This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/I1rg6xs3o8Go-gF4-RjrW0bV9WM.roa File: I1rg6xs3o8Go-gF4-RjrW0bV9WM.roa (raw, json) Hash identifier: yfWzfBuxYPM9v8oqi3xN90em1ZCLl4Kvl07zOUCd7Jo= Subject key identifier: 23:5A:E0:EB:1B:37:A3:C1:A8:FA:01:78:F9:18:EB:5B:46:D5:F5:63 Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47 Certificate serial: 019B7CEDFF9DECFDBD9EBFAE40E5C0C09FC1 Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/I1rg6xs3o8Go-gF4-RjrW0bV9WM.roa Signing time: Fri 02 Jan 2026 04:18:50 +0000 ROA not before: Fri 02 Jan 2026 04:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5511 IP address blocks: 80.71.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:ff:9d:ec:fd:bd:9e:bf:ae:40:e5:c0:c0:9f:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47 Validity Not Before: Jan 2 04:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=235ae0eb1b37a3c1a8fa0178f918eb5b46d5f563 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:86:e5:c4:26:06:22:b5:2f:8b:b5:af:c5:49: ba:a2:ca:d4:06:64:5f:5e:14:2a:9b:a3:57:63:13: d5:4a:e2:c9:e0:49:6d:0a:54:55:9c:c7:aa:e5:5f: 01:e3:4e:85:a1:38:d6:c2:51:41:bf:0a:2e:52:37: a2:47:81:c5:15:cb:a6:8c:77:f1:85:2a:f0:09:70: 26:90:09:a8:9d:d7:c2:c4:9d:3a:ed:d5:5e:a3:33: 35:c1:ae:52:d7:de:2f:80:0e:3d:3b:6a:1f:68:4c: 14:3d:ac:0e:9d:53:9c:f5:83:1a:cb:3a:fe:e3:db: c0:17:8f:25:79:89:02:a1:03:4b:a1:88:59:e6:49: bc:fb:fd:ce:87:a1:2b:15:c2:0f:08:31:0e:a2:2c: b7:16:64:7b:e1:3a:85:64:d1:e7:82:75:10:2f:40: 39:57:71:c8:0f:ca:42:31:be:06:cb:5e:a7:ef:6e: d6:59:2d:e5:91:d8:5c:50:f5:cd:54:44:6a:a0:fa: af:54:57:aa:e1:2e:0e:c9:4b:4d:ba:b3:2d:8d:d6: a9:d7:36:6c:62:d6:eb:ec:aa:67:85:54:df:fc:29: b5:e8:4e:30:82:36:70:94:14:00:a4:d2:b9:a3:ef: d6:92:50:29:d6:9f:81:96:20:c5:de:bc:5c:e4:35: 67:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:5A:E0:EB:1B:37:A3:C1:A8:FA:01:78:F9:18:EB:5B:46:D5:F5:63 X509v3 Authority Key Identifier: keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/I1rg6xs3o8Go-gF4-RjrW0bV9WM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.71.237.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:61:47:a1:0c:95:2d:f2:bd:32:96:68:b0:74:6b:31:9a:8d: 43:a6:7b:19:d4:7b:5a:5d:76:8a:91:8f:ba:b7:4e:64:a9:2f: 94:12:14:10:ea:7e:c8:ee:29:67:e0:20:50:20:45:ef:19:a5: b4:55:08:2f:08:57:f5:d1:19:b4:2a:fc:88:d3:19:98:19:bf: 28:cf:f5:02:92:48:41:e0:43:e6:d1:e2:11:cd:0c:27:60:25: f4:4a:56:48:72:ec:e3:5c:ce:96:fb:63:7c:27:9e:33:0f:e2: 20:fa:70:46:27:25:c9:a5:3b:8e:eb:60:f6:ba:f5:34:9b:f2: 0c:2c:cb:30:15:48:24:3d:a0:53:3b:32:76:83:64:fa:aa:7b: 45:d2:25:7f:38:0b:15:21:e6:cb:75:d1:fa:61:1b:4a:c7:e8: e3:65:19:52:a8:f1:4c:2a:e7:68:56:15:e6:db:79:05:ee:67: d3:f2:a2:97:e1:6e:86:2b:1f:cb:10:28:a7:d8:fc:e4:19:bf: ba:7d:56:ee:42:4b:00:22:93:12:20:8e:05:4b:7d:63:6b:41: 48:d5:ae:09:91:6d:20:e5:14:ab:a2:9c:d0:2e:e3:f7:ce:eb: ef:10:e3:18:c3:a8:fc:df:c8:8d:d4:d3:67:dd:d3:92:ca:ab: 18:b6:08:26 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87f+d7P29nr+uQOXAwJ/BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZTUxNjk0YzRkNDZiNGZjYzAyZmFlNzFlNWRiOTQyYTcx MDhlNDcwHhcNMjYwMTAyMDQxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMzVhZTBlYjFiMzdhM2MxYThmYTAxNzhmOTE4ZWI1YjQ2ZDVmNTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4YblxCYGIrUvi7WvxUm6osrUBmRf XhQqm6NXYxPVSuLJ4EltClRVnMeq5V8B406FoTjWwlFBvwouUjeiR4HFFcumjHfx hSrwCXAmkAmondfCxJ067dVeozM1wa5S194vgA49O2ofaEwUPawOnVOc9YMayzr+ 49vAF48leYkCoQNLoYhZ5km8+/3Oh6ErFcIPCDEOoiy3FmR74TqFZNHngnUQL0A5 V3HID8pCMb4Gy16n727WWS3lkdhcUPXNVERqoPqvVFeq4S4OyUtNurMtjdap1zZs Ytbr7KpnhVTf/Cm16E4wgjZwlBQApNK5o+/WklAp1p+BliDF3rxc5DVnUwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCNa4OsbN6PBqPoBePkY61tG1fVjMB8GA1UdIwQY MBaAFEnlFpTE1GtPzAL65x5duUKnEI5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQt MTkxODliM2M5YzdkLzEvSTFyZzZ4czNvOEdvLWdGNC1SanJXMGJWOVdNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQtMTkxODliM2M5Yzdk LzEvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUEftMA0G CSqGSIb3DQEBCwUAA4IBAQANYUehDJUt8r0ylmiwdGsxmo1DpnsZ1HtaXXaKkY+6 t05kqS+UEhQQ6n7I7iln4CBQIEXvGaW0VQgvCFf10Rm0KvyI0xmYGb8oz/UCkkhB 4EPm0eIRzQwnYCX0SlZIcuzjXM6W+2N8J54zD+Ig+nBGJyXJpTuO62D2uvU0m/IM LMswFUgkPaBTOzJ2g2T6qntF0iV/OAsVIebLddH6YRtKx+jjZRlSqPFMKudoVhXm 23kF7mfT8qKX4W6GKx/LECin2PzkGb+6fVbuQksAIpMSII4FS31ja0FI1a4JkW0g 5RSropzQLuP3zuvvEOMYw6j838iN1NNn3dOSyqsYtggm -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:11 2026 by rpki-client