This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/SnVfUjSdhXy0ACcSIFHVlQJsS-g.roa File: SnVfUjSdhXy0ACcSIFHVlQJsS-g.roa (raw, json) Hash identifier: 6PfYLGXYvREp7dIVRY1rgo9qMH5/efzBwsOvXM3p0hU= Subject key identifier: 4A:75:5F:52:34:9D:85:7C:B4:00:27:12:20:51:D5:95:02:6C:4B:E8 Certificate issuer: /CN=882fa01902f4e8c347f2116e4645da1a6b4e0962 Certificate serial: 019B7E39030F167EF8C87AA1066108756984 Authority key identifier: 88:2F:A0:19:02:F4:E8:C3:47:F2:11:6E:46:45:DA:1A:6B:4E:09:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iC-gGQL06MNH8hFuRkXaGmtOCWI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/SnVfUjSdhXy0ACcSIFHVlQJsS-g.roa Signing time: Fri 02 Jan 2026 10:20:24 +0000 ROA not before: Fri 02 Jan 2026 10:20:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206011 IP address blocks: 80.244.40.0/21 maxlen: 23 80.244.40.0/22 maxlen: 23 80.244.44.0/22 maxlen: 23 80.244.47.0/24 maxlen: 24 185.199.8.0/24 maxlen: 24 185.199.9.0/24 maxlen: 24 185.199.10.0/24 maxlen: 24 2a0a:9740::/32 maxlen: 32 2a0a:9740:d000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.crl rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.mft rsync://rpki.ripe.net/repository/DEFAULT/iC-gGQL06MNH8hFuRkXaGmtOCWI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:03:0f:16:7e:f8:c8:7a:a1:06:61:08:75:69:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=882fa01902f4e8c347f2116e4645da1a6b4e0962 Validity Not Before: Jan 2 10:20:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4a755f52349d857cb40027122051d595026c4be8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:76:75:b8:97:d9:f5:c6:3f:68:5c:0c:5c:23: 86:45:6b:81:7d:e7:e3:53:ed:b9:73:2c:18:1a:84: 12:d4:c7:6e:dc:9b:37:5a:3e:e4:68:15:c8:e4:0b: 4d:c6:a2:35:6b:bd:b8:8c:0c:0b:1d:60:1d:e4:02: 34:1b:8c:b2:64:66:25:a2:3b:e1:f9:32:1a:37:df: 42:5a:9f:da:b6:7b:c0:b5:89:08:f2:ef:29:50:50: 2f:fa:f1:92:86:fa:3d:b8:cd:b1:fb:33:6a:5e:45: b5:de:dc:29:e4:30:ea:0e:24:9c:36:31:5e:8a:7b: 7d:f3:80:d1:4f:d3:51:e7:4d:72:00:ca:85:78:89: 4e:54:9b:e2:5d:64:fd:9c:38:02:05:1c:a6:9a:11: 57:ce:5c:cb:61:17:86:a6:81:ba:49:fc:ca:ec:9e: 8d:58:b4:d0:de:9a:66:8f:c5:0c:d9:1b:5d:71:37: 21:2a:b9:e8:a4:e1:9a:af:55:01:9f:19:3d:95:fb: ea:fd:4c:1c:ca:41:59:15:ec:c3:39:19:f5:7f:e8: 10:8d:78:c5:d4:3d:78:b2:f0:14:04:52:5b:34:bd: 0b:e9:6e:af:01:31:ac:80:af:5b:52:a9:e0:89:7a: e4:f8:ef:bb:fb:54:2d:f3:7f:67:79:30:09:68:59: 0f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:75:5F:52:34:9D:85:7C:B4:00:27:12:20:51:D5:95:02:6C:4B:E8 X509v3 Authority Key Identifier: keyid:88:2F:A0:19:02:F4:E8:C3:47:F2:11:6E:46:45:DA:1A:6B:4E:09:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iC-gGQL06MNH8hFuRkXaGmtOCWI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/SnVfUjSdhXy0ACcSIFHVlQJsS-g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.244.40.0/21 