This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/e080b6-4e09-42d8-b91c-b2798c1a0327/1/vAkzuvASkFh_KGqYPQNyZYP0fBs.roa File: vAkzuvASkFh_KGqYPQNyZYP0fBs.roa (raw, json) Hash identifier: KpkKu8c+7onfa9Op2gIOjP7LL4+RRO2mfg+8l2jgbPk= Subject key identifier: BC:09:33:BA:F0:12:90:58:7F:28:6A:98:3D:03:72:65:83:F4:7C:1B Certificate issuer: /CN=4f2112cbf6dcc8dd3444e4eced284457310f70d2 Certificate serial: 019B7F15EC8BB186F2F2CAF2D009BBA16123 Authority key identifier: 4F:21:12:CB:F6:DC:C8:DD:34:44:E4:EC:ED:28:44:57:31:0F:70:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TyESy_bcyN00ROTs7ShEVzEPcNI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/e080b6-4e09-42d8-b91c-b2798c1a0327/1/vAkzuvASkFh_KGqYPQNyZYP0fBs.roa Signing time: Fri 02 Jan 2026 14:21:41 +0000 ROA not before: Fri 02 Jan 2026 14:21:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205975 IP address blocks: 80.79.48.0/20 maxlen: 24 147.189.155.0/24 maxlen: 24 176.10.0.0/20 maxlen: 24 212.46.58.0/24 maxlen: 24 2a12:f40::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/e080b6-4e09-42d8-b91c-b2798c1a0327/1/TyESy_bcyN00ROTs7ShEVzEPcNI.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/e080b6-4e09-42d8-b91c-b2798c1a0327/1/TyESy_bcyN00ROTs7ShEVzEPcNI.mft rsync://rpki.ripe.net/repository/DEFAULT/TyESy_bcyN00ROTs7ShEVzEPcNI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:ec:8b:b1:86:f2:f2:ca:f2:d0:09:bb:a1:61:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f2112cbf6dcc8dd3444e4eced284457310f70d2 Validity Not Before: Jan 2 14:21:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bc0933baf01290587f286a983d03726583f47c1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:bc:c5:a4:5a:38:d1:5a:14:88:b3:ee:8a:00: df:89:9a:ce:b6:f5:ca:44:e5:74:01:09:31:5d:d0: 91:cc:80:11:7c:aa:6b:a5:57:bb:a9:0f:27:2a:44: c4:41:76:54:d4:75:89:ff:a7:e7:af:06:3b:e6:c3: 0c:18:7f:a0:b0:7b:c0:6e:6e:6e:69:14:bd:ed:94: d2:cd:c8:2a:87:b7:5c:d9:bf:5f:1a:e8:f1:4c:a8: 7a:4f:f8:a0:7e:ad:12:cd:e6:f8:41:a2:dc:98:0a: 04:e0:d6:8e:2d:f7:a8:a0:13:2e:e2:8b:da:97:6a: aa:54:c9:5d:a9:09:cb:a2:7a:c1:f4:e1:02:d6:c3: 89:9b:c4:f6:f7:d0:a8:f7:15:d4:9a:b7:48:e1:b4: 54:b4:5d:79:a2:d8:64:f0:48:74:b8:5c:26:bc:1e: 6d:c7:93:3c:aa:e9:26:29:56:5a:98:01:c9:8e:0d: b9:ae:d8:67:6e:dc:4c:eb:3c:57:58:d1:3f:9e:dc: b4:be:51:0d:7a:02:f2:a4:d8:b1:d9:5c:79:49:74: c7:4f:4e:65:b0:64:b8:ab:c8:78:d4:08:28:f6:11: b3:13:89:6e:4c:5a:4a:4d:2b:c1:ee:6a:0d:aa:8f: 53:66:38:51:76:c6:cc:7e:6f:53:ca:e3:c4:95:7f: fe:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:09:33:BA:F0:12:90:58:7F:28:6A:98:3D:03:72:65:83:F4:7C:1B X509v3 Authority Key Identifier: keyid:4F:21:12:CB:F6:DC:C8:DD:34:44:E4:EC:ED:28:44:57:31:0F:70:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TyESy_bcyN00ROTs7ShEVzEPcNI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e080b6-4e09-42d8-b91c-b2798c1a0327/1/vAkzuvASkFh_KGqYPQNyZYP0fBs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e080b6-4e09-42d8-b91c-b2798c1a0327/1/TyESy_bcyN00ROTs7ShEVzEPcNI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.79.48.0/20 