This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/_0nCseq1FCkVbzbEBFv3dRP0CRo.roa File: _0nCseq1FCkVbzbEBFv3dRP0CRo.roa (raw, json) Hash identifier: OhfKgZoueIF3fYUkheqntTclHjDepm3uHFhyWV7IKyI= Subject key identifier: FF:49:C2:B1:EA:B5:14:29:15:6F:36:C4:04:5B:F7:75:13:F4:09:1A Certificate issuer: /CN=e123860e20cdb2cfdf2cefb3753a15b822829266 Certificate serial: 019B7834DC76DA09BC27A9F23E434AB428B0 Authority key identifier: E1:23:86:0E:20:CD:B2:CF:DF:2C:EF:B3:75:3A:15:B8:22:82:92:66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4SOGDiDNss_fLO-zdToVuCKCkmY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/_0nCseq1FCkVbzbEBFv3dRP0CRo.roa Signing time: Thu 01 Jan 2026 06:18:08 +0000 ROA not before: Thu 01 Jan 2026 06:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199620 IP address blocks: 80.86.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.crl rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.mft rsync://rpki.ripe.net/repository/DEFAULT/4SOGDiDNss_fLO-zdToVuCKCkmY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:dc:76:da:09:bc:27:a9:f2:3e:43:4a:b4:28:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e123860e20cdb2cfdf2cefb3753a15b822829266 Validity Not Before: Jan 1 06:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ff49c2b1eab51429156f36c4045bf77513f4091a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a7:9e:e1:92:a6:ef:fa:15:51:8e:bd:16:68: 50:83:e6:0a:2e:5d:fe:de:de:60:db:9e:86:71:0e: a1:d6:0d:16:2e:a6:6f:45:1e:4d:a0:f2:60:2f:f1: 57:dc:2b:ce:cc:f0:7e:bf:e8:0a:72:f2:45:35:db: 1c:a9:81:5c:ad:a8:78:08:24:fe:3d:a7:17:4c:4f: 48:cd:77:da:f2:ca:0b:18:13:45:74:44:7e:6c:2d: cd:6f:85:ad:f0:fc:61:ed:25:6f:dc:a9:7c:d8:2a: 2d:18:81:fa:c0:c2:b1:1e:e0:69:9b:62:85:fa:43: 19:1f:bd:c6:fc:3c:89:22:00:48:6d:bc:89:fa:41: f5:b3:14:47:f3:73:15:0c:3c:1e:b3:0c:6f:fa:4b: 8c:c0:8d:c7:eb:18:fa:b6:12:6e:01:dd:97:0e:0d: fe:ab:78:42:bd:39:da:78:07:b2:bf:56:88:15:1b: 98:3b:1a:34:f1:41:01:a8:29:9d:76:91:af:28:1b: d1:eb:c7:d8:9e:60:9d:6e:78:0e:63:3b:0b:9b:88: a2:76:e8:df:38:d6:cc:51:8e:13:20:05:7c:f6:c3: 6b:fa:77:87:8c:e2:c9:58:12:0f:1d:4d:98:03:41: 3c:e7:08:05:06:34:94:b5:20:e8:54:29:bd:23:62: 87:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:49:C2:B1:EA:B5:14:29:15:6F:36:C4:04:5B:F7:75:13:F4:09:1A X509v3 Authority Key Identifier: keyid:E1:23:86:0E:20:CD:B2:CF:DF:2C:EF:B3:75:3A:15:B8:22:82:92:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4SOGDiDNss_fLO-zdToVuCKCkmY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/_0nCseq1FCkVbzbEBFv3dRP0CRo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.86.238.