This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/_2Ua11sWzPO5DBlFQv8tb1tAVlA.roa File: _2Ua11sWzPO5DBlFQv8tb1tAVlA.roa (raw, json) Hash identifier: LUsDXZFiK9FtK6EnFC70rYFOjc6L5qWymh1S/jDGElE= Subject key identifier: FF:65:1A:D7:5B:16:CC:F3:B9:0C:19:45:42:FF:2D:6F:5B:40:56:50 Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb Certificate serial: 019B76EB8E9952A76ABB7BDC86C1E12008EA Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/_2Ua11sWzPO5DBlFQv8tb1tAVlA.roa Signing time: Thu 01 Jan 2026 00:18:27 +0000 ROA not before: Thu 01 Jan 2026 00:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201073 IP address blocks: 82.80.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:8e:99:52:a7:6a:bb:7b:dc:86:c1:e1:20:08:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb Validity Not Before: Jan 1 00:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ff651ad75b16ccf3b90c194542ff2d6f5b405650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:38:7f:19:b6:75:49:9f:36:7d:b5:1d:de:fb: af:94:57:6a:1c:1f:30:bd:4b:53:b6:6c:84:95:4a: 15:2d:f3:b9:37:58:a3:97:04:54:ff:71:82:51:44: 89:e3:65:72:92:04:59:ad:60:bc:b2:2a:0b:a0:d1: 55:48:3d:b4:58:56:7e:17:4c:78:59:a2:5f:01:9a: b8:94:ef:7c:01:85:51:58:29:38:38:21:86:d6:30: a1:6d:f3:fa:f7:27:45:8f:7d:41:17:20:99:0f:69: 7b:58:53:1c:ab:61:38:e6:f3:88:04:1d:62:be:2d: 66:38:28:a5:d1:ee:5e:b4:f0:d6:5b:02:90:76:c8: 22:af:d1:24:1c:a3:3f:44:93:22:86:fb:d0:b4:b7: ad:16:c9:cf:35:7d:2f:52:88:6e:8f:a0:6f:7c:c8: 54:40:86:6d:a0:68:3c:ed:d6:bc:4d:90:a7:aa:7c: 48:13:1f:bc:3c:ad:4f:1d:a5:0b:4a:45:21:5d:de: d6:5b:ca:ec:c3:01:7a:a8:7b:2e:d0:fb:b6:65:a1: 2a:df:e7:6b:24:fb:c4:f5:b1:1f:2a:f9:9d:f1:ea: 47:b3:ce:1b:53:c6:1a:23:c2:6d:1c:31:b2:77:cf: 2f:8a:09:e9:aa:07:cd:47:74:d1:23:2b:c4:40:be: e3:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:65:1A:D7:5B:16:CC:F3:B9:0C:19:45:42:FF:2D:6F:5B:40:56:50 X509v3 Authority Key Identifier: keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/_2Ua11sWzPO5DBlFQv8tb1tAVlA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.80.13.0/24 Signature Algorithm: sha256WithRSAEncryption 35:4c:63:94:a6:11:dd:55:9c:54:a4:55:35:e9:c1:0c:b9:56: 4a:c4:bc:15:0c:a0:cf:49:2b:2c:01:9c:40:d0:31:5b:d4:d5: 69:15:70:b5:38:38:3c:dd:6b:dd:ad:8d:50:2c:c9:d4:6b:e1: ef:06:c3:68:7a:f4:7f:79:1d:56:12:54:a3:e1:cf:2f:6f:0b: 68:8e:d2:75:48:23:d4:9c:4d:f5:30:b1:51:07:d5:eb:2e:28: 0b:31:a0:83:32:ce:8b:2d:9f:99:52:0b:a5:08:3d:db:31:86: 32:2e:9e:44:45:f9:b9:b5:62:ad:ff:b0:52:b1:bc:06:2a:df: 88:da:f9:6c:c5:d1:c3:11:95:7a:03:f1:88:c8:ae:21:d9:f9: 0a:63:00:d0:72:74:6d:73:ed:8c:fb:74:b3:da:21:d2:d5:52: a9:53:9a:f1:f3:46:5b:a9:1c:77:3c:ce:92:08:26:00:7a:19: a3:cf:49:d1:0c:b6:1d:d3:22:d1:88:66:49:21:f9:6e:20:a5: 27:cc:43:d4:62:5f:bd:6d:15:3f:1f:1c:cf:72:a0:5c:58:bb: d1:23:e8:6f:df:53:55:f1:c2:bb:04:bc:20:36:42:ad:b3:8d: d8:24:22:f5:ca:82:e9:b6:b2:1d:45:60:21:46:72:07:14:49: 1f:28:e1:84 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt2646ZUqdqu3vchsHhIAjqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZWRkODVjMWVjY2I1ZmY0YmE5MzAxMTdhNzMyOTA5OWMw ZmYyZWIwHhcNMjYwMTAxMDAxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjY1MWFkNzViMTZjY2YzYjkwYzE5NDU0MmZmMmQ2ZjViNDA1NjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTh/GbZ1SZ82fbUd3vuvlFdqHB8w vUtTtmyElUoVLfO5N1ijlwRU/3GCUUSJ42VykgRZrWC8sioLoNFVSD20WFZ+F0x4 WaJfAZq4lO98AYVRWCk4OCGG1jChbfP69ydFj31BFyCZD2l7WFMcq2E45vOIBB1i vi1mOCil0e5etPDWWwKQdsgir9EkHKM/RJMihvvQtLetFsnPNX0vUohuj6BvfMhU QIZtoGg87da8TZCnqnxIEx+8PK1PHaULSkUhXd7WW8rswwF6qHsu0Pu2ZaEq3+dr JPvE9bEfKvmd8epHs84bU8YaI8JtHDGyd88vignpqgfNR3TRIyvEQL7jUwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP9lGtdbFszzuQwZRUL/LW9bQFZQMB8GA1UdIwQY MBaAFD/t2FwezLX/S6kwEXpzKQmcD/LrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQt ZTJiNTI3NzI4ZTk2LzEvXzJVYTExc1d6UE81REJsRlF2OHRiMXRBVmxBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQtZTJiNTI3NzI4ZTk2 LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUlANMA0G CSqGSIb3DQEBCwUAA4IBAQA1TGOUphHdVZxUpFU16cEMuVZKxLwVDKDPSSssAZxA 0DFb1NVpFXC1ODg83WvdrY1QLMnUa+HvBsNoevR/eR1WElSj4c8vbwtojtJ1SCPU nE31MLFRB9XrLigLMaCDMs6LLZ+ZUgulCD3bMYYyLp5ERfm5tWKt/7BSsbwGKt+I 2vlsxdHDEZV6A/GIyK4h2fkKYwDQcnRtc+2M+3Sz2iHS1VKpU5rx80ZbqRx3PM6S CCYAehmjz0nRDLYd0yLRiGZJIfluIKUnzEPUYl+9bRU/HxzPcqBcWLvRI+hv31NV 8cK7BLwgNkKts43YJCL1yoLptrIdRWAhRnIHFEkfKOGE -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:56 2026 by rpki-client