147.189.155.0/24 176.10.0.0/20 212.46.58.0/24 IPv6: 2a12:f40::/29 Signature Algorithm: sha256WithRSAEncryption 14:81:35:8d:8d:bb:d0:0a:77:de:25:ad:d7:8f:75:b2:c1:32: 56:bd:6c:f6:06:e6:5a:ea:5b:88:ed:04:e5:b9:0a:7a:59:67: b7:72:87:b8:96:94:f0:5b:c8:56:9b:65:ba:b7:b8:29:e0:96: 6c:85:41:b1:cd:4b:f6:df:b3:55:f6:ed:85:47:69:3e:0c:b0: d0:2a:78:17:2b:d5:a4:0a:b0:c0:1b:3e:fb:3e:eb:4c:9b:6c: 46:41:d3:f4:15:4d:79:b4:7c:28:41:45:9a:4b:27:9c:66:70: 55:1b:a1:bd:67:5a:d2:98:5e:a9:3a:e6:4d:e7:bb:20:de:f8: d5:f7:23:2e:6e:f3:b2:a8:f0:1e:64:20:0a:dc:7c:c6:a5:54: 20:8c:34:5c:10:a1:c5:8b:37:50:78:e2:38:25:1f:a5:98:33: 46:98:ef:88:4a:29:0c:21:46:7d:b7:53:4c:ca:40:51:18:86: b2:03:3e:75:48:87:f9:ba:7d:a8:b0:e7:bb:4e:9e:23:a4:9d: b2:a4:c4:76:9b:62:f3:29:72:14:d1:2e:dd:ea:b5:af:cb:f0: 41:8b:9a:20:f4:f9:2f:61:b9:ea:61:fd:71:21:ef:87:93:9f: ae:3b:59:70:56:8a:14:ce:42:b0:dc:df:3a:9d:53:4b:95:61: 25:55:fe:b0 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt/FeyLsYby8sry0Am7oWEjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMjExMmNiZjZkY2M4ZGQzNDQ0ZTRlY2VkMjg0NDU3MzEw ZjcwZDIwHhcNMjYwMTAyMTQyMTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYzA5MzNiYWYwMTI5MDU4N2YyODZhOTgzZDAzNzI2NTgzZjQ3YzFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6rzFpFo40VoUiLPuigDfiZrOtvXK ROV0AQkxXdCRzIARfKprpVe7qQ8nKkTEQXZU1HWJ/6fnrwY75sMMGH+gsHvAbm5u aRS97ZTSzcgqh7dc2b9fGujxTKh6T/igfq0Szeb4QaLcmAoE4NaOLfeooBMu4ova l2qqVMldqQnLonrB9OEC1sOJm8T299Co9xXUmrdI4bRUtF15othk8Eh0uFwmvB5t x5M8qukmKVZamAHJjg25rthnbtxM6zxXWNE/nty0vlENegLypNix2Vx5SXTHT05l sGS4q8h41Ago9hGzE4luTFpKTSvB7moNqo9TZjhRdsbMfm9TyuPElX/+RQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFLwJM7rwEpBYfyhqmD0DcmWD9HwbMB8GA1UdIwQY MBaAFE8hEsv23MjdNETk7O0oRFcxD3DSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHlFU3lfYmN5TjAwUk9UczdTaEVWekVQY05JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9lMDgwYjYtNGUwOS00MmQ4LWI5MWMt YjI3OThjMWEwMzI3LzEvdkFrenV2QVNrRmhfS0dxWVBRTnlaWVAwZkJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9lMDgwYjYtNGUwOS00MmQ4LWI5MWMtYjI3OThjMWEwMzI3 LzEvVHlFU3lfYmN5TjAwUk9UczdTaEVWekVQY05JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQEUE8wAwQA k72bAwQEsAoAAwQA1C46MA0EAgACMAcDBQMqEg9AMA0GCSqGSIb3DQEBCwUAA4IB AQAUgTWNjbvQCnfeJa3Xj3WywTJWvWz2BuZa6luI7QTluQp6WWe3coe4lpTwW8hW m2W6t7gp4JZshUGxzUv237NV9u2FR2k+DLDQKngXK9WkCrDAGz77PutMm2xGQdP0 FU15tHwoQUWaSyecZnBVG6G9Z1rSmF6pOuZN57sg3vjV9yMubvOyqPAeZCAK3HzG pVQgjDRcEKHFizdQeOI4JR+lmDNGmO+ISikMIUZ9t1NMykBRGIayAz51SIf5un2o sOe7Tp4jpJ2ypMR2m2LzKXIU0S7d6rWvy/BBi5og9PkvYbnqYf1xIe+Hk5+uO1lw VooUzkKw3N86nVNLlWElVf6w -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:42 2026 by rpki-client