This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/Pq7GsnlXUNvwmtYMCXWDJpvzuMs.roa File: Pq7GsnlXUNvwmtYMCXWDJpvzuMs.roa (raw, json) Hash identifier: ae8y+rn6C4AlLGJB4X/T2xlxd1SW3nrKO+YS+XB+Q1k= Subject key identifier: 3E:AE:C6:B2:79:57:50:DB:F0:9A:D6:0C:09:75:83:26:9B:F3:B8:CB Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491 Certificate serial: 019B7AC8C733DD0DE542CA932304F99E5E2F Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/Pq7GsnlXUNvwmtYMCXWDJpvzuMs.roa Signing time: Thu 01 Jan 2026 18:18:57 +0000 ROA not before: Thu 01 Jan 2026 18:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47499 IP address blocks: 80.233.160.0/23 maxlen: 24 80.233.228.0/23 maxlen: 24 80.233.252.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.mft rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:c7:33:dd:0d:e5:42:ca:93:23:04:f9:9e:5e:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491 Validity Not Before: Jan 1 18:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3eaec6b2795750dbf09ad60c097583269bf3b8cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:cc:87:9a:76:59:35:11:ac:be:1f:b8:30:95: 97:ef:a3:51:25:df:7d:3b:cf:83:9b:dc:fe:a2:15: 62:58:fc:f4:3d:34:1a:ac:e1:ed:9f:26:34:f4:d6: a6:61:69:c1:43:21:df:e6:e8:b7:af:20:aa:38:6b: aa:a4:2e:3f:31:2c:ad:9d:f4:53:d6:31:29:7c:79: 5c:1b:72:f0:20:87:4f:5b:04:22:1f:76:42:5a:f0: 2b:c6:cd:a1:a2:0d:2e:d9:db:5f:58:10:05:94:df: ee:8b:82:bb:58:6b:3d:69:e7:cf:c2:00:45:1d:4d: 73:53:74:36:86:1a:1e:0c:da:ca:9a:7c:66:8e:36: 68:98:08:0a:8c:53:32:de:bb:d0:0c:4f:b3:38:a4: ae:b1:38:e0:fc:8f:07:b8:85:58:db:44:6a:ec:c2: e0:8b:e9:8f:63:82:bf:c1:cb:6d:cd:76:72:45:34: 13:9b:1b:c8:3e:ca:c1:48:86:00:0d:cc:b4:77:fd: 70:40:57:13:27:e0:5f:fa:1d:63:b8:88:e1:f1:24: 9c:32:b9:1a:ee:ca:d1:01:59:58:e1:d5:9f:cb:f9: 03:34:d4:2b:0c:68:cb:5b:05:74:26:6b:08:76:66: ea:c2:29:e9:27:39:d1:8f:cf:b0:f5:1e:37:45:3a: 40:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:AE:C6:B2:79:57:50:DB:F0:9A:D6:0C:09:75:83:26:9B:F3:B8:CB X509v3 Authority Key Identifier: keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/Pq7GsnlXUNvwmtYMCXWDJpvzuMs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.233.160.0/23 80.233.228.0/23 80.233.252.0/23 Signature Algorithm: sha256WithRSAEncryption 6c:6e:aa:fa:b6:86:69:5c:a6:90:3d:3c:f1:c5:38:0f:9a:32: 1f:d0:a7:02:d9:2a:e1:1c:de:70:7d:20:52:be:55:1f:ac:f6: d8:00:b9:65:fe:62:f8:d3:23:bf:8f:63:16:ed:1b:34:31:72: 85:16:e2:b5:d6:c7:0b:92:f1:47:db:aa:d3:7e:4a:96:d6:cc: 2d:48:d3:6f:84:79:2e:cd:b4:0b:5d:ec:3d:da:68:68:28:7b: ac:5d:7f:92:8b:86:32:dd:83:7c:f3:20:f8:dd:ee:17:24:98: 3d:b5:91:c6:e1:2c:6a:80:68:10:a8:17:0b:fa:cf:b3:1d:d5: 8c:cd:6b:ab:c9:85:a8:8f:dd:db:42:d9:df:f1:7b:35:ff:92: c0:b5:52:7e:82:30:19:72:9e:5c:e2:f8:d4:6a:36:d3:37:39: a6:a4:7d:c6:a5:9f:33:bf:ce:35:e4:2f:ca:53:39:32:6d:a8: b0:c4:8c:da:46:4a:50:37:da:f8:0f:f9:11:0e:3c:8d:97:2c: 1f:79:ca:0b:83:de:87:3b:66:d6:aa:ef:61:5e:d2:58:67:8d: 8e:ea:7e:56:f4:a2:ad:15:68:18:d8:9f:7d:f6:97:b8:58:79: 84:01:de:f2:6f:f6:dd:59:f4:96:b9:9e:f6:04:e3:43:0f:70: a0:88:3c:a0 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt6yMcz3Q3lQsqTIwT5nl4vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzYmUwN2NiMWZkNGYxZTNjOTIyMzAzYjY3MGE4ODFiODJl NjE0OTEwHhcNMjYwMTAxMTgxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZWFlYzZiMjc5NTc1MGRiZjA5YWQ2MGMwOTc1ODMyNjliZjNiOGNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsyHmnZZNRGsvh+4MJWX76NRJd99 O8+Dm9z+ohViWPz0PTQarOHtnyY09NamYWnBQyHf5ui3ryCqOGuqpC4/MSytnfRT 1jEpfHlcG3LwIIdPWwQiH3ZCWvArxs2hog0u2dtfWBAFlN/ui4K7WGs9aefPwgBF HU1zU3Q2hhoeDNrKmnxmjjZomAgKjFMy3rvQDE+zOKSusTjg/I8HuIVY20Rq7MLg i+mPY4K/wcttzXZyRTQTmxvIPsrBSIYADcy0d/1wQFcTJ+Bf+h1juIjh8SScMrka 7srRAVlY4dWfy/kDNNQrDGjLWwV0JmsIdmbqwinpJznRj8+w9R43RTpAvwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFD6uxrJ5V1Db8JrWDAl1gyab87jLMB8GA1UdIwQY MBaAFOO+B8sf1PHjySIwO2cKiBuC5hSRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMt ZDRlZTFkMzg5ZTBkLzEvUHE3R3NubFhVTnZ3bXRZTUNYV0RKcHZ6dU1zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMtZDRlZTFkMzg5ZTBk LzEvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBUOmgAwQB UOnkAwQBUOn8MA0GCSqGSIb3DQEBCwUAA4IBAQBsbqr6toZpXKaQPTzxxTgPmjIf 0KcC2SrhHN5wfSBSvlUfrPbYALll/mL40yO/j2MW7Rs0MXKFFuK11scLkvFH26rT fkqW1swtSNNvhHkuzbQLXew92mhoKHusXX+Si4Yy3YN88yD43e4XJJg9tZHG4Sxq gGgQqBcL+s+zHdWMzWuryYWoj93bQtnf8Xs1/5LAtVJ+gjAZcp5c4vjUajbTNzmm pH3GpZ8zv8415C/KUzkybaiwxIzaRkpQN9r4D/kRDjyNlywfecoLg96HO2bWqu9h XtJYZ42O6n5W9KKtFWgY2J999pe4WHmEAd7yb/bdWfSWuZ72BONDD3CgiDyg -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:31 2026 by rpki-client