This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/80Z8m6Z7JZuDHgqlRYLsoylq5hc.roa File: 80Z8m6Z7JZuDHgqlRYLsoylq5hc.roa (raw, json) Hash identifier: inbOmLYfTUWv8xqKpQqk0iSMIhKJkA0PbwgWW07QMo4= Subject key identifier: F3:46:7C:9B:A6:7B:25:9B:83:1E:0A:A5:45:82:EC:A3:29:6A:E6:17 Certificate issuer: /CN=77c071d989e5309ac3cb3c0b08d3acb2521112b6 Certificate serial: 019B7D5C87D63D4022444FEE0F701E470DB2 Authority key identifier: 77:C0:71:D9:89:E5:30:9A:C3:CB:3C:0B:08:D3:AC:B2:52:11:12:B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8Bx2YnlMJrDyzwLCNOsslIRErY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/80Z8m6Z7JZuDHgqlRYLsoylq5hc.roa Signing time: Fri 02 Jan 2026 06:19:34 +0000 ROA not before: Fri 02 Jan 2026 06:19:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48258 IP address blocks: 91.209.53.0/24 maxlen: 24 2001:67c:2488::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.mft rsync://rpki.ripe.net/repository/DEFAULT/d8Bx2YnlMJrDyzwLCNOsslIRErY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:87:d6:3d:40:22:44:4f:ee:0f:70:1e:47:0d:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77c071d989e5309ac3cb3c0b08d3acb2521112b6 Validity Not Before: Jan 2 06:19:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f3467c9ba67b259b831e0aa54582eca3296ae617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:cb:01:ba:c0:3d:f0:30:e2:22:75:fb:12:9d: d9:d7:82:84:17:2d:58:81:21:1e:2f:53:aa:56:a0: ed:47:bd:70:4f:49:d9:a9:5c:fe:a1:ad:82:c7:48: 62:96:15:8b:12:7b:52:e5:45:95:8c:7f:89:09:e3: c6:9b:b8:ac:a9:25:fd:1c:0f:15:cc:51:64:75:f8: cd:b9:9a:33:e8:58:2b:c6:06:6c:b2:9f:60:14:47: bb:15:d4:41:2b:9f:3a:17:64:7a:5a:e2:ae:67:1f: 44:0f:7b:db:f4:2e:80:8d:ae:b2:4e:40:d4:38:d7: 01:6c:42:57:4e:0e:66:d7:45:94:aa:5a:6e:03:95: 12:74:e4:0f:22:c0:14:8f:16:53:a5:ac:e2:74:9b: dd:15:57:d2:5d:ad:ad:7d:fa:93:0e:7e:60:2d:1d: 14:fe:56:84:3f:57:17:7a:ac:66:13:9b:06:b6:3c: 36:70:3a:b6:84:1e:77:01:ff:11:a9:46:3f:d4:47: 31:29:bd:09:8f:14:20:14:59:6d:1a:c6:25:50:f2: d6:f4:f6:24:7b:41:e3:e7:24:12:7f:e8:14:37:0f: 0e:46:09:c7:b5:4f:3d:d6:c5:99:82:92:ae:92:ef: 73:5e:b2:d0:59:75:c2:8b:c4:9b:1a:7b:aa:18:90: 02:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:46:7C:9B:A6:7B:25:9B:83:1E:0A:A5:45:82:EC:A3:29:6A:E6:17 X509v3 Authority Key Identifier: keyid:77:C0:71:D9:89:E5:30:9A:C3:CB:3C:0B:08:D3:AC:B2:52:11:12:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8Bx2YnlMJrDyzwLCNOsslIRErY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/80Z8m6Z7JZuDHgqlRYLsoylq5hc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.209.53.0/24 IPv6: 