This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/1-SHXJ_9DyyLTiVml8FNZqLUqf4c.roa File: 1-SHXJ_9DyyLTiVml8FNZqLUqf4c.roa (raw, json) Hash identifier: FC5kQ4eFUsIw6UyiwGZplBvHk2DJiPcZkZfYFEyA+1E= Subject key identifier: F9:21:D7:27:FF:43:CB:22:D3:89:59:A5:F0:53:59:A8:B5:2A:7F:87 Certificate issuer: /CN=4e78b6d00614f5565d9d8af8247cc72ea9b8833d Certificate serial: 019B7B35DDF55022D5F44C5E17D10F25D449 Authority key identifier: 4E:78:B6:D0:06:14:F5:56:5D:9D:8A:F8:24:7C:C7:2E:A9:B8:83:3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tni20AYU9VZdnYr4JHzHLqm4gz0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/1-SHXJ_9DyyLTiVml8FNZqLUqf4c.roa Signing time: Thu 01 Jan 2026 20:18:06 +0000 ROA not before: Thu 01 Jan 2026 20:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212734 IP address blocks: 80.92.200.0/24 maxlen: 24 80.92.201.0/24 maxlen: 24 80.92.202.0/24 maxlen: 24 80.92.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/Tni20AYU9VZdnYr4JHzHLqm4gz0.crl rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/Tni20AYU9VZdnYr4JHzHLqm4gz0.mft rsync://rpki.ripe.net/repository/DEFAULT/Tni20AYU9VZdnYr4JHzHLqm4gz0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:dd:f5:50:22:d5:f4:4c:5e:17:d1:0f:25:d4:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e78b6d00614f5565d9d8af8247cc72ea9b8833d Validity Not Before: Jan 1 20:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f921d727ff43cb22d38959a5f05359a8b52a7f87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4f:a8:32:82:e3:5c:54:6d:d1:6a:34:fd:d9: cc:86:c6:0e:16:e7:b7:0f:a6:48:07:48:80:33:96: fd:43:3b:b1:1e:0d:21:e3:79:aa:97:3a:e7:13:ed: 04:b1:ad:84:d4:94:92:4f:2a:49:f9:8c:2a:36:48: 68:2b:47:53:15:a4:22:07:17:d0:f8:02:1d:d6:c1: df:77:1e:b6:f3:00:4e:c9:70:84:3c:49:99:45:74: 83:d4:5a:2b:e5:76:4e:95:10:db:2e:0c:b0:61:6a: 7e:65:17:eb:8f:2d:5a:10:fb:41:32:df:09:6e:eb: 1b:79:a5:6b:79:f4:c7:b4:3e:65:7a:c6:57:2a:38: d0:3c:8e:a1:95:70:66:22:03:d8:27:26:06:e2:75: a9:47:1c:ac:2d:1c:4f:99:0d:e5:df:af:60:d9:26: e6:e3:5b:dd:e9:61:f4:54:bc:35:2f:ca:32:9b:40: d1:77:3e:6f:94:cd:62:51:e5:ab:d3:80:92:ce:2b: 72:62:81:1b:dc:fc:da:35:02:20:63:54:f6:fe:00: f5:d6:19:f0:74:20:7e:31:f1:79:d6:4a:ac:f4:f4: de:9b:4e:10:fc:80:61:d3:ba:3d:cb:fb:f5:cd:89: 27:63:2a:15:bb:b0:14:b7:41:79:58:05:b4:e6:05: 67:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:21:D7:27:FF:43:CB:22:D3:89:59:A5:F0:53:59:A8:B5:2A:7F:87 X509v3 Authority Key Identifier: keyid:4E:78:B6:D0:06:14:F5:56:5D:9D:8A:F8:24:7C:C7:2E:A9:B8:83:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tni20AYU9VZdnYr4JHzHLqm4gz0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/1-SHXJ_9DyyLTiVml8FNZqLUqf4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/Tni20AYU9VZdnYr4JHzHLqm4gz0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.92.200.0/22 