This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/gN_Aa7qhIr8AwNwNkVB5BOV65iA.roa File: gN_Aa7qhIr8AwNwNkVB5BOV65iA.roa (raw, json) Hash identifier: 8UqEhKXsnSJXNjsmPY0ghzVvMiK8gZZNf/NDxzYBX1Y= Subject key identifier: 80:DF:C0:6B:BA:A1:22:BF:00:C0:DC:0D:91:50:79:04:E5:7A:E6:20 Certificate issuer: /CN=935f53f5e407e55a2330d9d523a804c0722ca565 Certificate serial: 019B7BA41A3FE677CC83A7198E70298136E5 Authority key identifier: 93:5F:53:F5:E4:07:E5:5A:23:30:D9:D5:23:A8:04:C0:72:2C:A5:65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k19T9eQH5VojMNnVI6gEwHIspWU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/gN_Aa7qhIr8AwNwNkVB5BOV65iA.roa Signing time: Thu 01 Jan 2026 22:18:30 +0000 ROA not before: Thu 01 Jan 2026 22:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12757 IP address blocks: 5.44.190.0/24 maxlen: 24 5.44.191.0/24 maxlen: 24 188.227.248.0/21 maxlen: 21 2a03:5880::/32 maxlen: 32 2a03:5880:104::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.mft rsync://rpki.ripe.net/repository/DEFAULT/k19T9eQH5VojMNnVI6gEwHIspWU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:1a:3f:e6:77:cc:83:a7:19:8e:70:29:81:36:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=935f53f5e407e55a2330d9d523a804c0722ca565 Validity Not Before: Jan 1 22:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=80dfc06bbaa122bf00c0dc0d91507904e57ae620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bd:8f:00:62:a2:5f:9e:5c:ea:5c:2c:ef:b0: 28:99:0b:75:63:db:b2:11:89:a5:33:da:f7:cc:f7: 4c:05:e8:d8:8b:8c:7c:da:ef:a2:3a:a6:f0:bc:6a: 95:cb:71:a3:5c:7c:c2:a7:a5:a9:d3:75:7e:c1:d3: 73:eb:3f:66:37:c0:a5:c9:d3:42:a9:a0:78:16:e4: 2e:67:1e:5a:7a:91:cc:95:26:78:34:98:3d:c4:d4: f9:b3:2b:0d:ce:44:62:8c:c4:75:06:f7:a5:80:36: 9e:c6:89:3f:bc:04:d0:f2:a9:6f:06:96:ee:82:51: d7:e9:66:e6:fe:af:5c:e1:24:a0:11:c0:20:38:44: bb:bc:d1:34:f7:69:31:51:64:92:cf:a7:e3:bd:6b: 96:37:66:4c:7f:e1:68:17:c7:ef:cf:a1:e6:f3:84: 3b:37:73:07:70:25:33:35:89:9b:c0:84:e5:e3:5a: e4:40:3e:f4:05:9f:bf:29:c6:9c:31:0d:e4:02:10: 3d:59:0c:d3:05:9f:3c:e0:5c:d5:5d:8a:de:66:e2: 5d:5b:7e:01:ad:0f:82:6c:8b:cd:e7:b8:17:63:5f: 6c:2e:59:bd:7f:f0:6c:21:11:a3:e8:d3:52:84:25: 3a:6e:b0:89:64:59:63:4f:56:ef:30:f8:07:dd:ae: 74:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:DF:C0:6B:BA:A1:22:BF:00:C0:DC:0D:91:50:79:04:E5:7A:E6:20 X509v3 Authority Key Identifier: keyid:93:5F:53:F5:E4:07:E5:5A:23:30:D9:D5:23:A8:04:C0:72:2C:A5:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k19T9eQH5VojMNnVI6gEwHIspWU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/gN_Aa7qhIr8AwNwNkVB5BOV65iA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.44.190.0/23 