This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/tbayT3vxpj9F6-hjVdEL1Ty6y0U.roa File: tbayT3vxpj9F6-hjVdEL1Ty6y0U.roa (raw, json) Hash identifier: Ko/+YeSqgQQmx5PHs3jC/GfjdrV44JmmirXuegDNGWA= Subject key identifier: B5:B6:B2:4F:7B:F1:A6:3F:45:EB:E8:63:55:D1:0B:D5:3C:BA:CB:45 Certificate issuer: /CN=f672865f81510b9455b7ea9bc8c7dad7993d539a Certificate serial: 019B78354FD59DF0DDE07BB2199D60F169DE Authority key identifier: F6:72:86:5F:81:51:0B:94:55:B7:EA:9B:C8:C7:DA:D7:99:3D:53:9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9nKGX4FRC5RVt-qbyMfa15k9U5o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/tbayT3vxpj9F6-hjVdEL1Ty6y0U.roa Signing time: Thu 01 Jan 2026 06:18:38 +0000 ROA not before: Thu 01 Jan 2026 06:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396982 IP address blocks: 80.254.192.0/24 maxlen: 24 80.254.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.mft rsync://rpki.ripe.net/repository/DEFAULT/9nKGX4FRC5RVt-qbyMfa15k9U5o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 21:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:4f:d5:9d:f0:dd:e0:7b:b2:19:9d:60:f1:69:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f672865f81510b9455b7ea9bc8c7dad7993d539a Validity Not Before: Jan 1 06:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b5b6b24f7bf1a63f45ebe86355d10bd53cbacb45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:82:2d:5d:68:e1:8f:35:9b:2c:64:3e:19:eb: ad:99:b9:8c:90:38:e6:a3:3a:d9:36:d1:82:bc:1b: f0:0b:a3:38:d0:b1:e4:87:f2:fa:41:36:1d:e0:7a: f3:04:09:88:14:81:26:91:25:f5:ba:d5:db:92:56: 18:2d:8e:1a:05:da:e7:23:77:99:82:67:4c:3d:a7: 1a:7c:9c:0a:8a:68:8b:af:95:64:c5:82:e0:27:c7: 8a:2d:fa:a1:af:e1:28:f7:23:1f:0b:8a:7d:36:c5: 74:a0:d2:5e:8f:82:b9:0e:5a:6c:33:9e:45:6c:2b: d4:4e:c7:f4:d7:1a:ce:93:a3:80:0a:93:f6:10:37: 83:f7:b7:84:1d:7e:63:be:d7:36:68:15:c9:ed:58: 22:02:54:ec:88:c9:e0:c5:9b:52:ad:96:31:fb:61: 55:9a:1a:99:8a:77:30:70:04:f0:93:0e:ae:2b:1d: 26:6e:2b:37:04:c0:5c:01:d6:4d:62:e9:81:bd:79: ed:82:40:f6:6d:0b:2c:32:6a:5c:29:df:ca:37:73: 3d:7e:70:c8:a6:0a:dc:bb:33:76:9d:73:f7:d3:8b: 54:bb:0d:0e:71:68:8a:2f:2d:69:6f:29:60:d3:5e: 7d:cd:ad:d0:00:a3:7d:7f:7d:44:94:11:d7:55:70: f3:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:B6:B2:4F:7B:F1:A6:3F:45:EB:E8:63:55:D1:0B:D5:3C:BA:CB:45 X509v3 Authority Key Identifier: keyid:F6:72:86:5F:81:51:0B:94:55:B7:EA:9B:C8:C7:DA:D7:99:3D:53:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9nKGX4FRC5RVt-qbyMfa15k9U5o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/tbayT3vxpj9F6-hjVdEL1Ty6y0U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.254.192.0/23 