This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/fZ_Btht45xaHLpXNFdVYnxZ50Ow.roa File: fZ_Btht45xaHLpXNFdVYnxZ50Ow.roa (raw, json) Hash identifier: JpN5XVDZY1IahuGnYijyyeq5BW4QE/s6DEijCb+GpS0= Subject key identifier: 7D:9F:C1:B6:1B:78:E7:16:87:2E:95:CD:15:D5:58:9F:16:79:D0:EC Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Certificate serial: 019B7CEDC78BB02606DD7D3691BFA7E36018 Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/fZ_Btht45xaHLpXNFdVYnxZ50Ow.roa Signing time: Fri 02 Jan 2026 04:18:36 +0000 ROA not before: Fri 02 Jan 2026 04:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35011 IP address blocks: 88.80.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:c7:8b:b0:26:06:dd:7d:36:91:bf:a7:e3:60:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Validity Not Before: Jan 2 04:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d9fc1b61b78e716872e95cd15d5589f1679d0ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e1:57:29:10:50:9f:78:e0:ce:3c:5c:30:f0: c9:cf:16:77:a4:70:5d:2b:10:8c:f1:11:87:26:fd: 9a:6e:00:73:77:d5:c3:58:b6:63:3e:85:6f:97:19: 4c:4f:0b:ba:94:0f:44:3e:d9:ee:65:28:7b:fe:0e: 79:81:d2:b7:6d:9f:ad:61:b7:06:26:cc:8b:fc:59: 41:cf:d3:33:7d:1c:b9:77:a8:b4:7e:ee:d8:d4:77: 54:c2:a1:88:55:9c:cd:fc:ab:3e:93:52:7a:11:85: d4:2a:51:fe:91:00:64:01:23:d3:3c:6f:b5:c4:cf: ff:31:5f:39:13:d8:33:75:0a:9a:1d:f5:f3:8c:b4: 85:cf:58:e1:d6:d6:93:50:6f:96:17:cd:81:93:c1: ed:b4:53:b6:75:dc:54:a0:e2:39:c4:e2:6d:f2:ea: 37:60:84:61:ec:f4:06:a4:61:5c:bf:7e:ee:3e:e6: f3:64:86:9a:f5:58:8d:a5:f9:9f:7c:7c:8b:a8:32: ae:0a:09:b7:a3:5c:7d:8d:a1:b5:da:43:4f:b5:9c: ed:a2:e8:da:c0:bf:9e:fc:d0:95:97:73:37:a9:78: 93:22:5c:18:dd:1e:9e:24:5a:94:ee:f3:f3:1e:35: eb:ae:48:cc:92:19:66:1a:16:e1:cf:70:f3:6c:22: bf:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:9F:C1:B6:1B:78:E7:16:87:2E:95:CD:15:D5:58:9F:16:79:D0:EC X509v3 Authority Key Identifier: keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/fZ_Btht45xaHLpXNFdVYnxZ50Ow.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.80.129.0/24 Signature Algorithm: sha256WithRSAEncryption 39:54:79:6f:1d:14:8c:8f:c1:48:15:b2:bb:ac:7b:00:91:63: 08:eb:57:7a:72:22:53:96:ff:2a:4b:58:21:f3:6f:42:0c:62: fb:53:31:84:da:d8:f7:59:22:aa:cc:8c:35:83:34:15:ca:ee: f6:0f:23:22:27:4f:53:30:49:0a:61:d2:18:55:59:9e:c5:b8: a1:e3:ba:fc:b8:55:8f:fa:67:2b:3a:6b:d0:7b:fa:59:14:91: 5b:2b:cd:76:35:b4:71:88:68:bb:86:98:c0:85:d2:ed:d8:c7: 9f:85:09:cd:1c:92:69:1c:78:5c:b0:13:f2:0e:74:92:fa:86: 1f:86:f2:1f:a6:60:11:bd:18:58:4e:40:8b:e9:55:7f:41:a1: f0:a4:c6:57:de:e0:86:48:e4:ed:da:9e:bb:5d:ed:b6:ce:73: 46:a5:73:96:83:ea:41:2c:0a:08:92:15:92:37:40:04:f1:c5: 88:98:f2:71:f6:18:21:f4:a8:d6:b0:8a:9b:7b:c3:66:02:ce: 61:5b:37:f1:c1:83:29:3c:e4:61:01:e4:d1:d3:90:04:fe:82: 76:5e:ed:91:fa:1e:33:5a:2b:43:11:29:9b:00:53:7f:d1:51: 32:7f:c2:d8:a6:36:4f:01:84:12:62:26:91:53:47:f8:69:ca: 1c:46:19:e0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87ceLsCYG3X02kb+n42AYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2 MzFiZmIwHhcNMjYwMTAyMDQxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDlmYzFiNjFiNzhlNzE2ODcyZTk1Y2QxNWQ1NTg5ZjE2NzlkMGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuFXKRBQn3jgzjxcMPDJzxZ3pHBd KxCM8RGHJv2abgBzd9XDWLZjPoVvlxlMTwu6lA9EPtnuZSh7/g55gdK3bZ+tYbcG JsyL/FlBz9MzfRy5d6i0fu7Y1HdUwqGIVZzN/Ks+k1J6EYXUKlH+kQBkASPTPG+1 xM//MV85E9gzdQqaHfXzjLSFz1jh1taTUG+WF82Bk8HttFO2ddxUoOI5xOJt8uo3 YIRh7PQGpGFcv37uPubzZIaa9ViNpfmffHyLqDKuCgm3o1x9jaG12kNPtZztouja wL+e/NCVl3M3qXiTIlwY3R6eJFqU7vPzHjXrrkjMkhlmGhbhz3DzbCK/SwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH2fwbYbeOcWhy6VzRXVWJ8WedDsMB8GA1UdIwQY MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt YWI4ZjFmMzM4N2VlLzEvZlpfQnRodDQ1eGFITHBYTkZkVllueFo1ME93LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWFCBMA0G CSqGSIb3DQEBCwUAA4IBAQA5VHlvHRSMj8FIFbK7rHsAkWMI61d6ciJTlv8qS1gh 829CDGL7UzGE2tj3WSKqzIw1gzQVyu72DyMiJ09TMEkKYdIYVVmexbih47r8uFWP +mcrOmvQe/pZFJFbK812NbRxiGi7hpjAhdLt2MefhQnNHJJpHHhcsBPyDnSS+oYf hvIfpmARvRhYTkCL6VV/QaHwpMZX3uCGSOTt2p67Xe22znNGpXOWg+pBLAoIkhWS N0AE8cWImPJx9hgh9KjWsIqbe8NmAs5hWzfxwYMpPORhAeTR05AE/oJ2Xu2R+h4z WitDESmbAFN/0VEyf8LYpjZPAYQSYiaRU0f4acocRhng -----END CERTIFICATE-----Generated at Mon Jan 19 14:22:35 2026 by rpki-client