This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/t4QXxCvVmATXxT0HCiqC_03hiYc.roa
File: t4QXxCvVmATXxT0HCiqC_03hiYc.roa (raw, json)
Hash identifier: FFvuRkQsX/cM6EacvCjfXpy5kO0eYWaiz4Ci86Jfl6k=
Subject key identifier: B7:84:17:C4:2B:D5:98:04:D7:C5:3D:07:0A:2A:82:FF:4D:E1:89:87
Certificate issuer: /CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238
Certificate serial: 019B7AC8E3920ABFB9BB715429E2D97F26D3
Authority key identifier: 11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/t4QXxCvVmATXxT0HCiqC_03hiYc.roa
Signing time: Thu 01 Jan 2026 18:19:04 +0000
ROA not before: Thu 01 Jan 2026 18:19:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51353
IP address blocks: 80.82.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c8:e3:92:0a:bf:b9:bb:71:54:29:e2:d9:7f:26:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238
Validity
Not Before: Jan 1 18:19:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b78417c42bd59804d7c53d070a2a82ff4de18987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:21:1f:91:ca:15:a9:89:4c:0d:5b:f5:aa:02:
ce:c5:53:4c:41:8d:c7:6c:b6:05:72:cb:e7:25:c9:
48:bb:82:95:14:7f:2c:d3:83:34:4c:8c:08:78:1a:
32:92:86:1c:06:0f:bd:80:f3:b6:5d:b6:5e:d3:e1:
8b:c9:23:d1:6c:ce:5d:dd:dd:34:34:7f:f2:19:a8:
04:5d:97:e6:2f:83:f9:82:97:f2:6b:1c:d1:9d:45:
58:7a:10:c9:e9:51:0f:dc:11:51:c3:06:02:81:52:
9c:06:0a:82:45:89:e4:63:24:01:e2:43:04:58:4f:
d1:5a:d4:bb:df:96:b2:86:f4:0c:d4:9a:78:b6:d8:
d2:2f:58:96:85:60:d4:9b:8f:f8:50:34:b5:7e:ee:
b2:58:aa:ea:5c:d9:bd:7c:29:0c:26:94:c8:42:9d:
64:45:40:90:02:5e:ca:99:13:c9:45:ad:b4:57:84:
8b:ad:d7:a4:f4:64:34:c3:ef:3f:c6:4d:3d:72:38:
58:bd:0d:fa:78:d0:a9:d2:18:2e:6e:5c:de:25:57:
5d:fd:c1:17:4e:c6:0f:71:c9:d1:f4:c8:52:f3:83:
db:18:ab:c4:f4:b5:56:dc:f6:b7:7a:bd:dc:19:7a:
5b:de:9f:4c:19:a7:19:b2:0a:9e:ba:51:dd:1c:70:
d4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:84:17:C4:2B:D5:98:04:D7:C5:3D:07:0A:2A:82:FF:4D:E1:89:87
X509v3 Authority Key Identifier:
keyid:11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/t4QXxCvVmATXxT0HCiqC_03hiYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.82.24.0/24
Signature Algorithm: sha256WithRSAEncryption
95:21:fa:a1:81:ad:8d:30:ff:92:1f:e4:fe:57:e1:32:d4:1e:
77:ce:4d:13:e3:15:d6:18:ae:93:75:a5:d2:ca:09:53:b2:fb:
7e:62:04:3c:c6:ea:16:da:9c:81:44:f8:ec:0f:67:49:4a:42:
c6:a1:76:c4:b1:84:0f:2f:e1:a6:da:b6:19:97:81:9e:07:36:
02:0f:d8:45:6e:b5:ec:e5:17:b5:f8:6a:e9:53:2a:31:13:53:
b1:a4:f0:b9:52:1b:bf:bd:b8:6b:e9:36:b6:59:ce:a3:1e:fb:
51:df:9b:cb:86:68:5b:fe:d2:84:85:55:e2:07:c5:16:18:06:
09:64:74:f2:6e:c8:2e:80:f4:50:44:f2:00:b2:67:e5:d0:5f:
5e:ab:29:22:66:79:18:3c:27:93:10:e2:eb:93:6c:bb:f6:f0:
14:6f:17:2c:07:db:71:03:3e:0c:8a:53:50:12:fd:3c:b5:bc:
d8:3b:44:ea:9a:0b:42:95:58:11:bb:3c:1f:a4:2c:78:3d:33:
83:0c:15:d4:a4:24:bb:70:39:4e:ee:a7:34:68:df:54:5f:67:
a5:b1:3b:ed:fe:fd:29:40:71:95:ec:23:a5:97:64:89:cc:3d:
f4:14:67:76:fb:80:a2:d8:53:32:4a:6d:53:65:87:bb:15:0a:
2e:94:96:14
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt6yOOSCr+5u3FUKeLZfybTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExYmZhMjk2MWZhMGUwYjA3MDQxMjkzZGRjMGMzNjkzYTll
MGEyMzgwHhcNMjYwMTAxMTgxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNzg0MTdjNDJiZDU5ODA0ZDdjNTNkMDcwYTJhODJmZjRkZTE4OTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCEfkcoVqYlMDVv1qgLOxVNMQY3H
bLYFcsvnJclIu4KVFH8s04M0TIwIeBoykoYcBg+9gPO2XbZe0+GLySPRbM5d3d00
NH/yGagEXZfmL4P5gpfyaxzRnUVYehDJ6VEP3BFRwwYCgVKcBgqCRYnkYyQB4kME
WE/RWtS735ayhvQM1Jp4ttjSL1iWhWDUm4/4UDS1fu6yWKrqXNm9fCkMJpTIQp1k
RUCQAl7KmRPJRa20V4SLrdek9GQ0w+8/xk09cjhYvQ36eNCp0hgublzeJVdd/cEX
TsYPccnR9MhS84PbGKvE9LVW3Pa3er3cGXpb3p9MGacZsgqeulHdHHDUYQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLeEF8Qr1ZgE18U9Bwoqgv9N4YmHMB8GA1UdIwQY
MBaAFBG/opYfoOCwcEEpPdwMNpOp4KI4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWItaWxoLWc0TEJ3UVNrOTNBdzJrNm5nb2pnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8xNzMxNzMtODE5Zi00YmM5LTkyZDgt
Nzg3OTFjOTM1NmEzLzEvdDRRWHhDdlZtQVRYeFQwSENpcUNfMDNoaVljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8xNzMxNzMtODE5Zi00YmM5LTkyZDgtNzg3OTFjOTM1NmEz
LzEvRWItaWxoLWc0TEJ3UVNrOTNBdzJrNm5nb2pnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUFIYMA0G
CSqGSIb3DQEBCwUAA4IBAQCVIfqhga2NMP+SH+T+V+Ey1B53zk0T4xXWGK6TdaXS
yglTsvt+YgQ8xuoW2pyBRPjsD2dJSkLGoXbEsYQPL+Gm2rYZl4GeBzYCD9hFbrXs
5Re1+GrpUyoxE1OxpPC5Uhu/vbhr6Ta2Wc6jHvtR35vLhmhb/tKEhVXiB8UWGAYJ
ZHTybsgugPRQRPIAsmfl0F9eqykiZnkYPCeTEOLrk2y79vAUbxcsB9txAz4MilNQ
Ev08tbzYO0TqmgtClVgRuzwfpCx4PTODDBXUpCS7cDlO7qc0aN9UX2elsTvt/v0p
QHGV7COll2SJzD30FGd2+4Ci2FMySm1TZYe7FQoulJYU
-----END CERTIFICATE-----
Generated at Mon Jan 26 07:31:49 2026 by rpki-client