This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/4c6dEd4uIsnbXj6vFcI3hcqgpM0.roa File: 4c6dEd4uIsnbXj6vFcI3hcqgpM0.roa (raw, json) Hash identifier: ydoVXubxnFkYFM9DvCghwZFyS6hJrLHvByD2RsQTuEE= Subject key identifier: E1:CE:9D:11:DE:2E:22:C9:DB:5E:3E:AF:15:C2:37:85:CA:A0:A4:CD Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725 Certificate serial: 019B79EBE18E0902AB34DA8112FF4044B56D Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/4c6dEd4uIsnbXj6vFcI3hcqgpM0.roa Signing time: Thu 01 Jan 2026 14:17:40 +0000 ROA not before: Thu 01 Jan 2026 14:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201728 IP address blocks: 80.120.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 17:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:e1:8e:09:02:ab:34:da:81:12:ff:40:44:b5:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725 Validity Not Before: Jan 1 14:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e1ce9d11de2e22c9db5e3eaf15c23785caa0a4cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c0:d5:3e:5f:6e:55:08:a8:f7:a7:0a:96:62: b2:4f:aa:ed:62:c4:2e:a3:19:2d:02:2b:c8:b0:d0: 14:a1:80:f2:32:ea:dd:6c:cf:49:c8:35:cb:61:d7: 58:e2:2e:cc:90:c4:0b:e5:32:81:74:29:8d:45:92: 1e:9d:5c:37:f6:19:b1:9f:e4:8e:29:52:4e:5a:90: 44:81:18:79:63:f8:b4:7a:b9:7b:54:4c:84:a7:f7: 96:20:f8:4c:41:8a:0c:09:3d:01:ad:ad:b2:ff:f7: 90:48:5c:86:1b:42:8e:3d:dc:b9:3d:46:99:87:89: e4:f7:76:82:21:1d:4d:32:8f:d0:b9:cc:71:f4:1e: bb:88:f5:80:d9:95:53:9d:67:48:5c:97:61:68:86: c5:da:ec:d2:ec:e5:d6:4a:42:cd:01:25:e4:c6:50: 6e:2c:5a:84:00:a1:c8:af:de:44:ee:b2:e5:90:7b: ee:65:30:dd:d7:34:07:3e:eb:35:7e:7a:e2:d5:44: a1:c1:b6:d1:a7:f1:ab:90:92:b2:b0:07:92:35:31: a4:d6:0e:2e:5e:40:97:77:78:db:50:a9:36:a4:d3: 75:45:1d:3c:94:26:56:0a:9d:fb:20:b0:b8:94:64: 8e:e6:5f:e1:3d:fe:80:75:4d:bb:bb:0c:38:95:18: 71:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:CE:9D:11:DE:2E:22:C9:DB:5E:3E:AF:15:C2:37:85:CA:A0:A4:CD X509v3 Authority Key Identifier: keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/4c6dEd4uIsnbXj6vFcI3hcqgpM0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.120.132.0/24 Signature Algorithm: sha256WithRSAEncryption 73:b8:6b:08:7a:6e:60:db:c8:1e:1f:4e:1f:c4:28:d8:e0:cd: f5:24:0a:22:9d:64:12:1f:e6:bf:c8:2f:3e:49:bc:59:dc:7b: 8c:d9:ee:25:77:50:c3:3f:54:02:58:ac:a4:56:e8:3f:ad:68: d6:eb:af:9b:4d:ea:cb:f3:7e:b4:cf:98:64:63:97:9b:e5:4e: a9:67:26:aa:af:f6:6c:3e:c1:90:63:45:46:5a:04:79:d0:ec: 17:4e:7d:72:5a:95:0a:a2:b2:4f:8f:50:ae:4c:cd:91:80:d5: b8:b7:d9:57:8b:8d:39:c6:ae:35:78:aa:f5:ae:d9:de:7d:56: dc:87:a7:ef:79:c3:53:f7:a5:93:d7:59:86:b8:58:31:d8:80: 47:a0:8d:0b:cb:d2:64:e3:f1:f8:5c:3c:f8:55:22:a4:e7:28: 45:7c:94:c0:ab:d2:27:cc:b9:db:ef:13:0e:9e:82:f4:21:e3: 2b:d4:43:ba:4d:9a:8b:87:b8:a7:a7:4c:45:00:20:24:65:f6: fe:82:6a:16:98:4e:e2:ca:5a:fa:1b:64:ed:96:8c:2e:01:82: b9:e1:0d:1d:15:d5:9f:39:7b:89:df:de:65:e0:c3:7e:6c:92: 63:b0:f8:3a:b6:cb:9b:85:ae:ad:67:11:36:07:b1:69:1d:54: f3:85:9f:3c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt56+GOCQKrNNqBEv9ARLVtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3MGM1ODlhNGYyMmE5Y2EyZmY5OWI0YzQ4ZjhiZGY0OTI4 NzE3MjUwHhcNMjYwMTAxMTQxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMWNlOWQxMWRlMmUyMmM5ZGI1ZTNlYWYxNWMyMzc4NWNhYTBhNGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMDVPl9uVQio96cKlmKyT6rtYsQu oxktAivIsNAUoYDyMurdbM9JyDXLYddY4i7MkMQL5TKBdCmNRZIenVw39hmxn+SO KVJOWpBEgRh5Y/i0erl7VEyEp/eWIPhMQYoMCT0Bra2y//eQSFyGG0KOPdy5PUaZ h4nk93aCIR1NMo/Qucxx9B67iPWA2ZVTnWdIXJdhaIbF2uzS7OXWSkLNASXkxlBu LFqEAKHIr95E7rLlkHvuZTDd1zQHPus1fnri1UShwbbRp/GrkJKysAeSNTGk1g4u XkCXd3jbUKk2pNN1RR08lCZWCp37ILC4lGSO5l/hPf6AdU27uww4lRhx9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOHOnRHeLiLJ214+rxXCN4XKoKTNMB8GA1UdIwQY MBaAFIcMWJpPIqnKL/mbTEj4vfSShxclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWIt ODQ5ZDNhNmI5YzJkLzEvNGM2ZEVkNHVJc25iWGo2dkZjSTNoY3FncE0wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWItODQ5ZDNhNmI5YzJk LzEvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUHiEMA0G CSqGSIb3DQEBCwUAA4IBAQBzuGsIem5g28geH04fxCjY4M31JAoinWQSH+a/yC8+ SbxZ3HuM2e4ld1DDP1QCWKykVug/rWjW66+bTerL8360z5hkY5eb5U6pZyaqr/Zs PsGQY0VGWgR50OwXTn1yWpUKorJPj1CuTM2RgNW4t9lXi405xq41eKr1rtnefVbc h6fvecNT96WT11mGuFgx2IBHoI0Ly9Jk4/H4XDz4VSKk5yhFfJTAq9InzLnb7xMO noL0IeMr1EO6TZqLh7inp0xFACAkZfb+gmoWmE7iylr6G2TtlowuAYK54Q0dFdWf OXuJ395l4MN+bJJjsPg6tsubha6tZxE2B7FpHVTzhZ88 -----END CERTIFICATE-----Generated at Tue Jan 27 02:50:35 2026 by rpki-client