This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/hsNxRAw_rGABDi7oiUui6xBlQd8.roa File: hsNxRAw_rGABDi7oiUui6xBlQd8.roa (raw, json) Hash identifier: j/nnPvCS87qU0kUKOjDsKRSqIlWxWIl2JteXT8Y6vic= Subject key identifier: 86:C3:71:44:0C:3F:AC:60:01:0E:2E:E8:89:4B:A2:EB:10:65:41:DF Certificate issuer: /CN=a18164d9961a16d2eff773f5027821e9d2bd3740 Certificate serial: 019B78A366FA821C11B3C5AA014B402EAC67 Authority key identifier: A1:81:64:D9:96:1A:16:D2:EF:F7:73:F5:02:78:21:E9:D2:BD:37:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/hsNxRAw_rGABDi7oiUui6xBlQd8.roa Signing time: Thu 01 Jan 2026 08:18:53 +0000 ROA not before: Thu 01 Jan 2026 08:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60294 IP address blocks: 80.74.48.0/20 maxlen: 20 80.74.48.0/22 maxlen: 22 80.74.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:66:fa:82:1c:11:b3:c5:aa:01:4b:40:2e:ac:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a18164d9961a16d2eff773f5027821e9d2bd3740 Validity Not Before: Jan 1 08:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=86c371440c3fac60010e2ee8894ba2eb106541df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:dc:09:de:70:3a:05:42:3e:ef:1f:79:54:f2: 62:c1:a9:dd:27:22:8b:b3:f2:b3:51:e0:45:d9:3a: 24:05:50:85:9f:9d:14:ec:b6:82:3c:db:87:02:68: 50:23:c5:b1:c8:77:79:15:e3:8c:78:8f:35:42:ab: d6:02:3e:6f:37:79:d7:58:5b:d4:e7:68:89:b2:cb: f2:85:e5:bc:82:35:02:f3:85:a6:9a:be:1b:f6:de: 9c:34:41:56:18:71:ad:5b:ee:60:20:16:a5:31:82: 0d:b3:3c:21:9f:e8:a4:3b:25:3d:da:ee:27:89:18: d2:c7:76:19:50:17:9c:97:1b:6f:9e:19:b6:ac:97: 30:91:ce:d7:ec:63:d3:cd:66:51:88:6f:7f:05:b7: 74:5b:b0:15:07:cb:c0:ad:46:38:5f:60:17:6e:0e: 38:9f:93:f2:19:27:1c:7f:4e:3e:b7:f4:8a:a8:d3: 70:dc:5e:1e:d6:ff:e2:2f:b3:46:67:7b:37:1d:f1: b4:47:4d:25:73:2f:75:97:af:3d:d1:4d:44:d4:9c: 08:e9:b9:76:cc:77:c8:15:d2:09:8f:4b:a4:73:d9: 12:ef:87:b1:01:06:02:24:62:9e:f1:58:5f:64:5c: d1:8b:e5:fe:38:72:b8:54:c1:35:86:29:a7:eb:08: 79:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:C3:71:44:0C:3F:AC:60:01:0E:2E:E8:89:4B:A2:EB:10:65:41:DF X509v3 Authority Key Identifier: keyid:A1:81:64:D9:96:1A:16:D2:EF:F7:73:F5:02:78:21:E9:D2:BD:37:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/hsNxRAw_rGABDi7oiUui6xBlQd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.74.48.0/20 Signature Algorithm: sha256WithRSAEncryption 24:42:9b:1f:a0:38:25:b1:c7:4c:8e:31:f4:c4:b7:85:80:a6: 