This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/ivSna-kPTuQqlFOf-r0mSzihyPs.roa File: ivSna-kPTuQqlFOf-r0mSzihyPs.roa (raw, json) Hash identifier: WYUiq8tPYpCHs+DIQbZzImZyxiJqeWbxCj+kvgFLwkw= Subject key identifier: 8A:F4:A7:6B:E9:0F:4E:E4:2A:94:53:9F:FA:BD:26:4B:38:A1:C8:FB Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511 Certificate serial: 019B7C8007D253242E1A7C8B20E57541AC91 Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/ivSna-kPTuQqlFOf-r0mSzihyPs.roa Signing time: Fri 02 Jan 2026 02:18:43 +0000 ROA not before: Fri 02 Jan 2026 02:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8891 IP address blocks: 80.12.245.0/24 maxlen: 24 80.12.246.0/24 maxlen: 24 81.52.142.0/23 maxlen: 24 193.252.133.0/24 maxlen: 24 193.252.148.0/24 maxlen: 24 193.252.149.0/24 maxlen: 24 2a01:c9c0:a0::/44 maxlen: 48 2a01:c9c0:c0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:07:d2:53:24:2e:1a:7c:8b:20:e5:75:41:ac:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511 Validity Not Before: Jan 2 02:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8af4a76be90f4ee42a94539ffabd264b38a1c8fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:27:8b:9b:28:a8:fd:3d:ec:81:eb:5b:b2:46: c1:f4:4d:0d:ce:66:69:91:30:80:f3:a4:8d:83:b5: f1:5f:cd:0c:42:2d:23:13:fe:8b:e0:bd:70:53:43: a2:5f:60:f9:44:02:54:02:71:cc:02:d8:60:aa:f7: 1e:e9:07:fb:55:06:37:46:1a:12:12:67:ff:e2:86: 41:e2:33:b7:21:7c:58:32:ef:8b:34:a4:c7:bd:91: f5:e1:69:86:7b:f3:65:9c:3d:7f:b3:26:f8:0e:cd: d4:69:b4:dc:cd:ee:7c:64:e1:73:d4:fb:c0:89:50: 2a:ae:11:a0:3c:5a:b3:ed:a8:8c:b1:d7:92:09:8f: 0a:49:42:1c:f7:35:df:0a:07:8e:a3:4f:79:f6:06: 80:1d:2f:8e:b2:54:15:18:88:a9:2f:f3:24:b1:8c: c1:e8:fb:96:cb:0f:c7:1c:b0:3f:d2:a6:3b:c1:35: a7:21:56:4c:6d:6f:65:7f:34:2e:a9:7b:cd:d5:a8: ec:e1:69:a3:81:bc:09:48:8b:79:de:dd:14:71:b7: dc:99:5b:cb:2f:87:82:dc:64:bb:1d:c0:6b:80:e4: 4e:4d:ce:53:83:50:56:7b:81:e9:a4:87:f6:4a:68: ae:e6:55:55:b5:02:f7:6d:26:15:55:5e:a1:ed:b4: 32:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:F4:A7:6B:E9:0F:4E:E4:2A:94:53:9F:FA:BD:26:4B:38:A1:C8:FB X509v3 Authority Key Identifier: keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/ivSna-kPTuQqlFOf-r0mSzihyPs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.12.245.0-80.12.246.255 81.52.142.0/23 193.252.133.0/24 193.252.148.0/23 IPv6: 2a01:c9c0:a0::/44 2a01:c9c0:c0::/44 Signature Algorithm: sha256WithRSAEncryption 