This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/xzOtkf3m_unGZDJuyTmOZRDo1vs.roa File: xzOtkf3m_unGZDJuyTmOZRDo1vs.roa (raw, json) Hash identifier: AqWTAJg+/JR+tTmpK3jZUrDvB6ISeUjMegyS/xS/c3s= Subject key identifier: C7:33:AD:91:FD:E6:FE:E9:C6:64:32:6E:C9:39:8E:65:10:E8:D6:FB Certificate issuer: /CN=6a8b5a374f146d7b6a6dc7d316e8ebb12deea670 Certificate serial: 019B7C80D020D5CEFF524DEB66F0991C2D20 Authority key identifier: 6A:8B:5A:37:4F:14:6D:7B:6A:6D:C7:D3:16:E8:EB:B1:2D:EE:A6:70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/xzOtkf3m_unGZDJuyTmOZRDo1vs.roa Signing time: Fri 02 Jan 2026 02:19:34 +0000 ROA not before: Fri 02 Jan 2026 02:19:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211440 IP address blocks: 185.80.90.0/24 maxlen: 24 185.102.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 17:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:d0:20:d5:ce:ff:52:4d:eb:66:f0:99:1c:2d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a8b5a374f146d7b6a6dc7d316e8ebb12deea670 Validity Not Before: Jan 2 02:19:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c733ad91fde6fee9c664326ec9398e6510e8d6fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:8e:f7:f8:b6:82:21:b5:e7:bb:4a:62:bf:d7: 17:1c:50:3d:0d:68:a1:18:92:9e:4c:83:81:39:2a: 8b:af:9c:7e:cc:18:85:4c:02:9e:e9:86:16:78:e3: b2:1b:87:aa:6a:b0:78:73:67:b4:33:81:32:5f:0d: 0b:6d:95:c4:47:62:87:d1:96:0f:2a:69:81:f8:60: 4d:d9:a4:6e:ad:d1:b5:7c:aa:06:c2:d7:4d:cb:30: 54:d8:68:1b:98:4f:01:5c:e9:94:74:29:7c:22:bb: 6f:c6:ab:2e:47:ef:c4:ae:ae:4b:7f:a9:86:61:b7: 34:37:5d:f8:8e:38:96:ff:8d:94:e4:e6:f6:57:34: b8:69:0e:48:0e:cb:01:51:1a:1f:a2:00:ba:d3:97: 11:c8:bc:ac:61:b4:e0:26:22:b7:4f:6c:e1:f9:0d: 91:bf:e5:69:f0:cf:e4:a8:39:b9:91:84:f0:46:32: b2:d2:a8:7c:7b:a4:75:57:f1:dc:87:47:ce:3f:e0: 8c:5c:4e:1a:f2:9f:23:d0:46:4c:0f:06:ed:c7:da: b5:0b:6b:d1:99:61:a8:6b:4c:c0:68:a6:2b:ed:8d: 77:71:06:d8:13:3d:22:46:49:62:04:28:f1:78:2c: f8:61:2e:e1:e7:93:64:c1:6c:3c:24:8c:5a:13:d3: 41:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:33:AD:91:FD:E6:FE:E9:C6:64:32:6E:C9:39:8E:65:10:E8:D6:FB X509v3 Authority Key Identifier: keyid:6A:8B:5A:37:4F:14:6D:7B:6A:6D:C7:D3:16:E8:EB:B1:2D:EE:A6:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/xzOtkf3m_unGZDJuyTmOZRDo1vs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.80.90.0/24 185.102.86.0/24 Signature Algorithm: sha256WithRSAEncryption 22:8f:a3:ad:71:d3:9d:4e:f2:c8:69:49:16:da:8a:fb:c9:10: 