This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/B6O7_d7R3UXXpRTsl6AAJWhjXe4.roa File: B6O7_d7R3UXXpRTsl6AAJWhjXe4.roa (raw, json) Hash identifier: t/j281gNgiB9Sq9gQq9hfuM5gVj9+dvI5Rbkgb3tQsY= Subject key identifier: 07:A3:BB:FD:DE:D1:DD:45:D7:A5:14:EC:97:A0:00:25:68:63:5D:EE Certificate issuer: /CN=52226f671c2643a5c04846264fee01f943ac2bfc Certificate serial: 019B7B35EF90840AAF0AC75625478D045318 Authority key identifier: 52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/B6O7_d7R3UXXpRTsl6AAJWhjXe4.roa Signing time: Thu 01 Jan 2026 20:18:10 +0000 ROA not before: Thu 01 Jan 2026 20:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8896 IP address blocks: 80.86.208.0/20 maxlen: 20 81.29.32.0/20 maxlen: 20 2a03:9a00::/29 maxlen: 29 2a03:9a00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:ef:90:84:0a:af:0a:c7:56:25:47:8d:04:53:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52226f671c2643a5c04846264fee01f943ac2bfc Validity Not Before: Jan 1 20:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=07a3bbfdded1dd45d7a514ec97a0002568635dee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b0:11:43:bb:bd:cb:71:61:35:f1:03:3c:e8: 69:03:25:96:07:d1:9d:e0:1d:3f:ca:79:1f:e5:38: 9d:9f:3b:7d:6d:16:a9:26:ce:dd:d9:fc:8b:cb:5c: fc:48:b8:24:98:aa:73:10:de:e1:96:fd:a9:33:4f: cc:20:e2:a1:e0:16:d1:8b:95:93:d9:44:da:55:81: f9:6f:2a:1b:6d:28:13:c6:9d:7a:36:d0:27:7d:09: 0f:fa:4f:fd:7b:c1:ff:99:6e:21:45:58:11:c3:e8: f5:1e:ee:d5:99:5e:05:fb:03:9e:49:0d:11:ac:4c: cd:3c:b0:7f:65:62:76:5c:da:e8:fa:cc:6a:91:37: 88:9f:2c:67:d5:9c:e0:55:e3:2a:07:70:2c:83:ff: 9a:60:43:30:32:62:8f:1b:18:af:c7:33:2f:c8:af: ab:d7:66:e2:c2:72:d6:7e:41:69:ac:7e:20:46:d1: e1:7a:cd:22:95:00:aa:e9:86:35:24:a4:43:85:ab: 9a:3b:c9:68:a9:4a:28:3c:57:5e:c0:0b:1d:6f:7c: f8:c6:58:e9:95:fb:fe:84:5c:cf:13:cb:a1:d0:9f: 65:37:3e:97:24:07:18:5e:aa:60:b6:9a:83:c2:04: 51:99:df:c7:91:ba:09:02:37:67:d5:c2:a2:0c:ef: 24:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:A3:BB:FD:DE:D1:DD:45:D7:A5:14:EC:97:A0:00:25:68:63:5D:EE X509v3 Authority Key Identifier: keyid:52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/B6O7_d7R3UXXpRTsl6AAJWhjXe4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.86.208.0/20 81.29.32.0/20 IPv6: 2a03:9a00::/29 Signature Algorithm: sha256WithRSAEncryption a8:a9:3c:23:f2:ab:f4:0f:79:07:1b:70:8c:79:4e:28:a5:db: db:10:83:f8:04:30:e8:ad:56:78:75:df:32:f0:ba:0d:62:4f: