This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/tEWXmnOT8-tMqoRFm6EyOLojzhA.roa File: tEWXmnOT8-tMqoRFm6EyOLojzhA.roa (raw, json) Hash identifier: Qf0eR7/hJrKNYOJsvae06sHOvRAjRyYfjiFaNgfMGTA= Subject key identifier: B4:45:97:9A:73:93:F3:EB:4C:AA:84:45:9B:A1:32:38:BA:23:CE:10 Certificate issuer: /CN=e123860e20cdb2cfdf2cefb3753a15b822829266 Certificate serial: 019B7834DCD83EB7D8AAB6923DC694331137 Authority key identifier: E1:23:86:0E:20:CD:B2:CF:DF:2C:EF:B3:75:3A:15:B8:22:82:92:66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4SOGDiDNss_fLO-zdToVuCKCkmY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/tEWXmnOT8-tMqoRFm6EyOLojzhA.roa Signing time: Thu 01 Jan 2026 06:18:08 +0000 ROA not before: Thu 01 Jan 2026 06:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205368 IP address blocks: 80.86.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.crl rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.mft rsync://rpki.ripe.net/repository/DEFAULT/4SOGDiDNss_fLO-zdToVuCKCkmY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:dc:d8:3e:b7:d8:aa:b6:92:3d:c6:94:33:11:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e123860e20cdb2cfdf2cefb3753a15b822829266 Validity Not Before: Jan 1 06:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b445979a7393f3eb4caa84459ba13238ba23ce10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:81:41:aa:94:ab:33:c1:4d:db:67:58:69:c3: c2:4e:d0:1c:f7:83:93:bb:99:de:a0:ad:2b:d9:de: c0:8b:44:0e:05:40:07:28:26:5e:fa:52:f1:71:b0: e4:99:e2:c7:62:f4:e5:7d:fb:c7:9f:cf:31:0c:75: 9f:12:7e:22:93:d0:53:31:92:f1:ed:31:76:45:11: b1:83:18:8d:17:63:09:0b:07:6e:bb:94:a3:e3:b8: 05:dc:8b:ee:1c:ae:14:f5:d6:f3:b0:30:3e:4a:a6: 84:26:11:97:7f:a4:f5:d4:a7:2e:92:ff:ec:14:57: 4c:d7:3b:07:a4:0a:64:14:59:45:5d:a2:84:0e:29: cc:84:85:13:67:dc:69:71:ad:63:4e:7b:e4:ea:be: 6a:a5:4c:f8:a6:62:45:cc:2f:b7:28:d5:b9:8b:63: d1:5a:8a:65:4c:5a:4e:c7:42:be:9a:2a:20:58:ed: 43:ea:00:61:01:61:6a:63:20:9c:0e:aa:31:7b:38: c0:1e:57:3e:cf:a2:43:dc:81:a4:9e:74:fa:06:90: ef:c5:46:21:6c:1f:ea:16:6d:2f:a7:f3:67:5f:cd: 48:af:2d:69:f9:22:34:95:ad:02:ed:22:b9:9d:71: 3f:2d:89:a0:7a:bc:5d:af:58:84:24:09:1e:ba:5c: 6c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:45:97:9A:73:93:F3:EB:4C:AA:84:45:9B:A1:32:38:BA:23:CE:10 X509v3 Authority Key Identifier: keyid:E1:23:86:0E:20:CD:B2:CF:DF:2C:EF:B3:75:3A:15:B8:22:82:92:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4SOGDiDNss_fLO-zdToVuCKCkmY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/tEWXmnOT8-tMqoRFm6EyOLojzhA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.86.229.0/24 