This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/IAYL4GMqgZUTWjncvzyFE3cvwAk.roa File: IAYL4GMqgZUTWjncvzyFE3cvwAk.roa (raw, json) Hash identifier: eH6qO8eIDGkWVolY2rprLnrZ+g+WbWeNduM1jI4ktu4= Subject key identifier: 20:06:0B:E0:63:2A:81:95:13:5A:39:DC:BF:3C:85:13:77:2F:C0:09 Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47 Certificate serial: 019B7CEE046B5382938306A78D3CF57CDC5D Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/IAYL4GMqgZUTWjncvzyFE3cvwAk.roa Signing time: Fri 02 Jan 2026 04:18:52 +0000 ROA not before: Fri 02 Jan 2026 04:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198883 IP address blocks: 80.71.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:04:6b:53:82:93:83:06:a7:8d:3c:f5:7c:dc:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47 Validity Not Before: Jan 2 04:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=20060be0632a8195135a39dcbf3c8513772fc009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:26:34:8a:c5:63:76:c9:57:25:c5:da:7f:40: d9:1c:2a:7c:9f:ce:ad:c2:4e:d3:bf:32:cb:37:f6: 16:ed:56:fa:f6:b9:0e:f6:24:e4:68:db:04:9d:65: 79:0f:f1:a1:18:95:c7:a7:be:a0:09:c4:bf:b5:4d: 97:02:9d:ee:d0:00:34:c9:49:ee:8e:69:0a:e2:cb: 09:30:d1:f1:c4:e4:35:5c:45:9d:69:99:ff:c2:4f: 5e:58:80:1a:d2:77:b9:b3:70:32:53:4a:31:25:d3: 48:3a:11:01:db:98:9d:ae:c9:d4:79:81:c7:d1:ac: af:64:a6:30:df:47:cb:de:1a:ad:fe:fa:e5:e7:7b: f9:e6:df:a9:5d:37:53:7d:13:e2:58:93:bf:9c:23: 2b:93:aa:03:2e:82:ef:91:8f:57:c6:79:d2:f5:4b: 9a:49:a5:6d:06:73:e6:5a:b1:ee:0c:6e:78:f6:c2: 1f:15:ec:99:76:1f:6e:3f:97:ee:43:f9:fd:ef:b7: 44:da:a7:3e:41:6f:f0:ae:36:d7:c9:72:53:69:2b: f6:b6:3c:4c:ad:a3:d9:0e:92:25:33:4a:e9:8a:7f: 23:76:39:b0:34:e9:0c:0e:d3:5c:42:0a:c0:b4:bf: 2d:f2:fb:63:82:3d:40:c3:8c:62:c6:fd:e3:d5:7a: d5:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:06:0B:E0:63:2A:81:95:13:5A:39:DC:BF:3C:85:13:77:2F:C0:09 X509v3 Authority Key Identifier: keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/IAYL4GMqgZUTWjncvzyFE3cvwAk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.71.237.0/24 Signature Algorithm: sha256WithRSAEncryption 36:3e:e3:b8:7f:f2:7c:1f:7e:e0:48:91:b2:f1:9f:66:2a:a7: e7:54:0d:45:e2:02:cc:66:55:6c:34:2b:2f:f1:ca:46:09:ae: b3:0f:aa:11:aa:82:35:55:53:16:44:2b:d2:38:44:d6:e0:c4: 02:59:f5:ef:36:b3:d7:80:6e:02:5c:4b:27:ce:8d:30:d9:70: 52:ce:77:43:9b:4c:d3:20:20:15:70:3f:bb:1f:45:de:53:10: b9:72:f6:ad:86:47:36:73:66:38:63:ea:ae:63:44:32:af:c6: 7b:e9:a7:23:b2:9a:be:8e:8f:5b:6b:fa:ad:c4:fa:1d:7d:dc: df:cd:96:37:d2:8d:f3:07:fd:ca:97:a1:1b:a8:c6:e8:63:4f: 05:91:d7:d4:e0:7c:e5:2a:aa:a6:81:27:54:e3:de:e9:ec:42: 39:18:b6:4d:72:75:a5:49:49:e7:89:d0:0d:48:b4:60:29:a1: 54:76:b4:0e:3c:75:22:45:fd:26:8d:1a:88:c8:37:52:be:f8: bb:df:32:af:90:07:93:e8:1d:af:d9:6d:3c:bd:9d:b2:90:e2: c8:13:d5:d7:5a:6e:44:99:cb:5f:af:7d:e5:1e:9e:79:78:d8: ec:92:c2:27:a8:52:9f:11:ab:89:0b:b7:25:41:cd:ed:5b:82: ef:af:e1:9d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87gRrU4KTgwanjTz1fNxdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZTUxNjk0YzRkNDZiNGZjYzAyZmFlNzFlNWRiOTQyYTcx MDhlNDcwHhcNMjYwMTAyMDQxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMDA2MGJlMDYzMmE4MTk1MTM1YTM5ZGNiZjNjODUxMzc3MmZjMDA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSY0isVjdslXJcXaf0DZHCp8n86t wk7TvzLLN/YW7Vb69rkO9iTkaNsEnWV5D/GhGJXHp76gCcS/tU2XAp3u0AA0yUnu jmkK4ssJMNHxxOQ1XEWdaZn/wk9eWIAa0ne5s3AyU0oxJdNIOhEB25idrsnUeYHH 0ayvZKYw30fL3hqt/vrl53v55t+pXTdTfRPiWJO/nCMrk6oDLoLvkY9XxnnS9Uua SaVtBnPmWrHuDG549sIfFeyZdh9uP5fuQ/n977dE2qc+QW/wrjbXyXJTaSv2tjxM raPZDpIlM0rpin8jdjmwNOkMDtNcQgrAtL8t8vtjgj1Aw4xixv3j1XrVTQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCAGC+BjKoGVE1o53L88hRN3L8AJMB8GA1UdIwQY MBaAFEnlFpTE1GtPzAL65x5duUKnEI5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQt MTkxODliM2M5YzdkLzEvSUFZTDRHTXFnWlVUV2puY3Z6eUZFM2N2d0FrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQtMTkxODliM2M5Yzdk LzEvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUEftMA0G CSqGSIb3DQEBCwUAA4IBAQA2PuO4f/J8H37gSJGy8Z9mKqfnVA1F4gLMZlVsNCsv 8cpGCa6zD6oRqoI1VVMWRCvSOETW4MQCWfXvNrPXgG4CXEsnzo0w2XBSzndDm0zT ICAVcD+7H0XeUxC5cvathkc2c2Y4Y+quY0Qyr8Z76acjspq+jo9ba/qtxPodfdzf zZY30o3zB/3Kl6EbqMboY08FkdfU4HzlKqqmgSdU497p7EI5GLZNcnWlSUnnidAN SLRgKaFUdrQOPHUiRf0mjRqIyDdSvvi73zKvkAeT6B2v2W08vZ2ykOLIE9XXWm5E mctfr33lHp55eNjsksInqFKfEauJC7clQc3tW4Lvr+Gd -----END CERTIFICATE-----Generated at Fri Jan 9 10:36:46 2026 by rpki-client