This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/80FOtkhZ1x_dBcZjy612b9CXC0M.roa File: 80FOtkhZ1x_dBcZjy612b9CXC0M.roa (raw, json) Hash identifier: fQ0bs++yImhWtbOnTiiPYzDzdQ9QlQeHfRm1DwdpO0w= Subject key identifier: F3:41:4E:B6:48:59:D7:1F:DD:05:C6:63:CB:AD:76:6F:D0:97:0B:43 Certificate issuer: /CN=7c2380d764a9611dfe2fbc0ce0cc40496ec1e83e Certificate serial: 019B7AC8B0A31949182F393399566781CC4C Authority key identifier: 7C:23:80:D7:64:A9:61:1D:FE:2F:BC:0C:E0:CC:40:49:6E:C1:E8:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fCOA12SpYR3-L7wM4MxASW7B6D4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/80FOtkhZ1x_dBcZjy612b9CXC0M.roa Signing time: Thu 01 Jan 2026 18:18:51 +0000 ROA not before: Thu 01 Jan 2026 18:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35478 IP address blocks: 185.26.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft rsync://rpki.ripe.net/repository/DEFAULT/fCOA12SpYR3-L7wM4MxASW7B6D4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:b0:a3:19:49:18:2f:39:33:99:56:67:81:cc:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c2380d764a9611dfe2fbc0ce0cc40496ec1e83e Validity Not Before: Jan 1 18:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f3414eb64859d71fdd05c663cbad766fd0970b43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a6:d6:e7:83:f8:f2:64:e8:d1:9c:4b:fc:d2: 78:ae:8b:2f:7e:9e:9d:54:b4:58:3e:8d:9a:82:d0: 29:be:fb:c1:8b:fc:bf:7a:0d:3c:56:66:74:d9:64: 51:c1:b6:bc:d2:eb:80:57:e6:38:ae:15:83:d2:2c: 7d:c3:7a:57:1e:67:ea:7d:59:91:d3:15:5b:3b:12: 83:ef:b4:48:5d:e1:12:cd:6b:a0:3e:49:80:b8:b1: 25:70:72:3c:9b:9a:0c:60:35:3c:23:b8:d5:f9:93: b7:25:ac:d3:f7:3b:20:65:54:07:86:ab:fa:84:04: 91:94:ec:8f:14:a2:16:96:30:f4:ec:19:90:5c:40: 9c:79:19:2c:9d:db:86:42:58:44:4e:3a:3b:49:99: bb:38:03:0a:e0:6e:35:12:ec:f0:f4:49:0e:03:aa: 3a:63:1d:28:fa:5d:e4:c4:c3:e0:3d:38:49:51:ab: 05:ec:87:43:0f:e6:e1:da:0b:74:f1:4e:f5:b8:3c: ee:fb:a3:a8:5e:f6:1c:8b:82:d8:c7:2b:e3:ec:bd: ee:0d:ae:98:1e:48:5b:41:1e:f6:bf:e9:19:78:25: 1c:53:0f:f4:07:43:ef:85:69:19:b2:f3:de:b3:da: 54:23:63:37:ea:29:a6:af:52:01:7c:cb:b3:27:bb: 26:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:41:4E:B6:48:59:D7:1F:DD:05:C6:63:CB:AD:76:6F:D0:97:0B:43 X509v3 Authority Key Identifier: keyid:7C:23:80:D7:64:A9:61:1D:FE:2F:BC:0C:E0:CC:40:49:6E:C1:E8:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fCOA12SpYR3-L7wM4MxASW7B6D4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/80FOtkhZ1x_dBcZjy612b9CXC0M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.26.223.0/24 