WBNo9yKYqk/zfAvNXE/ccueOiYsM/8 xcSawjhJQWuZ4JqqnzJcdDa/AvLXW0fyW3gwQlplkD/BRlaKC2tQbBembXgJM5dF hr1j53lvNo4eWliwYOfqfGf2Olb6xIU2H+h0LX5fCMKB -----END CERTIFICATE-----Generated at Mon Jan 26 23:44:09 2026 by rpki-client