This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/sXC5yLn4k7J0Q9mLK5jMRSmlHl4.roa File: sXC5yLn4k7J0Q9mLK5jMRSmlHl4.roa (raw, json) Hash identifier: oarBoJiBeI3rfhIyVi9iZrYHFYrWYPyK5g0g+OH5uWg= Subject key identifier: B1:70:B9:C8:B9:F8:93:B2:74:43:D9:8B:2B:98:CC:45:29:A5:1E:5E Certificate issuer: /CN=ec3543aa00373e9e4d10e64c83d3779b378888c1 Certificate serial: 019B7A5A9847678D394DEFEFFB1074640226 Authority key identifier: EC:35:43:AA:00:37:3E:9E:4D:10:E6:4C:83:D3:77:9B:37:88:88:C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7DVDqgA3Pp5NEOZMg9N3mzeIiME.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/sXC5yLn4k7J0Q9mLK5jMRSmlHl4.roa Signing time: Thu 01 Jan 2026 16:18:36 +0000 ROA not before: Thu 01 Jan 2026 16:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60845 IP address blocks: 80.190.115.0/24 maxlen: 24 80.190.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.mft rsync://rpki.ripe.net/repository/DEFAULT/7DVDqgA3Pp5NEOZMg9N3mzeIiME.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:98:47:67:8d:39:4d:ef:ef:fb:10:74:64:02:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec3543aa00373e9e4d10e64c83d3779b378888c1 Validity Not Before: Jan 1 16:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b170b9c8b9f893b27443d98b2b98cc4529a51e5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b7:7b:5b:8f:d4:9d:d9:0d:90:3e:d1:57:01: cd:ce:fb:0b:fc:c5:74:09:fc:c0:e4:0c:1d:94:fe: 66:cb:fc:6d:a0:9a:8d:6a:f9:80:bf:09:14:07:16: 26:43:6c:8a:c2:e1:c2:72:6b:c5:71:2d:f8:68:34: 20:91:67:9e:fe:7c:05:75:8e:14:34:3c:75:38:ff: 44:09:09:14:a6:5f:6e:47:a8:f4:8b:29:18:cb:b0: 43:08:80:7c:f3:a5:94:0c:87:17:a1:1c:78:06:52: 30:7a:27:c7:17:c4:fe:20:1b:50:31:92:95:f6:e9: be:54:ae:13:8e:63:20:07:f8:a9:f0:af:a3:42:ad: e3:8a:52:e5:8d:16:9a:b4:55:7c:15:47:97:f4:f1: 14:35:3b:ea:fd:66:34:5a:48:cb:f9:56:ae:fe:33: 45:6b:88:7f:89:49:63:8f:12:61:9d:de:c4:57:4d: 41:31:f7:d9:c7:45:1f:83:fc:78:27:08:9b:ce:7e: ad:23:98:22:98:0b:83:1c:f5:27:0c:1c:2e:3f:07: 6b:36:e9:ed:ab:a1:d3:8c:73:64:e7:9b:8a:c5:a9: 07:d7:2f:8d:ef:28:7f:58:d6:9e:4b:70:f4:05:0d: a0:4f:32:dc:4e:a0:4d:61:6f:f0:76:5e:6e:d7:a1: 1d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:70:B9:C8:B9:F8:93:B2:74:43:D9:8B:2B:98:CC:45:29:A5:1E:5E X509v3 Authority Key Identifier: keyid:EC:35:43:AA:00:37:3E:9E:4D:10:E6:4C:83:D3:77:9B:37:88:88:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7DVDqgA3Pp5NEOZMg9N3mzeIiME.