This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/00AM8TCQHeO9GIQwLfraawJnBVI.roa File: 00AM8TCQHeO9GIQwLfraawJnBVI.roa (raw, json) Hash identifier: RVrMd+IngjUMRKB4ZHfII6VSV0oFBErtQqszPBzjcrA= Subject key identifier: D3:40:0C:F1:30:90:1D:E3:BD:18:84:30:2D:FA:DA:6B:02:67:05:52 Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491 Certificate serial: 019B7AC8C3726EC8831F6477F73EC61BEA3D Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/00AM8TCQHeO9GIQwLfraawJnBVI.roa Signing time: Thu 01 Jan 2026 18:18:56 +0000 ROA not before: Thu 01 Jan 2026 18:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35809 IP address blocks: 80.233.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.mft rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:c3:72:6e:c8:83:1f:64:77:f7:3e:c6:1b:ea:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491 Validity Not Before: Jan 1 18:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d3400cf130901de3bd1884302dfada6b02670552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:fa:09:f5:8c:fc:38:09:97:90:01:70:b1:38: f3:5c:ae:6c:a8:70:db:a0:65:7f:45:06:92:ab:2c: 5a:96:3f:82:43:75:ca:ab:4c:97:b5:5d:76:b1:d5: 0d:f3:fb:88:52:c1:04:fa:9d:46:22:dd:18:27:cb: 50:1c:57:f7:9c:db:a4:f2:99:0d:52:b1:8b:9c:84: 86:b5:80:8e:f9:ca:50:5b:db:6e:7d:a5:c9:61:75: 61:6e:fa:68:eb:ee:2c:5d:e8:3e:cf:a7:ca:0f:b6: 1f:76:db:bb:89:81:f8:31:e2:1a:c7:56:fb:ad:43: bc:99:90:cc:e6:dd:61:6a:d8:b1:9e:74:57:93:ec: b6:67:fe:74:27:96:6a:a2:59:c8:86:bb:dc:2b:74: 7e:b2:15:2c:52:25:85:57:0e:ff:cc:52:27:96:d8: d1:30:23:4a:60:75:b3:43:2b:45:60:d1:b5:fd:67: 48:6e:12:52:f7:24:c0:98:2d:4e:4b:03:68:9b:a8: f0:70:c3:72:4c:c8:cb:68:ed:41:a1:96:be:d8:2d: df:ee:ab:5e:77:b0:90:e1:e4:bc:40:ef:35:05:d4: d0:5f:51:e6:23:5a:b8:68:64:02:be:58:8b:9e:dc: ed:40:11:b9:e2:28:00:c9:65:34:49:e0:78:aa:92: 11:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:40:0C:F1:30:90:1D:E3:BD:18:84:30:2D:FA:DA:6B:02:67:05:52 X509v3 Authority Key Identifier: keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/00AM8TCQHeO9GIQwLfraawJnBVI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.233.167.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:79:e4:c2:c9:64:e5:70:d6:ff:cf:a9:58:17:23:05:88:27: cb:c6:6f:c6:0d:dc:df:b1:62:ca:ba:ac:fe:0c:aa:2f:aa:2c: 00:15:bb:29:2c:36:23:28:d0:de:eb:b8:32:20:03:de:5b:13: 2d:3b:9c:fb:23:19:fc:2e:85:08:95:e2:79:d4:c2:3d:52:c3: 21:01:b6:b0:e8:1c:52:52:0f:6c:a6:6f:e7:d8:61:de:2d:b0: 79:e1:bb:ce:c3:44:d0:ca:7d:f5:09:e1:6c:4e:b1:e1:8e:b0: 04:36:93:82:32:34:3d:61:9d:5f:52:4c:a0:ff:54:ff:91:1b: 83:72:e1:f0:bc:d4:f4:64:72:e0:a8:ab:2e:36:43:4c:58:d4: dc:20:a4:f4:82:a3:35:4a:f9:cc:e6:8f:3a:e6:94:ee:44:15: 0b:87:9c:5f:a6:ab:57:be:cb:54:e6:8e:de:e9:4e:97:51:5f: 63:e4:ce:36:31:08:53:bb:8d:f0:5f:52:a3:98:8e:79:33:37: c2:04:1b:08:3c:64:df:b6:9b:3d:2a:46:19:f7:86:25:f5:66: f6:82:b4:31:4d:d7:ff:fb:71:96:2d:13:94:ac:7c:08:96:3c: f1:1a:71:53:7f:0b:28:30:a8:d5:37:ef:07:9a:07:f6:b8:58: 6e:e2:28:9d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yMNybsiDH2R39z7GG+o9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzYmUwN2NiMWZkNGYxZTNjOTIyMzAzYjY3MGE4ODFiODJl NjE0OTEwHhcNMjYwMTAxMTgxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzQwMGNmMTMwOTAxZGUzYmQxODg0MzAyZGZhZGE2YjAyNjcwNTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvoJ9Yz8OAmXkAFwsTjzXK5sqHDb oGV/RQaSqyxalj+CQ3XKq0yXtV12sdUN8/uIUsEE+p1GIt0YJ8tQHFf3nNuk8pkN UrGLnISGtYCO+cpQW9tufaXJYXVhbvpo6+4sXeg+z6fKD7Yfdtu7iYH4MeIax1b7 rUO8mZDM5t1hatixnnRXk+y2Z/50J5ZqolnIhrvcK3R+shUsUiWFVw7/zFInltjR MCNKYHWzQytFYNG1/WdIbhJS9yTAmC1OSwNom6jwcMNyTMjLaO1BoZa+2C3f7qte d7CQ4eS8QO81BdTQX1HmI1q4aGQCvliLntztQBG54igAyWU0SeB4qpIRJwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNNADPEwkB3jvRiEMC362msCZwVSMB8GA1UdIwQY MBaAFOO+B8sf1PHjySIwO2cKiBuC5hSRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMt ZDRlZTFkMzg5ZTBkLzEvMDBBTThUQ1FIZU85R0lRd0xmcmFhd0puQlZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMtZDRlZTFkMzg5ZTBk LzEvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUOmnMA0G CSqGSIb3DQEBCwUAA4IBAQAPeeTCyWTlcNb/z6lYFyMFiCfLxm/GDdzfsWLKuqz+ DKovqiwAFbspLDYjKNDe67gyIAPeWxMtO5z7Ixn8LoUIleJ51MI9UsMhAbaw6BxS Ug9spm/n2GHeLbB54bvOw0TQyn31CeFsTrHhjrAENpOCMjQ9YZ1fUkyg/1T/kRuD cuHwvNT0ZHLgqKsuNkNMWNTcIKT0gqM1SvnM5o865pTuRBULh5xfpqtXvstU5o7e 6U6XUV9j5M42MQhTu43wX1KjmI55MzfCBBsIPGTftps9KkYZ94Yl9Wb2grQxTdf/ +3GWLROUrHwIljzxGnFTfwsoMKjVN+8Hmgf2uFhu4iid -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:06 2026 by rpki-client