This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/CDDBIhPlFZ0la4xFUCyUslJRm_w.roa File: CDDBIhPlFZ0la4xFUCyUslJRm_w.roa (raw, json) Hash identifier: APBpif6BQi/aq1agj/dNgGEFPrydGKCzR1HfGBm5Jbw= Subject key identifier: 08:30:C1:22:13:E5:15:9D:25:6B:8C:45:50:2C:94:B2:52:51:9B:FC Certificate issuer: /CN=ebfabfa628063f6b8e9888566f5f3fcfa798c621 Certificate serial: 019B7C12A772296DC808DFA31BB03520B779 Authority key identifier: EB:FA:BF:A6:28:06:3F:6B:8E:98:88:56:6F:5F:3F:CF:A7:98:C6:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6_q_pigGP2uOmIhWb18_z6eYxiE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/CDDBIhPlFZ0la4xFUCyUslJRm_w.roa Signing time: Fri 02 Jan 2026 00:19:15 +0000 ROA not before: Fri 02 Jan 2026 00:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43905 IP address blocks: 80.79.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/6_q_pigGP2uOmIhWb18_z6eYxiE.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/6_q_pigGP2uOmIhWb18_z6eYxiE.mft rsync://rpki.ripe.net/repository/DEFAULT/6_q_pigGP2uOmIhWb18_z6eYxiE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:a7:72:29:6d:c8:08:df:a3:1b:b0:35:20:b7:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebfabfa628063f6b8e9888566f5f3fcfa798c621 Validity Not Before: Jan 2 00:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0830c12213e5159d256b8c45502c94b252519bfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:67:4b:3e:e7:f2:6f:03:49:af:ce:f3:79:61: 19:37:32:6c:4b:34:16:ab:0c:1e:84:65:75:3c:70: b5:e6:7f:2a:c5:44:d9:a4:ec:f9:02:13:a7:dc:87: b3:f6:ae:e6:fc:b5:dc:fb:eb:09:aa:44:db:e2:54: 36:e8:0f:78:35:c9:f2:46:2e:b4:83:62:16:0c:58: 47:cd:7e:bd:1e:1c:7e:c1:41:86:5d:df:54:77:c8: 9d:f6:61:12:9a:a2:70:a0:44:c0:f7:fc:26:5f:e5: 11:de:b3:b0:4e:67:4a:c3:b3:be:a5:0e:18:ad:52: c7:64:c8:99:8f:40:bf:5e:e5:74:d9:b3:ab:36:7f: ee:a2:df:7a:a1:48:65:10:b0:53:b0:b8:8e:ff:f3: 72:9e:d4:27:ae:0e:9f:03:49:87:27:81:61:bc:50: 8a:2a:7e:96:f0:4c:d3:73:71:9e:4c:60:a7:a4:df: 2a:a9:42:8d:27:10:b9:ac:29:5f:a9:71:28:5f:a2: 61:28:ba:6e:5c:7a:de:f6:52:57:9a:cf:9b:9c:1d: de:1d:d9:cf:a2:9d:06:9f:71:90:23:e1:d5:41:cc: b6:c6:dd:0c:2b:5a:eb:2b:8b:71:48:e3:ef:2f:9d: a4:83:63:15:70:d0:bb:11:04:70:9a:f2:e5:8c:19: b1:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:30:C1:22:13:E5:15:9D:25:6B:8C:45:50:2C:94:B2:52:51:9B:FC X509v3 Authority Key Identifier: keyid:EB:FA:BF:A6:28:06:3F:6B:8E:98:88:56:6F:5F:3F:CF:A7:98:C6:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_q_pigGP2uOmIhWb18_z6eYxiE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/CDDBIhPlFZ0la4xFUCyUslJRm_w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/6_q_pigGP2uOmIhWb18_z6eYxiE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.79.153.0/24 