This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/jh1q0Khz-_M-_NrljnyRN8ykZos.roa File: jh1q0Khz-_M-_NrljnyRN8ykZos.roa (raw, json) Hash identifier: YxHKopg2fOCwZT68HBOpYKRGQJXtUa8z+eYm7fqEP9M= Subject key identifier: 8E:1D:6A:D0:A8:73:FB:F3:3E:FC:DA:E5:8E:7C:91:37:CC:A4:66:8B Certificate issuer: /CN=bbf3a257f99528c3a924d269d1af438185c2006d Certificate serial: 019B790FF70CAA1EFC2B94B16BA659251983 Authority key identifier: BB:F3:A2:57:F9:95:28:C3:A9:24:D2:69:D1:AF:43:81:85:C2:00:6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_OiV_mVKMOpJNJp0a9DgYXCAG0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/jh1q0Khz-_M-_NrljnyRN8ykZos.roa Signing time: Thu 01 Jan 2026 10:17:28 +0000 ROA not before: Thu 01 Jan 2026 10:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9146 IP address blocks: 80.87.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/u_OiV_mVKMOpJNJp0a9DgYXCAG0.crl rsync://rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/u_OiV_mVKMOpJNJp0a9DgYXCAG0.mft rsync://rpki.ripe.net/repository/DEFAULT/u_OiV_mVKMOpJNJp0a9DgYXCAG0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:0f:f7:0c:aa:1e:fc:2b:94:b1:6b:a6:59:25:19:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbf3a257f99528c3a924d269d1af438185c2006d Validity Not Before: Jan 1 10:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e1d6ad0a873fbf33efcdae58e7c9137cca4668b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:02:2c:43:53:50:69:fc:a8:f2:e0:65:76:b7: 23:f0:4c:de:d3:9e:15:99:ba:7b:5b:07:1c:5b:f4: e8:82:dc:f0:00:8b:3e:52:8b:33:a3:0f:20:cd:8e: ba:f3:6f:f6:95:53:c2:cf:79:a8:ba:52:13:ed:34: 5c:fc:30:d3:b7:47:45:42:11:b4:1a:3a:bc:5a:57: 28:79:88:a7:7f:ee:2e:34:f6:c1:02:a7:9c:6a:b3: 10:3c:81:8b:96:b5:91:78:40:75:87:c9:18:e9:9d: 78:25:b0:2d:37:72:91:2e:99:b9:8c:55:67:7c:69: 43:ea:ce:07:e8:85:50:ee:f6:76:e3:af:00:bf:a6: df:14:83:ed:fd:be:30:6d:ff:79:e7:40:bb:b3:ea: 33:2c:37:38:90:e9:36:f1:94:2e:a1:af:ee:f3:9e: be:f0:54:4a:61:4f:0e:bc:01:7b:db:55:22:98:7d: 5f:ea:56:c5:a7:16:e4:54:0b:fd:d6:d6:cc:45:9f: ac:4b:48:91:13:42:47:d9:0f:60:b4:f6:22:f7:b3: da:ea:39:f5:48:fe:f1:c1:a6:66:ee:d0:97:80:bc: b9:89:da:60:3c:fe:24:7c:91:00:b8:6f:88:78:55: 77:b5:72:94:df:a2:6e:f3:96:2a:12:1f:4d:80:b0: 81:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:1D:6A:D0:A8:73:FB:F3:3E:FC:DA:E5:8E:7C:91:37:CC:A4:66:8B X509v3 Authority Key Identifier: keyid:BB:F3:A2:57:F9:95:28:C3:A9:24:D2:69:D1:AF:43:81:85:C2:00:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_OiV_mVKMOpJNJp0a9DgYXCAG0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/jh1q0Khz-_M-_NrljnyRN8ykZos.