This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/gLrTd-tF6YKwKPVyN-B9kSozUjE.roa File: gLrTd-tF6YKwKPVyN-B9kSozUjE.roa (raw, json) Hash identifier: TmnCSJykitabQj5d7T0dn/Ydx5URkDDijEKhCVoUSe8= Subject key identifier: 80:BA:D3:77:EB:45:E9:82:B0:28:F5:72:37:E0:7D:91:2A:33:52:31 Certificate issuer: /CN=3bfa6636fe6440acf293b75705a7a1dcada8420b Certificate serial: 019B78A3053530E0BDFE724F56942D8104B7 Authority key identifier: 3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/gLrTd-tF6YKwKPVyN-B9kSozUjE.roa Signing time: Thu 01 Jan 2026 08:18:28 +0000 ROA not before: Thu 01 Jan 2026 08:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211531 IP address blocks: 80.245.87.0/24 maxlen: 24 149.3.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:05:35:30:e0:bd:fe:72:4f:56:94:2d:81:04:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bfa6636fe6440acf293b75705a7a1dcada8420b Validity Not Before: Jan 1 08:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=80bad377eb45e982b028f57237e07d912a335231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:dd:09:71:cb:4f:d9:f6:dd:51:32:c1:f0:c6: 7a:be:df:2d:53:a8:50:08:2a:d2:92:45:f9:c9:82: 66:d7:e3:ce:8e:14:de:88:be:72:f6:9f:8f:fb:c8: 33:b7:41:2d:08:b1:22:ba:93:fc:6b:6a:be:23:c2: bd:a5:2b:42:6d:94:c9:58:ba:b9:5f:4c:ef:46:98: aa:d0:e7:88:e1:38:0e:b2:21:a1:88:1b:7a:17:47: 22:30:71:b6:85:4d:7c:da:ba:40:b7:23:09:44:dd: 24:df:dc:7d:de:bf:75:2d:bf:31:74:ea:51:ae:72: f8:e1:85:dc:76:bc:82:c7:2d:1e:da:ce:5a:31:10: 80:71:64:c6:bc:80:5c:44:cf:c1:e5:7e:96:84:9d: d6:36:5e:2a:35:ad:f3:0e:1f:f6:bf:ca:eb:c1:ef: e1:f2:d5:cc:b4:85:3f:c0:61:da:01:be:27:6b:96: de:6e:75:11:ae:6f:a0:5c:ad:66:95:1c:a7:dc:d4: ac:1b:b2:61:61:af:54:2c:a6:ae:7f:02:8a:81:44: f7:67:a5:e7:66:30:2e:fd:c9:ae:af:d0:02:33:11: 85:7e:0b:92:dc:60:d4:7c:81:a6:f7:81:01:dc:57: b2:8b:2f:b3:e8:df:91:cf:58:36:0f:34:f4:fb:00: c7:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:BA:D3:77:EB:45:E9:82:B0:28:F5:72:37:E0:7D:91:2A:33:52:31 X509v3 Authority Key Identifier: keyid:3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/gLrTd-tF6YKwKPVyN-B9kSozUjE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.245.87.0/24 149.3.184.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:57:be:98:12:7c:a9:83:5e:5c:96:45:fa:0d:e2:b2:51:34: a3:74:25:93:bc:34:3f:e6:75:4c:0b:7b:58:65:aa:dd:63:c5: c5:f0:89:94:f8:27:86:63:af:41:f8:c4:b3:70:2e:bb:e7:14: 3d:10:3d:0d:11:55:d9:b2:10:6e:ff:88:29:42:7f:39:06:aa: 7a:40:45:0e:2d:1a:75:ec:33:a1:92:30:98:ee:12:41:fe:9d: 0c:58:96:01:e2:32:89:da:37:65:d7:3f:cf:23:5a:04:c8:4f: ba:c8:d5:2d:b0:99:49:de:74:dc:d9:db:61:d1:b4:83:fc:66: 24:37:75:8d:cf:89:44:42:47:fa:d5:5c:ef:1a:0c:e5:ce:7d: 0f:c3:52:f0:d6:8e:0e:2b:7a:8c:48:a2:85:0a:ed:17:7f:ae: 28:09:79:8d:b1:5e:bd:55:72:c4:98:e1:76:09:a4:4b:af:1a: 81:ff:83:0a:27:2b:ad:15:6d:70:c7:db:35:e3:ba:d3:46:ae: 2c:3f:70:7f:d5:8b:29:fd:87:ef:da:ee:b1:a6:f8:10:6f:03: d8:c4:bc:26:38:4d:72:4d:4e:a0:f0:8c:02:3b:92:18:d7:53: 86:81:81:39:2e:3c:34:a0:1f:8a:19:df:d2:38:2f:a6:4e:bc: 90:68:09:44 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4owU1MOC9/nJPVpQtgQS3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiZmE2NjM2ZmU2NDQwYWNmMjkzYjc1NzA1YTdhMWRjYWRh ODQyMGIwHhcNMjYwMTAxMDgxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MGJhZDM3N2ViNDVlOTgyYjAyOGY1NzIzN2UwN2Q5MTJhMzM1MjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlt0JcctP2fbdUTLB8MZ6vt8tU6hQ CCrSkkX5yYJm1+POjhTeiL5y9p+P+8gzt0EtCLEiupP8a2q+I8K9pStCbZTJWLq5 X0zvRpiq0OeI4TgOsiGhiBt6F0ciMHG2hU182rpAtyMJRN0k39x93r91Lb8xdOpR rnL44YXcdryCxy0e2s5aMRCAcWTGvIBcRM/B5X6WhJ3WNl4qNa3zDh/2v8rrwe/h 8tXMtIU/wGHaAb4na5bebnURrm+gXK1mlRyn3NSsG7JhYa9ULKaufwKKgUT3Z6Xn ZjAu/cmur9ACMxGFfguS3GDUfIGm94EB3Feyiy+z6N+Rz1g2DzT0+wDH0QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIC603frRemCsCj1cjfgfZEqM1IxMB8GA1UdIwQY MBaAFDv6Zjb+ZECs8pO3VwWnodytqEILMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT19wbU52NWtRS3p5azdkWEJhZWgzSzJvUWdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9hNDdjZGYtZDIxYi00ZjFkLTg5MDEt OTJlYzUxNWM1OTVhLzEvZ0xyVGQtdEY2WUt3S1BWeU4tQjlrU296VWpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9hNDdjZGYtZDIxYi00ZjFkLTg5MDEtOTJlYzUxNWM1OTVh LzEvT19wbU52NWtRS3p5azdkWEJhZWgzSzJvUWdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUPVXAwQA lQO4MA0GCSqGSIb3DQEBCwUAA4IBAQCaV76YEnypg15clkX6DeKyUTSjdCWTvDQ/ 5nVMC3tYZardY8XF8ImU+CeGY69B+MSzcC675xQ9ED0NEVXZshBu/4gpQn85Bqp6 QEUOLRp17DOhkjCY7hJB/p0MWJYB4jKJ2jdl1z/PI1oEyE+6yNUtsJlJ3nTc2dth 0bSD/GYkN3WNz4lEQkf61VzvGgzlzn0Pw1Lw1o4OK3qMSKKFCu0Xf64oCXmNsV69 VXLEmOF2CaRLrxqB/4MKJyutFW1wx9s147rTRq4sP3B/1Ysp/Yfv2u6xpvgQbwPY xLwmOE1yTU6g8IwCO5IY11OGgYE5Ljw0oB+KGd/SOC+mTryQaAlE -----END CERTIFICATE-----Generated at Mon Feb 9 22:29:19 2026 by rpki-client