Signature Algorithm: sha256WithRSAEncryption 4d:a0:22:08:87:51:ce:d4:23:92:a3:a8:a8:dd:3c:97:52:01: 17:66:3a:96:c2:ff:b3:28:b0:f2:d2:f4:d3:6f:a9:ed:30:d0: fc:c7:d5:e8:94:25:3e:4b:96:14:45:ea:9c:62:77:99:82:71: c5:a6:23:cf:65:57:6d:29:7f:56:9e:36:2a:bb:89:c9:1a:e6: 36:ee:5b:fa:af:62:ef:71:60:72:65:d5:55:9e:d9:19:01:21: 72:80:72:b3:3a:d6:7d:59:b6:c7:20:6d:f0:6a:46:86:a9:32: 9d:ef:8a:1f:21:9a:c3:20:6e:36:d7:b3:24:d5:d1:d9:d1:3e: 81:1b:a4:55:25:6a:8b:20:43:92:04:41:24:17:ad:69:15:50: 1d:43:b2:f1:d6:20:50:8c:1e:65:c5:8b:9c:69:2c:4b:f1:f5: a0:35:1e:b5:be:53:68:5f:4c:74:6f:f8:d1:93:b8:db:2e:ae: e4:2b:6f:6d:00:f0:c5:5a:3e:59:e7:9a:0f:f8:64:98:b9:0a: 1a:19:ab:97:4b:8e:99:a4:e1:2e:17:f3:61:7d:7d:49:c7:ae: 09:18:51:a9:f7:28:3d:6f:f9:65:f6:94:ef:35:0d:a1:d2:a5: e3:e0:54:6b:11:e1:3c:38:db:59:87:fd:fb:8f:c1:c7:87:40: 7e:41:5d:e9 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt7Nd31UCLV9ExeF9EPJdRJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlNzhiNmQwMDYxNGY1NTY1ZDlkOGFmODI0N2NjNzJlYTli ODgzM2QwHhcNMjYwMTAxMjAxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTIxZDcyN2ZmNDNjYjIyZDM4OTU5YTVmMDUzNTlhOGI1MmE3Zjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqE+oMoLjXFRt0Wo0/dnMhsYOFue3 D6ZIB0iAM5b9QzuxHg0h43mqlzrnE+0Esa2E1JSSTypJ+YwqNkhoK0dTFaQiBxfQ +AId1sHfdx628wBOyXCEPEmZRXSD1For5XZOlRDbLgywYWp+ZRfrjy1aEPtBMt8J busbeaVrefTHtD5lesZXKjjQPI6hlXBmIgPYJyYG4nWpRxysLRxPmQ3l369g2Sbm 41vd6WH0VLw1L8oym0DRdz5vlM1iUeWr04CSzityYoEb3PzaNQIgY1T2/gD11hnw dCB+MfF51kqs9PTem04Q/IBh07o9y/v1zYknYyoVu7AUt0F5WAW05gVnsQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPkh1yf/Q8si04lZpfBTWai1Kn+HMB8GA1UdIwQY MBaAFE54ttAGFPVWXZ2K+CR8xy6puIM9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVG5pMjBBWVU5VlpkbllyNEpIekhMcW00Z3owLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9jYjgyNjUtYzYzMi00ODEzLWI4NTgt ZGVmMzg2NzQzZjMyLzEvMS1TSFhKXzlEeXlMVGlWbWw4Rk5acUxVcWY0Yy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvODMvY2I4MjY1LWM2MzItNDgxMy1iODU4LWRlZjM4Njc0M2Yz Mi8xL1RuaTIwQVlVOVZaZG5ZcjRKSHpITHFtNGd6MC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAlBcyDAN BgkqhkiG9w0BAQsFAAOCAQEATaAiCIdRztQjkqOoqN08l1IBF2Y6lsL/syiw8tL0 02+p7TDQ/MfV6JQlPkuWFEXqnGJ3mYJxxaYjz2VXbSl/Vp42KruJyRrmNu5b+q9i 73FgcmXVVZ7ZGQEhcoByszrWfVm2xyBt8GpGhqkyne+KHyGawyBuNtezJNXR2dE+ gRukVSVqiyBDkgRBJBetaRVQHUOy8dYgUIweZcWLnGksS/H1oDUetb5TaF9MdG/4 0ZO42y6u5CtvbQDwxVo+WeeaD/hkmLkKGhmrl0uOmaThLhfzYX19SceuCRhRqfco PW/5ZfaU7zUNodKl4+BUaxHhPDjbWYf9+4/Bx4dAfkFd6Q== -----END CERTIFICATE-----Generated at Tue Jan 27 04:24:22 2026 by rpki-client