Signature Algorithm: sha256WithRSAEncryption 40:a3:f1:78:f5:57:26:4f:3e:27:dd:69:ab:3d:1c:93:50:49: 0f:86:31:f2:e4:b4:42:2e:6b:72:20:dd:86:d3:c0:21:ca:d5: 54:8b:8a:83:9d:75:fc:40:12:bf:30:3f:af:0e:cc:2b:bd:d6: 06:1a:91:9f:46:32:98:35:e9:57:e2:6c:47:b5:20:97:ae:05: 00:46:a9:82:1d:55:5d:9b:3e:b1:ac:73:13:98:55:e2:92:8a: 47:9d:01:a1:9e:ac:b5:3a:c6:90:d8:ed:7c:12:67:c3:a0:1b: 27:6a:12:c9:75:97:52:7e:b0:bd:f0:ce:10:b6:bb:b3:57:f8: 6d:09:47:a5:d9:50:c4:e6:7e:86:64:2c:7a:84:d2:ed:fc:cb: 46:db:1f:a0:15:c8:c2:81:37:05:16:9e:7a:e8:c6:d6:48:9a: 59:45:52:2d:28:12:33:d8:44:70:14:a0:04:8d:60:b9:80:41: ca:21:c3:8a:8b:83:6c:45:fd:fc:7e:ad:09:2b:bb:c8:96:cf: 72:34:17:40:8f:26:ae:0b:1e:dc:66:2d:f1:ba:b3:a4:06:f3: 69:f6:4a:f9:d1:fa:2b:87:a8:69:41:93:5b:e4:25:a2:fe:01: 97:8c:23:0c:1a:90:e8:e9:b2:bd:c1:e8:d0:f6:c5:fa:08:7e: bb:cb:79:83 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NNzYPrfYqraSPcaUMxE3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMjM4NjBlMjBjZGIyY2ZkZjJjZWZiMzc1M2ExNWI4MjI4 MjkyNjYwHhcNMjYwMTAxMDYxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDQ1OTc5YTczOTNmM2ViNGNhYTg0NDU5YmExMzIzOGJhMjNjZTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYFBqpSrM8FN22dYacPCTtAc94OT u5neoK0r2d7Ai0QOBUAHKCZe+lLxcbDkmeLHYvTlffvHn88xDHWfEn4ik9BTMZLx 7TF2RRGxgxiNF2MJCwduu5Sj47gF3IvuHK4U9dbzsDA+SqaEJhGXf6T11Kcukv/s FFdM1zsHpApkFFlFXaKEDinMhIUTZ9xpca1jTnvk6r5qpUz4pmJFzC+3KNW5i2PR WoplTFpOx0K+miogWO1D6gBhAWFqYyCcDqoxezjAHlc+z6JD3IGknnT6BpDvxUYh bB/qFm0vp/NnX81Iry1p+SI0la0C7SK5nXE/LYmgerxdr1iEJAkeulxsRQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLRFl5pzk/PrTKqERZuhMji6I84QMB8GA1UdIwQY MBaAFOEjhg4gzbLP3yzvs3U6FbgigpJmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFNPR0RpRE5zc19mTE8temRUb1Z1Q0tDa21ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC84MTA1OTktNzMxYS00ODZhLWIyM2Yt NDc1MzdlYjY0NGY1LzEvdEVXWG1uT1Q4LXRNcW9SRm02RXlPTG9qemhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC84MTA1OTktNzMxYS00ODZhLWIyM2YtNDc1MzdlYjY0NGY1 LzEvNFNPR0RpRE5zc19mTE8temRUb1Z1Q0tDa21ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUFblMA0G CSqGSIb3DQEBCwUAA4IBAQBAo/F49VcmTz4n3WmrPRyTUEkPhjHy5LRCLmtyIN2G 08AhytVUi4qDnXX8QBK/MD+vDswrvdYGGpGfRjKYNelX4mxHtSCXrgUARqmCHVVd mz6xrHMTmFXikopHnQGhnqy1OsaQ2O18EmfDoBsnahLJdZdSfrC98M4QtruzV/ht CUel2VDE5n6GZCx6hNLt/MtG2x+gFcjCgTcFFp566MbWSJpZRVItKBIz2ERwFKAE jWC5gEHKIcOKi4NsRf38fq0JK7vIls9yNBdAjyauCx7cZi3xurOkBvNp9kr50for h6hpQZNb5CWi/gGXjCMMGpDo6bK9wejQ9sX6CH67y3mD -----END CERTIFICATE-----Generated at Sun Jan 25 21:28:18 2026 by rpki-client