36:18:32:dd:c0:f0:de:51:aa:f8:28:72:1d:ec:6b:bd:e2:b6: 54:57:02:b0:8b:d7:ca:f2:6b:b6:3b:ec:91:f7:56:e5:e5:ff: 0d:64:96:7d:ac:75:ec:b5:9f:4e:91:1e:46:c9:00:e1:58:c3: f6:73:56:f7:f6:f1:9e:9e:dd:3f:78:ff:25:98:fb:91:63:7a: 7d:28:3e:6a:14:21:d7:32:96:71:07:22:df:ca:db:af:e2:8c: 91:29:72:05:78:4e:ca:eb:d0:24:ea:9e:31:4c:31:c1:81:ed: ff:f7:4e:b8:da:94:33:c4:0b:1f:7c:6f:7c:90:8f:2d:c5:06: 13:ed:57:09:65:58:05:44:d4:1b:9f:31:b0:75:77:a5:19:e7: c0:2b:8e:22:94:48:98:f3:dd:45:53:1d:ca:3c:36:48:a5:36: 16:79:e6:2c:b9:7c:f9:fe:13:a6:c0:2a:9f:82:1a:54:ec:6c: af:1f:ad:07:3e:7f:88:68:78:fa:9b:08:33:b9:b4:33:9c:0a: be:eb:e6:fe:a2:f1:1e:6d:42:0f:08:5d:8c:99:40:b6:9a:7c: f4:60:6a:28:b2:dc:ca:7f:63:fb:0b:7b:fb:db:8f:ec:ce:79: ec:3c:80:b1:e9:90:b2:de:0a:36:0f:86:d5:5c:48:5c:22:4d: fe:e8:6c:83 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgISAZt8gAfSUyQuGnyLIOV1QayRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZjA5YmEzM2I1YWU1ODFiMGQyOTMyMzI0OTMxNGY3NmFh MTA1MTEwHhcNMjYwMTAyMDIxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YWY0YTc2YmU5MGY0ZWU0MmE5NDUzOWZmYWJkMjY0YjM4YTFjOGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApieLmyio/T3sgetbskbB9E0NzmZp kTCA86SNg7XxX80MQi0jE/6L4L1wU0OiX2D5RAJUAnHMAthgqvce6Qf7VQY3RhoS Emf/4oZB4jO3IXxYMu+LNKTHvZH14WmGe/NlnD1/syb4Ds3UabTcze58ZOFz1PvA iVAqrhGgPFqz7aiMsdeSCY8KSUIc9zXfCgeOo0959gaAHS+OslQVGIipL/MksYzB 6PuWyw/HHLA/0qY7wTWnIVZMbW9lfzQuqXvN1ajs4WmjgbwJSIt53t0UcbfcmVvL L4eC3GS7HcBrgOROTc5Tg1BWe4HppIf2Smiu5lVVtQL3bSYVVV6h7bQyXQIDAQAB o4ICPTCCAjkwHQYDVR0OBBYEFIr0p2vpD07kKpRTn/q9Jks4ocj7MB8GA1UdIwQY MBaAFDrwm6M7WuWBsNKTIySTFPdqoQURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQt NDU5MzVmNTA2YTEyLzEvaXZTbmEta1BUdVFxbEZPZi1yMG1TemloeVBzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQtNDU5MzVmNTA2YTEy LzEvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFMGCCsGAQUFBwEHAQH/BEQwQjAmBAIAATAgMAwDBABQDPUD BABQDPYDBAFRNI4DBADB/IUDBAHB/JQwGAQCAAIwEgMHBCoBycAAoAMHBCoBycAA wDANBgkqhkiG9w0BAQsFAAOCAQEANhgy3cDw3lGq+ChyHexrveK2VFcCsIvXyvJr tjvskfdW5eX/DWSWfax17LWfTpEeRskA4VjD9nNW9/bxnp7dP3j/JZj7kWN6fSg+ ahQh1zKWcQci38rbr+KMkSlyBXhOyuvQJOqeMUwxwYHt//dOuNqUM8QLH3xvfJCP LcUGE+1XCWVYBUTUG58xsHV3pRnnwCuOIpRImPPdRVMdyjw2SKU2FnnmLLl8+f4T psAqn4IaVOxsrx+tBz5/iGh4+psIM7m0M5wKvuvm/qLxHm1CDwhdjJlAtpp89GBq KLLcyn9j+wt7+9uP7M557DyAsemQst4KNg+G1VxIXCJN/uhsgw== -----END CERTIFICATE-----Generated at Sun Jan 25 19:01:23 2026 by rpki-client