This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/iU0Pk1XKkqKY2UW_57mDdfDpv6c.roa File: iU0Pk1XKkqKY2UW_57mDdfDpv6c.roa (raw, json) Hash identifier: c18P2qrraOE3rD/gKQy4EtpokdyJxaG8C0Ug76ZT7tg= Subject key identifier: 89:4D:0F:93:55:CA:92:A2:98:D9:45:BF:E7:B9:83:75:F0:E9:BF:A7 Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491 Certificate serial: 019B7AC8C2674A2227AE49C2B8CFEE973AB2 Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/iU0Pk1XKkqKY2UW_57mDdfDpv6c.roa Signing time: Thu 01 Jan 2026 18:18:55 +0000 ROA not before: Thu 01 Jan 2026 18:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35108 IP address blocks: 80.233.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.mft rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:c2:67:4a:22:27:ae:49:c2:b8:cf:ee:97:3a:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491 Validity Not Before: Jan 1 18:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=894d0f9355ca92a298d945bfe7b98375f0e9bfa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5f:9b:03:b7:d5:91:5c:fa:6c:bf:b1:b0:7c: 84:ea:da:bd:eb:a6:8d:65:b7:79:1c:d3:72:22:23: aa:be:10:43:a2:c6:4d:24:c1:f1:29:3a:b8:8c:06: 53:a9:4f:55:6f:a6:c9:e9:29:e7:8a:d9:bb:33:7f: 1b:0e:d2:cf:bc:c3:c4:c2:c3:5b:f4:12:4a:1b:4a: d9:79:3e:fa:8e:b7:d0:5b:ac:c8:8e:05:da:ff:89: c8:34:86:80:d9:5a:e8:fc:4c:14:5f:a8:21:69:0d: 86:c9:93:e9:fc:fb:5f:39:57:91:51:65:68:4c:d3: 09:cc:a6:c3:10:18:28:05:29:79:52:91:fb:2f:87: 14:ca:a8:b8:d1:79:86:74:2f:b2:71:75:34:e3:1e: 55:24:5c:83:8b:2e:3d:7b:e8:e8:30:0e:82:57:42: a9:72:ce:87:b5:8b:2a:3b:bf:1c:02:aa:d8:77:cf: 20:5c:93:13:9e:18:b9:38:e4:ea:d4:12:2a:52:a1: d9:1b:4d:ec:b5:3b:bd:28:ad:18:4e:4d:b7:8f:c1: 3d:cc:b4:50:e2:c6:9c:51:ec:1b:c9:12:b6:64:57: 15:37:51:1f:72:d3:b8:08:4c:8e:2c:ae:57:34:a1: e5:ac:bc:f3:83:91:63:e7:c8:5c:b4:a9:52:8f:e6: f5:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:4D:0F:93:55:CA:92:A2:98:D9:45:BF:E7:B9:83:75:F0:E9:BF:A7 X509v3 Authority Key Identifier: keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/iU0Pk1XKkqKY2UW_57mDdfDpv6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.233.156.0/22 Signature Algorithm: sha256WithRSAEncryption 1b:a8:7f:76:40:9a:9a:a1:f3:22:3b:13:6a:b0:cb:7d:7b:b8: 83:ea:cc:2d:e3:9b:55:04:fc:c6:67:5e:dc:e0:23:00:49:b6: d3:da:ca:92:1d:ea:6f:ab:21:1e:ec:27:9a:83:dc:b7:5b:6a: a8:9b:2a:91:9f:9e:71:e0:46:98:c9:cb:fa:1d:f0:62:0c:2c: f8:41:c0:dd:eb:a6:0a:25:ce:d9:fe:7c:2b:11:ae:4c:b3:5e: 79:c5:bb:6e:bd:6f:33:37:5e:58:39:9a:4d:53:7f:32:03:e6: 16:5c:01:c5:5e:7f:47:e0:5f:eb:23:23:41:b4:59:45:b2:fe: 52:c4:f4:ad:70:de:b2:94:6d:f6:f8:d2:01:c1:25:17:58:80: db:24:28:ee:7f:61:ce:a8:3a:ee:01:f5:ba:c2:11:98:ad:5e: 83:02:e3:07:cd:a4:a4:de:48:45:86:fb:d9:96:53:ab:7f:f9: 73:f8:da:bf:90:d2:a7:05:bd:87:a1:a1:79:f0:10:3c:d9:d9: ed:91:45:23:9d:5f:a5:98:9d:a2:89:58:e5:f7:3f:65:b6:7e: 8e:0d:1d:07:7f:bd:c0:7d:0a:89:ba:33:55:4f:54:36:04:17: b8:f4:6e:91:1a:ca:34:25:94:7a:91:9e:84:7d:80:2e:2e:da: 9c:bf:90:29 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yMJnSiInrknCuM/ulzqyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzYmUwN2NiMWZkNGYxZTNjOTIyMzAzYjY3MGE4ODFiODJl NjE0OTEwHhcNMjYwMTAxMTgxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OTRkMGY5MzU1Y2E5MmEyOThkOTQ1YmZlN2I5ODM3NWYwZTliZmE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtl+bA7fVkVz6bL+xsHyE6tq966aN Zbd5HNNyIiOqvhBDosZNJMHxKTq4jAZTqU9Vb6bJ6Snnitm7M38bDtLPvMPEwsNb 9BJKG0rZeT76jrfQW6zIjgXa/4nINIaA2Vro/EwUX6ghaQ2GyZPp/PtfOVeRUWVo TNMJzKbDEBgoBSl5UpH7L4cUyqi40XmGdC+ycXU04x5VJFyDiy49e+joMA6CV0Kp cs6HtYsqO78cAqrYd88gXJMTnhi5OOTq1BIqUqHZG03stTu9KK0YTk23j8E9zLRQ 4sacUewbyRK2ZFcVN1EfctO4CEyOLK5XNKHlrLzzg5Fj58hctKlSj+b1awIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIlND5NVypKimNlFv+e5g3Xw6b+nMB8GA1UdIwQY MBaAFOO+B8sf1PHjySIwO2cKiBuC5hSRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMt ZDRlZTFkMzg5ZTBkLzEvaVUwUGsxWEtrcUtZMlVXXzU3bURkZkRwdjZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMtZDRlZTFkMzg5ZTBk LzEvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCUOmcMA0G CSqGSIb3DQEBCwUAA4IBAQAbqH92QJqaofMiOxNqsMt9e7iD6swt45tVBPzGZ17c 4CMASbbT2sqSHepvqyEe7Ceag9y3W2qomyqRn55x4EaYycv6HfBiDCz4QcDd66YK Jc7Z/nwrEa5Ms155xbtuvW8zN15YOZpNU38yA+YWXAHFXn9H4F/rIyNBtFlFsv5S xPStcN6ylG32+NIBwSUXWIDbJCjuf2HOqDruAfW6whGYrV6DAuMHzaSk3khFhvvZ llOrf/lz+Nq/kNKnBb2HoaF58BA82dntkUUjnV+lmJ2iiVjl9z9ltn6ODR0Hf73A fQqJujNVT1Q2BBe49G6RGso0JZR6kZ6EfYAuLtqcv5Ap -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:51 2026 by rpki-client