This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/R3DBHKjE8ohxKxzIJk7-VPvPd-w.roa File: R3DBHKjE8ohxKxzIJk7-VPvPd-w.roa (raw, json) Hash identifier: 926NNVMN0dOUlotEee8GGLB2yhZRvKk278w8BXpKBWc= Subject key identifier: 47:70:C1:1C:A8:C4:F2:88:71:2B:1C:C8:26:4E:FE:54:FB:CF:77:EC Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Certificate serial: 019B7E3892991652FCF1FFF6EFF5C819807E Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/R3DBHKjE8ohxKxzIJk7-VPvPd-w.roa Signing time: Fri 02 Jan 2026 10:19:55 +0000 ROA not before: Fri 02 Jan 2026 10:19:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24640 IP address blocks: 80.86.181.0/24 maxlen: 24 80.86.182.0/23 maxlen: 23 81.209.180.0/22 maxlen: 22 81.209.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 12:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:92:99:16:52:fc:f1:ff:f6:ef:f5:c8:19:80:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Validity Not Before: Jan 2 10:19:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4770c11ca8c4f288712b1cc8264efe54fbcf77ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:74:28:b3:e5:28:39:ce:3e:cc:dd:c0:5b:fc: 3d:0c:8d:7f:d1:38:f9:cc:e2:26:00:85:8e:86:39: 71:b4:32:73:c1:ef:35:f7:5c:cb:77:2b:7e:3c:b6: 17:4c:81:a2:45:5d:e9:d0:a2:c0:6c:fb:76:47:84: de:ab:00:0e:f0:de:da:eb:13:ff:7f:d6:a0:a8:af: 93:55:2f:a4:2e:25:a2:0d:92:fc:f9:a7:11:ea:2a: b4:98:b5:e5:78:33:f2:c8:be:c2:13:b3:b0:ff:dd: 31:ea:2a:6f:9c:83:e4:b6:37:09:1c:d3:4b:cf:16: f6:3b:43:21:f7:07:a3:e4:43:b6:f3:a4:45:0e:15: e7:74:88:d5:82:f6:b0:09:b5:da:4a:f0:3f:43:34: 89:c3:cf:a1:f3:da:06:79:e3:fa:ad:9f:83:a1:ba: 27:a3:b3:95:36:6a:03:94:47:7e:d4:c7:29:a0:45: eb:29:26:ae:39:fa:96:b5:ad:28:1c:45:52:61:62: c4:d8:09:8e:a5:c6:02:f4:7c:72:ac:7c:bb:fc:c8: 03:3b:51:64:4c:c6:c5:8b:a7:c4:f3:7e:f4:ca:93: e0:d4:3e:f6:c8:b2:37:eb:1a:2d:04:83:cc:be:6c: 93:a7:f8:87:ba:d4:27:f9:a6:dc:26:6b:b1:99:0b: c5:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:70:C1:1C:A8:C4:F2:88:71:2B:1C:C8:26:4E:FE:54:FB:CF:77:EC X509v3 Authority Key Identifier: keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/R3DBHKjE8ohxKxzIJk7-VPvPd-w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.86.181.0-80.86.183.255 81.209.180.0/22 81.209.196.0/22 Signature Algorithm: sha256WithRSAEncryption 37:00:ff:f2:e4:4b:21:fd:67:34:c3:e4:e2:22:74:47:6d:59: 92:e6:f7:08:fa:3d:bf:00:e1:86:d6:e5:03:f2:b1:35:15:10: 6b:6e:b7:2a:d6:6e:a0:bb:d0:3d:e0:35:14:ee:c5:81:92:94: 77:b0:0f:3e:7e:99:f6:58:9e:40:9e:5d:70:aa:9d:8f:ca:58: fe:27:09:4e:ff:f9:2c:ad:80:d1:d5:3c:7e:fb:9e:49:ce:c0: 1d:5b:8a:0d:36:1b:87:77:7e:e2:70:7f:6e:a9:f1:8c:ca:e4: 65:31:2d:37:bf:59:7b:3f:76:63:42:9a:1f:bd:e4:8c:de:00: 8d:79:fb:37:d9:b1:0b:9e:c5:ee:00:bd:49:d6:33:9b:a0:eb: 4a:6c:7c:fb:3b:06:63:fb:3a:e4:ff:a7:8c:f2:29:1d:6b:11: cd:7b:19:9e:57:aa:79:85:ec:e1:f2:6c:1a:44:22:0b:a1:84: 56:4b:a6:31:e2:03:c8:ef:be:c1:c1:37:66:87:e7:dc:d4:b9: 22:72:12:0f:41:8a:b0:e9:14:b7:4e:7b:79:5a:9a:4b:8c:e0: dd:14:b5:26:25:86:82:20:6c:07:59:a9:63:c4:61:5a:78:e6: 55:98:66:6e:2d:ce:e1:c4:69:8c:62:00:e2:46:71:30:70:4a: 86:72:5d:02 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt+OJKZFlL88f/27/XIGYB+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmZTkwZmRlOTc4NGE5MWQ5M2E3YTJhZjU5ZDRkMDQzZjEx NzFmYmEwHhcNMjYwMTAyMTAxOTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NzcwYzExY2E4YzRmMjg4NzEyYjFjYzgyNjRlZmU1NGZiY2Y3N2VjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnQos+UoOc4+zN3AW/w9DI1/0Tj5 zOImAIWOhjlxtDJzwe8191zLdyt+PLYXTIGiRV3p0KLAbPt2R4TeqwAO8N7a6xP/ f9agqK+TVS+kLiWiDZL8+acR6iq0mLXleDPyyL7CE7Ow/90x6ipvnIPktjcJHNNL zxb2O0Mh9wej5EO286RFDhXndIjVgvawCbXaSvA/QzSJw8+h89oGeeP6rZ+Dobon o7OVNmoDlEd+1McpoEXrKSauOfqWta0oHEVSYWLE2AmOpcYC9HxyrHy7/MgDO1Fk TMbFi6fE8370ypPg1D72yLI36xotBIPMvmyTp/iHutQn+abcJmuxmQvF+QIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFEdwwRyoxPKIcSscyCZO/lT7z3fsMB8GA1UdIwQY MBaAFB/pD96XhKkdk6eir1nU0EPxFx+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQt MjM3NzJlN2Y5MmUzLzEvUjNEQkhLakU4b2h4S3h6SUprNy1WUHZQZC13LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQtMjM3NzJlN2Y5MmUz LzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBABQVrUD BANQVrADBAJR0bQDBAJR0cQwDQYJKoZIhvcNAQELBQADggEBADcA//LkSyH9ZzTD 5OIidEdtWZLm9wj6Pb8A4YbW5QPysTUVEGtutyrWbqC70D3gNRTuxYGSlHewDz5+ mfZYnkCeXXCqnY/KWP4nCU7/+SytgNHVPH77nknOwB1big02G4d3fuJwf26p8YzK 5GUxLTe/WXs/dmNCmh+95IzeAI15+zfZsQuexe4AvUnWM5ug60psfPs7BmP7OuT/ p4zyKR1rEc17GZ5XqnmF7OHybBpEIguhhFZLpjHiA8jvvsHBN2aH59zUuSJyEg9B irDpFLdOe3lamkuM4N0UtSYlhoIgbAdZqWPEYVp45lWYZm4tzuHEaYxiAOJGcTBw SoZyXQI= -----END CERTIFICATE-----Generated at Thu Feb 5 13:56:09 2026 by rpki-client