6a:8c:2a:8b:2c:ec:2e:b8:9e:2d:07:68:28:fe:34:f6:88:a7: 53:c2:eb:fd:c7:34:a7:3e:b7:bc:25:89:8a:33:e7:d0:32:00: d5:a6:96:d2:bf:5e:54:0e:86:47:dc:81:27:04:9a:28:18:a1: e5:71:db:35:8a:48:2e:8c:13:ca:0f:7b:af:ef:c5:39:d1:8b: 8f:09:3f:dc:37:07:c7:d2:7f:c8:e4:a5:fd:46:55:91:dc:d3: 8e:eb:63:b6:ba:4b:46:61:d2:c7:95:ec:7d:5a:98:4e:a2:f4: 2a:a9:42:f7:44:26:a6:c1:39:17:0a:6c:8f:e2:0c:41:06:8a: 3b:37:fa:79:34:2a:d4:0c:d9:ce:5b:25:e1:88:83:8a:b8:ba: 1b:9f:74:1c:70:3b:b9:8e:94:b0:26:c1:f5:5a:3e:04:b4:c1: 65:50:73:8a:6a:2e:52:d5:04:be:ff:1a:7b:be:be:da:e1:84: 8a:8c:6d:4c:69:c7:10:7c:02:81:82:a9:70:7f:b3:9e:06:76: 8c:22:b4:05:73:f3:5d:d1:8c:26:e1:54:8b:2a:3d:be:2d:a6: 98:fc:40:2d:df:bb:e3:27:74:a7:71:ed:31:36:ac:c4:a2:30: 21:60:0a:30 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8gNAg1c7/Uk3rZvCZHC0gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhOGI1YTM3NGYxNDZkN2I2YTZkYzdkMzE2ZThlYmIxMmRl ZWE2NzAwHhcNMjYwMTAyMDIxOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzMzYWQ5MWZkZTZmZWU5YzY2NDMyNmVjOTM5OGU2NTEwZThkNmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1o73+LaCIbXnu0piv9cXHFA9DWih GJKeTIOBOSqLr5x+zBiFTAKe6YYWeOOyG4eqarB4c2e0M4EyXw0LbZXER2KH0ZYP KmmB+GBN2aRurdG1fKoGwtdNyzBU2GgbmE8BXOmUdCl8IrtvxqsuR+/Erq5Lf6mG Ybc0N134jjiW/42U5Ob2VzS4aQ5IDssBURofogC605cRyLysYbTgJiK3T2zh+Q2R v+Vp8M/kqDm5kYTwRjKy0qh8e6R1V/Hch0fOP+CMXE4a8p8j0EZMDwbtx9q1C2vR mWGoa0zAaKYr7Y13cQbYEz0iRkliBCjxeCz4YS7h55NkwWw8JIxaE9NBnwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMczrZH95v7pxmQybsk5jmUQ6Nb7MB8GA1UdIwQY MBaAFGqLWjdPFG17am3H0xbo67Et7qZwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYW90YU4wOFViWHRxYmNmVEZ1anJzUzN1cG5BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9mNmM4NjItYWY4Yi00M2YzLTk4YWQt NDQyNDFmZWMxYTlmLzEveHpPdGtmM21fdW5HWkRKdXlUbU9aUkRvMXZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9mNmM4NjItYWY4Yi00M2YzLTk4YWQtNDQyNDFmZWMxYTlm LzEvYW90YU4wOFViWHRxYmNmVEZ1anJzUzN1cG5BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuVBaAwQA uWZWMA0GCSqGSIb3DQEBCwUAA4IBAQAij6OtcdOdTvLIaUkW2or7yRBqjCqLLOwu uJ4tB2go/jT2iKdTwuv9xzSnPre8JYmKM+fQMgDVppbSv15UDoZH3IEnBJooGKHl cds1ikgujBPKD3uv78U50YuPCT/cNwfH0n/I5KX9RlWR3NOO62O2uktGYdLHlex9 WphOovQqqUL3RCamwTkXCmyP4gxBBoo7N/p5NCrUDNnOWyXhiIOKuLobn3QccDu5 jpSwJsH1Wj4EtMFlUHOKai5S1QS+/xp7vr7a4YSKjG1MaccQfAKBgqlwf7OeBnaM IrQFc/Nd0Ywm4VSLKj2+LaaY/EAt37vjJ3Snce0xNqzEojAhYAow -----END CERTIFICATE-----Generated at Mon Jan 19 23:20:48 2026 by rpki-client