This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/7ofAHOADGh2bjifOVBkYttMtXWo.roa File: 7ofAHOADGh2bjifOVBkYttMtXWo.roa (raw, json) Hash identifier: JyXGY/WO48aicnFpD9dGpSBQvrcl/M59H8GUIUM7TqU= Subject key identifier: EE:87:C0:1C:E0:03:1A:1D:9B:8E:27:CE:54:19:18:B6:D3:2D:5D:6A Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511 Certificate serial: 019B7C80151983D39729F2EE13D559A366CC Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/7ofAHOADGh2bjifOVBkYttMtXWo.roa Signing time: Fri 02 Jan 2026 02:18:47 +0000 ROA not before: Fri 02 Jan 2026 02:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28708 IP address blocks: 80.10.4.0/23 maxlen: 24 80.10.43.0/24 maxlen: 24 80.10.46.0/24 maxlen: 24 80.10.159.0/24 maxlen: 24 80.10.161.0/24 maxlen: 24 80.12.66.0/23 maxlen: 24 80.12.68.0/23 maxlen: 24 80.12.70.0/24 maxlen: 24 80.12.100.0/23 maxlen: 24 80.12.102.0/24 maxlen: 24 80.12.209.0/24 maxlen: 24 80.12.210.0/24 maxlen: 24 81.253.0.0/18 maxlen: 24 81.253.64.0/19 maxlen: 24 90.84.144.0/23 maxlen: 23 90.84.146.0/24 maxlen: 24 90.84.147.0/24 maxlen: 24 90.96.0.0/16 maxlen: 24 193.251.116.0/24 maxlen: 24 193.253.10.0/24 maxlen: 24 193.253.78.0/23 maxlen: 24 193.253.141.0/24 maxlen: 24 193.253.142.0/23 maxlen: 24 193.253.168.0/24 maxlen: 24 193.253.169.0/24 maxlen: 24 193.253.170.0/24 maxlen: 24 194.250.131.0/24 maxlen: 24 2a01:cd00::/31 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:15:19:83:d3:97:29:f2:ee:13:d5:59:a3:66:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511 Validity Not Before: Jan 2 02:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee87c01ce0031a1d9b8e27ce541918b6d32d5d6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:87:22:82:63:57:ce:86:99:bb:4b:21:39:c9: 37:d3:5e:1a:8d:e5:63:7b:82:9b:4c:cb:fe:5d:a4: 7f:95:c4:d0:0c:62:4a:59:a5:f9:34:4d:3e:e1:07: 94:9a:91:3c:ee:da:56:e5:eb:fc:44:34:f8:ab:0a: c8:f1:96:fd:07:18:65:8f:f6:cb:67:d2:12:cb:c7: a9:b9:c9:f4:40:54:13:6a:e8:20:1a:39:51:51:b8: 2c:fb:e9:d0:e3:68:ba:f4:26:d5:0b:1e:20:1c:17: e3:62:a7:41:c1:ce:c8:14:58:1a:67:a5:1c:b9:87: 1a:2c:f7:d2:42:11:af:ea:59:23:e5:df:20:b8:a1: f9:0f:f7:1e:20:84:13:14:a7:8a:6c:0c:5a:88:3d: a7:ec:8b:f3:f7:ec:65:f2:ea:e1:0a:df:09:70:2c: da:c3:57:5a:1f:87:1e:29:2b:32:69:98:00:3f:bc: d3:12:81:a2:56:04:4b:30:3a:c7:8a:41:32:06:f4: cf:6e:cd:bd:60:e2:86:de:9f:ab:36:d6:75:83:4d: 2c:ec:fc:a5:4b:34:21:a7:70:1d:25:72:90:84:9c: ab:9c:7a:15:9e:ae:ad:46:7c:7a:cd:e4:c2:73:90: f0:5c:b8:43:8c:19:f0:14:0b:57:89:30:f9:b6:3f: 5b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:87:C0:1C:E0:03:1A:1D:9B:8E:27:CE:54:19:18:B6:D3:2D:5D:6A X509v3 Authority Key Identifier: keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/7ofAHOADGh2bjifOVBkYttMtXWo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.10.4.0/23 80.10.43.0/24 80.10.46.0/24 80.10.159.0/24 80.10.161.0/24 80.12.66.0-80.12.70.255 