This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/80qBnu2XnhFRiBmZiF038oU110Q.roa File: 80qBnu2XnhFRiBmZiF038oU110Q.roa (raw, json) Hash identifier: LIRyJNKQ/3u7PO7ipf6wdyHbe0bKIPQwJsid3/CO5Lg= Subject key identifier: F3:4A:81:9E:ED:97:9E:11:51:88:19:99:88:5D:37:F2:85:35:D7:44 Certificate issuer: /CN=0f925691603903ef24485cb4bf35e28307867b83 Certificate serial: 019B7CECFC87368C13CA53C8A6661D56EA10 Authority key identifier: 0F:92:56:91:60:39:03:EF:24:48:5C:B4:BF:35:E2:83:07:86:7B:83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5JWkWA5A-8kSFy0vzXigweGe4M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/80qBnu2XnhFRiBmZiF038oU110Q.roa Signing time: Fri 02 Jan 2026 04:17:44 +0000 ROA not before: Fri 02 Jan 2026 04:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29596 IP address blocks: 91.232.183.0/24 maxlen: 24 93.175.96.0/19 maxlen: 19 93.175.100.0/23 maxlen: 23 93.175.102.0/23 maxlen: 23 93.175.104.0/23 maxlen: 23 93.175.106.0/24 maxlen: 24 93.175.107.0/24 maxlen: 24 93.175.108.0/22 maxlen: 22 93.175.108.0/24 maxlen: 24 93.175.109.0/24 maxlen: 24 93.175.110.0/24 maxlen: 24 93.175.111.0/24 maxlen: 24 93.175.112.0/24 maxlen: 24 93.175.113.0/24 maxlen: 24 93.175.114.0/24 maxlen: 24 93.175.115.0/24 maxlen: 24 93.175.116.0/23 maxlen: 23 93.175.118.0/23 maxlen: 23 93.175.120.0/24 maxlen: 24 93.175.121.0/24 maxlen: 24 93.175.123.0/24 maxlen: 24 128.127.12.0/23 maxlen: 23 128.127.14.0/24 maxlen: 24 128.127.15.0/24 maxlen: 24 193.19.212.0/24 maxlen: 24 193.19.213.0/24 maxlen: 24 193.19.214.0/24 maxlen: 24 193.19.215.0/24 maxlen: 24 194.54.20.0/22 maxlen: 22 194.54.21.0/24 maxlen: 24 194.54.22.0/24 maxlen: 24 194.54.23.0/24 maxlen: 24 194.146.216.0/22 maxlen: 22 194.146.216.0/24 maxlen: 24 194.146.217.0/24 maxlen: 24 194.146.218.0/24 maxlen: 24 194.146.219.0/24 maxlen: 24 2a06:f4c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft rsync://rpki.ripe.net/repository/DEFAULT/D5JWkWA5A-8kSFy0vzXigweGe4M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:fc:87:36:8c:13:ca:53:c8:a6:66:1d:56:ea:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f925691603903ef24485cb4bf35e28307867b83 Validity Not Before: Jan 2 04:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f34a819eed979e1151881999885d37f28535d744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7e:10:df:69:19:55:1e:2a:cf:ca:fa:eb:9c: 2d:34:26:9e:f8:69:89:0a:3a:d8:35:39:e1:36:cb: f4:5c:d0:6a:c6:d7:74:0a:57:22:23:cb:dc:86:87: a8:71:4c:73:66:a5:46:76:da:e9:18:43:fa:57:49: 04:dc:2b:d2:9b:ed:83:19:06:fc:bd:d4:9c:da:50: 14:10:61:6e:25:82:a3:77:a0:ab:8d:20:c1:0e:6f: f8:86:fc:b7:77:fd:79:65:2f:6c:b5:ce:4d:6f:e4: 12:b2:61:bb:5e:c6:95:33:d1:9e:9d:f7:b1:5f:30: 8d:4d:43:fd:1b:40:6b:12:9b:6c:f6:75:d1:0b:aa: f0:01:27:3b:56:4b:e4:7e:cd:e5:8c:7a:27:f1:2b: 0f:5d:f0:c8:3f:d9:29:e9:c2:53:a6:8f:9c:bd:68: 23:6e:b8:f5:4d:61:c0:8a:f9:c7:21:df:a2:6d:81: 40:de:2e:c3:c4:e9:27:d5:80:d8:d6:b7:82:03:24: ce:f1:5c:7e:53:dd:81:92:af:c1:9c:9a:64:9d:9e: 15:b8:0e:e3:10:bb:5f:67:06:f2:3a:02:3a:db:e8: 8e:73:da:ed:a0:3e:f7:c3:74:39:e2:4b:8d:71:e1: 3e:ee:0b:e1:b9:9f:2f:1b:b0:0c:32:a1:cb:94:23: 