ee:2f:47:88:ae:29:fd:8e:05:8b:81:24:5f:3c:ec:06:32:08: 60:b3:ce:03:ec:e3:2c:9e:df:a1:fa:cc:a7:c5:73:69:11:93: 12:50:7a:a6:47:b2:ae:03:f4:b1:99:26:1c:ed:12:a8:57:6d: 90:01:8c:90:52:29:92:a4:b7:79:84:4b:3e:18:e1:70:f7:8a: c0:70:60:99:b2:e0:77:cd:7e:72:6b:b2:02:aa:21:0f:e8:81: 65:55:11:b5:4e:16:ba:95:3a:8a:c5:f3:7e:93:91:06:c2:0c: 4e:0b:dc:64:14:eb:3b:fd:cf:27:d6:40:7c:12:a5:a2:cd:17: 45:46:7b:1f:a4:4a:50:00:d5:cb:81:1d:a7:22:6c:22:33:4f: f5:d4:5b:c1:55:12:34:63:33:93:a6:39:32:90:64:72:82:a8: dc:13:e9:c9:27:1f:5b:81:ba:69:24:3b:0d:b5:33:f2:94:25: be:af:25:78:3f:7a:0f:2c:f2:b5:32:86:a0:9c:ad:1a:67:28: 52:d3:6d:d0:26:44:87:73:c8:42:44:78:70:1a:5c:28:f6:52: 29:e1:6b:d9 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt7Ne+QhAqvCsdWJUeNBFMYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyMjI2ZjY3MWMyNjQzYTVjMDQ4NDYyNjRmZWUwMWY5NDNh YzJiZmMwHhcNMjYwMTAxMjAxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwN2EzYmJmZGRlZDFkZDQ1ZDdhNTE0ZWM5N2EwMDAyNTY4NjM1ZGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorARQ7u9y3FhNfEDPOhpAyWWB9Gd 4B0/ynkf5Tidnzt9bRapJs7d2fyLy1z8SLgkmKpzEN7hlv2pM0/MIOKh4BbRi5WT 2UTaVYH5byobbSgTxp16NtAnfQkP+k/9e8H/mW4hRVgRw+j1Hu7VmV4F+wOeSQ0R rEzNPLB/ZWJ2XNro+sxqkTeInyxn1ZzgVeMqB3Asg/+aYEMwMmKPGxivxzMvyK+r 12biwnLWfkFprH4gRtHhes0ilQCq6YY1JKRDhauaO8loqUooPFdewAsdb3z4xljp lfv+hFzPE8uh0J9lNz6XJAcYXqpgtpqDwgRRmd/HkboJAjdn1cKiDO8kbwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFAeju/3e0d1F16UU7JegACVoY13uMB8GA1UdIwQY MBaAFFIib2ccJkOlwEhGJk/uAflDrCv8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWlKdlp4d21RNlhBU0VZbVQtNEItVU9zS193LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8yYjRkMGYtMjE5Zi00YzAwLTg2NDgt YTEyZGUzYTMzNTUzLzEvQjZPN19kN1IzVVhYcFJUc2w2QUFKV2hqWGU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC8yYjRkMGYtMjE5Zi00YzAwLTg2NDgtYTEyZGUzYTMzNTUz LzEvVWlKdlp4d21RNlhBU0VZbVQtNEItVU9zS193LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEUFbQAwQE UR0gMA0EAgACMAcDBQMqA5oAMA0GCSqGSIb3DQEBCwUAA4IBAQCoqTwj8qv0D3kH G3CMeU4opdvbEIP4BDDorVZ4dd8y8LoNYk/uL0eIrin9jgWLgSRfPOwGMghgs84D 7OMsnt+h+synxXNpEZMSUHqmR7KuA/SxmSYc7RKoV22QAYyQUimSpLd5hEs+GOFw 94rAcGCZsuB3zX5ya7ICqiEP6IFlVRG1Tha6lTqKxfN+k5EGwgxOC9xkFOs7/c8n 1kB8EqWizRdFRnsfpEpQANXLgR2nImwiM0/11FvBVRI0YzOTpjkykGRygqjcE+nJ Jx9bgbppJDsNtTPylCW+ryV4P3oPLPK1MoagnK0aZyhS023QJkSHc8hCRHhwGlwo 9lIp4WvZ -----END CERTIFICATE-----Generated at Mon Jan 26 00:39:26 2026 by rpki-client