This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/S7Uz_I8IzeD7hTGoQXYS9N__GC0.roa File: S7Uz_I8IzeD7hTGoQXYS9N__GC0.roa (raw, json) Hash identifier: FP7SIZ/7iLDFogtQKcQOvCQlmpm4Vmx1iE/C1QcnQWM= Subject key identifier: 4B:B5:33:FC:8F:08:CD:E0:FB:85:31:A8:41:76:12:F4:DF:FF:18:2D Certificate issuer: /CN=e123860e20cdb2cfdf2cefb3753a15b822829266 Certificate serial: 019B7834DBD0DE96BCEC9692EA0DA28C04A8 Authority key identifier: E1:23:86:0E:20:CD:B2:CF:DF:2C:EF:B3:75:3A:15:B8:22:82:92:66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4SOGDiDNss_fLO-zdToVuCKCkmY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/S7Uz_I8IzeD7hTGoQXYS9N__GC0.roa Signing time: Thu 01 Jan 2026 06:18:08 +0000 ROA not before: Thu 01 Jan 2026 06:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21104 IP address blocks: 80.86.224.0/20 maxlen: 20 80.86.224.0/24 maxlen: 24 80.86.225.0/24 maxlen: 24 80.86.226.0/24 maxlen: 24 80.86.227.0/24 maxlen: 24 80.86.228.0/24 maxlen: 24 80.86.230.0/23 maxlen: 24 80.86.232.0/24 maxlen: 24 80.86.233.0/24 maxlen: 24 80.86.234.0/24 maxlen: 24 80.86.235.0/24 maxlen: 24 80.86.236.0/23 maxlen: 23 80.86.236.0/24 maxlen: 24 80.86.237.0/24 maxlen: 24 80.86.239.0/24 maxlen: 24 2a03:3d00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.crl rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.mft rsync://rpki.ripe.net/repository/DEFAULT/4SOGDiDNss_fLO-zdToVuCKCkmY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:db:d0:de:96:bc:ec:96:92:ea:0d:a2:8c:04:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e123860e20cdb2cfdf2cefb3753a15b822829266 Validity Not Before: Jan 1 06:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4bb533fc8f08cde0fb8531a8417612f4dfff182d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:3b:d6:ea:f4:80:33:58:35:82:65:fe:50:36: 21:d3:fe:75:d3:21:8c:f5:df:a8:fe:b3:d7:da:21: b6:c9:11:07:42:95:7d:7d:40:39:73:78:06:fa:5d: 8c:16:5a:00:63:9d:0d:42:c8:75:51:af:98:55:2f: 04:da:1c:f0:43:03:01:53:08:54:61:40:6b:c0:8a: aa:c5:b9:83:76:4f:4d:12:6e:ea:b7:dc:54:c3:e7: 9a:ee:c3:da:80:72:35:1e:c9:22:56:6e:fa:27:10: 33:66:c3:73:c5:3a:b6:4c:f8:31:7a:a7:56:f1:a0: 3c:8b:e6:89:13:9c:af:52:5b:e6:e6:80:73:d1:1e: 78:bd:68:a1:a1:4a:7e:cf:4c:5f:c1:60:7c:c3:63: 7a:a7:93:15:46:f6:2e:72:df:7c:e8:23:b9:31:d3: a9:54:ef:16:75:8d:78:4f:5a:04:b8:98:c8:f4:1b: 30:09:2a:3d:77:34:d9:66:66:e8:ce:5d:85:e0:6f: c1:57:a2:1a:73:42:1e:4e:b7:26:cb:ad:6c:58:37: 7f:05:40:93:66:a0:d5:ea:1a:41:d7:05:c8:df:86: b7:22:07:48:1f:1e:8d:33:3a:08:68:f5:b5:66:32: f2:7d:45:c0:dd:ae:8d:8b:1b:c7:ec:af:9f:13:5f: 90:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:B5:33:FC:8F:08:CD:E0:FB:85:31:A8:41:76:12:F4:DF:FF:18:2D X509v3 Authority Key Identifier: