This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/sYgcwFmXC21qQr4HaIkoLUDZGq4.roa File: sYgcwFmXC21qQr4HaIkoLUDZGq4.roa (raw, json) Hash identifier: o16QA0TxR5R2SVkQH4tgiDW7/Tyeif3rP5L2akN0sow= Subject key identifier: B1:88:1C:C0:59:97:0B:6D:6A:42:BE:07:68:89:28:2D:40:D9:1A:AE Certificate issuer: /CN=77b020308865c3360dab19f3a5703341864e9f50 Certificate serial: 019B7DC9FE96641CC00D8B024569B80E72F4 Authority key identifier: 77:B0:20:30:88:65:C3:36:0D:AB:19:F3:A5:70:33:41:86:4E:9F:50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/sYgcwFmXC21qQr4HaIkoLUDZGq4.roa Signing time: Fri 02 Jan 2026 08:19:08 +0000 ROA not before: Fri 02 Jan 2026 08:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210841 IP address blocks: 80.73.219.0/24 maxlen: 24 80.73.220.0/22 maxlen: 24 91.232.129.0/24 maxlen: 24 91.232.198.0/24 maxlen: 24 91.232.208.0/24 maxlen: 24 91.232.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Feb 2026 23:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:fe:96:64:1c:c0:0d:8b:02:45:69:b8:0e:72:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77b020308865c3360dab19f3a5703341864e9f50 Validity Not Before: Jan 2 08:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b1881cc059970b6d6a42be076889282d40d91aae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:1e:17:7b:f0:a4:2e:a5:61:20:cf:a7:ad:5e: f8:2d:d5:b3:fb:c6:7a:c7:ad:0c:6d:de:27:b4:18: 36:f7:ff:d5:33:6d:f8:0f:b0:61:2a:7c:4b:cb:29: dc:92:b5:3a:97:8b:cd:6b:cd:5e:ef:71:85:24:27: 40:e6:38:5d:44:b5:2c:81:42:c8:ca:af:71:b4:b7: 3b:31:fe:5c:f5:23:01:67:f5:0e:9e:72:d1:ec:00: 92:82:8f:08:0b:a7:84:9f:d9:8f:72:a1:ea:7d:1f: 8d:97:68:47:72:cd:0c:6c:ea:fa:8f:34:a2:7b:e1: 9c:74:c0:73:1b:ba:e0:26:4b:4b:27:67:7d:49:c4: 2f:68:0a:36:e5:8d:ba:e4:7e:05:05:ce:54:32:c0: 4f:6b:17:fb:c8:79:aa:00:63:ed:f9:32:c4:4a:43: cc:19:eb:e2:3c:31:47:dc:2a:06:fd:23:9e:22:b2: 28:ef:71:a4:4c:5c:1b:93:c1:e7:db:8a:ca:12:04: 3c:6d:cc:b5:35:a4:2a:50:ee:68:cc:96:86:47:11: 66:25:6c:1b:f2:84:12:21:2d:25:de:cd:52:ce:db: ad:9c:67:76:91:ab:4a:63:79:4a:65:ed:fd:13:21: 74:16:60:7e:bb:d2:b3:02:b2:62:02:c6:c1:0c:ef: ba:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:88:1C:C0:59:97:0B:6D:6A:42:BE:07:68:89:28:2D:40:D9:1A:AE X509v3 Authority Key Identifier: keyid:77:B0:20:30:88:65:C3:36:0D:AB:19:F3:A5:70:33:41:86:4E:9F:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/sYgcwFmXC21qQr4HaIkoLUDZGq4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.73.219.0-80.73.223.255 91.232.129.0/24 91.232.198.0/24 91.232.208.0/24 91.232.235.0/24 Signature Algorithm: sha256WithRSAEncryption 07:12:a5:7b:d4:b3:02:e4:a9:47:cb:e9:6e:a8:9c:9b:cc:fe: 28:f0:d5:11:e4:04:48:48:0b:c4:c4:b9:fa:f8:12:82:63:03: 83:ce:eb:9a:2a:6e:ea:9b:3a:ae:2d:5c:02:57:78:af:c2:06: 58:ff:07:97:d6:8e:ee:b8:e6:a3:9a:69:d0:35:51:21:63:b1: 72:98:bd:87:b1:cf:0b:c7:fa:f5:f2:54:8c:dd:df:8c:02:b6: e6:b3:dc:e1:2b:eb:c3:e2:a1:81:27:71:4e:d8:07:d7:cf:61: 3c:3b:ed:92:c9:c2:52:6d:b0:4e:41:ca:cb:d5:ea:94:e7:fe: db:e4:a8:4c:f5:1f:0d:00:7b:48:18:3d:77:cf:91:69:31:f6: 92:b5:65:8a:a2:50:ef:96:16:f1:9d:b3:ac:0e:5b:81:fd:18: d8:e0:d2:51:cc:fc:1d:44:9a:61:6c:3d:a4:c8:eb:8e:88:c5: d8:04:eb:46:b4:2a:67:bc:c7:26:7f:f3:40:01:dc:a6:1e:fe: 73:5b:65:56:ab:be:3b:d8:5f:f6:d0:1f:2c:78:c5:b4:5d:12: fe:f5:f0:9d:67:7e:fc:5e:1d:dd:93:6d:f0:ee:2f:91:13:9a: 4d:5f:75:92:97:de:86:8a:06:32:68:44:a2:c8:5b:4e:ba:01: 11:0d:97:4f -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt9yf6WZBzADYsCRWm4DnL0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3YjAyMDMwODg2NWMzMzYwZGFiMTlmM2E1NzAzMzQxODY0 ZTlmNTAwHhcNMjYwMTAyMDgxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTg4MWNjMDU5OTcwYjZkNmE0MmJlMDc2ODg5MjgyZDQwZDkxYWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2x4Xe/CkLqVhIM+nrV74LdWz+8Z6 x60Mbd4ntBg29//VM234D7BhKnxLyynckrU6l4vNa81e73GFJCdA5jhdRLUsgULI yq9xtLc7Mf5c9SMBZ/UOnnLR7ACSgo8IC6eEn9mPcqHqfR+Nl2hHcs0MbOr6jzSi e+GcdMBzG7rgJktLJ2d9ScQvaAo25Y265H4FBc5UMsBPaxf7yHmqAGPt+TLESkPM GeviPDFH3CoG/SOeIrIo73GkTFwbk8Hn24rKEgQ8bcy1NaQqUO5ozJaGRxFmJWwb 8oQSIS0l3s1SztutnGd2katKY3lKZe39EyF0FmB+u9KzArJiAsbBDO+6gQIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFLGIHMBZlwttakK+B2iJKC1A2RquMB8GA1UdIwQY MBaAFHewIDCIZcM2DasZ86VwM0GGTp9QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDdBZ01JaGx3ellOcXhuenBYQXpRWVpPbjFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9kMmFhYjAtODM2My00YjE0LTljYzIt YzhiYjhlYTM5ODA0LzEvc1lnY3dGbVhDMjFxUXI0SGFJa29MVURaR3E0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9kMmFhYjAtODM2My00YjE0LTljYzItYzhiYjhlYTM5ODA0 LzEvZDdBZ01JaGx3ellOcXhuenBYQXpRWVpPbjFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmMAwDBABQSdsD BAVQScADBABb6IEDBABb6MYDBABb6NADBABb6OswDQYJKoZIhvcNAQELBQADggEB AAcSpXvUswLkqUfL6W6onJvM/ijw1RHkBEhIC8TEufr4EoJjA4PO65oqbuqbOq4t XAJXeK/CBlj/B5fWju645qOaadA1USFjsXKYvYexzwvH+vXyVIzd34wCtuaz3OEr 68PioYEncU7YB9fPYTw77ZLJwlJtsE5BysvV6pTn/tvkqEz1Hw0Ae0gYPXfPkWkx 9pK1ZYqiUO+WFvGds6wOW4H9GNjg0lHM/B1EmmFsPaTI646IxdgE60a0Kme8xyZ/ 80AB3KYe/nNbZVarvjvYX/bQHyx4xbRdEv718J1nfvxeHd2TbfDuL5ETmk1fdZKX 3oaKBjJoRKLIW066ARENl08= -----END CERTIFICATE-----Generated at Sat Feb 7 07:12:04 2026 by rpki-client