80.12.100.0-80.12.102.255 80.12.209.0-80.12.210.255 81.253.0.0-81.253.95.255 90.84.144.0/22 90.96.0.0/16 193.251.116.0/24 193.253.10.0/24 193.253.78.0/23 193.253.141.0-193.253.143.255 193.253.168.0-193.253.170.255 194.250.131.0/24 IPv6: 2a01:cd00::/31 Signature Algorithm: sha256WithRSAEncryption 28:cd:7d:2b:54:70:60:37:ff:01:c8:90:1e:e0:9c:ad:0c:94: e7:88:8f:49:95:2e:bb:c5:18:a8:79:62:49:a5:59:4e:5f:0e: 5b:7e:40:c0:98:81:57:da:bb:70:90:7f:dc:ae:30:10:5b:fb: 15:31:1d:32:a5:b7:ea:ad:ee:da:45:85:4d:70:63:5e:89:42: 74:23:45:ef:03:fd:f8:51:99:33:21:81:7d:b5:d7:96:19:49: 7a:e0:b6:ec:2c:82:5d:42:b1:ad:a9:ba:9b:84:67:e2:b3:85: 6c:19:50:2d:ad:38:9d:ed:98:11:c9:c6:82:9b:0c:c8:ef:d9: 5d:df:2c:c6:36:cc:08:3b:dc:6d:f2:98:20:db:ec:41:84:da: 75:4e:f0:09:e0:56:ff:1e:8e:99:d5:4d:d2:3f:1c:ab:95:c2: e8:51:3e:a0:0a:47:ab:e2:e4:54:30:ae:8c:e7:a2:86:42:ab: 56:37:d9:05:66:a0:60:66:49:88:81:97:a7:3b:56:4c:9e:dc: eb:b0:4b:b7:57:bc:56:c3:d4:0a:ec:24:89:1f:aa:ce:24:f4: 3e:14:2d:9d:c4:0e:25:2d:de:7f:12:aa:a7:99:cd:2e:e9:3a: e5:db:af:a0:7e:83:9f:0b:07:06:19:04:b7:26:eb:f0:fc:20: af:71:20:93 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgISAZt8gBUZg9OXKfLuE9VZo2bMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZjA5YmEzM2I1YWU1ODFiMGQyOTMyMzI0OTMxNGY3NmFh MTA1MTEwHhcNMjYwMTAyMDIxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTg3YzAxY2UwMDMxYTFkOWI4ZTI3Y2U1NDE5MThiNmQzMmQ1ZDZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIcigmNXzoaZu0shOck3014ajeVj e4KbTMv+XaR/lcTQDGJKWaX5NE0+4QeUmpE87tpW5ev8RDT4qwrI8Zb9Bxhlj/bL Z9ISy8epucn0QFQTauggGjlRUbgs++nQ42i69CbVCx4gHBfjYqdBwc7IFFgaZ6Uc uYcaLPfSQhGv6lkj5d8guKH5D/ceIIQTFKeKbAxaiD2n7Ivz9+xl8urhCt8JcCza w1daH4ceKSsyaZgAP7zTEoGiVgRLMDrHikEyBvTPbs29YOKG3p+rNtZ1g00s7Pyl SzQhp3AdJXKQhJyrnHoVnq6tRnx6zeTCc5DwXLhDjBnwFAtXiTD5tj9bqQIDAQAB o4ICqzCCAqcwHQYDVR0OBBYEFO6HwBzgAxodm44nzlQZGLbTLV1qMB8GA1UdIwQY MBaAFDrwm6M7WuWBsNKTIySTFPdqoQURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQt NDU5MzVmNTA2YTEyLzEvN29mQUhPQURHaDJiamlmT1ZCa1l0dE10WFdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQtNDU5MzVmNTA2YTEy LzEvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHABggrBgEFBQcBBwEB/wSBsDCBrTCBmwQCAAEwgZQDBAFQ CgQDBABQCisDBABQCi4DBABQCp8DBABQCqEwDAMEAVAMQgMEAFAMRjAMAwQCUAxk AwQAUAxmMAwDBABQDNEDBABQDNIwCwMDAFH9AwQFUf1AAwQCWlSQAwMAWmADBADB +3QDBADB/QoDBAHB/U4wDAMEAMH9jQMEBMH9gDAMAwQDwf2oAwQAwf2qAwQAwvqD MA0EAgACMAcDBQEqAc0AMA0GCSqGSIb3DQEBCwUAA4IBAQAozX0rVHBgN/8ByJAe 4JytDJTniI9JlS67xRioeWJJpVlOXw5bfkDAmIFX2rtwkH/crjAQW/sVMR0ypbfq re7aRYVNcGNeiUJ0I0XvA/34UZkzIYF9tdeWGUl64LbsLIJdQrGtqbqbhGfis4Vs GVAtrTid7ZgRycaCmwzI79ld3yzGNswIO9xt8pgg2+xBhNp1TvAJ4Fb/Ho6Z1U3S PxyrlcLoUT6gCker4uRUMK6M56KGQqtWN9kFZqBgZkmIgZenO1ZMntzrsEu3V7xW w9QK7CSJH6rOJPQ+FC2dxA4lLd5/Eqqnmc0u6Trl26+gfoOfCwcGGQS3Juvw/CCv cSCT -----END CERTIFICATE-----Generated at Sun Jan 25 20:30:20 2026 by rpki-client