This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/0dkxclF1U6vYr5lj_eZjUfz7Azc.roa File: 0dkxclF1U6vYr5lj_eZjUfz7Azc.roa (raw, json) Hash identifier: YJxaOvLCg9PJXa43CpA/uzG5+07fOluR8wxwPEngEDw= Subject key identifier: D1:D9:31:72:51:75:53:AB:D8:AF:99:63:FD:E6:63:51:FC:FB:03:37 Certificate issuer: /CN=4f525c4cbac8d7d9733245876a5cabe6b35e2fe9 Certificate serial: 019B7A5B69FDB07438BD46552D64D6C640E0 Authority key identifier: 4F:52:5C:4C:BA:C8:D7:D9:73:32:45:87:6A:5C:AB:E6:B3:5E:2F:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T1JcTLrI19lzMkWHalyr5rNeL-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/0dkxclF1U6vYr5lj_eZjUfz7Azc.roa Signing time: Thu 01 Jan 2026 16:19:29 +0000 ROA not before: Thu 01 Jan 2026 16:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43645 IP address blocks: 185.80.252.0/22 maxlen: 22 185.80.255.0/24 maxlen: 24 2a05:8380::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.mft rsync://rpki.ripe.net/repository/DEFAULT/T1JcTLrI19lzMkWHalyr5rNeL-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:69:fd:b0:74:38:bd:46:55:2d:64:d6:c6:40:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f525c4cbac8d7d9733245876a5cabe6b35e2fe9 Validity Not Before: Jan 1 16:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d1d93172517553abd8af9963fde66351fcfb0337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9a:ad:95:c3:82:3e:76:90:97:f7:5c:78:87: 50:cb:18:9a:b9:38:da:32:d5:7b:61:88:e3:9a:a6: 45:b4:b3:0c:1d:ff:8a:d1:38:64:84:e1:d2:f0:b3: 35:8b:12:dc:ea:6f:3c:49:4f:2b:c9:0d:98:aa:8e: 64:6a:db:33:a0:6c:5c:e2:7d:41:56:e3:35:74:ec: 1d:98:69:be:91:6f:22:cb:c4:2e:77:f2:ff:3f:74: d0:8a:1b:69:25:51:5d:73:04:dd:6c:91:9b:87:7d: 80:36:fc:b1:4e:af:59:bc:92:1d:81:76:18:e5:ae: 6e:79:be:3c:59:f6:45:12:2d:c2:7b:ab:5d:0e:48: bb:5f:7b:97:ed:9a:95:a0:3e:1b:53:3b:49:db:19: d8:ae:5c:84:9a:0e:a5:18:04:80:23:c6:7e:ce:2b: 19:a9:f7:2c:b7:51:a1:14:a2:33:58:99:6e:f3:e3: 10:a3:2d:3b:37:76:2a:8c:06:ac:7e:3a:a7:93:9c: 64:8a:8e:84:15:99:fc:66:1b:0d:0a:59:5a:6e:b7: 52:d7:89:e7:4b:a3:15:41:f8:fe:93:e2:29:cb:a9: 01:d6:7a:4c:5b:cf:4d:5e:fa:f9:0a:72:8f:cd:99: 48:f2:46:16:da:b9:62:4f:9a:6e:94:95:77:8a:32: 8a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:D9:31:72:51:75:53:AB:D8:AF:99:63:FD:E6:63:51:FC:FB:03:37 X509v3 Authority Key Identifier: keyid:4F:52:5C:4C:BA:C8:D7:D9:73:32:45:87:6A:5C:AB:E6:B3:5E:2F:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T1JcTLrI19lzMkWHalyr5rNeL-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/0dkxclF1U6vYr5lj_eZjUfz7Azc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.80.252.0/22 