This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/KFfWDSyefK-MQgLPQX4mXrxUP9w.roa File: KFfWDSyefK-MQgLPQX4mXrxUP9w.roa (raw, json) Hash identifier: xg8GFoXkHuiLiC0QA69V1kKQ1AiTwnUuPNFXkPnRjTY= Subject key identifier: 28:57:D6:0D:2C:9E:7C:AF:8C:42:02:CF:41:7E:26:5E:BC:54:3F:DC Certificate issuer: /CN=5e79acd4ee40fda43022a2c9642b071da649526c Certificate serial: 019B937CF61CA1B0DF6A63DBE08C5A92E700 Authority key identifier: 5E:79:AC:D4:EE:40:FD:A4:30:22:A2:C9:64:2B:07:1D:A6:49:52:6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xnms1O5A_aQwIqLJZCsHHaZJUmw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/KFfWDSyefK-MQgLPQX4mXrxUP9w.roa Signing time: Tue 06 Jan 2026 13:26:38 +0000 ROA not before: Tue 06 Jan 2026 13:26:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21000 IP address blocks: 80.78.10.0/24 maxlen: 24 80.78.11.0/24 maxlen: 24 80.78.12.0/24 maxlen: 24 80.78.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/Xnms1O5A_aQwIqLJZCsHHaZJUmw.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/Xnms1O5A_aQwIqLJZCsHHaZJUmw.mft rsync://rpki.ripe.net/repository/DEFAULT/Xnms1O5A_aQwIqLJZCsHHaZJUmw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:93:7c:f6:1c:a1:b0:df:6a:63:db:e0:8c:5a:92:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e79acd4ee40fda43022a2c9642b071da649526c Validity Not Before: Jan 6 13:26:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2857d60d2c9e7caf8c4202cf417e265ebc543fdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c9:0c:c3:bf:8c:92:28:ba:a6:ff:b2:30:e8: 56:96:7e:e6:05:89:92:88:70:88:7d:15:7a:fe:a6: 55:57:07:8d:fc:fe:1d:aa:eb:7a:13:76:f0:eb:a8: 31:90:03:0e:96:6e:8d:f6:e8:77:56:83:10:0b:bf: dc:f6:b1:58:f2:28:ae:54:e1:94:16:ea:87:be:1f: ef:8f:16:c9:b7:80:74:a9:63:81:cb:72:d4:4f:70: a5:a1:d1:f2:b8:8c:98:37:e4:f8:13:f5:a2:e8:67: f1:53:75:d0:6b:e3:2c:d5:ac:f1:a7:e8:94:2b:ee: 9e:6e:7d:84:e7:6f:78:dc:3b:a6:83:9d:eb:aa:5a: 99:92:48:3c:48:05:3f:12:bd:50:9e:cb:29:e9:01: 98:6f:2a:71:13:f3:25:3e:17:4f:76:f5:63:1e:94: a1:3f:af:c5:0d:79:7b:e9:0c:10:e9:29:bf:e4:65: ac:0b:81:bd:13:81:21:d8:05:6c:96:57:6b:e7:6e: 70:ae:c6:73:81:1a:69:4f:83:72:7d:a8:f0:94:0f: 2a:81:b4:8f:f2:2c:a0:65:b7:e9:4a:a8:b8:29:21: 84:ca:45:81:25:bd:b8:08:30:a9:e9:e8:0c:29:37: 9f:f9:3e:2e:3b:f8:e5:72:45:5a:e7:42:39:51:91: 04:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:57:D6:0D:2C:9E:7C:AF:8C:42:02:CF:41:7E:26:5E:BC:54:3F:DC X509v3 Authority Key Identifier: keyid:5E:79:AC:D4:EE:40:FD:A4:30:22:A2:C9:64:2B:07:1D:A6:49:52:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xnms1O5A_aQwIqLJZCsHHaZJUmw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/KFfWDSyefK-MQgLPQX4mXrxUP9w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/Xnms1O5A_aQwIqLJZCsHHaZJUmw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.78.10.0-80.78.13.255 