Signature Algorithm: sha256WithRSAEncryption c4:ae:5b:98:bb:48:c1:20:0f:14:d4:8b:fa:71:8d:58:ad:d7: ed:55:54:6f:d2:47:c3:26:82:a2:90:03:c9:fd:cd:0d:be:2d: 82:b7:38:f0:8b:e9:d3:94:02:ca:8e:90:75:0f:b8:64:86:2e: 22:0b:b8:c0:58:5d:ff:ec:ed:1a:d2:a6:4f:db:4c:60:95:94: 73:91:25:3d:14:06:2b:c4:99:d6:ee:83:69:67:03:ff:c0:99: 48:89:08:30:61:9a:f9:5a:74:90:43:f9:a4:20:11:10:15:11: e4:2b:d0:20:88:a1:d7:0a:86:f8:b2:9c:7e:c1:74:45:96:d2: ad:e8:0c:ef:f7:08:42:a8:d4:d7:b3:e1:70:42:24:85:5e:8a: db:f0:dd:bd:dd:fe:46:63:14:58:6b:2e:fe:bc:3e:f5:56:b7: d3:27:ff:46:df:9b:b5:bc:3f:e3:b3:44:4d:69:68:93:ae:86: 78:af:33:8b:40:d9:cb:f4:e8:ce:db:d4:d5:24:ab:a0:ca:37: f5:b4:c0:d4:e4:ba:0e:ea:40:3c:5f:6f:16:83:d1:fe:eb:79: fe:e4:c6:34:2a:64:2c:ee:0b:77:b7:e7:11:bc:cb:8b:7f:f2: e8:56:b4:1a:48:2a:3d:f9:01:9d:d3:0a:95:83:5a:81:2e:67: a6:d1:b2:e9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EqdyKW3ICN+jG7A1ILd5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViZmFiZmE2MjgwNjNmNmI4ZTk4ODg1NjZmNWYzZmNmYTc5 OGM2MjEwHhcNMjYwMTAyMDAxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwODMwYzEyMjEzZTUxNTlkMjU2YjhjNDU1MDJjOTRiMjUyNTE5YmZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWdLPufybwNJr87zeWEZNzJsSzQW qwwehGV1PHC15n8qxUTZpOz5AhOn3Iez9q7m/LXc++sJqkTb4lQ26A94NcnyRi60 g2IWDFhHzX69Hhx+wUGGXd9Ud8id9mESmqJwoETA9/wmX+UR3rOwTmdKw7O+pQ4Y rVLHZMiZj0C/XuV02bOrNn/uot96oUhlELBTsLiO//NyntQnrg6fA0mHJ4FhvFCK Kn6W8EzTc3GeTGCnpN8qqUKNJxC5rClfqXEoX6JhKLpuXHre9lJXms+bnB3eHdnP op0Gn3GQI+HVQcy2xt0MK1rrK4txSOPvL52kg2MVcNC7EQRwmvLljBmxQwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAgwwSIT5RWdJWuMRVAslLJSUZv8MB8GA1UdIwQY MBaAFOv6v6YoBj9rjpiIVm9fP8+nmMYhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNl9xX3BpZ0dQMnVPbUloV2IxOF96NmVZeGlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9hM2EzMTEtMzc4NC00ODE4LWFiZjkt ZTVmZDZlOTg0MmFiLzEvQ0REQkloUGxGWjBsYTR4RlVDeVVzbEpSbV93LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9hM2EzMTEtMzc4NC00ODE4LWFiZjktZTVmZDZlOTg0MmFi LzEvNl9xX3BpZ0dQMnVPbUloV2IxOF96NmVZeGlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUE+ZMA0G CSqGSIb3DQEBCwUAA4IBAQDErluYu0jBIA8U1Iv6cY1YrdftVVRv0kfDJoKikAPJ /c0Nvi2Ctzjwi+nTlALKjpB1D7hkhi4iC7jAWF3/7O0a0qZP20xglZRzkSU9FAYr xJnW7oNpZwP/wJlIiQgwYZr5WnSQQ/mkIBEQFRHkK9AgiKHXCob4spx+wXRFltKt 6Azv9whCqNTXs+FwQiSFXorb8N293f5GYxRYay7+vD71VrfTJ/9G35u1vD/js0RN aWiTroZ4rzOLQNnL9OjO29TVJKugyjf1tMDU5LoO6kA8X28Wg9H+63n+5MY0KmQs 7gt3t+cRvMuLf/LoVrQaSCo9+QGd0wqVg1qBLmem0bLp -----END CERTIFICATE-----Generated at Mon Jan 26 22:36:02 2026 by rpki-client