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/u_OiV_mVKMOpJNJp0a9DgYXCAG0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.87.254.0/23 Signature Algorithm: sha256WithRSAEncryption 99:4f:f2:cc:33:46:98:70:1b:13:b1:19:72:de:d3:20:c4:53: 9e:62:55:b4:3a:6c:c9:f6:66:79:cc:a1:8e:43:39:e4:fd:19: 5d:b6:fc:67:da:93:4c:fb:12:c2:7e:16:63:08:24:cd:b5:e1: 4a:e2:40:ec:9d:10:16:ea:1a:70:1d:37:4e:3c:d3:19:69:52: 9c:7d:37:81:7b:4d:3d:0f:e5:02:49:18:ba:a2:59:7d:ca:54: 01:e8:34:38:c3:26:7b:54:da:97:e6:4d:19:ad:04:6a:5c:86: 3f:1f:09:94:fe:83:df:a4:68:1d:3a:46:51:3a:0e:d3:16:02: 23:cd:cb:86:8c:59:31:c0:62:9e:b6:cf:c7:d1:c1:8d:dd:2a: 61:c1:87:4f:bf:a2:24:c0:35:01:87:22:9b:78:8b:82:ee:df: cf:43:0e:33:07:bc:e1:b4:f2:d0:f9:7c:a4:f0:fd:a6:32:8f: bb:35:76:69:f7:ed:28:f4:80:a2:78:8c:aa:96:88:e5:0d:96: 55:f5:99:cc:ef:c3:1e:16:35:75:e5:fc:b6:fa:49:3a:86:25: f1:32:29:2a:96:b7:9c:64:f9:5e:f7:1e:8a:c6:7d:0f:03:97: d1:5b:35:2c:4c:55:ea:95:2b:27:89:e1:7e:d5:48:ee:fe:b6: 56:89:05:c9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5D/cMqh78K5Sxa6ZZJRmDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZjNhMjU3Zjk5NTI4YzNhOTI0ZDI2OWQxYWY0MzgxODVj MjAwNmQwHhcNMjYwMTAxMTAxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTFkNmFkMGE4NzNmYmYzM2VmY2RhZTU4ZTdjOTEzN2NjYTQ2NjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAIsQ1NQafyo8uBldrcj8Eze054V mbp7WwccW/TogtzwAIs+Uoszow8gzY6682/2lVPCz3moulIT7TRc/DDTt0dFQhG0 Gjq8WlcoeYinf+4uNPbBAqecarMQPIGLlrWReEB1h8kY6Z14JbAtN3KRLpm5jFVn fGlD6s4H6IVQ7vZ2468Av6bfFIPt/b4wbf9550C7s+ozLDc4kOk28ZQuoa/u856+ 8FRKYU8OvAF721UimH1f6lbFpxbkVAv91tbMRZ+sS0iRE0JH2Q9gtPYi97Pa6jn1 SP7xwaZm7tCXgLy5idpgPP4kfJEAuG+IeFV3tXKU36Ju85YqEh9NgLCB5QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI4datCoc/vzPvza5Y58kTfMpGaLMB8GA1UdIwQY MBaAFLvzolf5lSjDqSTSadGvQ4GFwgBtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdV9PaVZfbVZLTU9wSk5KcDBhOURnWVhDQUcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC80ZmFhZmYtMzg0Zi00MDJlLThiOGMt NDVmNzdkZmEyNjM2LzEvamgxcTBLaHotX00tX05ybGpueVJOOHlrWm9zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC80ZmFhZmYtMzg0Zi00MDJlLThiOGMtNDVmNzdkZmEyNjM2 LzEvdV9PaVZfbVZLTU9wSk5KcDBhOURnWVhDQUcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBUFf+MA0G CSqGSIb3DQEBCwUAA4IBAQCZT/LMM0aYcBsTsRly3tMgxFOeYlW0OmzJ9mZ5zKGO Qznk/Rldtvxn2pNM+xLCfhZjCCTNteFK4kDsnRAW6hpwHTdOPNMZaVKcfTeBe009 D+UCSRi6oll9ylQB6DQ4wyZ7VNqX5k0ZrQRqXIY/HwmU/oPfpGgdOkZROg7TFgIj zcuGjFkxwGKets/H0cGN3SphwYdPv6IkwDUBhyKbeIuC7t/PQw4zB7zhtPLQ+Xyk 8P2mMo+7NXZp9+0o9ICieIyqlojlDZZV9ZnM78MeFjV15fy2+kk6hiXxMikqlrec ZPle9x6Kxn0PA5fRWzUsTFXqlSsnieF+1Uju/rZWiQXJ -----END CERTIFICATE-----Generated at Mon Feb 9 21:25:43 2026 by rpki-client