This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/sC2t9HeXwYJBmIK5hgUt1abWWNw.roa File: sC2t9HeXwYJBmIK5hgUt1abWWNw.roa (raw, json) Hash identifier: /DjK2xG/5mDL0W1RW1HoW+CDPOFy25HMayyHgxh49IY= Subject key identifier: B0:2D:AD:F4:77:97:C1:82:41:98:82:B9:86:05:2D:D5:A6:D6:58:DC Certificate issuer: /CN=e8206aa3252e3ea8d684eaec7a2993513b5d2307 Certificate serial: 019B7EA732E09F8328037AC586D274DF935E Authority key identifier: E8:20:6A:A3:25:2E:3E:A8:D6:84:EA:EC:7A:29:93:51:3B:5D:23:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6CBqoyUuPqjWhOrseimTUTtdIwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/sC2t9HeXwYJBmIK5hgUt1abWWNw.roa Signing time: Fri 02 Jan 2026 12:20:45 +0000 ROA not before: Fri 02 Jan 2026 12:20:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56605 IP address blocks: 80.84.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/6CBqoyUuPqjWhOrseimTUTtdIwc.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/6CBqoyUuPqjWhOrseimTUTtdIwc.mft rsync://rpki.ripe.net/repository/DEFAULT/6CBqoyUuPqjWhOrseimTUTtdIwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:32:e0:9f:83:28:03:7a:c5:86:d2:74:df:93:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8206aa3252e3ea8d684eaec7a2993513b5d2307 Validity Not Before: Jan 2 12:20:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b02dadf47797c182419882b986052dd5a6d658dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d2:74:77:65:8f:c0:ed:42:ad:88:98:b3:87: 2c:a5:f9:fb:0c:39:21:9b:03:bd:b8:b9:8a:14:e8: 75:b1:c8:88:df:bc:a6:9c:03:87:03:74:7a:ee:03: 66:59:c4:e4:b3:ca:11:16:a7:b4:27:66:5b:57:05: 3c:98:7a:2a:5e:1d:40:67:d2:4b:c6:32:6c:68:f1: 66:55:09:53:54:40:0e:51:fe:6e:f4:87:8a:8b:13: 83:e7:bd:5e:8a:28:2e:f3:6a:21:5d:73:b2:5c:df: 22:00:3e:f7:00:2d:f6:35:d5:4b:9b:76:b1:d8:02: eb:ab:00:b4:04:f4:49:27:c9:d3:28:01:7f:4e:b5: dd:9c:50:31:44:62:16:d3:61:66:94:ea:12:d6:57: 59:e0:f6:a6:c4:c9:69:8b:7f:64:0f:36:d8:a6:8e: 26:b5:cb:8e:4a:13:66:52:25:67:a4:11:5d:aa:a8: f5:ac:58:ab:3f:bf:79:8b:55:09:1e:e4:7d:c3:4a: b9:3d:cd:d4:56:bb:9f:8d:64:28:23:0c:ef:78:90: 04:4e:53:4c:93:eb:f8:d7:fd:37:6b:c2:4d:37:f3: a3:da:47:27:05:7b:be:b0:cb:5f:8f:4e:12:81:3b: cf:12:d3:49:f2:4f:d9:dd:67:a6:19:a7:a2:db:06: 0d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:2D:AD:F4:77:97:C1:82:41:98:82:B9:86:05:2D:D5:A6:D6:58:DC X509v3 Authority Key Identifier: keyid:E8:20:6A:A3:25:2E:3E:A8:D6:84:EA:EC:7A:29:93:51:3B:5D:23:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6CBqoyUuPqjWhOrseimTUTtdIwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/sC2t9HeXwYJBmIK5hgUt1abWWNw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/6CBqoyUuPqjWhOrseimTUTtdIwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.84.191.0/24 