Signature Algorithm: sha256WithRSAEncryption 3e:cf:0e:dc:bb:35:70:b6:c7:c1:a2:f6:b4:77:4a:c6:43:4d: b4:b8:12:2d:b6:64:95:99:13:24:a5:bd:d0:e9:75:e4:dc:4c: 1d:98:28:5e:80:5c:27:33:e0:be:13:ad:5b:23:06:af:3e:49: 58:b9:e2:fa:cf:c4:ac:18:2f:9e:c5:97:de:ef:9b:7b:59:35: f8:cd:33:5a:1c:5b:2d:3c:75:e2:e7:af:8c:94:6a:24:aa:38: 7a:77:31:5d:b5:6e:d5:01:50:3e:be:20:f9:05:6e:3e:ec:75: 7d:70:8f:47:14:29:24:0d:15:8f:d9:41:22:05:c0:ac:a8:93: c5:4e:9b:59:02:6a:37:da:8a:09:69:b3:8a:1d:0a:eb:98:c6: 67:d2:ea:a1:42:f4:59:8f:81:28:9e:8b:97:40:6f:46:9c:41: d3:a7:20:01:ba:78:96:73:38:06:a1:e7:b8:af:2f:8d:72:52: fe:fb:00:d9:ec:e4:5b:f5:b5:67:80:17:90:98:7e:6c:e5:ea: e1:00:da:c4:24:e3:8b:db:09:b2:0f:13:c7:dd:b4:ef:d9:b5: 88:0d:66:d3:16:ca:c4:08:24:4c:e3:e2:f2:f5:cc:93:86:5a: de:b7:b1:f5:4c:de:3d:80:a2:4d:5f:22:d8:da:fa:02:de:b1: a3:6f:4d:4f -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZuTfPYcobDfamPb4IxakucAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNzlhY2Q0ZWU0MGZkYTQzMDIyYTJjOTY0MmIwNzFkYTY0 OTUyNmMwHhcNMjYwMTA2MTMyNjM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyODU3ZDYwZDJjOWU3Y2FmOGM0MjAyY2Y0MTdlMjY1ZWJjNTQzZmRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArckMw7+Mkii6pv+yMOhWln7mBYmS iHCIfRV6/qZVVweN/P4dqut6E3bw66gxkAMOlm6N9uh3VoMQC7/c9rFY8iiuVOGU FuqHvh/vjxbJt4B0qWOBy3LUT3ClodHyuIyYN+T4E/Wi6GfxU3XQa+Ms1azxp+iU K+6ebn2E52943Dumg53rqlqZkkg8SAU/Er1Qnssp6QGYbypxE/MlPhdPdvVjHpSh P6/FDXl76QwQ6Sm/5GWsC4G9E4Eh2AVslldr525wrsZzgRppT4NyfajwlA8qgbSP 8iygZbfpSqi4KSGEykWBJb24CDCp6egMKTef+T4uO/jlckVa50I5UZEEnwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFChX1g0snnyvjEICz0F+Jl68VD/cMB8GA1UdIwQY MBaAFF55rNTuQP2kMCKiyWQrBx2mSVJsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWG5tczFPNUFfYVF3SXFMSlpDc0hIYVpKVW13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC84YmNiMzAtODdlNC00M2I1LTgyNDYt ZWI4ZGE1OTU0ZjNiLzEvS0ZmV0RTeWVmSy1NUWdMUFFYNG1YcnhVUDl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC84YmNiMzAtODdlNC00M2I1LTgyNDYtZWI4ZGE1OTU0ZjNi LzEvWG5tczFPNUFfYVF3SXFMSlpDc0hIYVpKVW13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAFQTgoD BAFQTgwwDQYJKoZIhvcNAQELBQADggEBAD7PDty7NXC2x8Gi9rR3SsZDTbS4Ei22 ZJWZEySlvdDpdeTcTB2YKF6AXCcz4L4TrVsjBq8+SVi54vrPxKwYL57Fl97vm3tZ NfjNM1ocWy08deLnr4yUaiSqOHp3MV21btUBUD6+IPkFbj7sdX1wj0cUKSQNFY/Z QSIFwKyok8VOm1kCajfaiglps4odCuuYxmfS6qFC9FmPgSiei5dAb0acQdOnIAG6 eJZzOAah57ivL41yUv77ANns5Fv1tWeAF5CYfmzl6uEA2sQk44vbCbIPE8fdtO/Z tYgNZtMWysQIJEzj4vL1zJOGWt63sfVM3j2Aok1fItja+gLesaNvTU8= -----END CERTIFICATE-----Generated at Tue Feb 10 04:32:09 2026 by rpki-client