185.199.8.0-185.199.10.255 IPv6: 2a0a:9740::/32 Signature Algorithm: sha256WithRSAEncryption 41:9a:f1:a9:25:e8:23:43:a4:85:b2:76:28:d2:07:6b:5c:76: 47:8b:61:ca:47:21:ce:32:16:20:9b:45:d4:69:ba:84:8e:4b: 35:91:d7:fb:a7:38:ea:29:f1:a9:da:35:1a:57:87:5b:7b:7e: 21:0c:8a:68:8a:5f:5c:09:32:8f:7c:82:05:6f:c1:ef:bc:b1: e2:4c:25:1a:85:3d:d8:bc:58:71:85:03:5c:83:ab:4c:1b:37: 0e:b5:83:80:23:1f:df:b7:f9:3d:13:d7:ef:60:7e:38:f9:ce: 1a:fc:1e:ef:b0:f9:dd:30:0e:8d:15:2b:26:75:b3:d0:1c:8a: 81:da:37:f1:39:43:c0:2b:85:76:89:6b:85:4b:68:6c:e0:cf: 21:24:b9:fa:2f:f9:40:70:c0:ee:b8:99:0b:d6:05:2f:e5:ce: bf:80:3c:0f:06:02:09:86:e3:c9:b9:2a:58:58:48:ec:4b:fc: 26:d9:07:a1:ba:de:04:33:8f:03:3f:37:c3:83:36:e3:37:06: 79:75:c2:04:ce:2f:d8:22:be:45:b5:b0:6a:70:ef:34:b9:3f: 0a:1a:e7:12:82:32:48:3c:c7:54:56:10:0a:79:88:98:be:c2: 46:ec:ec:1d:de:c4:64:32:ba:74:fd:4e:1f:da:d3:76:4c:06: b7:ac:26:bc -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt+OQMPFn74yHqhBmEIdWmEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4MmZhMDE5MDJmNGU4YzM0N2YyMTE2ZTQ2NDVkYTFhNmI0 ZTA5NjIwHhcNMjYwMTAyMTAyMDI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YTc1NWY1MjM0OWQ4NTdjYjQwMDI3MTIyMDUxZDU5NTAyNmM0YmU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5nZ1uJfZ9cY/aFwMXCOGRWuBfefj U+25cywYGoQS1Mdu3Js3Wj7kaBXI5AtNxqI1a724jAwLHWAd5AI0G4yyZGYlojvh +TIaN99CWp/atnvAtYkI8u8pUFAv+vGShvo9uM2x+zNqXkW13twp5DDqDiScNjFe int984DRT9NR501yAMqFeIlOVJviXWT9nDgCBRymmhFXzlzLYReGpoG6SfzK7J6N WLTQ3ppmj8UM2RtdcTchKrnopOGar1UBnxk9lfvq/UwcykFZFezDORn1f+gQjXjF 1D14svAUBFJbNL0L6W6vATGsgK9bUqngiXrk+O+7+1Qt839neTAJaFkPOQIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFEp1X1I0nYV8tAAnEiBR1ZUCbEvoMB8GA1UdIwQY MBaAFIgvoBkC9OjDR/IRbkZF2hprTgliMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUMtZ0dRTDA2TU5IOGhGdVJrWGFHbXRPQ1dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9lYzA5ODEtZDY4Mi00ZjdiLWIyMTAt NWMyZDI2NTcwNWUwLzEvU25WZlVqU2RoWHkwQUNjU0lGSFZsUUpzUy1nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC9lYzA5ODEtZDY4Mi00ZjdiLWIyMTAtNWMyZDI2NTcwNWUw LzEvaUMtZ0dRTDA2TU5IOGhGdVJrWGFHbXRPQ1dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUAwQDUPQoMAwD BAO5xwgDBAC5xwowDQQCAAIwBwMFACoKl0AwDQYJKoZIhvcNAQELBQADggEBAEGa 8akl6CNDpIWydijSB2tcdkeLYcpHIc4yFiCbRdRpuoSOSzWR1/unOOop8anaNRpX h1t7fiEMimiKX1wJMo98ggVvwe+8seJMJRqFPdi8WHGFA1yDq0wbNw61g4AjH9+3 +T0T1+9gfjj5zhr8Hu+w+d0wDo0VKyZ1s9AcioHaN/E5Q8ArhXaJa4VLaGzgzyEk ufov+UBwwO64mQvWBS/lzr+APA8GAgmG48m5KlhYSOxL/CbZB6G63gQzjwM/N8OD NuM3Bnl1wgTOL9givkW1sGpw7zS5Pwoa5xKCMkg8x1RWEAp5iJi+wkbs7B3exGQy unT9Th/a03ZMBresJrw= -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:23 2026 by rpki-client