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:4b:1a:94:02:09:7a:9f:2f:2c:e7:92:33:3d:fa:90:5f:e0: f1:01:c2:e3:c8:e6:aa:4a:e3:c4:fc:58:e3:9b:c3:3b:33:b0: 38:a0:45:f5:12:26:54:63:46:ee:69:03:b7:d1:f3:5e:74:62: 6e:d6:38:6b:10:76:d6:ee:35:ba:91:84:8a:54:cf:df:ed:97: 09:22:ad:b2:8b:50:21:25:c2:96:b2:90:9c:ba:45:cd:f6:81: 02:61:50:1a:52:57:48:05:e5:dc:b2:7b:a4:f2:bc:24:30:6b: 56:f5:e3:2b:b3:19:7e:98:a1:47:53:a6:85:f9:87:ae:ff:10: ef:fd:16:87:28:37:07:df:e1:17:d5:da:da:3f:15:8f:8a:42: ee:18:05:74:23:eb:5f:23:a5:b0:02:0e:09:81:df:29:2c:1b: 99:ad:8d:48:3d:c3:3c:09:db:99:7a:2a:a3:48:4d:49:d3:16: 72:62:9d:c2:fd:cd:1d:22:78:b4:25:78:94:c2:be:87:29:57: a1:a7:7d:50:f1:0c:af:9f:21:d3:06:a3:8c:2b:b4:30:f5:15: 19:d8:4c:30:b7:f5:f5:83:1f:be:d7:0a:e5:54:e9:b9:25:79: d6:8d:88:0e:da:90:75:85:bf:87:56:f5:0d:e7:42:c9:52:43: e1:59:65:ef -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NNx22gm8J6nyPkNKtCiwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMjM4NjBlMjBjZGIyY2ZkZjJjZWZiMzc1M2ExNWI4MjI4 MjkyNjYwHhcNMjYwMTAxMDYxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjQ5YzJiMWVhYjUxNDI5MTU2ZjM2YzQwNDViZjc3NTEzZjQwOTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqee4ZKm7/oVUY69FmhQg+YKLl3+ 3t5g256GcQ6h1g0WLqZvRR5NoPJgL/FX3CvOzPB+v+gKcvJFNdscqYFcrah4CCT+ PacXTE9IzXfa8soLGBNFdER+bC3Nb4Wt8Pxh7SVv3Kl82CotGIH6wMKxHuBpm2KF +kMZH73G/DyJIgBIbbyJ+kH1sxRH83MVDDweswxv+kuMwI3H6xj6thJuAd2XDg3+ q3hCvTnaeAeyv1aIFRuYOxo08UEBqCmddpGvKBvR68fYnmCdbngOYzsLm4iidujf ONbMUY4TIAV89sNr+neHjOLJWBIPHU2YA0E85wgFBjSUtSDoVCm9I2KHLwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP9JwrHqtRQpFW82xARb93UT9AkaMB8GA1UdIwQY MBaAFOEjhg4gzbLP3yzvs3U6FbgigpJmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFNPR0RpRE5zc19mTE8temRUb1Z1Q0tDa21ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC84MTA1OTktNzMxYS00ODZhLWIyM2Yt NDc1MzdlYjY0NGY1LzEvXzBuQ3NlcTFGQ2tWYnpiRUJGdjNkUlAwQ1JvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC84MTA1OTktNzMxYS00ODZhLWIyM2YtNDc1MzdlYjY0NGY1 LzEvNFNPR0RpRE5zc19mTE8temRUb1Z1Q0tDa21ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUFbuMA0G CSqGSIb3DQEBCwUAA4IBAQCNSxqUAgl6ny8s55IzPfqQX+DxAcLjyOaqSuPE/Fjj m8M7M7A4oEX1EiZUY0buaQO30fNedGJu1jhrEHbW7jW6kYSKVM/f7ZcJIq2yi1Ah JcKWspCcukXN9oECYVAaUldIBeXcsnuk8rwkMGtW9eMrsxl+mKFHU6aF+Yeu/xDv /RaHKDcH3+EX1draPxWPikLuGAV0I+tfI6WwAg4Jgd8pLBuZrY1IPcM8CduZeiqj SE1J0xZyYp3C/c0dIni0JXiUwr6HKVehp31Q8QyvnyHTBqOMK7Qw9RUZ2Ewwt/X1 gx++1wrlVOm5JXnWjYgO2pB1hb+HVvUN50LJUkPhWWXv -----END CERTIFICATE-----Generated at Mon Jan 26 00:24:27 2026 by rpki-client