This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/txFn_1w2AEjDCv0xGCqMhMdB6Ik.roa File: txFn_1w2AEjDCv0xGCqMhMdB6Ik.roa (raw, json) Hash identifier: QZ5s1i5lWCJAEXaeHEkM7u2xMiicds/V8SZeoAg+i98= Subject key identifier: B7:11:67:FF:5C:36:00:48:C3:0A:FD:31:18:2A:8C:84:C7:41:E8:89 Certificate issuer: /CN=53b46ab79b9fc58f5dc4cf29d72dc5267ec3edde Certificate serial: 019B7BA34EC388BF0BF03E32D88BE3D18FB6 Authority key identifier: 53:B4:6A:B7:9B:9F:C5:8F:5D:C4:CF:29:D7:2D:C5:26:7E:C3:ED:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/txFn_1w2AEjDCv0xGCqMhMdB6Ik.roa Signing time: Thu 01 Jan 2026 22:17:38 +0000 ROA not before: Thu 01 Jan 2026 22:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42695 IP address blocks: 80.254.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:4e:c3:88:bf:0b:f0:3e:32:d8:8b:e3:d1:8f:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53b46ab79b9fc58f5dc4cf29d72dc5267ec3edde Validity Not Before: Jan 1 22:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b71167ff5c360048c30afd31182a8c84c741e889 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:48:e2:7c:77:cb:1a:f3:ee:74:65:76:04:59: 6a:62:3d:fe:dd:9c:29:97:bd:80:67:7a:47:88:f5: a6:49:4e:55:e7:31:73:f7:84:9f:fc:d4:c4:84:47: 38:6c:45:b3:3f:97:dd:c8:f5:b1:50:0c:52:e3:40: 36:8e:90:f0:a0:a8:64:b4:97:df:32:52:44:eb:b8: 72:a7:f7:65:e7:5e:d1:52:38:c5:3c:6f:6c:d4:aa: b4:dd:4f:d9:b1:ec:a1:7e:79:7a:e5:ea:3c:6c:54: 91:4d:8b:4b:01:df:ed:b1:58:03:41:e1:41:c4:95: 27:00:06:d6:a2:b0:6b:8a:ed:9b:8f:79:4e:30:07: 36:ca:af:39:25:36:38:52:ba:bb:3e:21:6b:e6:77: 54:6d:66:0f:fb:b2:12:04:c2:d6:7a:29:f2:26:fc: 96:94:ea:86:24:29:e1:c4:d0:df:d9:c0:52:bb:60: 82:7f:05:60:ef:68:d9:9c:9e:46:41:ec:f6:a9:0d: fe:e2:5a:7a:37:fa:b4:67:4a:44:73:8b:10:9b:72: f1:0b:d3:a9:b7:16:93:45:fd:70:11:34:97:d5:e4: 61:4d:ca:ad:a2:04:14:a3:4c:54:2a:5d:7d:24:3f: 60:6a:11:7f:31:34:40:ad:47:d5:cb:3d:23:ff:b4: 43:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:11:67:FF:5C:36:00:48:C3:0A:FD:31:18:2A:8C:84:C7:41:E8:89 X509v3 Authority Key Identifier: keyid:53:B4:6A:B7:9B:9F:C5:8F:5D:C4:CF:29:D7:2D:C5:26:7E:C3:ED:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/txFn_1w2AEjDCv0xGCqMhMdB6Ik.