keyid:E1:23:86:0E:20:CD:B2:CF:DF:2C:EF:B3:75:3A:15:B8:22:82:92:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4SOGDiDNss_fLO-zdToVuCKCkmY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/S7Uz_I8IzeD7hTGoQXYS9N__GC0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.86.224.0/20 IPv6: 2a03:3d00::/32 Signature Algorithm: sha256WithRSAEncryption 73:d4:8b:fa:34:49:98:ec:30:63:02:9f:c7:e9:7c:d4:3a:61: 23:0e:9d:4c:1a:72:1f:8e:ba:89:23:94:98:2e:36:ec:68:fb: 32:9f:2c:02:7a:7d:4f:57:e8:ed:02:0e:c9:3f:cb:3b:d0:db: 4b:ce:2d:db:d5:76:00:c6:51:f7:d5:c5:65:cf:8a:c8:bc:b6: 62:8a:b1:3d:de:32:db:39:aa:99:fc:43:93:05:d2:bf:98:dc: 93:88:b0:05:8c:fb:6a:47:b1:13:d0:08:ef:0c:d6:4d:c9:96: bf:44:12:47:ab:9e:0d:f8:0a:5f:24:f9:f8:0a:2d:4e:b4:8d: 3b:ed:5c:ad:65:05:a0:b7:fc:24:df:49:48:b4:46:31:8c:93: b3:57:4f:b3:94:5f:b7:f9:d1:ae:fc:2d:cb:fd:5a:6b:05:77: 6d:04:7a:b6:67:da:55:72:5c:96:e7:cb:5e:5c:8e:a6:e8:fa: 8c:74:f7:0f:ae:82:b5:f1:d3:3d:dd:d5:23:58:fc:02:83:7b: ff:46:ed:e9:04:1a:68:9b:87:1e:1b:be:98:b2:8b:2b:31:7a: 4f:91:8f:a8:59:43:5b:c7:39:14:9a:36:35:fd:32:a0:67:94: ca:71:cc:53:c5:b7:39:a4:34:6c:cd:ad:b7:e9:26:2c:f3:0a: 8f:f2:ae:3d -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4NNvQ3pa87JaS6g2ijASoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMjM4NjBlMjBjZGIyY2ZkZjJjZWZiMzc1M2ExNWI4MjI4 MjkyNjYwHhcNMjYwMTAxMDYxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YmI1MzNmYzhmMDhjZGUwZmI4NTMxYTg0MTc2MTJmNGRmZmYxODJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTvW6vSAM1g1gmX+UDYh0/510yGM 9d+o/rPX2iG2yREHQpV9fUA5c3gG+l2MFloAY50NQsh1Ua+YVS8E2hzwQwMBUwhU YUBrwIqqxbmDdk9NEm7qt9xUw+ea7sPagHI1HskiVm76JxAzZsNzxTq2TPgxeqdW 8aA8i+aJE5yvUlvm5oBz0R54vWihoUp+z0xfwWB8w2N6p5MVRvYuct986CO5MdOp VO8WdY14T1oEuJjI9BswCSo9dzTZZmbozl2F4G/BV6Iac0IeTrcmy61sWDd/BUCT ZqDV6hpB1wXI34a3IgdIHx6NMzoIaPW1ZjLyfUXA3a6NixvH7K+fE1+QrQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFEu1M/yPCM3g+4UxqEF2EvTf/xgtMB8GA1UdIwQY MBaAFOEjhg4gzbLP3yzvs3U6FbgigpJmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFNPR0RpRE5zc19mTE8temRUb1Z1Q0tDa21ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC84MTA1OTktNzMxYS00ODZhLWIyM2Yt NDc1MzdlYjY0NGY1LzEvUzdVel9JOEl6ZUQ3aFRHb1FYWVM5Tl9fR0MwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC84MTA1OTktNzMxYS00ODZhLWIyM2YtNDc1MzdlYjY0NGY1 LzEvNFNPR0RpRE5zc19mTE8temRUb1Z1Q0tDa21ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQEUFbgMA0E AgACMAcDBQAqAz0AMA0GCSqGSIb3DQEBCwUAA4IBAQBz1Iv6NEmY7DBjAp/H6XzU OmEjDp1MGnIfjrqJI5SYLjbsaPsynywCen1PV+jtAg7JP8s70NtLzi3b1XYAxlH3 1cVlz4rIvLZiirE93jLbOaqZ/EOTBdK/mNyTiLAFjPtqR7ET0AjvDNZNyZa/RBJH q54N+ApfJPn4Ci1OtI077VytZQWgt/wk30lItEYxjJOzV0+zlF+3+dGu/C3L/Vpr BXdtBHq2Z9pVclyW58teXI6m6PqMdPcProK18dM93dUjWPwCg3v/Ru3pBBpom4ce G76YsosrMXpPkY+oWUNbxzkUmjY1/TKgZ5TKccxTxbc5pDRsza236SYs8wqP8q49 -----END CERTIFICATE-----Generated at Mon Jan 26 00:25:08 2026 by rpki-client