This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/q4kW0iz1-xCx1rCC3Q5buZRP_nQ.roa File: q4kW0iz1-xCx1rCC3Q5buZRP_nQ.roa (raw, json) Hash identifier: /LZ/55ZcvlNKCTvLv/6z/+QEwO6/nIaHAOm8aSJ7fUI= Subject key identifier: AB:89:16:D2:2C:F5:FB:10:B1:D6:B0:82:DD:0E:5B:B9:94:4F:FE:74 Certificate issuer: /CN=cec5afe769b94346e1cd362eb85f875b23b17277 Certificate serial: 019B78351F3B074F4783839FC4DC21F5C70A Authority key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/q4kW0iz1-xCx1rCC3Q5buZRP_nQ.roa Signing time: Thu 01 Jan 2026 06:18:25 +0000 ROA not before: Thu 01 Jan 2026 06:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3320 IP address blocks: 80.83.80.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 06:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:1f:3b:07:4f:47:83:83:9f:c4:dc:21:f5:c7:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec5afe769b94346e1cd362eb85f875b23b17277 Validity Not Before: Jan 1 06:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab8916d22cf5fb10b1d6b082dd0e5bb9944ffe74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:13:d4:be:7d:e9:8c:fd:73:e7:ce:1e:74:a7: 9a:06:2f:db:ba:64:08:72:ed:ad:9b:5b:57:9b:6a: 11:d4:c3:7a:29:9f:41:54:ca:b6:9b:01:e8:61:cc: 0b:f4:92:9d:de:01:93:cc:ed:35:99:6e:5c:0d:ec: 14:e7:9d:00:3b:4b:df:99:8b:ba:0d:b7:d5:1d:53: 1d:28:31:98:78:39:98:64:86:a0:5e:9e:28:80:14: 22:29:fc:c3:6b:37:ed:ea:93:27:21:aa:c0:cd:25: b9:35:49:c0:80:7e:e5:83:5d:13:17:6a:32:84:e7: 23:93:5e:85:af:49:f2:e3:e9:6f:ad:40:54:3c:14: e5:05:7d:6b:d9:0b:6e:b4:5a:69:6c:ab:db:c9:24: 93:d8:36:f2:91:bb:c4:f9:eb:a3:e4:18:12:d2:87: 8c:0b:d2:af:ff:cb:d0:54:cb:f4:eb:f2:93:c1:8f: f6:09:1e:29:0a:7f:10:70:37:a0:93:7e:ba:8a:b4: 20:4e:d9:fc:96:c9:df:45:0d:bf:db:e8:fa:ee:c5: 4c:c2:38:00:35:2e:62:e8:5f:8f:a5:46:75:80:19: f7:a6:c2:ea:de:c2:77:69:d8:ee:e5:28:f3:f7:88: 87:ac:74:00:0f:d5:27:f7:d4:38:f1:9d:3c:c8:ca: 51:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:89:16:D2:2C:F5:FB:10:B1:D6:B0:82:DD:0E:5B:B9:94:4F:FE:74 X509v3 Authority Key Identifier: keyid:CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/q4kW0iz1-xCx1rCC3Q5buZRP_nQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.83.80.0/21 Signature Algorithm: sha256WithRSAEncryption 2a:fc:a0:e4:15:82:ff:fa:b5:aa:af:9f:6c:ac:67:82:90:20: 4f:d7:83:1e:3b:2e:0d:ab:4b:e0:41:a5:97:c3:7b:69:80:6b: bf:96:61:40:d2:49:b4:8f:dc:d2:db:eb:ab:df:24:a8:d2:69: 5b:2e:07:58:0f:4d:be:d0:95:f7:68:77:d0:c6:e3:80:43:83: e6:8c:31:42:36:3d:e9:7a:d7:36:24:a3:27:be:fd:e9:a7:6e: 8d:76:46:d7:04:fd:4d:4f:b0:e9:69:cc:8c:c2:1c:03:77:39: 91:2e:75:9d:c3:b9:a8:e5:ac:47:d0:a0:92:d5:0e:8c:77:90: 2b:27:c2:d1:e2:f0:66:e8:39:ca:45:a2:46:5b:9e:8e:42:ef: 9c:41:84:fe:87:e2:94:86:c6:0e:5e:94:95:de:e3:90:c4:f7: b0:50:7f:47:6e:80:a1:98:18:2d:ec:13:9a:6d:57:2e:f3:f6: 21:a9:46:22:28:c6:c0:c8:a1:90:86:de:c9:50:19:8d:47:37: 8a:fa:38:ff:be:f2:77:11:c4:aa:59:a4:49:79:71:a7:93:39: 47:6b:04:2d:89:81:9b:1b:a4:36:cd:a3:3d:2d:12:3f:68:45: 99:74:22:a3:73:ca:03:cb:ff:38:0e:68:f2:04:cd:fb:f6:86: 1d:df:0f:09 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NR87B09Hg4OfxNwh9ccKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlYzVhZmU3NjliOTQzNDZlMWNkMzYyZWI4NWY4NzViMjNi MTcyNzcwHhcNMjYwMTAxMDYxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjg5MTZkMjJjZjVmYjEwYjFkNmIwODJkZDBlNWJiOTk0NGZmZTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hPUvn3pjP1z584edKeaBi/bumQI cu2tm1tXm2oR1MN6KZ9BVMq2mwHoYcwL9JKd3gGTzO01mW5cDewU550AO0vfmYu6 DbfVHVMdKDGYeDmYZIagXp4ogBQiKfzDazft6pMnIarAzSW5NUnAgH7lg10TF2oy hOcjk16Fr0ny4+lvrUBUPBTlBX1r2QtutFppbKvbySST2DbykbvE+euj5BgS0oeM C9Kv/8vQVMv06/KTwY/2CR4pCn8QcDegk366irQgTtn8lsnfRQ2/2+j67sVMwjgA NS5i6F+PpUZ1gBn3psLq3sJ3adju5Sjz94iHrHQAD9Un99Q48Z08yMpRtwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKuJFtIs9fsQsdawgt0OW7mUT/50MB8GA1UdIwQY MBaAFM7Fr+dpuUNG4c02Lrhfh1sjsXJ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8zZDU2OWMtMTkwNy00ZDJjLWFjZWQt MzMyNDdjOGUxYzFmLzEvcTRrVzBpejEteEN4MXJDQzNRNWJ1WlJQX25RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi8zZDU2OWMtMTkwNy00ZDJjLWFjZWQtMzMyNDdjOGUxYzFm LzEvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDUFNQMA0G CSqGSIb3DQEBCwUAA4IBAQAq/KDkFYL/+rWqr59srGeCkCBP14MeOy4Nq0vgQaWX w3tpgGu/lmFA0km0j9zS2+ur3ySo0mlbLgdYD02+0JX3aHfQxuOAQ4PmjDFCNj3p etc2JKMnvv3pp26NdkbXBP1NT7DpacyMwhwDdzmRLnWdw7mo5axH0KCS1Q6Md5Ar J8LR4vBm6DnKRaJGW56OQu+cQYT+h+KUhsYOXpSV3uOQxPewUH9HboChmBgt7BOa bVcu8/YhqUYiKMbAyKGQht7JUBmNRzeK+jj/vvJ3EcSqWaRJeXGnkzlHawQtiYGb G6Q2zaM9LRI/aEWZdCKjc8oDy/84DmjyBM379oYd3w8J -----END CERTIFICATE-----Generated at Mon Jan 19 11:49:49 2026 by rpki-client