This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/SprpMmzkPsxt00vdDJYhOqLnJzE.roa File: SprpMmzkPsxt00vdDJYhOqLnJzE.roa (raw, json) Hash identifier: Li4MY9HGqjTJUHnXsec/HTc2IoBGMD6duRWMuKpeAgc= Subject key identifier: 4A:9A:E9:32:6C:E4:3E:CC:6D:D3:4B:DD:0C:96:21:3A:A2:E7:27:31 Certificate issuer: /CN=bd4e6edd26ef1b16d848e98130e6fc4450b32752 Certificate serial: 019B7AC7D67FD4E325B7B985A64BCF0E173C Authority key identifier: BD:4E:6E:DD:26:EF:1B:16:D8:48:E9:81:30:E6:FC:44:50:B3:27:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/SprpMmzkPsxt00vdDJYhOqLnJzE.roa Signing time: Thu 01 Jan 2026 18:17:55 +0000 ROA not before: Thu 01 Jan 2026 18:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35074 IP address blocks: 80.89.176.0/24 maxlen: 24 80.89.177.0/24 maxlen: 24 80.89.178.0/24 maxlen: 24 80.89.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.crl rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.mft rsync://rpki.ripe.net/repository/DEFAULT/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:d6:7f:d4:e3:25:b7:b9:85:a6:4b:cf:0e:17:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd4e6edd26ef1b16d848e98130e6fc4450b32752 Validity Not Before: Jan 1 18:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4a9ae9326ce43ecc6dd34bdd0c96213aa2e72731 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:3b:8a:4d:e9:7b:b5:de:58:8d:e8:fb:d4:3c: 60:e2:f0:63:10:83:20:2c:c1:c6:3d:90:a7:86:3c: db:f3:93:af:2e:92:12:5c:28:d1:c5:ca:ce:1a:de: c7:6c:d8:dd:d2:33:0a:3a:fc:a2:4f:5a:51:88:41: 85:4e:d6:ab:1e:18:d5:b2:cc:e6:d4:fb:2e:b6:3c: f0:4f:7b:e0:74:70:f6:d3:9b:cc:32:a0:08:41:83: 04:e8:61:8f:80:b7:a3:e7:84:2f:2d:ac:1f:d2:12: 1d:9c:75:b6:d6:73:de:41:e2:dc:c2:05:70:19:be: 3c:24:e3:b4:45:39:77:3f:91:41:eb:6b:16:a9:bf: 8f:41:ff:c9:0c:cd:95:bd:08:b1:d3:5c:97:87:db: 3c:d5:5e:81:d5:06:39:e3:dc:32:dd:e7:01:c9:e1: 2c:05:84:7f:f2:dc:44:ac:40:00:12:4a:20:fd:2a: 6c:bb:d6:78:58:87:f0:1f:c2:8a:77:f4:24:f2:98: 50:88:7b:ed:e0:73:b8:c9:b7:06:f6:40:4a:5e:04: 5a:5f:5e:71:55:76:74:96:35:e7:6e:bf:d2:ed:c7: c8:e8:0c:aa:14:b3:9f:87:50:c3:bc:6b:b2:4f:55: e2:f2:8b:8a:bc:e3:e9:10:b1:ba:d5:bb:51:d7:60: 65:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:9A:E9:32:6C:E4:3E:CC:6D:D3:4B:DD:0C:96:21:3A:A2:E7:27:31 X509v3 Authority Key Identifier: keyid:BD:4E:6E:DD:26:EF:1B:16:D8:48:E9:81:30:E6:FC:44:50:B3:27:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/SprpMmzkPsxt00vdDJYhOqLnJzE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.89.176.0/22 Signature Algorithm: sha256WithRSAEncryption 89:4c:c5:f2:b4:13:05:d2:98:eb:58:84:7f:24:b0:19:eb:65: d4:4d:6f:d0:ee:51:79:94:34:8c:63:1c:88:b6:4b:0b:50:1a: a4:e9:7e:ef:a1:c2:c5:43:83:e3:27:0c:22:9e:46:d4:80:c5: 12:8a:97:50:c8:23:bd:81:7f:38:e3:09:82:91:6d:6c:ff:22: dc:3a:96:b0:f4:23:89:89:68:c4:4c:98:52:4a:41:3e:b5:0e: 5f:10:1e:d6:4a:dd:6d:10:20:95:30:7f:73:76:b3:4a:0c:8c: 00:e1:fe:e3:79:e2:bf:89:11:80:dd:c4:b0:2d:19:5c:e5:db: 3d:7d:9a:ff:75:65:3a:7f:f2:ae:53:d3:b7:5f:b3:74:b2:78: c1:9e:36:4a:d5:e2:0a:1c:45:11:33:27:36:f0:f1:c6:29:e2: f7:d6:8b:7d:60:34:b5:0a:b6:94:09:23:57:4e:72:08:65:c9: c9:50:7f:96:87:96:f2:37:c3:eb:a6:8f:0c:8b:db:68:99:43: d0:32:58:5d:ad:4f:6f:54:21:ac:cf:d5:e4:9e:6f:40:1a:03: c2:8e:14:6d:ee:b9:3c:4d:68:73:54:5f:78:20:08:69:b9:86: 58:9c:30:70:33:64:7a:d9:db:20:74:98:d9:1c:62:e6:0c:77: 11:11:b2:ae -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x9Z/1OMlt7mFpkvPDhc8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkNGU2ZWRkMjZlZjFiMTZkODQ4ZTk4MTMwZTZmYzQ0NTBi MzI3NTIwHhcNMjYwMTAxMTgxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YTlhZTkzMjZjZTQzZWNjNmRkMzRiZGQwYzk2MjEzYWEyZTcyNzMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTuKTel7td5Yjej71Dxg4vBjEIMg LMHGPZCnhjzb85OvLpISXCjRxcrOGt7HbNjd0jMKOvyiT1pRiEGFTtarHhjVsszm 1PsutjzwT3vgdHD205vMMqAIQYME6GGPgLej54QvLawf0hIdnHW21nPeQeLcwgVw Gb48JOO0RTl3P5FB62sWqb+PQf/JDM2VvQix01yXh9s81V6B1QY549wy3ecByeEs BYR/8txErEAAEkog/Spsu9Z4WIfwH8KKd/Qk8phQiHvt4HO4ybcG9kBKXgRaX15x VXZ0ljXnbr/S7cfI6AyqFLOfh1DDvGuyT1Xi8ouKvOPpELG61btR12BlbQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEqa6TJs5D7MbdNL3QyWITqi5ycxMB8GA1UdIwQY MBaAFL1Obt0m7xsW2EjpgTDm/ERQsydSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlU1dTNTYnZHeGJZU09tQk1PYjhSRkN6SjFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9hY2UzNzMtYjgxYi00MDBjLTg0NWMt OTYyOGY1MjY2NTQyLzEvU3BycE1temtQc3h0MDB2ZERKWWhPcUxuSnpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy9hY2UzNzMtYjgxYi00MDBjLTg0NWMtOTYyOGY1MjY2NTQy LzEvdlU1dTNTYnZHeGJZU09tQk1PYjhSRkN6SjFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCUFmwMA0G CSqGSIb3DQEBCwUAA4IBAQCJTMXytBMF0pjrWIR/JLAZ62XUTW/Q7lF5lDSMYxyI tksLUBqk6X7vocLFQ4PjJwwinkbUgMUSipdQyCO9gX844wmCkW1s/yLcOpaw9COJ iWjETJhSSkE+tQ5fEB7WSt1tECCVMH9zdrNKDIwA4f7jeeK/iRGA3cSwLRlc5ds9 fZr/dWU6f/KuU9O3X7N0snjBnjZK1eIKHEURMyc28PHGKeL31ot9YDS1CraUCSNX TnIIZcnJUH+Wh5byN8Prpo8Mi9tomUPQMlhdrU9vVCGsz9Xknm9AGgPCjhRt7rk8 TWhzVF94IAhpuYZYnDBwM2R62dsgdJjZHGLmDHcREbKu -----END CERTIFICATE-----Generated at Mon Jan 26 06:33:03 2026 by rpki-client