This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/oq7B2jOnBFc5xmS1hAmRi3Iizs8.roa File: oq7B2jOnBFc5xmS1hAmRi3Iizs8.roa (raw, json) Hash identifier: cJWrmd7TH+I8F5geYRcuRFFIpG0qtCHY7V96oxqqLg4= Subject key identifier: A2:AE:C1:DA:33:A7:04:57:39:C6:64:B5:84:09:91:8B:72:22:CE:CF Certificate issuer: /CN=05f08b74f5117ed380723d9e429ecb4aa538525a Certificate serial: 019B797EE60F35F83B42B2CF96ECF46DD717 Authority key identifier: 05:F0:8B:74:F5:11:7E:D3:80:72:3D:9E:42:9E:CB:4A:A5:38:52:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfCLdPURftOAcj2eQp7LSqU4Ulo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/oq7B2jOnBFc5xmS1hAmRi3Iizs8.roa Signing time: Thu 01 Jan 2026 12:18:38 +0000 ROA not before: Thu 01 Jan 2026 12:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35197 IP address blocks: 80.83.16.0/20 maxlen: 20 80.83.16.0/22 maxlen: 22 80.83.16.0/24 maxlen: 24 80.83.17.0/24 maxlen: 24 80.83.18.0/24 maxlen: 24 80.83.19.0/24 maxlen: 24 80.83.20.0/22 maxlen: 22 80.83.20.0/24 maxlen: 24 80.83.21.0/24 maxlen: 24 80.83.22.0/24 maxlen: 24 80.83.23.0/24 maxlen: 24 80.83.24.0/24 maxlen: 24 80.83.25.0/24 maxlen: 24 80.83.26.0/24 maxlen: 24 80.83.27.0/24 maxlen: 24 80.83.28.0/24 maxlen: 24 80.83.29.0/24 maxlen: 24 80.83.30.0/24 maxlen: 24 80.83.31.0/24 maxlen: 24 109.110.98.0/24 maxlen: 24 109.110.99.0/24 maxlen: 24 109.110.100.0/24 maxlen: 24 109.110.101.0/24 maxlen: 24 109.110.102.0/24 maxlen: 24 109.110.103.0/24 maxlen: 24 109.110.104.0/24 maxlen: 24 109.110.105.0/24 maxlen: 24 109.110.106.0/24 maxlen: 24 2a0d:6340::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.crl rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft rsync://rpki.ripe.net/repository/DEFAULT/BfCLdPURftOAcj2eQp7LSqU4Ulo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:e6:0f:35:f8:3b:42:b2:cf:96:ec:f4:6d:d7:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05f08b74f5117ed380723d9e429ecb4aa538525a Validity Not Before: Jan 1 12:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a2aec1da33a7045739c664b58409918b7222cecf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:dd:a5:eb:4a:d2:e8:99:c4:3f:56:f5:fc:52: 40:1f:8a:e9:d4:70:3f:ad:55:df:be:a2:ba:d6:72: f5:1d:b3:0f:ae:7a:b3:3d:87:5f:1d:b8:0c:0f:62: 93:32:fc:e8:9d:89:18:89:f3:58:4f:a1:d3:87:63: 90:89:5b:35:ab:6c:52:bc:a3:21:39:0a:6c:af:79: 3c:7a:1f:65:e4:55:6d:e3:c0:71:4c:27:0c:93:d4: 01:c1:b1:19:b7:34:77:de:dd:15:02:1b:0c:6e:bd: 9a:ba:5e:0a:59:f0:76:7f:0b:d4:16:ca:4f:e1:ba: 0e:e2:cf:db:d5:98:b3:4f:45:99:30:31:ae:ca:cf: e6:73:ab:15:82:8e:5a:7e:0a:b6:94:15:fc:1a:2f: bc:b1:51:73:35:48:1d:8b:24:21:ad:cc:72:b6:b2: 3f:6e:a0:ed:df:38:e7:b0:ca:09:4e:0d:b2:7a:39: 76:00:d9:79:8a:27:6d:f5:4c:f4:64:74:a6:c9:52: 86:e3:96:8b:11:07:bf:55:68:d2:1c:bd:07:54:96: c4:20:10:99:ea:a4:3e:30:ba:fc:8e:4a:47:43:e2: f0:d0:77:6f:09:a9:26:bb:d4:30:88:c1:30:9d:39: e6:00:6d:fe:a8:4b:ab:0d:59:7c:e5:32:67:d6:9f: 7a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:AE:C1:DA:33:A7:04:57:39:C6:64:B5:84:09:91:8B:72:22:CE:CF