This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/80aZm-LOIfOj4b0pErlGBGKAQkw.roa File: 80aZm-LOIfOj4b0pErlGBGKAQkw.roa (raw, json) Hash identifier: eeqWFn0rrMt+3uQyEjN0WfmfLfKkgvr7/Sm+KMOotdU= Subject key identifier: F3:46:99:9B:E2:CE:21:F3:A3:E1:BD:29:12:B9:46:04:62:80:42:4C Certificate issuer: /CN=b217b5ac467412e249c44e2739c289ebb04cd337 Certificate serial: 019B7C80232AB9F29A103268DCB0E94A816F Authority key identifier: B2:17:B5:AC:46:74:12:E2:49:C4:4E:27:39:C2:89:EB:B0:4C:D3:37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/she1rEZ0EuJJxE4nOcKJ67BM0zc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/80aZm-LOIfOj4b0pErlGBGKAQkw.roa Signing time: Fri 02 Jan 2026 02:18:50 +0000 ROA not before: Fri 02 Jan 2026 02:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49781 IP address blocks: 5.253.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.mft rsync://rpki.ripe.net/repository/DEFAULT/she1rEZ0EuJJxE4nOcKJ67BM0zc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:23:2a:b9:f2:9a:10:32:68:dc:b0:e9:4a:81:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b217b5ac467412e249c44e2739c289ebb04cd337 Validity Not Before: Jan 2 02:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f346999be2ce21f3a3e1bd2912b946046280424c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:cf:36:5d:78:0a:2e:f1:5b:4c:fb:7e:54:d0: 6d:38:fb:61:22:65:99:3a:1b:d3:89:9a:4b:ac:01: c3:16:8d:b5:7c:5c:01:0c:7a:2d:39:63:60:97:05: 82:87:73:de:b1:b1:d0:cc:e8:1b:0f:f2:c5:73:94: 66:73:3f:8e:41:58:12:6a:26:00:78:89:89:e7:8e: 96:1e:cd:4b:13:89:78:63:db:dd:14:03:f0:bb:93: d3:bc:66:cd:99:67:bd:c8:52:37:3b:6b:60:fa:86: af:ee:06:18:ae:22:de:97:e2:35:ad:72:7a:61:31: 67:19:ed:6d:2d:2f:4b:2f:0d:bc:c8:d1:8d:9c:3e: f7:20:d9:69:11:de:8d:f5:c5:23:4d:0e:3c:d5:cb: 0e:19:bc:91:72:12:8c:f3:ef:b1:3a:60:5d:e8:93: ce:98:d8:e0:cc:82:2a:2c:08:3e:e1:14:0c:e9:c3: 35:e2:fc:03:74:31:3e:18:7b:d0:33:2e:cf:3b:eb: 3f:99:48:5c:ac:b4:39:32:60:7e:34:d3:77:90:56: fb:1e:47:fa:4b:dc:ee:3e:9b:a1:98:d7:7b:75:c1: 5b:33:78:77:e6:a7:2f:c2:44:ec:12:0b:de:1d:a2: 24:60:0f:c9:20:ec:eb:05:28:b4:87:18:14:27:7e: 01:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:46:99:9B:E2:CE:21:F3:A3:E1:BD:29:12:B9:46:04:62:80:42:4C X509v3 Authority Key Identifier: keyid:B2:17:B5:AC:46:74:12:E2:49:C4:4E:27:39:C2:89:EB:B0:4C:D3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/she1rEZ0EuJJxE4nOcKJ67BM0zc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/80aZm-LOIfOj4b0pErlGBGKAQkw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.253.224.0/24 