This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/1-LUmbnGr9yuUyB8eWRj_YgDIDh0.roa File: 1-LUmbnGr9yuUyB8eWRj_YgDIDh0.roa (raw, json) Hash identifier: sZNO7RI5SD24B06rvZccOJfhbG/6Egl6QhmBRwTaCLY= Subject key identifier: F8:B5:26:6E:71:AB:F7:2B:94:C8:1F:1E:59:18:FF:62:00:C8:0E:1D Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491 Certificate serial: 019B7AC8CB16D2FA08FD69DC20B92352D73B Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/1-LUmbnGr9yuUyB8eWRj_YgDIDh0.roa Signing time: Thu 01 Jan 2026 18:18:58 +0000 ROA not before: Thu 01 Jan 2026 18:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62436 IP address blocks: 80.232.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.mft rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:cb:16:d2:fa:08:fd:69:dc:20:b9:23:52:d7:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491 Validity Not Before: Jan 1 18:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f8b5266e71abf72b94c81f1e5918ff6200c80e1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b9:58:fd:51:e3:d3:87:d1:0e:e2:aa:40:74: 88:2b:04:1e:16:e0:c4:23:f0:3e:db:65:f5:78:b4: 6d:29:c2:0c:1d:fd:a0:64:84:31:b6:e5:b2:bd:35: dd:66:1b:60:93:13:6b:99:f7:d6:fa:57:fd:73:4b: b3:86:76:53:04:4e:82:d1:00:88:fa:bd:79:42:47: 14:ef:a0:86:63:61:6d:22:56:6d:bd:db:73:02:b9: ae:c1:31:9c:91:7a:d2:26:3e:71:1c:59:ec:a2:a7: a9:fc:a0:ba:ed:95:e4:f7:66:2a:b3:42:a2:4d:63: 55:50:16:fb:a5:d6:c0:44:d8:4d:01:0a:35:6b:50: cd:93:0c:fa:dc:30:d6:79:07:e0:57:6a:ff:c1:66: 1d:7e:55:d7:b8:94:66:71:ac:3d:1b:87:20:0c:81: f1:e7:30:07:29:bd:32:a1:05:40:e0:1f:34:70:39: cc:43:eb:48:f6:31:af:e3:f9:39:8a:e6:6d:dc:15: 51:7b:e9:a0:24:33:5a:82:0e:e0:9b:ae:32:c6:3a: 3c:5e:70:2b:f2:1a:c6:3c:2f:a5:e2:97:94:12:85: 46:b6:e7:c4:8c:39:4f:fd:73:c7:c2:e0:a3:60:f4: 0a:9c:b9:41:ac:91:ea:87:27:33:95:79:00:70:22: 68:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:B5:26:6E:71:AB:F7:2B:94:C8:1F:1E:59:18:FF:62:00:C8:0E:1D X509v3 Authority Key Identifier: keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/1-LUmbnGr9yuUyB8eWRj_YgDIDh0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.232.215.0/24 Signature Algorithm: sha256WithRSAEncryption 09:47:1d:65:8f:5d:7d:ab:65:3a:63:e1:57:29:18:c0:55:6a: 6c:42:8c:cb:53:02:c6:b2:09:94:0c:24:23:ba:50:17:63:06: 0c:25:6b:8a:3c:1b:9b:cf:48:34:75:c8:ca:e3:8b:8d:51:b1: 6e:dd:4e:2f:c3:b8:0c:5b:b5:c4:a0:12:50:e4:96:ae:08:08: 37:1b:5b:25:9e:8e:17:8a:06:9a:70:72:51:e4:11:bb:ef:d4: 35:e2:67:83:ac:67:02:d6:9e:76:c1:70:91:a7:5a:fc:d4:02: 01:92:02:9f:68:fd:f8:23:e4:4c:20:e7:41:f5:f3:6d:f2:9b: 24:9c:cc:e3:9f:a4:64:2e:5a:c6:22:3f:da:8b:9e:dc:4b:28: 44:a7:94:dd:a2:cd:b7:e8:f6:b5:64:70:5c:71:91:79:c6:8e: 7f:5c:03:c0:0d:7f:11:c7:44:7b:32:20:40:22:39:ee:d0:5f: 92:c9:34:7d:a5:59:b7:a9:4b:4f:85:f1:a3:12:e5:c9:40:18: c1:47:b9:e6:c7:1a:b4:25:61:35:e0:a6:4d:4e:99:1b:44:32: 91:0a:cd:0a:e4:33:b6:5f:22:96:0a:42:87:27:e9:d8:c0:6b: e0:a9:ec:d2:95:53:54:29:d1:2c:f2:25:de:75:ec:c3:91:b4: 46:55:92:cc -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt6yMsW0voI/WncILkjUtc7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzYmUwN2NiMWZkNGYxZTNjOTIyMzAzYjY3MGE4ODFiODJl NjE0OTEwHhcNMjYwMTAxMTgxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOGI1MjY2ZTcxYWJmNzJiOTRjODFmMWU1OTE4ZmY2MjAwYzgwZTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorlY/VHj04fRDuKqQHSIKwQeFuDE I/A+22X1eLRtKcIMHf2gZIQxtuWyvTXdZhtgkxNrmffW+lf9c0uzhnZTBE6C0QCI +r15QkcU76CGY2FtIlZtvdtzArmuwTGckXrSJj5xHFnsoqep/KC67ZXk92Yqs0Ki TWNVUBb7pdbARNhNAQo1a1DNkwz63DDWeQfgV2r/wWYdflXXuJRmcaw9G4cgDIHx 5zAHKb0yoQVA4B80cDnMQ+tI9jGv4/k5iuZt3BVRe+mgJDNagg7gm64yxjo8XnAr 8hrGPC+l4peUEoVGtufEjDlP/XPHwuCjYPQKnLlBrJHqhyczlXkAcCJoLQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPi1Jm5xq/crlMgfHlkY/2IAyA4dMB8GA1UdIwQY MBaAFOO+B8sf1PHjySIwO2cKiBuC5hSRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMt ZDRlZTFkMzg5ZTBkLzEvMS1MVW1ibkdyOXl1VXlCOGVXUmpfWWdESURoMC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYmEvOGY1ZmFlLWRhOTAtNDMxNC1iZmZjLWQ0ZWUxZDM4OWUw ZC8xLzQ3NEh5eF9VOGVQSklqQTdad3FJRzRMbUZKRS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFDo1zAN BgkqhkiG9w0BAQsFAAOCAQEACUcdZY9dfatlOmPhVykYwFVqbEKMy1MCxrIJlAwk I7pQF2MGDCVrijwbm89INHXIyuOLjVGxbt1OL8O4DFu1xKASUOSWrggINxtbJZ6O F4oGmnByUeQRu+/UNeJng6xnAtaedsFwkada/NQCAZICn2j9+CPkTCDnQfXzbfKb JJzM45+kZC5axiI/2oue3EsoRKeU3aLNt+j2tWRwXHGRecaOf1wDwA1/EcdEezIg QCI57tBfksk0faVZt6lLT4XxoxLlyUAYwUe55scatCVhNeCmTU6ZG0QykQrNCuQz tl8ilgpChyfp2MBr4Kns0pVTVCnRLPIl3nXsw5G0RlWSzA== -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:52 2026 by rpki-client