This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/0d6SiGZ_3HskVJZrwW4LAUnPhVk.roa File: 0d6SiGZ_3HskVJZrwW4LAUnPhVk.roa (raw, json) Hash identifier: sH5j+6BmvxKro4kCtZa6p73msltGzoMgNQq57Mh0jXE= Subject key identifier: D1:DE:92:88:66:7F:DC:7B:24:54:96:6B:C1:6E:0B:01:49:CF:85:59 Certificate issuer: /CN=52a5c90ca928313bc70d2683bb0f64d632b273a1 Certificate serial: 019B7F15E4F7B1B380CF575CB248AAF35D6A Authority key identifier: 52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/0d6SiGZ_3HskVJZrwW4LAUnPhVk.roa Signing time: Fri 02 Jan 2026 14:21:39 +0000 ROA not before: Fri 02 Jan 2026 14:21:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214722 IP address blocks: 80.73.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:e4:f7:b1:b3:80:cf:57:5c:b2:48:aa:f3:5d:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52a5c90ca928313bc70d2683bb0f64d632b273a1 Validity Not Before: Jan 2 14:21:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d1de9288667fdc7b2454966bc16e0b0149cf8559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:25:a1:95:7b:20:a2:b0:b6:db:99:4d:54:77: bf:ef:1d:0e:a6:1d:c9:cf:9c:30:52:58:a4:2d:9a: 9e:4e:d3:78:e8:de:a1:24:19:7b:9d:b9:c0:c8:68: 6e:ef:c5:61:85:c4:01:66:60:be:10:84:5a:fc:fd: e4:6b:22:c5:a9:80:07:04:d8:9f:6f:f4:a2:96:cd: c0:d3:23:70:64:70:89:82:84:fc:9d:0a:31:77:46: 69:50:b3:e7:19:00:0b:af:bf:77:78:26:ce:0a:3d: a3:f1:00:51:45:d2:7a:d5:66:58:7a:bb:f7:12:64: 9b:67:29:cd:7a:75:29:1a:a3:20:a8:ed:9a:e9:13: 4e:f5:16:b6:20:29:7f:bb:45:93:7e:2a:ec:95:8e: 32:10:a2:89:d1:2f:b1:26:f6:de:be:40:33:1d:58: c3:79:79:c3:72:ec:f1:77:8f:75:fc:ab:86:fa:72: 7a:e3:1e:c8:e9:6d:56:78:90:22:b2:d0:ca:7e:d1: ed:58:78:21:bb:57:a7:d7:e7:f5:47:9e:74:57:1f: 99:76:6f:a0:29:7a:e7:87:ad:86:10:13:55:9f:13: 7c:27:5f:28:fc:93:da:21:59:70:5e:0c:5e:d6:cb: 35:f9:19:21:d1:45:1e:1b:24:84:d3:0d:4f:cc:f1: 8d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:DE:92:88:66:7F:DC:7B:24:54:96:6B:C1:6E:0B:01:49:CF:85:59 X509v3 Authority Key Identifier: keyid:52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/0d6SiGZ_3HskVJZrwW4LAUnPhVk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.73.104.0/22 Signature Algorithm: sha256WithRSAEncryption bb:ac:bd:08:58:cf:d9:f0:9a:dd:c4:17:78:52:e7:bd:f1:c5: 2a:88:5e:d9:7c:9d:3a:98:50:cc:8f:0f:55:04:28:0a:50:fa: ee:cc:ec:37:44:88:f9:fd:71:f7:a6:7f:79:05:0f:42:06:42: 8b:c8:01:2f:c1:28:5a:39:60:ce:22:b5:be:52:06:67:28:42: ad:c4:f4:66:dc:f0:cb:9f:20:ef:1f:d5:7c:94:84:12:6c:e9: bb:54:1b:f1:e8:a2:a4:05:c2:b8:14:e4:a3:99:c6:ae:8d:e6: 83:c4:d5:05:77:58:2a:1a:cb:29:42:64:41:80:ac:bc:e0:ec: 7b:77:37:12:b2:9e:4c:de:bd:44:ae:a3:e3:62:02:2b:3d:c4: 49:a3:d7:01:7d:3d:5b:9e:b2:53:ae:c1:7d:36:37:fe:61:fc: a4:21:86:aa:0a:a6:55:97:2f:ca:77:c4:d7:19:cf:3a:26:0f: 13:c0:67:88:df:67:b5:74:92:e2:15:03:1a:96:38:af:f8:d9: 6a:48:40:fa:85:f6:b8:89:f2:1b:45:20:7e:3c:b2:84:42:66: 70:e7:f6:e7:8e:57:28:fb:af:41:e4:13:82:ad:b6:38:54:45: a4:b7:27:fe:15:81:93:06:a2:21:12:e3:c7:6e:68:b2:de:1b: 35:68:85:d9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FeT3sbOAz1dcskiq811qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyYTVjOTBjYTkyODMxM2JjNzBkMjY4M2JiMGY2NGQ2MzJi MjczYTEwHhcNMjYwMTAyMTQyMTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMWRlOTI4ODY2N2ZkYzdiMjQ1NDk2NmJjMTZlMGIwMTQ5Y2Y4NTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiWhlXsgorC225lNVHe/7x0Oph3J z5wwUlikLZqeTtN46N6hJBl7nbnAyGhu78VhhcQBZmC+EIRa/P3kayLFqYAHBNif b/Sils3A0yNwZHCJgoT8nQoxd0ZpULPnGQALr793eCbOCj2j8QBRRdJ61WZYerv3 EmSbZynNenUpGqMgqO2a6RNO9Ra2ICl/u0WTfirslY4yEKKJ0S+xJvbevkAzHVjD eXnDcuzxd491/KuG+nJ64x7I6W1WeJAistDKftHtWHghu1en1+f1R550Vx+Zdm+g KXrnh62GEBNVnxN8J18o/JPaIVlwXgxe1ss1+Rkh0UUeGySE0w1PzPGNDwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNHekohmf9x7JFSWa8FuCwFJz4VZMB8GA1UdIwQY MBaAFFKlyQypKDE7xw0mg7sPZNYysnOhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXFYSkRLa29NVHZIRFNhRHV3OWsxakt5YzZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9jNGI3YTAtMWU1MC00MDNjLWIyNGUt MTNlZDYzM2Y5MjJhLzEvMGQ2U2lHWl8zSHNrVkpacndXNExBVW5QaFZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9jNGI3YTAtMWU1MC00MDNjLWIyNGUtMTNlZDYzM2Y5MjJh LzEvVXFYSkRLa29NVHZIRFNhRHV3OWsxakt5YzZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCUEloMA0G CSqGSIb3DQEBCwUAA4IBAQC7rL0IWM/Z8JrdxBd4Uue98cUqiF7ZfJ06mFDMjw9V BCgKUPruzOw3RIj5/XH3pn95BQ9CBkKLyAEvwShaOWDOIrW+UgZnKEKtxPRm3PDL nyDvH9V8lIQSbOm7VBvx6KKkBcK4FOSjmcaujeaDxNUFd1gqGsspQmRBgKy84Ox7 dzcSsp5M3r1ErqPjYgIrPcRJo9cBfT1bnrJTrsF9Njf+YfykIYaqCqZVly/Kd8TX Gc86Jg8TwGeI32e1dJLiFQMaljiv+NlqSED6hfa4ifIbRSB+PLKEQmZw5/bnjlco +69B5BOCrbY4VEWktyf+FYGTBqIhEuPHbmiy3hs1aIXZ -----END CERTIFICATE-----Generated at Tue Feb 10 00:29:13 2026 by rpki-client