This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/1dOygqG-hc35q8L_vPnh02DPox4.roa File: 1dOygqG-hc35q8L_vPnh02DPox4.roa (raw, json) Hash identifier: 88NIkR0RlyPWrnXMJoYPGQ6RYYK/Lrh3CYH/T8a52+U= Subject key identifier: D5:D3:B2:82:A1:BE:85:CD:F9:AB:C2:FF:BC:F9:E1:D3:60:CF:A3:1E Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725 Certificate serial: 019B79EBDABBB9E57E0EEF34954DEA5E42C8 Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/1dOygqG-hc35q8L_vPnh02DPox4.roa Signing time: Thu 01 Jan 2026 14:17:38 +0000 ROA not before: Thu 01 Jan 2026 14:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39285 IP address blocks: 80.121.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 17:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:da:bb:b9:e5:7e:0e:ef:34:95:4d:ea:5e:42:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725 Validity Not Before: Jan 1 14:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d5d3b282a1be85cdf9abc2ffbcf9e1d360cfa31e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:6a:58:f1:df:d7:66:b3:30:fc:e6:c4:12:7f: 84:56:ab:a8:5d:f3:90:ff:65:a2:2a:5c:ea:48:df: 4c:c3:47:af:1f:00:40:8d:21:92:76:cf:e7:b7:94: 8f:fd:5d:da:ae:fe:ab:77:7f:d9:0f:df:46:22:bd: dc:96:c8:d1:df:12:9e:ec:dd:e2:51:6e:03:4d:e4: 6b:4b:7e:0a:24:f2:6e:ee:26:83:c4:82:8c:53:3d: 09:2c:77:52:c0:8c:52:7e:92:26:b0:30:be:e0:9a: 53:dd:8b:32:62:ad:43:5f:76:9c:7d:b1:19:7d:b0: b2:4e:b0:c4:89:1a:e6:e7:6c:a7:8f:a6:30:37:bb: c9:88:f7:86:a9:d6:c4:c7:a1:ef:09:5e:26:35:bf: 5f:1d:c6:06:de:63:56:43:3b:a6:c2:2c:56:06:a8: a0:21:fd:20:da:3f:ee:14:bd:c9:de:33:23:b0:ed: 87:87:20:c9:a9:e1:ec:a7:03:e1:c0:a7:ea:f8:fc: 7f:d3:9a:d4:ba:8d:72:ae:64:16:f7:fd:86:3c:3f: 58:37:05:62:bd:a5:e1:13:09:55:67:1d:ef:e8:ac: c3:ff:78:1d:66:6f:5b:8c:35:48:e5:65:87:0f:c5: c5:00:b3:21:7a:5b:3c:a3:0f:0c:60:3f:7f:1c:5e: b6:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:D3:B2:82:A1:BE:85:CD:F9:AB:C2:FF:BC:F9:E1:D3:60:CF:A3:1E X509v3 Authority Key Identifier: keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/1dOygqG-hc35q8L_vPnh02DPox4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.121.205.0/24 Signature Algorithm: sha256WithRSAEncryption b7:71:f2:eb:05:e2:c2:86:94:df:d4:a5:67:1a:fb:d1:ae:6c: c7:ae:5b:6a:83:d9:92:7a:d4:e4:d8:92:6d:38:c5:a7:be:54: c5:f3:ad:7c:03:4d:9e:05:4a:ef:82:fa:0a:a2:c0:49:4b:d6: 47:19:40:33:cc:8b:d2:07:d6:f3:63:95:d6:8e:a1:3f:56:e3: 39:c2:9b:47:2d:0f:9e:35:45:33:9a:4c:a5:e8:7c:f5:f5:02: af:a9:ac:c0:8b:ff:c8:7a:cd:33:7c:87:99:28:61:30:2f:1a: 12:7b:ee:42:15:01:2c:3b:40:be:dd:43:89:cd:d7:6d:e9:d5: 8f:f0:73:ae:aa:81:0e:89:7d:67:a7:96:42:9d:05:c1:17:28: 7c:ad:9b:34:f3:53:62:eb:43:e3:fc:80:47:dd:8d:e4:9a:a5: bd:47:bd:85:7d:93:2f:83:c1:5c:cc:de:4d:94:9a:fd:91:ba: 9e:9a:58:1c:56:db:23:d3:fd:58:98:dd:de:5d:50:48:9c:4c: eb:be:26:9b:77:86:04:2f:8e:52:ce:1d:be:aa:8c:d0:03:11: 19:9e:1d:b2:c0:e3:fc:4c:4d:8f:19:13:9e:64:9f:8c:01:03: 9d:e7:32:4f:f8:0c:41:29:95:8e:99:08:d0:e7:64:27:10:cb: f5:fe:15:9a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt569q7ueV+Du80lU3qXkLIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3MGM1ODlhNGYyMmE5Y2EyZmY5OWI0YzQ4ZjhiZGY0OTI4 NzE3MjUwHhcNMjYwMTAxMTQxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNWQzYjI4MmExYmU4NWNkZjlhYmMyZmZiY2Y5ZTFkMzYwY2ZhMzFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmpY8d/XZrMw/ObEEn+EVquoXfOQ /2WiKlzqSN9Mw0evHwBAjSGSds/nt5SP/V3arv6rd3/ZD99GIr3clsjR3xKe7N3i UW4DTeRrS34KJPJu7iaDxIKMUz0JLHdSwIxSfpImsDC+4JpT3YsyYq1DX3acfbEZ fbCyTrDEiRrm52ynj6YwN7vJiPeGqdbEx6HvCV4mNb9fHcYG3mNWQzumwixWBqig If0g2j/uFL3J3jMjsO2HhyDJqeHspwPhwKfq+Px/05rUuo1yrmQW9/2GPD9YNwVi vaXhEwlVZx3v6KzD/3gdZm9bjDVI5WWHD8XFALMhels8ow8MYD9/HF62bwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNXTsoKhvoXN+avC/7z54dNgz6MeMB8GA1UdIwQY MBaAFIcMWJpPIqnKL/mbTEj4vfSShxclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWIt ODQ5ZDNhNmI5YzJkLzEvMWRPeWdxRy1oYzM1cThMX3ZQbmgwMkRQb3g0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWItODQ5ZDNhNmI5YzJk LzEvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUHnNMA0G CSqGSIb3DQEBCwUAA4IBAQC3cfLrBeLChpTf1KVnGvvRrmzHrltqg9mSetTk2JJt OMWnvlTF8618A02eBUrvgvoKosBJS9ZHGUAzzIvSB9bzY5XWjqE/VuM5wptHLQ+e NUUzmkyl6Hz19QKvqazAi//Ies0zfIeZKGEwLxoSe+5CFQEsO0C+3UOJzddt6dWP 8HOuqoEOiX1np5ZCnQXBFyh8rZs081Ni60Pj/IBH3Y3kmqW9R72FfZMvg8FczN5N lJr9kbqemlgcVtsj0/1YmN3eXVBInEzrviabd4YEL45Szh2+qozQAxEZnh2ywOP8 TE2PGROeZJ+MAQOd5zJP+AxBKZWOmQjQ52QnEMv1/hWa -----END CERTIFICATE-----Generated at Tue Jan 27 02:50:08 2026 by rpki-client