IPv6: 2a05:8380::/29 Signature Algorithm: sha256WithRSAEncryption 3c:0b:10:3f:52:48:47:54:ae:1e:02:96:0d:d0:a6:dc:a7:4d: 60:19:d1:ac:20:fa:57:00:3c:ea:00:3c:19:dd:f0:57:56:c9: 27:7d:43:3d:42:76:c2:7d:89:88:20:7c:0a:cd:92:4b:99:6c: 8e:68:33:c2:5a:cc:17:37:37:39:a6:fb:d7:35:fc:43:e3:90: cc:dd:59:f2:6a:65:4f:f0:92:21:e5:25:1a:e0:fa:54:10:94: cc:fd:ba:f4:84:86:97:d6:6f:d8:52:50:ac:a8:89:a4:23:7f: 89:fb:4f:b0:4b:a0:6f:55:84:4d:15:0d:ef:38:ac:41:8b:7b: c4:62:84:37:6e:2f:6a:49:73:df:f7:3b:05:08:24:59:8f:5e: eb:61:6d:4f:da:4c:bb:78:87:a1:5d:bc:3f:7d:f9:3a:c4:df: dd:97:7e:92:1d:73:71:1e:99:46:23:30:e7:ab:41:11:58:75: 62:7d:b1:85:35:83:61:31:96:82:e6:c3:36:b2:77:31:a3:eb: 39:d2:03:2c:e4:9d:46:aa:ab:4d:3e:e4:88:cb:68:f6:f6:06: 72:b1:14:f7:ab:f7:a0:66:0c:5c:49:ce:d6:39:79:a5:a9:af: 63:5c:73:ca:7d:bd:01:0e:cb:1d:34:28:03:9e:be:b3:b7:2e: a6:b1:79:dc -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6W2n9sHQ4vUZVLWTWxkDgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmNTI1YzRjYmFjOGQ3ZDk3MzMyNDU4NzZhNWNhYmU2YjM1 ZTJmZTkwHhcNMjYwMTAxMTYxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMWQ5MzE3MjUxNzU1M2FiZDhhZjk5NjNmZGU2NjM1MWZjZmIwMzM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5qtlcOCPnaQl/dceIdQyxiauTja MtV7YYjjmqZFtLMMHf+K0ThkhOHS8LM1ixLc6m88SU8ryQ2Yqo5katszoGxc4n1B VuM1dOwdmGm+kW8iy8Qud/L/P3TQihtpJVFdcwTdbJGbh32ANvyxTq9ZvJIdgXYY 5a5ueb48WfZFEi3Ce6tdDki7X3uX7ZqVoD4bUztJ2xnYrlyEmg6lGASAI8Z+zisZ qfcst1GhFKIzWJlu8+MQoy07N3YqjAasfjqnk5xkio6EFZn8ZhsNCllabrdS14nn S6MVQfj+k+Ipy6kB1npMW89NXvr5CnKPzZlI8kYW2rliT5pulJV3ijKK0wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFNHZMXJRdVOr2K+ZY/3mY1H8+wM3MB8GA1UdIwQY MBaAFE9SXEy6yNfZczJFh2pcq+azXi/pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDFKY1RMckkxOWx6TWtXSGFseXI1ck5lTC1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8yOGE1ZjktOTA3MS00NDU5LTk4Mjkt NTU3OTVjMjZlYWNhLzEvMGRreGNsRjFVNnZZcjVsal9lWmpVZno3QXpjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS8yOGE1ZjktOTA3MS00NDU5LTk4MjktNTU3OTVjMjZlYWNh LzEvVDFKY1RMckkxOWx6TWtXSGFseXI1ck5lTC1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuVD8MA0E AgACMAcDBQMqBYOAMA0GCSqGSIb3DQEBCwUAA4IBAQA8CxA/UkhHVK4eApYN0Kbc p01gGdGsIPpXADzqADwZ3fBXVsknfUM9QnbCfYmIIHwKzZJLmWyOaDPCWswXNzc5 pvvXNfxD45DM3VnyamVP8JIh5SUa4PpUEJTM/br0hIaX1m/YUlCsqImkI3+J+0+w S6BvVYRNFQ3vOKxBi3vEYoQ3bi9qSXPf9zsFCCRZj17rYW1P2ky7eIehXbw/ffk6 xN/dl36SHXNxHplGIzDnq0ERWHVifbGFNYNhMZaC5sM2sncxo+s50gMs5J1GqqtN PuSIy2j29gZysRT3q/egZgxcSc7WOXmlqa9jXHPKfb0BDssdNCgDnr6zty6msXnc -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:25 2026 by rpki-client