This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/rg80XbUJLJkTb5OEL1rZgHZ1y6U.roa File: rg80XbUJLJkTb5OEL1rZgHZ1y6U.roa (raw, json) Hash identifier: vhHXEQRDhmmcuNgaQBq7IXJimIzM9H1G1xvHCsunoqk= Subject key identifier: AE:0F:34:5D:B5:09:2C:99:13:6F:93:84:2F:5A:D9:80:76:75:CB:A5 Certificate issuer: /CN=29be02dea0a086e9880f564c86872bbc597cc672 Certificate serial: 019B797EA54117076C8951EB83F329408767 Authority key identifier: 29:BE:02:DE:A0:A0:86:E9:88:0F:56:4C:86:87:2B:BC:59:7C:C6:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/rg80XbUJLJkTb5OEL1rZgHZ1y6U.roa Signing time: Thu 01 Jan 2026 12:18:21 +0000 ROA not before: Thu 01 Jan 2026 12:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60392 IP address blocks: 139.45.212.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:a5:41:17:07:6c:89:51:eb:83:f3:29:40:87:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29be02dea0a086e9880f564c86872bbc597cc672 Validity Not Before: Jan 1 12:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ae0f345db5092c99136f93842f5ad9807675cba5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:bd:5d:55:a8:e0:31:80:48:7c:92:a2:4f:bf: 67:2e:8f:b1:38:a1:3c:42:e3:e0:b1:34:e9:46:c9: 6a:6f:aa:fd:68:cb:41:b0:5f:62:b6:a1:3b:ac:1c: 50:b0:c1:67:e5:6e:c4:8d:5e:c8:97:c6:d3:12:2b: bb:b5:86:17:d5:89:e1:55:57:0a:7e:5f:9c:8a:1b: 18:fb:01:75:6e:da:55:c0:1a:52:0b:66:6b:0e:eb: 86:eb:69:bb:e0:82:ab:15:08:ae:d6:4d:3f:d3:6b: db:25:ce:fb:53:9b:da:58:ec:d4:14:43:5c:5c:60: a7:29:df:5e:6b:5f:fd:f6:c0:b9:e9:db:66:6b:8c: 09:24:4f:22:db:1b:bc:b8:08:00:77:9e:75:57:1c: e8:af:c2:b9:cb:86:c6:16:a8:a3:01:09:12:95:1d: 01:97:ee:90:2c:df:d8:d6:58:04:cc:07:70:74:05: a3:1b:9c:cc:71:c7:3f:9b:d7:75:77:0a:f2:bb:90: 80:80:f1:1b:16:50:68:eb:99:b5:76:4b:2c:c6:ed: 89:18:c1:3d:d2:fe:f4:ec:3d:4a:15:fa:3b:a0:63: 61:08:34:61:78:14:d7:7b:b8:1e:81:8f:e6:6c:42: b4:8e:3d:44:e6:4c:26:db:ed:04:95:ae:5a:93:97: 31:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:0F:34:5D:B5:09:2C:99:13:6F:93:84:2F:5A:D9:80:76:75:CB:A5 X509v3 Authority Key Identifier: keyid:29:BE:02:DE:A0:A0:86:E9:88:0F:56:4C:86:87:2B:BC:59:7C:C6:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/rg80XbUJLJkTb5OEL1rZgHZ1y6U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.45.212.0/23 Signature Algorithm: sha256WithRSAEncryption 51:c9:6d:1b:16:1a:f7:0f:ea:4e:28:67:8a:db:d9:51:db:d5: 27:fd:c4:a8:17:3a:c1:7f:da:97:5d:68:61:78:5b:e0:7b:fe: 