This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/rymhiapxDDqAtyIh4qaTKoecFoo.roa File: rymhiapxDDqAtyIh4qaTKoecFoo.roa (raw, json) Hash identifier: p5Zj3OLwAVlNewRpZM1jlrm2hLhqyC5XI9HeIZ/YR4M= Subject key identifier: AF:29:A1:89:AA:71:0C:3A:80:B7:22:21:E2:A6:93:2A:87:9C:16:8A Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0 Certificate serial: 019B7C128372E7E0FB254271D2525EB023A4 Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/rymhiapxDDqAtyIh4qaTKoecFoo.roa Signing time: Fri 02 Jan 2026 00:19:06 +0000 ROA not before: Fri 02 Jan 2026 00:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35029 IP address blocks: 80.66.75.0/24 maxlen: 24 80.66.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:83:72:e7:e0:fb:25:42:71:d2:52:5e:b0:23:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0 Validity Not Before: Jan 2 00:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=af29a189aa710c3a80b72221e2a6932a879c168a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7f:2f:2f:f6:0c:e1:2e:6e:e8:34:0a:00:bc: ed:a9:e8:ab:f6:2d:e2:63:97:53:bf:d5:34:22:34: fa:59:b1:4c:8e:6c:1e:c0:da:45:99:b9:77:a2:21: e0:74:7f:96:06:83:1b:5a:34:0d:06:d4:3d:7b:9b: 41:c6:8a:55:1e:9e:cd:10:0e:bd:d0:82:75:b9:63: 37:ec:b1:f2:b7:4a:47:7b:de:83:fb:05:e8:63:4c: 24:72:1f:73:74:ef:76:17:04:a6:4c:7a:32:33:c3: 86:72:89:8d:e5:5e:d8:b1:b9:e3:6a:bc:22:1a:42: 8f:7c:e8:60:1c:75:cc:5f:50:18:be:57:ca:b0:f1: 14:88:39:76:9c:b0:12:5c:fd:69:fc:92:36:42:a6: 7f:7b:c7:44:48:67:d7:0a:2c:61:4e:5c:ba:75:a0: 4d:67:87:c3:67:c5:81:c7:a0:82:5d:e0:97:e7:70: 58:2f:e9:29:af:4f:56:bb:f2:da:1f:86:b4:8c:ba: 58:bf:e7:d7:42:34:86:ea:c5:c8:2d:81:b7:3f:6f: 27:43:6f:a4:e2:b1:0d:af:27:86:b0:c9:66:0c:99: 06:1f:e9:1a:37:59:56:4e:48:fb:83:b8:4f:6c:8d: 71:5c:6f:74:ee:6c:5a:e9:bb:60:d7:7e:87:52:08: e0:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:29:A1:89:AA:71:0C:3A:80:B7:22:21:E2:A6:93:2A:87:9C:16:8A X509v3 Authority Key Identifier: keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/rymhiapxDDqAtyIh4qaTKoecFoo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.66.75.0/24 80.66.77.0/24 Signature Algorithm: sha256WithRSAEncryption 64:5a:fb:e8:e6:af:45:76:43:e5:62:84:ab:9c:40:8c:93:03: 92:33:19:e7:ab:3b:dc:40:81:d0:f4:57:02:79:b1:7c:46:1c: f4:f3:a6:fd:37:b0:4c:44:53:f9:fe:46:dd:dc:0d:f4:41:5e: 19:08:de:4e:7c:eb:7d:16:d8:69:59:ed:a9:9e:6d:4d:aa:16: 67:a8:a3:b0:50:92:57:34:9d:aa:2d:bd:a4:40:05:96:29:9b: d9:9a:b2:8b:9f:18:d1:93:b3:d2:7a:41:be:61:5d:37:48:b5: 97:e6:94:62:08:7b:e3:e6:7e:d9:b3:10:8d:52:d6:0c:6b:7a: d3:7b:e3:c5:78:63:9d:cc:ba:91:ab:e7:06:59:a3:4b:1d:2e: e3:03:02:d8:13:1f:9a:90:fd:c3:75:e2:94:1e:6c:58:c6:cf: 7f:80:ac:46:f9:f3:bb:b2:8b:cf:9a:2d:20:44:f1:8a:41:6e: f8:ac:9b:c6:5f:47:76:1f:35:52:6a:bf:15:25:26:c5:d0:60: db:8f:a9:3e:c8:10:84:eb:ff:a5:52:2a:64:97:ff:9c:46:4c: df:cc:92:c4:2d:0e:2e:3c:f4:be:c6:42:38:58:04:b0:f9:ad: 76:88:0b:c8:1d:62:de:ab:0f:08:d4:12:b4:ab:50:8e:8f:8c: 03:57:ee:3f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8EoNy5+D7JUJx0lJesCOkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3M2I0YzEyNDhjNGJjZjIyYjA1NzdkZmNhOWIxNGQ5MDYz YzI4YzAwHhcNMjYwMTAyMDAxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjI5YTE4OWFhNzEwYzNhODBiNzIyMjFlMmE2OTMyYTg3OWMxNjhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr38vL/YM4S5u6DQKALztqeir9i3i Y5dTv9U0IjT6WbFMjmwewNpFmbl3oiHgdH+WBoMbWjQNBtQ9e5tBxopVHp7NEA69 0IJ1uWM37LHyt0pHe96D+wXoY0wkch9zdO92FwSmTHoyM8OGcomN5V7Ysbnjarwi GkKPfOhgHHXMX1AYvlfKsPEUiDl2nLASXP1p/JI2QqZ/e8dESGfXCixhTly6daBN Z4fDZ8WBx6CCXeCX53BYL+kpr09Wu/LaH4a0jLpYv+fXQjSG6sXILYG3P28nQ2+k 4rENryeGsMlmDJkGH+kaN1lWTkj7g7hPbI1xXG907mxa6btg136HUgjgtwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFK8poYmqcQw6gLciIeKmkyqHnBaKMB8GA1UdIwQY MBaAFAc7TBJIxLzyKwV338qbFNkGPCjAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQt YThkMzYxY2U2NGFhLzEvcnltaGlhcHhERHFBdHlJaDRxYVRLb2VjRm9vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQtYThkMzYxY2U2NGFh LzEvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUEJLAwQA UEJNMA0GCSqGSIb3DQEBCwUAA4IBAQBkWvvo5q9FdkPlYoSrnECMkwOSMxnnqzvc QIHQ9FcCebF8Rhz086b9N7BMRFP5/kbd3A30QV4ZCN5OfOt9FthpWe2pnm1NqhZn qKOwUJJXNJ2qLb2kQAWWKZvZmrKLnxjRk7PSekG+YV03SLWX5pRiCHvj5n7ZsxCN UtYMa3rTe+PFeGOdzLqRq+cGWaNLHS7jAwLYEx+akP3DdeKUHmxYxs9/gKxG+fO7 sovPmi0gRPGKQW74rJvGX0d2HzVSar8VJSbF0GDbj6k+yBCE6/+lUipkl/+cRkzf zJLELQ4uPPS+xkI4WASw+a12iAvIHWLeqw8I1BK0q1COj4wDV+4/ -----END CERTIFICATE-----Generated at Sun Jan 25 15:11:22 2026 by rpki-client