0c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:4A:81:9E:ED:97:9E:11:51:88:19:99:88:5D:37:F2:85:35:D7:44 X509v3 Authority Key Identifier: keyid:0F:92:56:91:60:39:03:EF:24:48:5C:B4:BF:35:E2:83:07:86:7B:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5JWkWA5A-8kSFy0vzXigweGe4M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/80qBnu2XnhFRiBmZiF038oU110Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.232.183.0/24 93.175.96.0/19 128.127.12.0/22 193.19.212.0/22 194.54.20.0/22 194.146.216.0/22 IPv6: 2a06:f4c0::/29 Signature Algorithm: sha256WithRSAEncryption b0:02:c0:79:ed:81:44:0b:47:82:59:55:b9:04:d7:09:63:91: d9:da:50:16:93:33:b0:13:27:fe:f6:d9:86:78:ca:a9:4b:17: e3:40:b7:ff:75:24:d6:c0:ed:6d:27:e5:d7:ff:4e:6d:4c:8e: 00:22:c2:85:33:38:e0:b4:22:8e:8f:54:54:29:94:1a:9b:be: ef:ab:c8:0e:40:2c:0c:2d:dc:e8:26:95:14:86:d8:86:12:6f: 55:16:a1:38:26:03:31:c8:49:a4:aa:98:a8:71:a9:d8:f8:4e: 2a:b6:13:3c:25:e1:67:69:ca:45:99:d4:2e:63:cc:70:53:3b: 83:3b:8f:a8:23:85:48:04:9d:3b:cf:f9:57:52:91:cd:50:a4: 36:c4:f7:6f:03:12:97:12:9b:41:7c:46:40:b4:67:55:56:e9: 7a:42:7e:26:c4:86:e4:b1:a4:ca:b2:90:98:bb:29:dc:2c:fe: 2c:c0:8d:4e:f2:50:1b:de:37:4f:37:e0:e1:df:80:f7:95:76: 5a:fe:a4:b6:09:9f:bf:88:fb:99:c2:81:70:23:99:97:bb:6a: ac:0f:35:f9:be:99:f0:52:ca:15:dc:37:29:bd:1e:c9:96:7d: 6a:27:fc:76:46:f2:07:37:cd:28:91:28:30:0b:46:1a:d0:f3: a3:52:85:27 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgISAZt87PyHNowTylPIpmYdVuoQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmOTI1NjkxNjAzOTAzZWYyNDQ4NWNiNGJmMzVlMjgzMDc4 NjdiODMwHhcNMjYwMTAyMDQxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzRhODE5ZWVkOTc5ZTExNTE4ODE5OTk4ODVkMzdmMjg1MzVkNzQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxn4Q32kZVR4qz8r665wtNCae+GmJ CjrYNTnhNsv0XNBqxtd0ClciI8vchoeocUxzZqVGdtrpGEP6V0kE3CvSm+2DGQb8 vdSc2lAUEGFuJYKjd6CrjSDBDm/4hvy3d/15ZS9stc5Nb+QSsmG7XsaVM9Genfex XzCNTUP9G0BrEpts9nXRC6rwASc7Vkvkfs3ljHon8SsPXfDIP9kp6cJTpo+cvWgj brj1TWHAivnHId+ibYFA3i7DxOkn1YDY1reCAyTO8Vx+U92Bkq/BnJpknZ4VuA7j ELtfZwbyOgI62+iOc9rtoD73w3Q54kuNceE+7gvhuZ8vG7AMMqHLlCMMZQIDAQAB o4ICNjCCAjIwHQYDVR0OBBYEFPNKgZ7tl54RUYgZmYhdN/KFNddEMB8GA1UdIwQY MBaAFA+SVpFgOQPvJEhctL814oMHhnuDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDVKV2tXQTVBLThrU0Z5MHZ6WGlnd2VHZTRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9mZjkyNTItM2RiNC00NTVmLWIyMGYt ZTNlMzAyMDA1ZDhmLzEvODBxQm51MlhuaEZSaUJtWmlGMDM4b1UxMTBRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9mZjkyNTItM2RiNC00NTVmLWIyMGYtZTNlMzAyMDA1ZDhm LzEvRDVKV2tXQTVBLThrU0Z5MHZ6WGlnd2VHZTRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQAW+i3AwQF Xa9gAwQCgH8MAwQCwRPUAwQCwjYUAwQCwpLYMA0EAgACMAcDBQMqBvTAMA0GCSqG SIb3DQEBCwUAA4IBAQCwAsB57YFEC0eCWVW5BNcJY5HZ2lAWkzOwEyf+9tmGeMqp SxfjQLf/dSTWwO1tJ+XX/05tTI4AIsKFMzjgtCKOj1RUKZQam77vq8gOQCwMLdzo JpUUhtiGEm9VFqE4JgMxyEmkqpiocanY+E4qthM8JeFnacpFmdQuY8xwUzuDO4+o I4VIBJ07z/lXUpHNUKQ2xPdvAxKXEptBfEZAtGdVVul6Qn4mxIbksaTKspCYuync LP4swI1O8lAb3jdPN+Dh34D3lXZa/qS2CZ+/iPuZwoFwI5mXu2qsDzX5vpnwUsoV 3DcpvR7Jln1qJ/x2RvIHN80okSgwC0Ya0POjUoUn -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:24 2026 by rpki-client