93:be:77:7f:9a:80:f1:8c:5f:c8:3a:a7:69:d5:a9:8e:5a:b7: 3e:36:53:48:1f:4f:2e:d7:ad:75:10:67:a7:cd:37:84:98:e9: f6:a3:ef:a2:a0:b1:62:63:d3:00:b1:dd:8c:0b:88:d8:fb:e9: e2:fd:79:2d:f6:83:a6:27:53:9e:21:2a:2b:07:e0:34:d7:88: d9:34:a4:e2:18:35:f4:79:b4:50:a6:2b:2d:2d:07:20:37:57: 41:ec:e5:9e:53:bb:82:f5:17:cf:fd:8b:19:b8:53:eb:38:de: 87:04:a1:36:76:39:a5:4c:ad:34:ec:17:62:d8:a1:48:15:91: 28:2a:5d:60:fc:e6:af:a6:5b:46:d1:fa:14:14:01:bc:57:a5: 0a:19:88:84:ef:8f:64:6e:8a:16:11:0d:21:64:21:3c:64:77: 96:bd:72:ad:ad:20:cc:c2:37:31:ee:fa:38:38:39:65:33:bd: 6c:7a:86:9f:10:d4:83:f1:50:87:f6:bd:ee:83:b2:27:ef:1d: 2a:6c:fe:11:8b:7b:a1:60:be:bf:13:19:6f:b6:c8:0a:53:c1: 2d:18:a8:09 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fqVBFwdsiVHrg/MpQIdnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5YmUwMmRlYTBhMDg2ZTk4ODBmNTY0Yzg2ODcyYmJjNTk3 Y2M2NzIwHhcNMjYwMTAxMTIxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZTBmMzQ1ZGI1MDkyYzk5MTM2ZjkzODQyZjVhZDk4MDc2NzVjYmE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA171dVajgMYBIfJKiT79nLo+xOKE8 QuPgsTTpRslqb6r9aMtBsF9itqE7rBxQsMFn5W7EjV7Il8bTEiu7tYYX1YnhVVcK fl+cihsY+wF1btpVwBpSC2ZrDuuG62m74IKrFQiu1k0/02vbJc77U5vaWOzUFENc XGCnKd9ea1/99sC56dtma4wJJE8i2xu8uAgAd551Vxzor8K5y4bGFqijAQkSlR0B l+6QLN/Y1lgEzAdwdAWjG5zMccc/m9d1dwryu5CAgPEbFlBo65m1dkssxu2JGME9 0v707D1KFfo7oGNhCDRheBTXe7gegY/mbEK0jj1E5kwm2+0Ela5ak5cxGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK4PNF21CSyZE2+ThC9a2YB2dculMB8GA1UdIwQY MBaAFCm+At6goIbpiA9WTIaHK7xZfMZyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2I0QzNxQ2dodW1JRDFaTWhvY3J2Rmw4eG5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9lYTFjZmYtYWU4Zi00NzE5LTg5YjMt MDAzYTE1NjhiZjNmLzEvcmc4MFhiVUpMSmtUYjVPRUwxclpnSFoxeTZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9lYTFjZmYtYWU4Zi00NzE5LTg5YjMtMDAzYTE1NjhiZjNm LzEvS2I0QzNxQ2dodW1JRDFaTWhvY3J2Rmw4eG5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiy3UMA0G CSqGSIb3DQEBCwUAA4IBAQBRyW0bFhr3D+pOKGeK29lR29Un/cSoFzrBf9qXXWhh eFvge/6Tvnd/moDxjF/IOqdp1amOWrc+NlNIH08u1611EGenzTeEmOn2o++ioLFi Y9MAsd2MC4jY++ni/Xkt9oOmJ1OeISorB+A014jZNKTiGDX0ebRQpistLQcgN1dB 7OWeU7uC9RfP/YsZuFPrON6HBKE2djmlTK007Bdi2KFIFZEoKl1g/OavpltG0foU FAG8V6UKGYiE749kbooWEQ0hZCE8ZHeWvXKtrSDMwjcx7vo4ODllM71seoafENSD 8VCH9r3ug7In7x0qbP4Ri3uhYL6/ExlvtsgKU8EtGKgJ -----END CERTIFICATE-----Generated at Sun Jan 25 20:30:04 2026 by rpki-client