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.254.230.0/24 Signature Algorithm: sha256WithRSAEncryption 88:f3:d7:83:a2:5d:86:af:af:89:9b:66:18:ee:02:98:e0:31: 65:45:5c:47:ef:29:30:3b:a9:54:ef:cf:3d:b8:87:2a:d9:16: 35:5f:f3:b9:cb:98:d3:e1:7f:92:b3:01:bf:b6:5e:ec:c7:27: 1e:70:c3:e6:d9:03:39:39:97:4f:23:81:03:17:5d:f6:53:9c: b6:b1:83:20:37:66:c5:90:3f:30:9b:13:36:36:b9:37:51:6c: 4e:f7:f7:a8:a9:09:ec:5b:2a:bf:6f:02:f6:74:b1:cc:5c:53: 8b:cc:03:cf:59:6a:a9:56:a5:43:20:ce:79:03:38:0f:b1:4b: f0:3f:81:7c:bf:fd:5d:01:5a:65:85:09:3e:f8:85:4b:40:6a: b6:bf:ae:c5:0c:24:a8:a5:1c:8a:9f:a5:4f:5a:ad:c3:42:7f: d4:f4:ef:47:52:7e:c0:d1:7a:70:22:a7:b0:c5:a6:a6:3c:cc: da:e2:34:a8:ff:3b:0b:51:39:fd:54:82:7d:1c:80:2b:1e:3c: 25:7b:fc:ae:4e:7b:3b:8a:27:d9:65:85:f9:45:a8:bf:da:f8: 9a:20:83:e0:4e:44:de:61:80:2a:56:12:41:12:a0:38:92:30: 27:6e:71:f2:9c:3a:8b:c1:f3:14:12:58:58:46:e0:8b:9d:6f: 74:fa:a0:f1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o07DiL8L8D4y2Ivj0Y+2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzYjQ2YWI3OWI5ZmM1OGY1ZGM0Y2YyOWQ3MmRjNTI2N2Vj M2VkZGUwHhcNMjYwMTAxMjIxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzExNjdmZjVjMzYwMDQ4YzMwYWZkMzExODJhOGM4NGM3NDFlODg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kjifHfLGvPudGV2BFlqYj3+3Zwp l72AZ3pHiPWmSU5V5zFz94Sf/NTEhEc4bEWzP5fdyPWxUAxS40A2jpDwoKhktJff MlJE67hyp/dl517RUjjFPG9s1Kq03U/Zseyhfnl65eo8bFSRTYtLAd/tsVgDQeFB xJUnAAbWorBriu2bj3lOMAc2yq85JTY4Urq7PiFr5ndUbWYP+7ISBMLWeinyJvyW lOqGJCnhxNDf2cBSu2CCfwVg72jZnJ5GQez2qQ3+4lp6N/q0Z0pEc4sQm3LxC9Op txaTRf1wETSX1eRhTcqtogQUo0xUKl19JD9gahF/MTRArUfVyz0j/7RDiwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLcRZ/9cNgBIwwr9MRgqjITHQeiJMB8GA1UdIwQY MBaAFFO0arebn8WPXcTPKdctxSZ+w+3eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTdScXQ1dWZ4WTlkeE04cDF5M0ZKbjdEN2Q0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hYzlhZjYtN2ZjMy00ZDEzLWE1OTQt MDYwYTQ3MzgwOTFkLzEvdHhGbl8xdzJBRWpEQ3YweEdDcU1oTWRCNklrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9hYzlhZjYtN2ZjMy00ZDEzLWE1OTQtMDYwYTQ3MzgwOTFk LzEvVTdScXQ1dWZ4WTlkeE04cDF5M0ZKbjdEN2Q0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUP7mMA0G CSqGSIb3DQEBCwUAA4IBAQCI89eDol2Gr6+Jm2YY7gKY4DFlRVxH7ykwO6lU7889 uIcq2RY1X/O5y5jT4X+SswG/tl7sxycecMPm2QM5OZdPI4EDF132U5y2sYMgN2bF kD8wmxM2Nrk3UWxO9/eoqQnsWyq/bwL2dLHMXFOLzAPPWWqpVqVDIM55AzgPsUvw P4F8v/1dAVplhQk++IVLQGq2v67FDCSopRyKn6VPWq3DQn/U9O9HUn7A0XpwIqew xaamPMza4jSo/zsLUTn9VIJ9HIArHjwle/yuTns7iifZZYX5Rai/2viaIIPgTkTe YYAqVhJBEqA4kjAnbnHynDqLwfMUElhYRuCLnW90+qDx -----END CERTIFICATE-----Generated at Mon Jan 26 08:58:18 2026 by rpki-client