This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/FFXiaCvbibcNBUE3vdyiVIFoHFk.roa File: FFXiaCvbibcNBUE3vdyiVIFoHFk.roa (raw, json) Hash identifier: 0druTB9iKOWZCVBm4lO997McUmzXoHhCQiV/onKDzlA= Subject key identifier: 14:55:E2:68:2B:DB:89:B7:0D:05:41:37:BD:DC:A2:54:81:68:1C:59 Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Certificate serial: 019B7D5D61E837B70C8EDE5546FEFA217124 Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/FFXiaCvbibcNBUE3vdyiVIFoHFk.roa Signing time: Fri 02 Jan 2026 06:20:30 +0000 ROA not before: Fri 02 Jan 2026 06:20:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 263824 IP address blocks: 80.67.32.0/22 maxlen: 24 178.238.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 11:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:61:e8:37:b7:0c:8e:de:55:46:fe:fa:21:71:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Validity Not Before: Jan 2 06:20:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1455e2682bdb89b70d054137bddca25481681c59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:53:93:72:a7:5c:c5:78:ca:8e:9f:9b:92:4e: 3f:52:d9:1b:6e:a0:99:19:45:89:e3:cd:01:f7:f2: cc:f2:d5:71:bf:36:32:ee:d4:81:53:e2:bf:51:a2: 1f:45:f5:34:df:5c:76:de:07:56:ec:90:f0:df:b8: f9:8d:08:3e:b7:e1:6c:95:14:ea:9e:1e:13:06:e1: 49:8a:72:fa:c6:0d:b7:30:33:54:d2:a8:3d:f6:21: 6a:c4:f9:ea:98:f6:1b:53:5b:c7:5a:6e:0d:39:41: 41:b2:e9:89:6e:b7:4f:76:e8:c4:45:39:ef:2c:3d: c7:1f:cd:87:af:75:40:96:e0:43:2c:7b:2b:69:0c: 19:c7:a6:8a:57:f2:6c:88:ed:4c:20:b5:4f:52:6a: d5:cf:c8:9f:d2:ee:fe:13:85:e5:97:91:b7:d7:a3: 34:f5:e1:9d:e6:a4:0f:fe:eb:ea:f3:21:25:45:31: 3a:cd:6b:38:a9:5e:ec:bf:02:24:d4:10:c4:55:0f: bd:af:f7:63:5c:3d:41:e7:3b:d1:90:a2:c5:64:a6: 92:7f:70:09:0d:2e:19:7b:b0:86:f1:b1:4c:a9:36: e8:11:91:ac:29:91:8a:aa:37:fb:d4:ad:b2:42:a1: 62:7d:d2:4e:ca:b2:ec:97:0a:ef:cc:ad:b7:90:73: 2d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:55:E2:68:2B:DB:89:B7:0D:05:41:37:BD:DC:A2:54:81:68:1C:59 X509v3 Authority Key Identifier: keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/FFXiaCvbibcNBUE3vdyiVIFoHFk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.67.32.0/22 178.238.12.0/22 Signature Algorithm: sha256WithRSAEncryption 55:04:54:3d:1b:3b:76:54:cd:da:e6:2b:27:b6:4d:de:4f:e2: f7:31:65:30:b5:76:12:b9:e5:fe:67:05:c1:1a:a5:b4:5e:51: 33:ea:d8:a4:3b:bb:a3:d7:c5:dd:12:c0:28:db:bb:c5:09:b7: f1:f8:71:1f:ae:c3:ca:8b:11:96:39:fe:6f:ed:4d:d4:53:63: 05:be:dc:b1:99:6a:ae:b7:b8:4d:21:e0:98:ab:f3:c2:01:be: cf:0f:bc:6a:5c:b1:02:f0:75:5d:12:82:af:a6:8b:cf:5b:c2: 86:cc:e4:46:16:81:e7:dc:f5:1d:7b:38:32:d7:fb:b9:80:3e: d3:e7:7a:f9:bc:06:40:97:a6:aa:79:d3:af:1f:41:c3:ee:20: 0f:de:95:d8:24:aa:62:4e:1a:56:f6:a6:47:27:81:57:b5:fa: 92:cd:f8:08:87:5f:38:b9:d7:da:70:fe:d9:48:63:87:5c:d8: 83:5d:49:b0:cd:c4:1f:98:53:6c:ef:e5:da:ef:2a:1a:b5:3a: e2:8e:86:d1:d7:59:bb:ef:da:d7:c7:36:68:d6:8f:7e:68:96: 21:22:20:b0:d4:72:a5:87:4c:b5:3c:ca:a4:3f:3f:98:29:a1: f1:ae:f1:c6:8e:04:c0:b3:2a:41:72:ad:5e:43:9c:77:e0:62: 30:93:ea:63 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9XWHoN7cMjt5VRv76IXEkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw NWIwZTIwHhcNMjYwMTAyMDYyMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNDU1ZTI2ODJiZGI4OWI3MGQwNTQxMzdiZGRjYTI1NDgxNjgxYzU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilOTcqdcxXjKjp+bkk4/UtkbbqCZ GUWJ480B9/LM8tVxvzYy7tSBU+K/UaIfRfU031x23gdW7JDw37j5jQg+t+FslRTq nh4TBuFJinL6xg23MDNU0qg99iFqxPnqmPYbU1vHWm4NOUFBsumJbrdPdujERTnv LD3HH82Hr3VAluBDLHsraQwZx6aKV/JsiO1MILVPUmrVz8if0u7+E4Xll5G316M0 9eGd5qQP/uvq8yElRTE6zWs4qV7svwIk1BDEVQ+9r/djXD1B5zvRkKLFZKaSf3AJ DS4Ze7CG8bFMqTboEZGsKZGKqjf71K2yQqFifdJOyrLslwrvzK23kHMtcQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBRV4mgr24m3DQVBN73colSBaBxZMB8GA1UdIwQY MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt MmNjZWRiOTY2YTU4LzEvRkZYaWFDdmJpYmNOQlVFM3ZkeWlWSUZvSEZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4 LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCUEMgAwQC su4MMA0GCSqGSIb3DQEBCwUAA4IBAQBVBFQ9Gzt2VM3a5isntk3eT+L3MWUwtXYS ueX+ZwXBGqW0XlEz6tikO7uj18XdEsAo27vFCbfx+HEfrsPKixGWOf5v7U3UU2MF vtyxmWqut7hNIeCYq/PCAb7PD7xqXLEC8HVdEoKvpovPW8KGzORGFoHn3PUdezgy 1/u5gD7T53r5vAZAl6aqedOvH0HD7iAP3pXYJKpiThpW9qZHJ4FXtfqSzfgIh184 udfacP7ZSGOHXNiDXUmwzcQfmFNs7+Xa7yoatTrijobR11m779rXxzZo1o9+aJYh IiCw1HKlh0y1PMqkPz+YKaHxrvHGjgTAsypBcq1eQ5x34GIwk+pj -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:38 2026 by rpki-client