Signature Algorithm: sha256WithRSAEncryption 9d:8f:fc:df:34:91:8c:63:52:a3:9a:1a:72:27:a4:89:62:48: df:04:80:48:90:4c:45:98:7d:c1:42:ba:de:99:92:bc:ff:4a: 7c:ec:b3:78:5d:32:1f:9b:f2:dc:71:ba:03:1b:d5:9a:3c:35: 5f:e5:0f:2c:0b:de:aa:6b:91:b7:2b:d9:fd:72:0a:e5:52:32: 72:62:01:87:4d:31:65:e4:b2:a1:82:0b:49:79:22:0b:9d:2d: a6:45:8a:fd:da:34:8d:94:a6:73:ba:ab:ef:e9:12:e8:8c:0f: b9:29:1a:9c:78:0b:ef:fb:49:23:ad:48:66:e4:a7:1d:df:1a: 12:63:75:e4:a9:ec:ac:6c:be:ab:0a:74:a0:ae:75:1e:04:28: 1e:c6:83:cc:e6:9f:56:9d:57:79:49:89:8b:26:77:f3:27:f2: b6:a1:97:bf:c0:d5:0e:f7:fd:21:de:10:bd:27:d1:10:00:45: d0:e1:fb:a0:ba:d8:b7:34:b5:dd:4d:e0:f6:19:d6:21:22:fe: 30:a2:10:43:06:99:cb:f0:9d:25:df:ca:02:c5:4f:91:61:8f: af:bb:e6:0d:01:8f:21:66:f4:31:19:03:73:97:38:ee:78:e7: 87:8a:80:60:f6:55:cb:e1:e8:95:64:25:b1:65:18:3f:13:98: 11:52:df:f6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NU/VnfDd4HuyGZ1g8WneMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2NzI4NjVmODE1MTBiOTQ1NWI3ZWE5YmM4YzdkYWQ3OTkz ZDUzOWEwHhcNMjYwMTAxMDYxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNWI2YjI0ZjdiZjFhNjNmNDVlYmU4NjM1NWQxMGJkNTNjYmFjYjQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8IItXWjhjzWbLGQ+GeutmbmMkDjm ozrZNtGCvBvwC6M40LHkh/L6QTYd4HrzBAmIFIEmkSX1utXbklYYLY4aBdrnI3eZ gmdMPacafJwKimiLr5VkxYLgJ8eKLfqhr+Eo9yMfC4p9NsV0oNJej4K5DlpsM55F bCvUTsf01xrOk6OACpP2EDeD97eEHX5jvtc2aBXJ7VgiAlTsiMngxZtSrZYx+2FV mhqZincwcATwkw6uKx0mbis3BMBcAdZNYumBvXntgkD2bQssMmpcKd/KN3M9fnDI pgrcuzN2nXP304tUuw0OcWiKLy1pbylg0159za3QAKN9f31ElBHXVXDz8wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLW2sk978aY/RevoY1XRC9U8ustFMB8GA1UdIwQY MBaAFPZyhl+BUQuUVbfqm8jH2teZPVOaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOW5LR1g0RlJDNVJWdC1xYnlNZmExNWs5VTVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8xNDM1MWMtYjFlZC00MThlLWJhZTQt YTE5MjI3MDk3ZmYzLzEvdGJheVQzdnhwajlGNi1oalZkRUwxVHk2eTBVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8xNDM1MWMtYjFlZC00MThlLWJhZTQtYTE5MjI3MDk3ZmYz LzEvOW5LR1g0RlJDNVJWdC1xYnlNZmExNWs5VTVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBUP7AMA0G CSqGSIb3DQEBCwUAA4IBAQCdj/zfNJGMY1KjmhpyJ6SJYkjfBIBIkExFmH3BQrre mZK8/0p87LN4XTIfm/LccboDG9WaPDVf5Q8sC96qa5G3K9n9cgrlUjJyYgGHTTFl 5LKhggtJeSILnS2mRYr92jSNlKZzuqvv6RLojA+5KRqceAvv+0kjrUhm5Kcd3xoS Y3XkqeysbL6rCnSgrnUeBCgexoPM5p9WnVd5SYmLJnfzJ/K2oZe/wNUO9/0h3hC9 J9EQAEXQ4fuguti3NLXdTeD2GdYhIv4wohBDBpnL8J0l38oCxU+RYY+vu+YNAY8h ZvQxGQNzlzjueOeHioBg9lXL4eiVZCWxZRg/E5gRUt/2 -----END CERTIFICATE-----Generated at Fri Jan 9 06:25:49 2026 by rpki-client