This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/4sSprCfe0hEnTrgFB2Gt47mVuTY.roa File: 4sSprCfe0hEnTrgFB2Gt47mVuTY.roa (raw, json) Hash identifier: yLSbVgV82C4PxlN4PCRq1i+ZoIUp1wONOTUwmInAlqw= Subject key identifier: E2:C4:A9:AC:27:DE:D2:11:27:4E:B8:05:07:61:AD:E3:B9:95:B9:36 Certificate issuer: /CN=fc55e0533efaa5624f538b92ed1a973feff89751 Certificate serial: 019B7C11E5B40BAB9B0DE6F4EF5FAAAB4964 Authority key identifier: FC:55:E0:53:3E:FA:A5:62:4F:53:8B:92:ED:1A:97:3F:EF:F8:97:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FXgUz76pWJPU4uS7RqXP-_4l1E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/4sSprCfe0hEnTrgFB2Gt47mVuTY.roa Signing time: Fri 02 Jan 2026 00:18:26 +0000 ROA not before: Fri 02 Jan 2026 00:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41397 IP address blocks: 80.255.120.0/22 maxlen: 24 80.255.120.0/23 maxlen: 23 80.255.122.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.mft rsync://rpki.ripe.net/repository/DEFAULT/_FXgUz76pWJPU4uS7RqXP-_4l1E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:e5:b4:0b:ab:9b:0d:e6:f4:ef:5f:aa:ab:49:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc55e0533efaa5624f538b92ed1a973feff89751 Validity Not Before: Jan 2 00:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e2c4a9ac27ded211274eb8050761ade3b995b936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f0:65:f8:ff:a8:e4:06:21:15:a1:9d:a8:f2: 4b:11:88:a7:9b:d0:a8:55:e6:d6:46:73:dc:f3:f4: a1:90:b7:32:a5:0f:5c:d0:52:b0:6e:11:9d:da:a5: 94:87:03:6d:bd:33:ff:45:f4:e2:71:3e:5f:c2:00: 8f:5d:49:51:db:d5:03:b8:a8:e8:09:76:55:0d:e7: 28:ce:ab:2f:c8:4c:af:20:d0:29:8c:0f:b4:83:3b: cd:ec:94:e6:a2:30:32:3a:97:ff:9b:44:e4:9e:92: 04:43:e9:d9:9a:3e:60:6a:33:23:ee:08:77:87:4f: 52:e9:d4:ca:75:7b:9a:93:2a:f2:4b:ab:7d:8f:6e: c8:f8:45:e5:cb:c6:7d:b0:19:45:92:6f:21:f3:2c: 0c:9e:2c:c0:e2:a6:23:79:54:92:2a:30:9f:13:5b: fd:83:6c:df:ff:b4:11:69:3d:40:24:53:08:9b:c1: 98:22:a9:93:22:3d:48:3f:5e:8a:72:ec:55:10:b5: d4:7e:eb:06:f6:15:ac:9b:f2:c3:c5:bc:b6:99:35: ec:56:49:e9:79:b9:a5:d5:eb:f3:39:6f:8e:76:42: a8:26:aa:e8:23:75:55:8d:84:08:80:e6:bc:e0:cd: 07:51:70:2b:2e:61:e2:62:7f:cd:0f:35:45:6b:37: f4:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:C4:A9:AC:27:DE:D2:11:27:4E:B8:05:07:61:AD:E3:B9:95:B9:36 X509v3 Authority Key Identifier: keyid:FC:55:E0:53:3E:FA:A5:62:4F:53:8B:92:ED:1A:97:3F:EF:F8:97:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FXgUz76pWJPU4uS7RqXP-_4l1E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/4sSprCfe0hEnTrgFB2Gt47mVuTY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.255.120.0/22 