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/sXC5yLn4k7J0Q9mLK5jMRSmlHl4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.190.115.0/24 80.190.122.0/24 Signature Algorithm: sha256WithRSAEncryption 81:f5:17:eb:41:3c:d2:2c:a0:61:d5:1c:e8:59:7f:7e:c5:98: 8f:22:33:01:60:15:eb:17:e5:d9:ea:f3:0e:9e:49:14:22:ae: f2:b3:47:82:e1:f8:b8:51:8f:0c:db:fa:00:03:2d:fe:23:f4: 97:7e:87:76:d7:a3:af:84:1f:36:20:5f:c9:7b:de:9f:06:6e: e3:39:2d:a1:0f:81:1c:7c:9a:42:4d:13:06:7e:32:a9:6d:8f: d9:87:f2:ad:a6:6e:68:6a:25:4a:c7:eb:36:12:95:51:16:6d: ab:1c:67:eb:05:cf:b7:e8:d2:8a:06:e5:9c:c8:24:d6:23:15: 3c:8d:03:2e:1d:68:84:75:59:fe:ae:31:ca:f3:95:bd:bf:d8: 52:63:a8:7f:ed:8f:14:1d:ff:f1:d0:5a:fd:03:a6:ed:c5:f4: 64:96:30:df:18:38:57:47:dc:19:09:1f:2b:ef:f8:c4:be:e9: b4:69:b2:56:1b:d3:5e:3f:60:1c:e9:78:6e:bb:be:46:45:05: 08:a9:9c:70:5c:7a:b1:85:16:ec:24:c3:bc:ea:00:02:7b:84: 15:4a:ba:6e:1f:d4:a2:3d:e5:6f:cb:d1:26:c7:ac:c2:f3:6c: 2f:63:7c:dc:b6:f6:6f:e7:10:31:04:6d:44:12:99:31:0e:97: be:1d:20:fc -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6WphHZ405Te/v+xB0ZAImMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjMzU0M2FhMDAzNzNlOWU0ZDEwZTY0YzgzZDM3NzliMzc4 ODg4YzEwHhcNMjYwMTAxMTYxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTcwYjljOGI5Zjg5M2IyNzQ0M2Q5OGIyYjk4Y2M0NTI5YTUxZTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbd7W4/UndkNkD7RVwHNzvsL/MV0 CfzA5AwdlP5my/xtoJqNavmAvwkUBxYmQ2yKwuHCcmvFcS34aDQgkWee/nwFdY4U NDx1OP9ECQkUpl9uR6j0iykYy7BDCIB886WUDIcXoRx4BlIweifHF8T+IBtQMZKV 9um+VK4TjmMgB/ip8K+jQq3jilLljRaatFV8FUeX9PEUNTvq/WY0WkjL+Vau/jNF a4h/iUljjxJhnd7EV01BMffZx0Ufg/x4Jwibzn6tI5gimAuDHPUnDBwuPwdrNunt q6HTjHNk55uKxakH1y+N7yh/WNaeS3D0BQ2gTzLcTqBNYW/wdl5u16EdewIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLFwuci5+JOydEPZiyuYzEUppR5eMB8GA1UdIwQY MBaAFOw1Q6oANz6eTRDmTIPTd5s3iIjBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0RWRHFnQTNQcDVORU9aTWc5TjNtemVJaU1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8xOWU3MTUtZmZhYS00YzQzLWI3OWEt NTZmNmVjYzFjMTIxLzEvc1hDNXlMbjRrN0owUTltTEs1ak1SU21sSGw0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy8xOWU3MTUtZmZhYS00YzQzLWI3OWEtNTZmNmVjYzFjMTIx LzEvN0RWRHFnQTNQcDVORU9aTWc5TjNtemVJaU1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUL5zAwQA UL56MA0GCSqGSIb3DQEBCwUAA4IBAQCB9RfrQTzSLKBh1RzoWX9+xZiPIjMBYBXr F+XZ6vMOnkkUIq7ys0eC4fi4UY8M2/oAAy3+I/SXfod216OvhB82IF/Je96fBm7j OS2hD4EcfJpCTRMGfjKpbY/Zh/Ktpm5oaiVKx+s2EpVRFm2rHGfrBc+36NKKBuWc yCTWIxU8jQMuHWiEdVn+rjHK85W9v9hSY6h/7Y8UHf/x0Fr9A6btxfRkljDfGDhX R9wZCR8r7/jEvum0abJWG9NeP2Ac6Xhuu75GRQUIqZxwXHqxhRbsJMO86gACe4QV SrpuH9SiPeVvy9Emx6zC82wvY3zctvZv5xAxBG1EEpkxDpe+HSD8 -----END CERTIFICATE-----Generated at Mon Jan 26 09:40:45 2026 by rpki-client