This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/9zJS2sLQdMyIEXItDHnz9vENCZc.roa File: 9zJS2sLQdMyIEXItDHnz9vENCZc.roa (raw, json) Hash identifier: smANRs03fyEMELSZXfc50FOww78+6TO01q3PcjqHhg0= Subject key identifier: F7:32:52:DA:C2:D0:74:CC:88:11:72:2D:0C:79:F3:F6:F1:0D:09:97 Certificate issuer: /CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea Certificate serial: 019B7C129ED9A2160779D09D21509020DC6F Authority key identifier: 72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/9zJS2sLQdMyIEXItDHnz9vENCZc.roa Signing time: Fri 02 Jan 2026 00:19:13 +0000 ROA not before: Fri 02 Jan 2026 00:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204059 IP address blocks: 80.67.181.0/24 maxlen: 24 80.67.191.0/24 maxlen: 24 2001:913:1000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:9e:d9:a2:16:07:79:d0:9d:21:50:90:20:dc:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea Validity Not Before: Jan 2 00:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f73252dac2d074cc8811722d0c79f3f6f10d0997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d0:8e:9b:c1:59:4c:0a:67:6c:3f:04:87:b2: 10:e2:99:ae:ba:18:3c:41:5c:97:93:b4:ff:b0:9d: b1:df:14:94:92:4b:75:68:40:a4:67:54:06:39:c0: 6b:86:1a:3b:fc:ea:48:30:e7:29:b0:d7:27:f1:9d: 85:d3:1d:1b:a7:41:84:0b:b2:1c:70:52:7e:40:c8: d1:74:8d:5e:fa:0c:87:14:3c:b1:e7:5e:6e:fb:92: 93:17:37:4e:ca:c7:99:8f:43:54:21:dd:3b:a8:d7: 26:5d:0c:37:83:d5:9c:55:e2:41:96:0f:9f:8e:8b: 3d:5d:f4:12:7b:63:99:37:10:3f:47:83:d6:3c:5b: da:89:db:49:08:1a:0f:e1:9e:68:37:d8:7f:93:94: 6e:4a:57:f4:bb:cd:33:9f:2b:65:38:0b:0f:52:65: b9:f6:d3:94:24:99:2c:b2:f3:92:62:33:94:f0:4b: a5:73:82:8b:74:9c:bc:3f:a3:ec:89:76:5a:50:6d: 71:64:2f:ce:79:6e:61:a0:42:f3:fe:58:b1:25:c6: e0:68:a1:9b:63:7f:3e:09:e9:b9:02:0f:bd:b6:31: 0a:79:4e:d3:d6:f2:c4:b8:4b:03:46:a0:99:b5:be: 41:6f:32:13:fc:c3:d6:2e:8b:b4:cc:51:0c:36:a5: f1:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:32:52:DA:C2:D0:74:CC:88:11:72:2D:0C:79:F3:F6:F1:0D:09:97 X509v3 Authority Key Identifier: keyid:72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/9zJS2sLQdMyIEXItDHnz9vENCZc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.67.181.0/24 80.67.191.0/24 IPv6: 2001:913:1000::/36 Signature Algorithm: sha256WithRSAEncryption 1c:dd:8d:d2:d7:37:a3:f3:a4:55:2d:0f:b8:5b:48:d1:f8:7d: 05:6f:70:2a:39:62:cb:07:0c:4c:98:40:fa:58:24:1a:db:e6: c1:e8:4e:93:4f:85:fc:c3:60:28:e1:41:37:5e:4b:9b:86:2b: 0c:35:77:b9:b8:80:0e:a2:d6:97:22:94:60:c3:3d:1d:9d:e1: 2a:30:71:d9:26:74:94:9d:e5:50:ba:c1:03:63:42:09:dc:a7: 8c:6b:96:e3:76:d2:a3:e8:33:ed:78:88:53:b1:ee:78:bb:3f: 53:b4:59:7f:b1:ba:53:c2:96:4b:c1:89:74:79:3a:b3:dc:07: c9:4b:21:89:c8:2c:a0:aa:e9:bd:77:b9:f3:fc:14:35:eb:d2: cd:0f:be:df:7a:ce:93:7c:f4:67:5f:b3:e3:ae:ca:ae:6a:7d: 4d:28:0b:80:66:95:6a:75:b3:cb:8e:1a:b3:fb:89:47:82:c7: d7:67:63:39:00:ca:70:95:65:17:31:a9:de:33:50:d7:47:36: 45:5c:94:1c:45:93:93:fb:7f:82:a5:63:33:97:58:f5:fd:34: 63:75:72:c4:a8:8a:c5:16:50:5c:85:cf:4e:7a:1d:fc:7c:df: 2a:4e:b3:22:2d:d9:cc:81:ea:aa:2e:92:1a:7c:b9:8f:c9:1f: 63:99:33:de -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt8Ep7ZohYHedCdIVCQINxvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyZWQyZmJiNzIxM2ZiZjMyYWQ0YzA4N2Y4YjBiMjJjZWNl ZjRmZWEwHhcNMjYwMTAyMDAxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNzMyNTJkYWMyZDA3NGNjODgxMTcyMmQwYzc5ZjNmNmYxMGQwOTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9COm8FZTApnbD8Eh7IQ4pmuuhg8 QVyXk7T/sJ2x3xSUkkt1aECkZ1QGOcBrhho7/OpIMOcpsNcn8Z2F0x0bp0GEC7Ic cFJ+QMjRdI1e+gyHFDyx515u+5KTFzdOyseZj0NUId07qNcmXQw3g9WcVeJBlg+f jos9XfQSe2OZNxA/R4PWPFvaidtJCBoP4Z5oN9h/k5RuSlf0u80znytlOAsPUmW5 9tOUJJkssvOSYjOU8Eulc4KLdJy8P6PsiXZaUG1xZC/OeW5hoELz/lixJcbgaKGb Y38+Cem5Ag+9tjEKeU7T1vLEuEsDRqCZtb5BbzIT/MPWLou0zFEMNqXx6QIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFPcyUtrC0HTMiBFyLQx58/bxDQmXMB8GA1UdIwQY MBaAFHLtL7tyE/vzKtTAh/iwsizs70/qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3UwdnUzSVQtX01xMU1DSC1MQ3lMT3p2VC1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9lNWE4OTItMjNmNS00OWZhLWI2YTkt YTY1MjMzYjNlOTc1LzEvOXpKUzJzTFFkTXlJRVhJdERIbno5dkVOQ1pjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9lNWE4OTItMjNmNS00OWZhLWI2YTktYTY1MjMzYjNlOTc1 LzEvY3UwdnUzSVQtX01xMU1DSC1MQ3lMT3p2VC1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAUEO1AwQA UEO/MA4EAgACMAgDBgQgAQkTEDANBgkqhkiG9w0BAQsFAAOCAQEAHN2N0tc3o/Ok VS0PuFtI0fh9BW9wKjliywcMTJhA+lgkGtvmwehOk0+F/MNgKOFBN15Lm4YrDDV3 ubiADqLWlyKUYMM9HZ3hKjBx2SZ0lJ3lULrBA2NCCdynjGuW43bSo+gz7XiIU7Hu eLs/U7RZf7G6U8KWS8GJdHk6s9wHyUshicgsoKrpvXe58/wUNevSzQ++33rOk3z0 Z1+z467Krmp9TSgLgGaVanWzy44as/uJR4LH12djOQDKcJVlFzGp3jNQ10c2RVyU HEWTk/t/gqVjM5dY9f00Y3VyxKiKxRZQXIXPTnod/HzfKk6zIi3ZzIHqqi6SGny5 j8kfY5kz3g== -----END CERTIFICATE-----Generated at Mon Jan 26 10:23:13 2026 by rpki-client