Signature Algorithm: sha256WithRSAEncryption 71:e8:89:91:6f:ee:98:10:ac:83:70:b1:24:1c:fb:6e:15:60: c2:12:04:40:b7:e1:18:85:c6:e5:68:41:c5:8f:e5:2a:fb:40: 9a:9e:a9:5a:56:56:e6:be:e6:60:c4:d9:99:d5:4f:af:7d:4f: 08:b0:b3:7a:46:6d:87:8e:cc:6a:2e:6a:68:de:fb:ed:f8:9c: 15:de:4d:85:aa:d2:8d:10:34:e9:d3:f8:50:37:8b:33:59:3a: 88:e5:73:b1:55:fd:73:1d:27:3d:0f:ca:c5:ef:8c:53:97:55: 91:c3:42:53:1e:81:ce:1a:5d:54:c4:f7:03:a0:79:01:7e:2c: 9d:7b:e1:5e:7f:ea:0d:d0:57:46:3a:75:04:3c:94:97:f6:d6: 6b:05:ae:87:61:4d:d2:a8:fd:fe:ca:f4:0e:d9:b4:ca:e4:7e: b2:cb:7e:65:fd:76:19:64:aa:9b:f6:fd:cb:b8:f7:00:c5:c5: cd:bf:87:1e:87:49:47:2f:a5:53:ea:2d:d5:c9:3a:e2:0a:8f: c8:9c:e6:0e:48:1b:6c:56:61:a1:5e:14:80:fb:13:13:fa:f3: 94:aa:81:40:ec:6e:fc:23:8c:89:c5:b5:c7:71:9b:44:a3:41: ea:3f:f9:f4:ab:50:85:a8:a6:2e:44:78:83:49:f5:ee:bf:12: 80:56:24:fa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EeW0C6ubDeb071+qq0lkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjNTVlMDUzM2VmYWE1NjI0ZjUzOGI5MmVkMWE5NzNmZWZm ODk3NTEwHhcNMjYwMTAyMDAxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMmM0YTlhYzI3ZGVkMjExMjc0ZWI4MDUwNzYxYWRlM2I5OTViOTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/Bl+P+o5AYhFaGdqPJLEYinm9Co VebWRnPc8/ShkLcypQ9c0FKwbhGd2qWUhwNtvTP/RfTicT5fwgCPXUlR29UDuKjo CXZVDecozqsvyEyvINApjA+0gzvN7JTmojAyOpf/m0TknpIEQ+nZmj5gajMj7gh3 h09S6dTKdXuakyryS6t9j27I+EXly8Z9sBlFkm8h8ywMnizA4qYjeVSSKjCfE1v9 g2zf/7QRaT1AJFMIm8GYIqmTIj1IP16KcuxVELXUfusG9hWsm/LDxby2mTXsVknp ebml1evzOW+OdkKoJqroI3VVjYQIgOa84M0HUXArLmHiYn/NDzVFazf0OQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOLEqawn3tIRJ064BQdhreO5lbk2MB8GA1UdIwQY MBaAFPxV4FM++qViT1OLku0alz/v+JdRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0ZYZ1V6NzZwV0pQVTR1UzdScVhQLV80bDFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC81ZTc1M2QtYzMzZC00N2EzLThlODIt YTUyODYyYjQ0NTYzLzEvNHNTcHJDZmUwaEVuVHJnRkIyR3Q0N21WdVRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC81ZTc1M2QtYzMzZC00N2EzLThlODItYTUyODYyYjQ0NTYz LzEvX0ZYZ1V6NzZwV0pQVTR1UzdScVhQLV80bDFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCUP94MA0G CSqGSIb3DQEBCwUAA4IBAQBx6ImRb+6YEKyDcLEkHPtuFWDCEgRAt+EYhcblaEHF j+Uq+0CanqlaVlbmvuZgxNmZ1U+vfU8IsLN6Rm2HjsxqLmpo3vvt+JwV3k2FqtKN EDTp0/hQN4szWTqI5XOxVf1zHSc9D8rF74xTl1WRw0JTHoHOGl1UxPcDoHkBfiyd e+Fef+oN0FdGOnUEPJSX9tZrBa6HYU3SqP3+yvQO2bTK5H6yy35l/XYZZKqb9v3L uPcAxcXNv4ceh0lHL6VT6i3VyTriCo/InOYOSBtsVmGhXhSA+xMT+vOUqoFA7G78 I4yJxbXHcZtEo0HqP/n0q1CFqKYuRHiDSfXuvxKAViT6 -----END CERTIFICATE-----Generated at Tue Jan 20 06:03:16 2026 by rpki-client