Signature Algorithm: sha256WithRSAEncryption a9:b0:d8:d0:c9:e8:01:35:4d:00:59:aa:ed:4d:21:47:f8:73: da:7d:28:92:98:02:78:73:54:6e:d1:aa:06:29:65:5c:a1:e3: e9:fe:aa:df:29:22:44:59:ad:2a:a9:8c:41:e3:3c:8c:c7:43: 7c:dc:f7:92:d4:c8:6e:40:96:5a:cf:7d:e9:7c:56:d3:c0:94: 87:64:42:01:3b:28:a2:c5:17:2a:d7:64:a5:13:d7:8a:da:98: 3e:f8:91:98:12:ba:79:e2:df:25:0c:40:83:40:91:51:53:22: ef:e1:09:cb:cb:5c:76:67:a4:ec:dc:9f:80:5d:95:25:04:de: 46:58:6a:eb:17:6a:35:1a:13:68:58:12:a0:0a:bb:1f:c4:e8: 6b:ba:c8:79:08:0b:8d:4b:95:16:e8:fc:d4:31:b4:a7:ea:68: bb:7f:01:ba:25:22:62:62:fc:f6:69:e3:dd:ca:4b:4b:e7:37: 52:c9:39:49:c5:f1:ce:7e:03:67:2b:b4:a5:e3:47:28:8e:69: 87:ca:a9:52:c7:09:68:a1:97:09:1a:df:0d:61:e6:e0:7a:85: e6:cc:af:d4:70:7c:2e:15:94:12:cb:15:14:6c:c7:6d:f3:ab: 8f:97:b7:05:09:98:e1:91:42:91:9b:7b:a7:12:ab:6c:85:77: 5f:10:23:e8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yLCjGUkYLzkzmVZngcxMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjMjM4MGQ3NjRhOTYxMWRmZTJmYmMwY2UwY2M0MDQ5NmVj MWU4M2UwHhcNMjYwMTAxMTgxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzQxNGViNjQ4NTlkNzFmZGQwNWM2NjNjYmFkNzY2ZmQwOTcwYjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6bW54P48mTo0ZxL/NJ4rosvfp6d VLRYPo2agtApvvvBi/y/eg08VmZ02WRRwba80uuAV+Y4rhWD0ix9w3pXHmfqfVmR 0xVbOxKD77RIXeESzWugPkmAuLElcHI8m5oMYDU8I7jV+ZO3JazT9zsgZVQHhqv6 hASRlOyPFKIWljD07BmQXECceRksnduGQlhETjo7SZm7OAMK4G41Euzw9EkOA6o6 Yx0o+l3kxMPgPThJUasF7IdDD+bh2gt08U71uDzu+6OoXvYci4LYxyvj7L3uDa6Y HkhbQR72v+kZeCUcUw/0B0PvhWkZsvPes9pUI2M36immr1IBfMuzJ7smmwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPNBTrZIWdcf3QXGY8utdm/QlwtDMB8GA1UdIwQY MBaAFHwjgNdkqWEd/i+8DODMQEluweg+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkNPQTEyU3BZUjMtTDd3TTRNeEFTVzdCNkQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy84NWZhODQtNWQ5OS00YWE4LTg3NTMt NWQ4Y2E2MzY4MWFkLzEvODBGT3RraFoxeF9kQmNaank2MTJiOUNYQzBNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy84NWZhODQtNWQ5OS00YWE4LTg3NTMtNWQ4Y2E2MzY4MWFk LzEvZkNPQTEyU3BZUjMtTDd3TTRNeEFTVzdCNkQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRrfMA0G CSqGSIb3DQEBCwUAA4IBAQCpsNjQyegBNU0AWartTSFH+HPafSiSmAJ4c1Ru0aoG KWVcoePp/qrfKSJEWa0qqYxB4zyMx0N83PeS1MhuQJZaz33pfFbTwJSHZEIBOyii xRcq12SlE9eK2pg++JGYErp54t8lDECDQJFRUyLv4QnLy1x2Z6Ts3J+AXZUlBN5G WGrrF2o1GhNoWBKgCrsfxOhrush5CAuNS5UW6PzUMbSn6mi7fwG6JSJiYvz2aePd yktL5zdSyTlJxfHOfgNnK7Sl40cojmmHyqlSxwlooZcJGt8NYebgeoXmzK/UcHwu FZQSyxUUbMdt86uPl7cFCZjhkUKRm3unEqtshXdfECPo -----END CERTIFICATE-----Generated at Sun Jan 25 19:59:43 2026 by rpki-client