This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/tK3EhqbEq4QRtst0UgwLWHhIHck.roa File: tK3EhqbEq4QRtst0UgwLWHhIHck.roa (raw, json) Hash identifier: h+i8ZfbhVVe94VVW1glcQ01dnDaLK8FTDkoi7l88dTA= Subject key identifier: B4:AD:C4:86:A6:C4:AB:84:11:B6:CB:74:52:0C:0B:58:78:48:1D:C9 Certificate issuer: /CN=f73cdc6751d7c59073e4b706402d3691af09086f Certificate serial: 019BDAF05381184A48F7A1B840142DF4D3A7 Authority key identifier: F7:3C:DC:67:51:D7:C5:90:73:E4:B7:06:40:2D:36:91:AF:09:08:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zzcZ1HXxZBz5LcGQC02ka8JCG8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/tK3EhqbEq4QRtst0UgwLWHhIHck.roa Signing time: Tue 20 Jan 2026 10:25:41 +0000 ROA not before: Tue 20 Jan 2026 10:25:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49826 IP address blocks: 80.247.240.0/20 maxlen: 20 80.247.240.0/21 maxlen: 21 82.116.224.0/19 maxlen: 19 87.236.224.0/21 maxlen: 21 185.136.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/9zzcZ1HXxZBz5LcGQC02ka8JCG8.crl rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/9zzcZ1HXxZBz5LcGQC02ka8JCG8.mft rsync://rpki.ripe.net/repository/DEFAULT/9zzcZ1HXxZBz5LcGQC02ka8JCG8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 16:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:da:f0:53:81:18:4a:48:f7:a1:b8:40:14:2d:f4:d3:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f73cdc6751d7c59073e4b706402d3691af09086f Validity Not Before: Jan 20 10:25:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b4adc486a6c4ab8411b6cb74520c0b5878481dc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:27:b5:fd:8d:ea:14:b8:c8:79:d2:38:e3:52: 1c:52:bc:b3:58:fc:de:00:30:70:57:f4:e1:e0:75: 0d:1a:69:1a:39:7d:d0:f3:c7:92:b2:19:f0:17:da: 9a:99:83:10:8b:2e:3c:41:b9:c5:b8:f5:48:93:b8: ed:f8:9d:78:9c:d0:aa:ec:de:7e:da:f6:5c:14:bf: ec:49:70:9b:dc:30:f8:85:98:70:ca:60:7f:86:56: a3:cf:52:d0:4e:4d:86:29:a4:25:04:09:9d:d0:0d: 22:4a:84:56:ce:ed:ea:9b:ad:43:d5:1b:a4:d5:b0: e1:40:e3:e2:3e:fe:b1:40:60:19:73:03:74:9e:1b: f7:cc:24:14:30:f0:f5:2d:5c:47:3c:df:a4:52:c9: 33:30:9d:6f:8b:4f:de:4c:bd:d8:71:3b:06:e1:b7: 89:44:5a:d2:d1:0b:94:16:dd:93:26:a6:3a:9d:9a: 65:8d:f8:ea:b3:f2:97:b0:43:35:14:12:39:c9:2b: a2:98:99:d7:24:0c:6c:21:b6:25:3a:48:20:7d:95: d5:a3:5a:aa:4d:32:36:51:37:02:51:db:75:03:e3: 59:c9:92:6c:bc:e2:6b:0c:3f:cb:13:03:82:b1:54: 2f:2a:fe:31:0f:7a:fd:93:0c:c6:a4:58:4d:71:00: 34:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:AD:C4:86:A6:C4:AB:84:11:B6:CB:74:52:0C:0B:58:78:48:1D:C9 X509v3 Authority Key Identifier: keyid:F7:3C:DC:67:51:D7:C5:90:73:E4:B7:06:40:2D:36:91:AF:09:08:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zzcZ1HXxZBz5LcGQC02ka8JCG8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/tK3EhqbEq4QRtst0UgwLWHhIHck.