Signature Algorithm: sha256WithRSAEncryption b2:f4:41:81:54:24:8c:22:cc:c4:4f:79:4c:7e:2c:ac:5b:19: 2a:5b:7f:3f:2f:c8:7b:b4:64:0a:ee:1f:e1:e6:4d:19:38:6a: b1:b6:b5:52:67:07:c0:19:c4:07:7f:b1:dd:41:a7:c5:65:7a: 3e:da:f2:12:44:e2:3e:27:c2:33:93:5e:96:40:b4:a4:88:00: f6:6d:fa:56:96:22:4c:ae:64:35:05:a8:8b:bf:7d:4d:4e:8e: f5:7c:4f:64:fd:0e:d2:f2:c1:c8:1c:ca:d0:d2:8b:c8:84:cc: 51:e0:c2:f7:f6:41:cf:78:b2:f8:41:28:ea:14:19:1a:e6:23: ad:c2:b8:57:9e:b2:d8:90:b2:d3:79:08:73:d7:ec:ce:97:69: 74:8f:61:35:71:e4:b2:01:00:d8:49:3c:f6:4c:d6:fa:54:b7: e2:f8:d7:eb:f3:76:50:c6:ff:3a:43:6b:37:d2:4d:9e:c5:6c: 30:c8:eb:3a:82:5f:42:a1:bd:46:d5:89:e3:35:27:b4:f2:b1: d4:4c:cc:20:be:1b:f1:34:9d:eb:14:f7:23:09:9b:b9:0d:fd: ad:50:7b:69:ad:68:0e:f7:27:a2:64:6c:fd:a9:58:b9:9a:da: 38:e0:bc:29:e6:9b:75:c0:1c:b6:e8:04:cc:48:29:17:aa:bb: 98:50:e3:d5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gCMqufKaEDJo3LDpSoFvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyMTdiNWFjNDY3NDEyZTI0OWM0NGUyNzM5YzI4OWViYjA0 Y2QzMzcwHhcNMjYwMTAyMDIxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzQ2OTk5YmUyY2UyMWYzYTNlMWJkMjkxMmI5NDYwNDYyODA0MjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzM82XXgKLvFbTPt+VNBtOPthImWZ OhvTiZpLrAHDFo21fFwBDHotOWNglwWCh3PesbHQzOgbD/LFc5Rmcz+OQVgSaiYA eImJ546WHs1LE4l4Y9vdFAPwu5PTvGbNmWe9yFI3O2tg+oav7gYYriLel+I1rXJ6 YTFnGe1tLS9LLw28yNGNnD73INlpEd6N9cUjTQ481csOGbyRchKM8++xOmBd6JPO mNjgzIIqLAg+4RQM6cM14vwDdDE+GHvQMy7PO+s/mUhcrLQ5MmB+NNN3kFb7Hkf6 S9zuPpuhmNd7dcFbM3h35qcvwkTsEgveHaIkYA/JIOzrBSi0hxgUJ34BtQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPNGmZviziHzo+G9KRK5RgRigEJMMB8GA1UdIwQY MBaAFLIXtaxGdBLiScROJznCieuwTNM3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2hlMXJFWjBFdUpKeEU0bk9jS0o2N0JNMHpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9iOTgzMzYtNGMzZS00Nzk1LWExZjct M2RiZDMyZDY5OTJlLzEvODBhWm0tTE9JZk9qNGIwcEVybEdCR0tBUWt3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9iOTgzMzYtNGMzZS00Nzk1LWExZjctM2RiZDMyZDY5OTJl LzEvc2hlMXJFWjBFdUpKeEU0bk9jS0o2N0JNMHpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABf3gMA0G CSqGSIb3DQEBCwUAA4IBAQCy9EGBVCSMIszET3lMfiysWxkqW38/L8h7tGQK7h/h 5k0ZOGqxtrVSZwfAGcQHf7HdQafFZXo+2vISROI+J8Izk16WQLSkiAD2bfpWliJM rmQ1BaiLv31NTo71fE9k/Q7S8sHIHMrQ0ovIhMxR4ML39kHPeLL4QSjqFBka5iOt wrhXnrLYkLLTeQhz1+zOl2l0j2E1ceSyAQDYSTz2TNb6VLfi+Nfr83ZQxv86Q2s3 0k2exWwwyOs6gl9Cob1G1YnjNSe08rHUTMwgvhvxNJ3rFPcjCZu5Df2tUHtprWgO 9yeiZGz9qVi5mto44Lwp5pt1wBy26ATMSCkXqruYUOPV -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:40 2026 by rpki-client