This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/rl0M30YO5mRmzIuJlkR5ZaoyPC8.roa File: rl0M30YO5mRmzIuJlkR5ZaoyPC8.roa (raw, json) Hash identifier: DY2o9+D2ZHXHEUpUvBqYBEqDRVNq1b2i/dUfV4RFSfw= Subject key identifier: AE:5D:0C:DF:46:0E:E6:64:66:CC:8B:89:96:44:79:65:AA:32:3C:2F Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725 Certificate serial: 019B79EBE5FD809394A6A2285551C4D3F07B Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/rl0M30YO5mRmzIuJlkR5ZaoyPC8.roa Signing time: Thu 01 Jan 2026 14:17:41 +0000 ROA not before: Thu 01 Jan 2026 14:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207868 IP address blocks: 80.120.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 17:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:e5:fd:80:93:94:a6:a2:28:55:51:c4:d3:f0:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725 Validity Not Before: Jan 1 14:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ae5d0cdf460ee66466cc8b8996447965aa323c2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:30:20:b0:65:b3:23:2f:a2:95:28:d6:e1:6e: 59:33:56:f4:f5:b4:7d:33:d3:bc:25:0f:fb:15:e7: 6b:b0:58:cf:f2:e2:be:61:5a:39:3f:b2:ac:41:60: 2c:4e:cc:a8:b8:a9:c2:74:d8:cc:fb:fe:6e:2a:44: e1:8d:ae:22:16:f1:09:db:89:f5:3d:df:c6:2c:e3: 33:9b:24:4d:41:32:4a:b0:4a:89:01:72:05:a6:bd: fd:5a:27:5b:64:d5:56:79:4e:f2:15:27:97:69:1c: 91:40:7d:d5:0c:6e:ef:65:7c:d3:1e:31:46:a8:53: d7:0f:5d:da:cc:a9:5e:22:59:a1:68:28:c0:01:f6: a9:7a:aa:27:55:c5:f4:d8:18:82:4f:c2:ac:8e:9e: 3d:08:09:8c:f8:e3:dd:c8:ee:73:a2:a9:e5:48:ba: 8a:dd:9c:c7:a6:ba:bc:f2:a3:2f:aa:df:5b:60:00: ec:14:bd:b3:1e:55:e7:13:1a:ab:99:0f:bd:78:71: ec:40:fe:4f:54:87:75:00:0a:10:5f:52:61:72:bb: d2:a6:10:cb:ae:4c:26:23:f7:80:94:42:15:85:fc: 41:84:b3:a9:3a:d3:2a:8b:40:f9:da:85:b6:39:63: 92:e8:e7:a3:9b:d6:73:45:d3:3e:99:48:57:bc:f9: ae:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:5D:0C:DF:46:0E:E6:64:66:CC:8B:89:96:44:79:65:AA:32:3C:2F X509v3 Authority Key Identifier: keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/rl0M30YO5mRmzIuJlkR5ZaoyPC8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.120.12.0/24 Signature Algorithm: sha256WithRSAEncryption 97:e2:90:e9:cd:b2:97:7b:e8:a9:63:ec:d5:00:2d:a5:02:cc: d0:c8:32:cf:2e:b6:17:93:02:4d:1f:b2:af:bd:e0:00:bd:9d: 83:19:37:db:b8:76:db:05:9b:c1:18:f9:f6:8a:78:54:89:74: bc:81:86:4c:8b:99:f1:0c:4f:ca:aa:9a:69:76:c7:92:6d:00: e2:f1:c0:23:d0:c4:7a:06:be:71:b3:36:f0:20:07:4f:b1:f1: 5a:f1:57:ea:00:2d:23:32:f9:c5:68:70:9d:f0:df:3e:d4:df: 92:b5:f6:8c:ee:c2:58:3f:b3:b1:88:72:40:a6:9b:3d:7f:0b: 75:b2:3c:cd:d2:dd:88:5c:2a:ce:8e:02:c5:2b:73:b7:73:b3: b3:9b:1d:7a:1c:47:20:ae:da:34:bb:1b:8b:5d:70:6e:b8:f9: c6:37:cb:3e:1b:50:2e:ae:eb:4b:a1:8b:28:f7:fd:56:13:ab: 79:87:f1:0f:43:03:4a:c4:0d:79:61:2c:c6:8e:bd:6a:b7:8a: 66:cf:13:ce:20:6e:e7:29:b8:e7:95:e8:a4:f7:38:34:35:32: 84:ec:ba:ab:2d:81:85:78:e8:4a:89:a6:bd:77:8f:63:da:34: 22:e7:79:7d:4c:eb:df:b4:c9:d0:3d:35:10:72:89:18:72:4c: 2d:80:90:c5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt56+X9gJOUpqIoVVHE0/B7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3MGM1ODlhNGYyMmE5Y2EyZmY5OWI0YzQ4ZjhiZGY0OTI4 NzE3MjUwHhcNMjYwMTAxMTQxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZTVkMGNkZjQ2MGVlNjY0NjZjYzhiODk5NjQ0Nzk2NWFhMzIzYzJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTAgsGWzIy+ilSjW4W5ZM1b09bR9 M9O8JQ/7FedrsFjP8uK+YVo5P7KsQWAsTsyouKnCdNjM+/5uKkThja4iFvEJ24n1 Pd/GLOMzmyRNQTJKsEqJAXIFpr39WidbZNVWeU7yFSeXaRyRQH3VDG7vZXzTHjFG qFPXD13azKleIlmhaCjAAfapeqonVcX02BiCT8Ksjp49CAmM+OPdyO5zoqnlSLqK 3ZzHprq88qMvqt9bYADsFL2zHlXnExqrmQ+9eHHsQP5PVId1AAoQX1JhcrvSphDL rkwmI/eAlEIVhfxBhLOpOtMqi0D52oW2OWOS6Oejm9ZzRdM+mUhXvPmuGwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK5dDN9GDuZkZsyLiZZEeWWqMjwvMB8GA1UdIwQY MBaAFIcMWJpPIqnKL/mbTEj4vfSShxclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWIt ODQ5ZDNhNmI5YzJkLzEvcmwwTTMwWU81bVJtekl1SmxrUjVaYW95UEM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWItODQ5ZDNhNmI5YzJk LzEvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUHgMMA0G CSqGSIb3DQEBCwUAA4IBAQCX4pDpzbKXe+ipY+zVAC2lAszQyDLPLrYXkwJNH7Kv veAAvZ2DGTfbuHbbBZvBGPn2inhUiXS8gYZMi5nxDE/KqpppdseSbQDi8cAj0MR6 Br5xszbwIAdPsfFa8VfqAC0jMvnFaHCd8N8+1N+StfaM7sJYP7OxiHJApps9fwt1 sjzN0t2IXCrOjgLFK3O3c7Ozmx16HEcgrto0uxuLXXBuuPnGN8s+G1AurutLoYso 9/1WE6t5h/EPQwNKxA15YSzGjr1qt4pmzxPOIG7nKbjnleik9zg0NTKE7LqrLYGF eOhKiaa9d49j2jQi53l9TOvftMnQPTUQcokYckwtgJDF -----END CERTIFICATE-----Generated at Tue Jan 27 02:50:22 2026 by rpki-client