This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/209LRc36fwwaooG93ZeC5gy1UlI.roa File: 209LRc36fwwaooG93ZeC5gy1UlI.roa (raw, json) Hash identifier: +31HKgDaFf6ohmz1C+Gt1Gm1LmNeUNqVhwrGkJQK7M8= Subject key identifier: DB:4F:4B:45:CD:FA:7F:0C:1A:A2:81:BD:DD:97:82:E6:0C:B5:52:52 Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1 Certificate serial: 019B7BA39CF14C6CFC89CCD8C0CCD0F47BB1 Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/209LRc36fwwaooG93ZeC5gy1UlI.roa Signing time: Thu 01 Jan 2026 22:17:58 +0000 ROA not before: Thu 01 Jan 2026 22:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61239 IP address blocks: 80.253.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:9c:f1:4c:6c:fc:89:cc:d8:c0:cc:d0:f4:7b:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1 Validity Not Before: Jan 1 22:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=db4f4b45cdfa7f0c1aa281bddd9782e60cb55252 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8f:3d:b8:38:45:f4:a3:cf:69:d9:e5:96:88: 53:08:01:b9:45:58:ad:f9:67:92:01:e2:9d:b9:d8: be:00:01:10:fd:69:20:2b:62:05:56:38:d7:02:b8: 12:64:11:73:9e:19:26:b7:ae:c1:ee:03:e5:5e:4f: 9b:32:70:92:49:05:6c:eb:e0:41:d6:1f:30:00:73: fa:16:27:67:0a:99:e8:59:f7:50:7f:96:94:95:e7: 81:98:e1:76:ba:76:11:ef:9a:a3:a7:c0:90:2c:fb: dd:47:7f:3f:13:f0:4d:85:5b:ad:d2:ae:46:93:2b: 5c:b4:af:49:50:57:8e:d0:d0:94:09:22:bc:1a:47: 1b:cc:0d:6b:d1:79:0f:75:67:d0:80:8c:5f:98:b7: 86:a7:a2:63:2e:f3:5b:95:f3:e7:de:4a:b2:ab:84: 2d:2e:98:b8:58:7b:18:98:0c:0f:0b:92:20:50:a3: 30:93:55:a7:20:05:b6:12:a3:04:0d:7f:39:3b:fd: bc:2d:42:37:6a:e6:e1:29:f7:bc:38:a1:42:c8:69: 2a:ab:76:25:67:c4:c5:4d:6c:b3:72:5d:95:4c:8c: 69:20:3e:87:83:f2:9a:92:77:8c:b4:31:31:49:b5: 31:4d:96:51:39:96:fe:b1:3b:f8:51:f7:19:c7:cd: 46:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:4F:4B:45:CD:FA:7F:0C:1A:A2:81:BD:DD:97:82:E6:0C:B5:52:52 X509v3 Authority Key Identifier: keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/209LRc36fwwaooG93ZeC5gy1UlI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.253.159.0/24 Signature Algorithm: sha256WithRSAEncryption 89:66:53:bf:68:da:8a:12:56:19:3d:6e:3b:dc:71:67:ae:2b: 10:a8:3a:7b:93:31:41:eb:6a:9c:12:fa:6f:46:a8:d0:12:e5: 23:b9:51:1c:6f:2f:3b:3f:82:0e:a1:28:60:99:d8:d2:48:86: e1:72:ac:59:8d:60:d7:5e:9c:af:55:36:a6:75:82:c1:dc:c7: 6a:bc:b9:05:f1:ad:2c:9f:70:ee:cc:c3:d0:ea:75:da:dc:77: 6c:29:f8:06:b9:ea:d2:00:8e:37:a6:05:3b:9d:72:b3:5c:f4: d3:77:96:8e:f0:46:c6:f5:59:e3:32:1c:83:52:97:be:17:7f: fd:dd:bd:c4:f2:42:3e:52:19:6c:d1:88:2d:93:6c:c6:2b:33: d3:b7:21:ad:e3:27:f2:4d:63:9a:e5:b3:66:eb:d9:3d:b4:e7: e2:4f:b6:b0:bd:d1:d9:16:54:80:a4:33:29:cc:36:7f:cb:93: 72:6c:de:bf:51:ea:2a:67:18:eb:97:74:2b:cb:db:d1:b0:72: 73:e9:ad:42:f7:a6:23:05:e8:c2:a5:9e:d8:d4:a5:2d:c4:a5: 1b:43:2d:63:2a:ae:18:0a:68:a9:ac:5d:f2:81:1c:cb:58:8f: 81:e0:af:bb:b7:5f:36:ae:e3:1d:2f:05:45:84:e4:86:1f:3f: 5d:2e:e0:97 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o5zxTGz8iczYwMzQ9HuxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNjk4YzRiNjEyYWZlZTJjYmIxY2RkNTA5ZTRmMDI0NmZi YjgwZTEwHhcNMjYwMTAxMjIxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYjRmNGI0NWNkZmE3ZjBjMWFhMjgxYmRkZDk3ODJlNjBjYjU1MjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvY89uDhF9KPPadnllohTCAG5RVit +WeSAeKdudi+AAEQ/WkgK2IFVjjXArgSZBFznhkmt67B7gPlXk+bMnCSSQVs6+BB 1h8wAHP6FidnCpnoWfdQf5aUleeBmOF2unYR75qjp8CQLPvdR38/E/BNhVut0q5G kytctK9JUFeO0NCUCSK8GkcbzA1r0XkPdWfQgIxfmLeGp6JjLvNblfPn3kqyq4Qt Lpi4WHsYmAwPC5IgUKMwk1WnIAW2EqMEDX85O/28LUI3aubhKfe8OKFCyGkqq3Yl Z8TFTWyzcl2VTIxpID6Hg/KakneMtDExSbUxTZZROZb+sTv4UfcZx81GRwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNtPS0XN+n8MGqKBvd2XguYMtVJSMB8GA1UdIwQY MBaAFFtpjEthKv7iy7HN1Qnk8CRvu4DhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMt Y2MyZmFmZTNhOGI0LzEvMjA5TFJjMzZmd3dhb29HOTNaZUM1Z3kxVWxJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMtY2MyZmFmZTNhOGI0 LzEvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUP2fMA0G CSqGSIb3DQEBCwUAA4IBAQCJZlO/aNqKElYZPW473HFnrisQqDp7kzFB62qcEvpv RqjQEuUjuVEcby87P4IOoShgmdjSSIbhcqxZjWDXXpyvVTamdYLB3MdqvLkF8a0s n3DuzMPQ6nXa3HdsKfgGuerSAI43pgU7nXKzXPTTd5aO8EbG9VnjMhyDUpe+F3/9 3b3E8kI+Uhls0Ygtk2zGKzPTtyGt4yfyTWOa5bNm69k9tOfiT7awvdHZFlSApDMp zDZ/y5NybN6/UeoqZxjrl3Qry9vRsHJz6a1C96YjBejCpZ7Y1KUtxKUbQy1jKq4Y CmiprF3ygRzLWI+B4K+7t182ruMdLwVFhOSGHz9dLuCX -----END CERTIFICATE-----Generated at Mon Jan 26 05:31:58 2026 by rpki-client