This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/0ub9OUDvq-GTk6vbG0qa7XcgLqo.roa File: 0ub9OUDvq-GTk6vbG0qa7XcgLqo.roa (raw, json) Hash identifier: VMePWqYKWwHlm0UpLz+l5ddrcipvR5l3jj4E/ERuLCs= Subject key identifier: D2:E6:FD:39:40:EF:AB:E1:93:93:AB:DB:1B:4A:9A:ED:77:20:2E:AA Certificate issuer: /CN=a2900e4655ab349a4632b140719dc97230431725 Certificate serial: 019C2F791F2B90832204CC494BE86070BC3A Authority key identifier: A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/0ub9OUDvq-GTk6vbG0qa7XcgLqo.roa Signing time: Thu 05 Feb 2026 20:23:12 +0000 ROA not before: Thu 05 Feb 2026 20:23:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205962 IP address blocks: 80.77.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:2f:79:1f:2b:90:83:22:04:cc:49:4b:e8:60:70:bc:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2900e4655ab349a4632b140719dc97230431725 Validity Not Before: Feb 5 20:23:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d2e6fd3940efabe19393abdb1b4a9aed77202eaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:0c:ec:d3:52:71:87:81:4e:af:70:03:63:59: 2b:61:cd:f2:01:ab:7b:ef:ba:3a:09:62:3c:0a:4f: ce:b5:fa:32:28:68:db:b6:6d:eb:a0:f8:ed:e4:3a: ed:e3:3a:1b:e0:fd:7a:b7:82:1a:7d:e3:44:01:66: c0:19:c3:fc:ab:4b:b9:f1:1b:1c:8a:3e:a1:34:af: d2:63:8f:21:0b:47:4c:2b:29:fd:47:0d:6d:48:d8: 51:9f:74:61:80:fb:00:85:77:bf:89:a8:76:f2:88: dd:07:d2:05:4b:60:f4:b6:58:a9:69:7d:a1:18:b0: 5d:d2:86:1c:bb:ea:6e:9d:24:95:7a:77:92:cb:e8: da:7d:1f:4e:62:f2:36:dc:6d:3d:ae:12:6f:6f:58: 81:74:f8:12:91:56:c7:6c:ab:c0:84:b1:2f:5d:30: 5f:99:32:19:fb:cd:61:f5:47:96:68:77:79:f9:e4: 28:ee:40:a7:a9:da:59:d5:3d:a3:20:d3:5e:2f:f6: ab:c7:c0:db:51:65:e3:bd:f9:53:ca:cc:ca:57:0b: 36:ea:99:bb:3b:ad:81:7e:82:16:5d:7f:9e:5a:6d: 1c:23:d0:b1:5c:39:6b:a6:f4:7a:73:c8:ed:d1:41: 2d:3c:02:c7:46:ba:7c:75:5f:bc:cf:f1:ca:24:4e: ea:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:E6:FD:39:40:EF:AB:E1:93:93:AB:DB:1B:4A:9A:ED:77:20:2E:AA X509v3 Authority Key Identifier: keyid:A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/0ub9OUDvq-GTk6vbG0qa7XcgLqo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.77.165.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:f4:7e:99:57:1a:43:c5:09:2b:84:36:99:27:cc:ad:13:2a: a4:ca:4f:1a:71:4b:ef:cd:10:f1:7e:13:1e:ba:01:de:67:e4: 4e:84:4f:08:cd:73:2d:e4:a3:f9:73:18:3a:f6:e7:6e:64:8b: e4:cc:39:7a:ad:ec:8f:30:19:3e:88:0b:a8:a5:b9:1d:1e:52: c4:af:d8:e6:69:b2:90:85:54:65:02:a2:5b:aa:4d:8a:ea:e9: 2b:d4:72:16:3f:49:58:1c:a8:74:79:8b:ca:b7:65:5c:51:e6: 35:30:ed:a9:85:df:9b:f4:42:d4:cf:eb:09:10:03:03:ba:62: 1b:ad:00:f8:bb:d9:4a:66:48:b8:02:03:a5:b8:dc:78:28:05: 16:07:50:77:90:72:c0:2f:3d:80:e0:34:c0:37:ae:93:9d:df: a0:12:13:ad:5f:6c:de:f3:ba:a8:71:2e:a7:63:47:f4:51:e4: e7:ba:c5:7b:ed:86:d5:eb:9d:df:dd:30:c0:23:44:5d:d0:21: fc:9c:33:ec:14:65:97:82:f6:59:19:88:81:a2:a4:8b:39:37: 40:dc:6d:89:2e:6e:bb:60:df:46:5a:0c:d9:5d:41:7e:9f:fb: 71:0e:ad:30:ba:9f:25:02:d7:67:8b:a4:b1:ec:8e:b5:61:12: cf:5f:a8:6e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwveR8rkIMiBMxJS+hgcLw6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyOTAwZTQ2NTVhYjM0OWE0NjMyYjE0MDcxOWRjOTcyMzA0 MzE3MjUwHhcNMjYwMjA1MjAyMzEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMmU2ZmQzOTQwZWZhYmUxOTM5M2FiZGIxYjRhOWFlZDc3MjAyZWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Qzs01Jxh4FOr3ADY1krYc3yAat7 77o6CWI8Ck/OtfoyKGjbtm3roPjt5Drt4zob4P16t4IafeNEAWbAGcP8q0u58Rsc ij6hNK/SY48hC0dMKyn9Rw1tSNhRn3RhgPsAhXe/iah28ojdB9IFS2D0tlipaX2h GLBd0oYcu+punSSVeneSy+jafR9OYvI23G09rhJvb1iBdPgSkVbHbKvAhLEvXTBf mTIZ+81h9UeWaHd5+eQo7kCnqdpZ1T2jINNeL/arx8DbUWXjvflTyszKVws26pm7 O62BfoIWXX+eWm0cI9CxXDlrpvR6c8jt0UEtPALHRrp8dV+8z/HKJE7qrQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNLm/TlA76vhk5Or2xtKmu13IC6qMB8GA1UdIwQY MBaAFKKQDkZVqzSaRjKxQHGdyXIwQxclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3BBT1JsV3JOSnBHTXJGQWNaM0pjakJERnlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC80ZjcwMWEtZWQ2Zi00N2M4LWJmNzMt ZjRjNWZjM2NhMmM0LzEvMHViOU9VRHZxLUdUazZ2YkcwcWE3WGNnTHFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC80ZjcwMWEtZWQ2Zi00N2M4LWJmNzMtZjRjNWZjM2NhMmM0 LzEvb3BBT1JsV3JOSnBHTXJGQWNaM0pjakJERnlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUE2lMA0G CSqGSIb3DQEBCwUAA4IBAQBL9H6ZVxpDxQkrhDaZJ8ytEyqkyk8acUvvzRDxfhMe ugHeZ+ROhE8IzXMt5KP5cxg69uduZIvkzDl6reyPMBk+iAuopbkdHlLEr9jmabKQ hVRlAqJbqk2K6ukr1HIWP0lYHKh0eYvKt2VcUeY1MO2phd+b9ELUz+sJEAMDumIb rQD4u9lKZki4AgOluNx4KAUWB1B3kHLALz2A4DTAN66Tnd+gEhOtX2ze87qocS6n Y0f0UeTnusV77YbV653f3TDAI0Rd0CH8nDPsFGWXgvZZGYiBoqSLOTdA3G2JLm67 YN9GWgzZXUF+n/txDq0wup8lAtdni6Sx7I61YRLPX6hu -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:16 2026 by rpki-client