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/9zzcZ1HXxZBz5LcGQC02ka8JCG8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.247.240.0/20 82.116.224.0/19 87.236.224.0/21 185.136.36.0/22 Signature Algorithm: sha256WithRSAEncryption 77:c9:cf:d7:71:fd:c1:29:18:82:71:12:be:03:a0:b2:5d:b2: d3:4f:52:23:a5:5e:18:9c:b0:af:71:47:b4:c3:15:50:f0:76: fe:93:63:ae:b1:b8:51:c9:ab:07:0c:ce:a9:2b:b0:9e:8f:c4: d2:e1:7c:92:f7:9f:6a:44:d2:9f:8b:7b:35:6f:8c:48:71:c7: 26:58:db:ce:ab:31:96:a6:2f:fd:cb:90:3d:42:47:58:ba:8d: 08:46:e4:8e:a6:d2:66:57:e8:22:b6:11:54:e1:7d:89:2e:ce: d5:65:a3:c6:a8:58:26:83:7e:d3:60:df:b8:9a:bd:92:23:6b: 5a:3b:ac:f5:0a:6c:b4:80:11:f7:04:51:fa:e1:83:57:35:db: bb:a8:e9:8e:81:2d:82:80:93:c6:27:1b:d4:98:d2:89:06:c0: 75:f4:3f:f0:f5:b0:ca:73:ee:6c:19:35:85:20:cd:81:21:4f: 50:a1:ea:d1:eb:f0:46:d2:c0:71:09:d6:94:1f:e0:60:31:39: 43:5e:47:af:90:a1:16:9b:f6:97:81:f3:02:84:fa:3d:b0:72: 66:af:aa:f2:84:95:a3:18:9d:2a:cc:3d:07:46:84:7d:a7:81: 8f:7b:2d:18:8a:36:5c:07:9b:9b:fa:a2:40:05:3a:0a:4c:57: f5:a9:55:a8 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZva8FOBGEpI96G4QBQt9NOnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3M2NkYzY3NTFkN2M1OTA3M2U0YjcwNjQwMmQzNjkxYWYw OTA4NmYwHhcNMjYwMTIwMTAyNTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNGFkYzQ4NmE2YzRhYjg0MTFiNmNiNzQ1MjBjMGI1ODc4NDgxZGM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSe1/Y3qFLjIedI441IcUryzWPze ADBwV/Th4HUNGmkaOX3Q88eSshnwF9qamYMQiy48QbnFuPVIk7jt+J14nNCq7N5+ 2vZcFL/sSXCb3DD4hZhwymB/hlajz1LQTk2GKaQlBAmd0A0iSoRWzu3qm61D1Ruk 1bDhQOPiPv6xQGAZcwN0nhv3zCQUMPD1LVxHPN+kUskzMJ1vi0/eTL3YcTsG4beJ RFrS0QuUFt2TJqY6nZpljfjqs/KXsEM1FBI5ySuimJnXJAxsIbYlOkggfZXVo1qq TTI2UTcCUdt1A+NZyZJsvOJrDD/LEwOCsVQvKv4xD3r9kwzGpFhNcQA0CQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFLStxIamxKuEEbbLdFIMC1h4SB3JMB8GA1UdIwQY MBaAFPc83GdR18WQc+S3BkAtNpGvCQhvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXp6Y1oxSFh4WkJ6NUxjR1FDMDJrYThKQ0c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS84NTUwMDItZDgyMy00MWZlLThmOWEt NzE4ZmQxOTVjNWViLzEvdEszRWhxYkVxNFFSdHN0MFVnd0xXSGhJSGNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS84NTUwMDItZDgyMy00MWZlLThmOWEtNzE4ZmQxOTVjNWVi LzEvOXp6Y1oxSFh4WkJ6NUxjR1FDMDJrYThKQ0c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQEUPfwAwQF UnTgAwQDV+zgAwQCuYgkMA0GCSqGSIb3DQEBCwUAA4IBAQB3yc/Xcf3BKRiCcRK+ A6CyXbLTT1IjpV4YnLCvcUe0wxVQ8Hb+k2OusbhRyasHDM6pK7Cej8TS4XyS959q RNKfi3s1b4xIcccmWNvOqzGWpi/9y5A9QkdYuo0IRuSOptJmV+githFU4X2JLs7V ZaPGqFgmg37TYN+4mr2SI2taO6z1Cmy0gBH3BFH64YNXNdu7qOmOgS2CgJPGJxvU mNKJBsB19D/w9bDKc+5sGTWFIM2BIU9QoerR6/BG0sBxCdaUH+BgMTlDXkevkKEW m/aXgfMChPo9sHJmr6ryhJWjGJ0qzD0HRoR9p4GPey0YijZcB5ub+qJABToKTFf1 qVWo -----END CERTIFICATE-----Generated at Tue Feb 10 01:15:32 2026 by rpki-client