2001:67c:2488::/48 Signature Algorithm: sha256WithRSAEncryption 62:35:c3:4f:6b:9c:37:67:ed:b0:4a:4f:24:f0:ed:44:76:69: f1:3e:5b:db:e3:6b:13:70:b5:40:06:c0:8a:0a:51:54:03:6a: d0:8f:4d:78:4a:ea:d1:1d:30:02:82:cc:7d:1a:ca:20:99:2f: 55:e8:a5:d9:54:9c:40:11:4d:c3:12:f2:b3:a2:11:b2:62:81: 9f:f5:72:44:58:c7:4f:a4:26:a0:61:35:22:b9:ec:bd:90:ac: 66:6c:a2:c2:17:c2:55:6c:d5:b9:b2:41:a8:af:b5:14:da:c8: bc:3c:6c:80:37:e7:af:81:56:8d:e2:62:31:44:30:cb:55:19: d7:9c:ad:f3:e6:5d:53:9f:25:19:3d:73:21:fd:23:6f:95:7d: a4:ad:fd:9a:9e:1f:48:ab:32:82:ff:8d:cb:c6:0d:98:1f:5a: b4:49:7b:4c:c8:da:2d:e1:48:9d:21:cf:9b:40:25:ce:0d:4d: b1:69:8d:28:46:79:43:41:41:ef:37:65:2a:af:14:61:22:ee: ab:11:29:2c:ea:74:e4:21:24:0b:61:ff:6d:b9:fb:8e:d5:d3: eb:1e:23:23:c2:6b:49:73:ef:14:7d:07:34:d2:4a:5c:30:31: 21:91:e0:b2:48:39:bb:ca:a5:57:6c:33:c1:0e:9d:4c:5e:52: 11:e3:4d:a5 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt9XIfWPUAiRE/uD3AeRw2yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3YzA3MWQ5ODllNTMwOWFjM2NiM2MwYjA4ZDNhY2IyNTIx MTEyYjYwHhcNMjYwMTAyMDYxOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzQ2N2M5YmE2N2IyNTliODMxZTBhYTU0NTgyZWNhMzI5NmFlNjE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcsBusA98DDiInX7Ep3Z14KEFy1Y gSEeL1OqVqDtR71wT0nZqVz+oa2Cx0hilhWLEntS5UWVjH+JCePGm7isqSX9HA8V zFFkdfjNuZoz6FgrxgZssp9gFEe7FdRBK586F2R6WuKuZx9ED3vb9C6Aja6yTkDU ONcBbEJXTg5m10WUqlpuA5USdOQPIsAUjxZTpazidJvdFVfSXa2tffqTDn5gLR0U /laEP1cXeqxmE5sGtjw2cDq2hB53Af8RqUY/1EcxKb0JjxQgFFltGsYlUPLW9PYk e0Hj5yQSf+gUNw8ORgnHtU891sWZgpKuku9zXrLQWXXCi8SbGnuqGJACYwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFPNGfJumeyWbgx4KpUWC7KMpauYXMB8GA1UdIwQY MBaAFHfAcdmJ5TCaw8s8CwjTrLJSERK2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDhCeDJZbmxNSnJEeXp3TENOT3NzbElSRXJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi84NDRiZmUtZWMxOC00MTdlLThmNWEt NWNjNGRlZDlhN2QyLzEvODBaOG02WjdKWnVESGdxbFJZTHNveWxxNWhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi84NDRiZmUtZWMxOC00MTdlLThmNWEtNWNjNGRlZDlhN2Qy LzEvZDhCeDJZbmxNSnJEeXp3TENOT3NzbElSRXJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAW9E1MA8E AgACMAkDBwAgAQZ8JIgwDQYJKoZIhvcNAQELBQADggEBAGI1w09rnDdn7bBKTyTw 7UR2afE+W9vjaxNwtUAGwIoKUVQDatCPTXhK6tEdMAKCzH0ayiCZL1XopdlUnEAR TcMS8rOiEbJigZ/1ckRYx0+kJqBhNSK57L2QrGZsosIXwlVs1bmyQaivtRTayLw8 bIA356+BVo3iYjFEMMtVGdecrfPmXVOfJRk9cyH9I2+VfaSt/ZqeH0irMoL/jcvG DZgfWrRJe0zI2i3hSJ0hz5tAJc4NTbFpjShGeUNBQe83ZSqvFGEi7qsRKSzqdOQh JAth/225+47V0+seIyPCa0lz7xR9BzTSSlwwMSGR4LJIObvKpVdsM8EOnUxeUhHj TaU= -----END CERTIFICATE-----Generated at Mon Feb 9 23:41:48 2026 by rpki-client