10:94:c4:3d:cb:01:81:bd:4c:63:ad:6a:e4:3a:6c:3c:8f:cf: 64:fd:38:77:80:e3:a3:38:e5:a2:3f:62:8e:c7:97:26:f9:d0: cc:83:2b:a5:40:00:35:2b:3c:93:14:27:80:09:ec:eb:48:03: e4:f2:56:87:fe:16:35:76:ed:68:1d:37:1f:4d:ba:14:c3:34: 54:c6:ef:79:97:7c:cd:f9:fc:e4:e2:66:8f:62:76:58:46:28: dc:90:01:9b:56:95:c1:de:46:ca:2d:2a:61:0f:e6:48:ca:02: 8e:b3:8d:70:bc:fa:92:9a:aa:a9:bb:88:a8:c5:a1:4c:8f:7a: 33:46:ed:2d:60:ab:c8:f7:90:0d:6e:95:aa:00:0b:ed:69:45: 68:51:fe:bf:5d:73:3e:4e:cc:77:53:cd:c0:af:31:1a:7c:56: e3:62:9c:9e:a7:cb:65:a0:67:25:32:b0:29:0f:0e:b1:0b:1e: 52:58:b2:3a:a4:c2:b6:2f:07:d0:4f:37:99:58:23:42:ad:65: 6f:c6:71:1b:73:c0:97:42:0d:8c:8b:af:22:c2:ec:73:ed:62: 16:0b:2b:9b:04:1e:09:e6:11:78:91:9a:4c:17:0d:4a:2e:b4: e9:d1:10:43 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o2b6ghwRs8WqAUtALqxnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExODE2NGQ5OTYxYTE2ZDJlZmY3NzNmNTAyNzgyMWU5ZDJi ZDM3NDAwHhcNMjYwMTAxMDgxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NmMzNzE0NDBjM2ZhYzYwMDEwZTJlZTg4OTRiYTJlYjEwNjU0MWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0twJ3nA6BUI+7x95VPJiwandJyKL s/KzUeBF2TokBVCFn50U7LaCPNuHAmhQI8WxyHd5FeOMeI81QqvWAj5vN3nXWFvU 52iJssvyheW8gjUC84Wmmr4b9t6cNEFWGHGtW+5gIBalMYINszwhn+ikOyU92u4n iRjSx3YZUBeclxtvnhm2rJcwkc7X7GPTzWZRiG9/Bbd0W7AVB8vArUY4X2AXbg44 n5PyGSccf04+t/SKqNNw3F4e1v/iL7NGZ3s3HfG0R00lcy91l6890U1E1JwI6bl2 zHfIFdIJj0ukc9kS74exAQYCJGKe8VhfZFzRi+X+OHK4VME1himn6wh5swIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIbDcUQMP6xgAQ4u6IlLousQZUHfMB8GA1UdIwQY MBaAFKGBZNmWGhbS7/dz9QJ4IenSvTdAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1lGazJaWWFGdEx2OTNQMUFuZ2g2ZEs5TjBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9iOGVkMmQtMzU0NS00NTk5LTk3ZTUt MTUyMzgwM2ZhZGFmLzEvaHNOeFJBd19yR0FCRGk3b2lVdWk2eEJsUWQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9iOGVkMmQtMzU0NS00NTk5LTk3ZTUtMTUyMzgwM2ZhZGFm LzEvb1lGazJaWWFGdEx2OTNQMUFuZ2g2ZEs5TjBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEUEowMA0G CSqGSIb3DQEBCwUAA4IBAQAkQpsfoDglscdMjjH0xLeFgKYQlMQ9ywGBvUxjrWrk Omw8j89k/Th3gOOjOOWiP2KOx5cm+dDMgyulQAA1KzyTFCeACezrSAPk8laH/hY1 du1oHTcfTboUwzRUxu95l3zN+fzk4maPYnZYRijckAGbVpXB3kbKLSphD+ZIygKO s41wvPqSmqqpu4ioxaFMj3ozRu0tYKvI95ANbpWqAAvtaUVoUf6/XXM+Tsx3U83A rzEafFbjYpyep8tloGclMrApDw6xCx5SWLI6pMK2LwfQTzeZWCNCrWVvxnEbc8CX Qg2Mi68iwuxz7WIWCyubBB4J5hF4kZpMFw1KLrTp0RBD -----END CERTIFICATE-----Generated at Mon Feb 9 20:55:23 2026 by rpki-client