188.227.248.0/21 IPv6: 2a03:5880::/32 Signature Algorithm: sha256WithRSAEncryption 83:60:c8:35:01:53:98:6c:4a:ed:7f:f4:3a:81:c0:cb:6e:63: 8c:cb:fc:ca:d7:7e:af:04:ae:be:88:f0:32:e1:3d:8e:fe:b3: 46:9b:73:d4:8f:f2:ec:01:2e:76:8a:e7:d1:fc:8f:c0:fc:29: 63:9c:df:7b:c9:19:d7:1f:a2:01:5d:d4:f7:77:71:ed:99:2e: 8e:71:f0:6b:27:c0:bd:66:4a:c1:3d:a3:06:7e:74:c5:52:1e: ff:7c:02:9c:74:14:34:5d:0d:43:11:3a:c2:60:d8:64:c1:75: 49:e1:d5:7c:54:4e:82:8f:d2:50:f7:ed:7e:39:35:1d:b1:3b: 63:68:0f:5f:5b:d2:56:7f:57:9c:28:05:20:5b:d0:3a:21:34: e0:db:d7:a2:c2:a3:46:4b:18:8f:d1:0d:e6:a7:05:e9:d9:d5: 32:30:65:e4:0a:8d:26:9e:44:b9:42:32:24:bd:90:a7:ba:67: 60:29:f4:79:81:ee:db:04:4c:eb:fc:00:99:6e:02:38:b9:1a: 3d:a1:48:8f:64:a0:1a:fd:8d:53:d8:71:89:bc:2a:94:8c:00: 9c:a2:d3:e3:cf:5b:de:4f:da:16:01:ad:be:d8:ab:4e:9f:38: b8:1e:a5:56:9e:3f:ac:76:9d:1c:be:ed:e8:ab:fe:33:ee:e6: 87:7b:e0:0a -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt7pBo/5nfMg6cZjnApgTblMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNWY1M2Y1ZTQwN2U1NWEyMzMwZDlkNTIzYTgwNGMwNzIy Y2E1NjUwHhcNMjYwMTAxMjIxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MGRmYzA2YmJhYTEyMmJmMDBjMGRjMGQ5MTUwNzkwNGU1N2FlNjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt72PAGKiX55c6lws77AomQt1Y9uy EYmlM9r3zPdMBejYi4x82u+iOqbwvGqVy3GjXHzCp6Wp03V+wdNz6z9mN8ClydNC qaB4FuQuZx5aepHMlSZ4NJg9xNT5sysNzkRijMR1BvelgDaexok/vATQ8qlvBpbu glHX6Wbm/q9c4SSgEcAgOES7vNE092kxUWSSz6fjvWuWN2ZMf+FoF8fvz6Hm84Q7 N3MHcCUzNYmbwITl41rkQD70BZ+/KcacMQ3kAhA9WQzTBZ884FzVXYreZuJdW34B rQ+CbIvN57gXY19sLlm9f/BsIRGj6NNShCU6brCJZFljT1bvMPgH3a501wIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFIDfwGu6oSK/AMDcDZFQeQTleuYgMB8GA1UdIwQY MBaAFJNfU/XkB+VaIzDZ1SOoBMByLKVlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazE5VDllUUg1Vm9qTU5uVkk2Z0V3SElzcFdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi84YjU1NGMtMGNlZi00MWIzLWJhM2It MmQ1ZDY4ODQxNzNmLzEvZ05fQWE3cWhJcjhBd053TmtWQjVCT1Y2NWlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi84YjU1NGMtMGNlZi00MWIzLWJhM2ItMmQ1ZDY4ODQxNzNm LzEvazE5VDllUUg1Vm9qTU5uVkk2Z0V3SElzcFdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBBSy+AwQD vOP4MA0EAgACMAcDBQAqA1iAMA0GCSqGSIb3DQEBCwUAA4IBAQCDYMg1AVOYbErt f/Q6gcDLbmOMy/zK136vBK6+iPAy4T2O/rNGm3PUj/LsAS52iufR/I/A/CljnN97 yRnXH6IBXdT3d3HtmS6OcfBrJ8C9ZkrBPaMGfnTFUh7/fAKcdBQ0XQ1DETrCYNhk wXVJ4dV8VE6Cj9JQ9+1+OTUdsTtjaA9fW9JWf1ecKAUgW9A6ITTg29eiwqNGSxiP 0Q3mpwXp2dUyMGXkCo0mnkS5QjIkvZCnumdgKfR5ge7bBEzr/ACZbgI4uRo9oUiP ZKAa/Y1T2HGJvCqUjACcotPjz1veT9oWAa2+2KtOnzi4HqVWnj+sdp0cvu3oq/4z 7uaHe+AK -----END CERTIFICATE-----Generated at Mon Feb 9 20:09:05 2026 by rpki-client