X509v3 Authority Key Identifier: keyid:05:F0:8B:74:F5:11:7E:D3:80:72:3D:9E:42:9E:CB:4A:A5:38:52:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfCLdPURftOAcj2eQp7LSqU4Ulo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/oq7B2jOnBFc5xmS1hAmRi3Iizs8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.83.16.0/20 109.110.98.0-109.110.106.255 IPv6: 2a0d:6340::/29 Signature Algorithm: sha256WithRSAEncryption 5e:db:d3:65:84:da:f4:af:6b:3e:ec:66:37:8d:54:e7:c4:19: 45:8e:59:07:a6:59:42:d2:af:a3:aa:45:7e:f7:fd:06:38:06: 71:e7:67:6b:d8:c6:e9:fc:52:96:e1:5b:1d:bf:0a:4d:17:c7: 4f:43:e4:12:a8:68:99:ea:37:1b:28:fe:1c:fd:2d:1a:3b:f1: 5f:c1:9f:bb:26:4b:96:09:0c:73:d1:26:d7:fa:05:d3:a9:f4: 9d:33:6d:cb:05:b5:43:6d:98:06:b9:5a:af:bc:55:94:55:b8: c9:97:7b:a7:74:27:05:5f:6f:8c:72:48:5c:f8:c4:18:32:34: 1f:d3:1d:90:00:0a:af:69:85:8d:69:e2:50:e8:ff:31:1c:8a: 44:f1:95:c1:44:a7:4a:5b:08:02:83:70:0d:3c:7a:06:df:c0: 36:9d:b9:db:2d:01:99:60:ff:e5:8e:e4:77:3a:3e:08:fb:45: e7:01:a6:8d:4c:5f:60:fd:76:43:a7:9d:5d:52:ce:2b:bf:79: 07:5e:42:c2:37:9b:ce:66:2d:bd:de:05:66:ed:ca:d4:fe:74: 8c:ca:ce:4e:86:9f:76:28:fd:dd:d8:a3:bd:a7:fb:7b:39:a2: d9:10:61:0b:60:9b:eb:1a:20:02:a3:c9:7f:44:19:09:1f:70: da:ec:b6:d2 -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt5fuYPNfg7QrLPluz0bdcXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZjA4Yjc0ZjUxMTdlZDM4MDcyM2Q5ZTQyOWVjYjRhYTUz ODUyNWEwHhcNMjYwMTAxMTIxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMmFlYzFkYTMzYTcwNDU3MzljNjY0YjU4NDA5OTE4YjcyMjJjZWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6N2l60rS6JnEP1b1/FJAH4rp1HA/ rVXfvqK61nL1HbMPrnqzPYdfHbgMD2KTMvzonYkYifNYT6HTh2OQiVs1q2xSvKMh OQpsr3k8eh9l5FVt48BxTCcMk9QBwbEZtzR33t0VAhsMbr2aul4KWfB2fwvUFspP 4boO4s/b1ZizT0WZMDGuys/mc6sVgo5afgq2lBX8Gi+8sVFzNUgdiyQhrcxytrI/ bqDt3zjnsMoJTg2yejl2ANl5iidt9Uz0ZHSmyVKG45aLEQe/VWjSHL0HVJbEIBCZ 6qQ+MLr8jkpHQ+Lw0HdvCakmu9QwiMEwnTnmAG3+qEurDVl85TJn1p96NwIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFKKuwdozpwRXOcZktYQJkYtyIs7PMB8GA1UdIwQY MBaAFAXwi3T1EX7TgHI9nkKey0qlOFJaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmZDTGRQVVJmdE9BY2oyZVFwN0xTcVU0VWxvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8xODg2ZDgtZDg3NC00YzI0LTkyYjkt ZDQxYWM4MWQxY2M0LzEvb3E3QjJqT25CRmM1eG1TMWhBbVJpM0lpenM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi8xODg2ZDgtZDg3NC00YzI0LTkyYjktZDQxYWM4MWQxY2M0 LzEvQmZDTGRQVVJmdE9BY2oyZVFwN0xTcVU0VWxvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUAwQEUFMQMAwD BAFtbmIDBABtbmowDQQCAAIwBwMFAyoNY0AwDQYJKoZIhvcNAQELBQADggEBAF7b 02WE2vSvaz7sZjeNVOfEGUWOWQemWULSr6OqRX73/QY4BnHnZ2vYxun8UpbhWx2/ Ck0Xx09D5BKoaJnqNxso/hz9LRo78V/Bn7smS5YJDHPRJtf6BdOp9J0zbcsFtUNt mAa5Wq+8VZRVuMmXe6d0JwVfb4xySFz4xBgyNB/THZAACq9phY1p4lDo/zEcikTx lcFEp0pbCAKDcA08egbfwDadudstAZlg/+WO5Hc6Pgj7RecBpo1MX2D9dkOnnV1S ziu/eQdeQsI3m85mLb3eBWbtytT+dIzKzk6Gn3Yo/d3Yo72n+3s5otkQYQtgm+sa IAKjyX9EGQkfcNrsttI= -----END CERTIFICATE-----Generated at Sun Jan 25 16:55:08 2026 by rpki-client