Signature Algorithm: sha256WithRSAEncryption c2:f3:d5:34:1e:55:62:1f:8c:1c:d3:80:c5:8d:d4:53:83:97: 9c:59:10:04:37:99:13:48:dc:2a:c9:49:9b:19:6e:c3:10:3c: 89:2d:18:dc:14:59:41:c3:73:79:de:ff:3e:15:d2:e2:b5:4d: dd:c5:27:ce:86:d3:29:f1:25:fc:9c:d7:7e:c5:fd:e0:24:04: 05:3f:82:09:dd:ff:4b:63:db:38:7e:b9:a3:ba:80:f9:17:87: 0c:74:df:f4:6f:bf:25:dd:6a:ec:b7:e2:5d:f8:c8:9f:10:2b: bf:eb:87:76:fa:ed:11:66:76:3b:46:31:f0:1d:11:55:f2:c3: aa:c9:cc:36:4e:c8:8f:0d:1c:55:87:c9:e4:b6:88:c1:21:45: ee:86:be:35:f2:91:c3:f5:72:1b:39:14:be:c4:8a:4c:5c:87: e5:c7:c0:d3:78:51:5b:9b:d9:fc:00:b4:6d:80:96:93:a6:35: e5:eb:1f:10:ed:5d:9c:bb:ce:4c:d5:09:5f:3a:5d:98:8c:cb: 9f:cf:a1:01:bd:36:6e:2a:b2:f2:76:d8:ac:eb:49:30:02:9e: 91:d9:a6:e4:58:e7:bc:ee:05:e3:46:c0:86:21:1c:c4:f8:75: 6a:c5:90:20:44:d4:20:d2:e0:c0:4d:fe:b2:cf:a5:fc:27:ef: e8:97:00:f7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pzLgn4MoA3rFhtJ035NeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4MjA2YWEzMjUyZTNlYThkNjg0ZWFlYzdhMjk5MzUxM2I1 ZDIzMDcwHhcNMjYwMTAyMTIyMDQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDJkYWRmNDc3OTdjMTgyNDE5ODgyYjk4NjA1MmRkNWE2ZDY1OGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9J0d2WPwO1CrYiYs4cspfn7DDkh mwO9uLmKFOh1sciI37ymnAOHA3R67gNmWcTks8oRFqe0J2ZbVwU8mHoqXh1AZ9JL xjJsaPFmVQlTVEAOUf5u9IeKixOD571eiigu82ohXXOyXN8iAD73AC32NdVLm3ax 2ALrqwC0BPRJJ8nTKAF/TrXdnFAxRGIW02FmlOoS1ldZ4PamxMlpi39kDzbYpo4m tcuOShNmUiVnpBFdqqj1rFirP795i1UJHuR9w0q5Pc3UVrufjWQoIwzveJAETlNM k+v41/03a8JNN/Oj2kcnBXu+sMtfj04SgTvPEtNJ8k/Z3WemGaei2wYN0wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLAtrfR3l8GCQZiCuYYFLdWm1ljcMB8GA1UdIwQY MBaAFOggaqMlLj6o1oTq7Hopk1E7XSMHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkNCcW95VXVQcWpXaE9yc2VpbVRVVHRkSXdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80N2FjY2ItNmYzYy00YzZjLTlmZDAt NTg1ZWI4NDU1OGY5LzEvc0MydDlIZVh3WUpCbUlLNWhnVXQxYWJXV053LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80N2FjY2ItNmYzYy00YzZjLTlmZDAtNTg1ZWI4NDU1OGY5 LzEvNkNCcW95VXVQcWpXaE9yc2VpbVRVVHRkSXdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUFS/MA0G CSqGSIb3DQEBCwUAA4IBAQDC89U0HlViH4wc04DFjdRTg5ecWRAEN5kTSNwqyUmb GW7DEDyJLRjcFFlBw3N53v8+FdLitU3dxSfOhtMp8SX8nNd+xf3gJAQFP4IJ3f9L Y9s4frmjuoD5F4cMdN/0b78l3Wrst+Jd+MifECu/64d2+u0RZnY7RjHwHRFV8sOq ycw2TsiPDRxVh8nktojBIUXuhr418pHD9XIbORS+xIpMXIflx8DTeFFbm9n8ALRt gJaTpjXl6x8Q7V2cu85M1QlfOl2YjMufz6EBvTZuKrLydtis60kwAp6R2abkWOe8 7gXjRsCGIRzE+HVqxZAgRNQg0uDATf6yz6X8J+/olwD3 -----END CERTIFICATE-----Generated at Tue Feb 10 01:14:01 2026 by rpki-client