This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/08NmMRpJD2zt3WazEnsyTB_Ye4k.roa File: 08NmMRpJD2zt3WazEnsyTB_Ye4k.roa (raw, json) Hash identifier: zB3H5rR/NPY6rGjN6AMY7X/SudshlN0CJSGXrW66c0A= Subject key identifier: D3:C3:66:31:1A:49:0F:6C:ED:DD:66:B3:12:7B:32:4C:1F:D8:7B:89 Certificate issuer: /CN=beba48c7e2c9e05eda546d899146b89f799df85d Certificate serial: 019B7A5B1D410E7AC2DB0AC548EA8A4F4871 Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/08NmMRpJD2zt3WazEnsyTB_Ye4k.roa Signing time: Thu 01 Jan 2026 16:19:10 +0000 ROA not before: Thu 01 Jan 2026 16:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31376 IP address blocks: 80.73.192.0/20 maxlen: 20 80.79.240.0/21 maxlen: 21 80.79.248.0/22 maxlen: 22 80.79.252.0/23 maxlen: 23 80.249.176.0/20 maxlen: 28 91.190.80.0/21 maxlen: 21 91.198.130.0/24 maxlen: 24 91.215.252.0/23 maxlen: 23 91.215.254.0/24 maxlen: 24 91.219.180.0/22 maxlen: 22 93.92.192.0/21 maxlen: 28 93.190.224.0/21 maxlen: 28 94.125.8.0/21 maxlen: 21 109.71.176.0/21 maxlen: 28 185.42.60.0/22 maxlen: 28 185.155.112.0/22 maxlen: 22 188.93.240.0/21 maxlen: 28 193.26.214.0/24 maxlen: 24 193.46.2.0/24 maxlen: 24 193.110.236.0/22 maxlen: 22 193.110.237.0/24 maxlen: 24 194.153.158.128/25 maxlen: 25 195.93.206.0/23 maxlen: 23 195.191.146.0/23 maxlen: 23 213.108.32.0/21 maxlen: 21 217.119.16.0/20 maxlen: 28 2a02:16e8::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.mft rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:1d:41:0e:7a:c2:db:0a:c5:48:ea:8a:4f:48:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d Validity Not Before: Jan 1 16:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d3c366311a490f6ceddd66b3127b324c1fd87b89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:69:3a:5b:ca:33:f7:11:ef:2e:d7:22:b2:da: 3b:0d:e1:db:48:6b:45:7a:5f:ac:4a:16:a9:db:50: 19:67:11:e3:61:b0:2b:41:73:34:6f:97:3e:e8:1f: 78:2c:b3:75:99:2c:ec:b7:de:21:45:b9:4d:fe:36: 38:8d:8c:20:fb:8b:fd:14:ed:f2:9f:58:2f:a9:e3: 90:f6:48:18:cd:6b:0b:67:6f:3f:71:17:86:c0:6d: a8:ba:6a:3c:af:b8:4d:90:d2:7a:6d:39:20:7d:8a: 83:97:4c:4f:d0:1f:b9:23:e0:ef:86:bc:1c:9b:51: 0d:81:6c:12:9d:f1:24:f0:24:2a:ff:db:23:8f:e8: e2:1c:83:24:4f:c2:d0:82:e0:d8:d7:1d:7e:bc:9d: 15:21:fa:e4:dd:c6:84:22:52:17:f1:d2:8c:d7:45: 5d:a2:c7:a3:19:cd:e3:51:98:d8:88:00:8a:da:17: 9e:ca:f3:6d:d0:1a:a3:4f:18:3c:36:25:b7:e3:6e: 64:04:5d:f8:bb:48:34:0b:1a:7d:c0:8f:c2:30:2f: ff:39:9d:ae:2c:55:0c:d7:f5:c7:6e:a0:33:cc:cd: 23:79:53:bf:62:f5:30:b1:86:a3:9b:81:2e:9c:af: c6:16:57:a8:a7:28:f6:9c:86:3b:2e:94:1e:00:5f: fe:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:C3:66:31:1A:49:0F:6C:ED:DD:66:B3:12:7B:32:4C:1F:D8:7B:89 X509v3 Authority Key Identifier: keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/08NmMRpJD2zt3WazEnsyTB_Ye4k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.73.192.0/20 80.79.240.0-80.79.253.255 80.249.176.0/20 91.190.80.0/21 91.198.130.0/24 91.215.252.0-91.215.254.255 91.219.180.0/22 93.92.192.0/21 93.190.224.0/21 94.125.8.0/21 109.71.176.0/21 185.42.60.0/22 185.155.112.0/22 188.93.240.0/21 193.26.214.0/24 193.46.2.0/24 193.110.236.0/22 194.153.158.128/25 195.93.206.0/23 195.191.146.0/23 213.108.32.0/21 217.119.16.0/20 IPv6: 2a02:16e8::/32 Signature Algorithm: sha256WithRSAEncryption 4a:20:ef:30:2f:11:b4:0d:8d:b9:9b:9d:92:30:1a:6a:d1:b9: b8:34:f3:08:07:6c:87:1d:c9:88:8f:32:27:1f:39:8f:0d:78: 6d:a0:7b:05:81:3f:9d:10:a1:58:05:aa:c7:eb:6e:3b:ad:8d: de:cb:0b:dc:b3:da:3d:a1:0f:f5:b8:51:f2:3f:9e:95:73:15: 00:a7:12:09:3b:b2:e7:62:21:b5:d8:0e:66:e9:ff:57:38:e0: ce:1b:13:f1:4a:9b:8d:f8:79:c3:96:03:a4:10:f4:99:e8:c9: 8a:ed:b5:87:46:7c:a0:c0:03:40:f4:f4:e9:2e:ec:04:7d:dd: e4:fa:bb:72:4f:a8:07:a9:2e:68:d9:f0:95:aa:73:da:3e:f0: 80:40:90:af:b5:a7:c5:b5:56:72:85:e4:2a:3d:08:97:0b:de: c5:44:42:f0:1f:66:e1:bf:33:a0:9f:53:42:da:b6:8c:24:f8: dc:a1:20:67:89:a1:81:23:88:ac:b0:b2:0c:a2:03:c9:ec:1f: d0:4e:61:5b:8c:47:25:71:90:6c:82:c2:6b:8d:7d:86:2a:8e: ae:83:0d:24:18:ca:de:a2:54:e4:c1:77:cc:de:9c:50:5e:30: c5:ea:22:00:3a:2e:d4:34:3a:c3:0c:2e:c9:9c:3c:89:07:b4: 74:46:01:5f -----BEGIN CERTIFICATE----- MIIFoDCCBIigAwIBAgISAZt6Wx1BDnrC2wrFSOqKT0hxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlYmE0OGM3ZTJjOWUwNWVkYTU0NmQ4OTkxNDZiODlmNzk5 ZGY4NWQwHhcNMjYwMTAxMTYxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkM2MzNjYzMTFhNDkwZjZjZWRkZDY2YjMxMjdiMzI0YzFmZDg3Yjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWk6W8oz9xHvLtcisto7DeHbSGtF el+sShap21AZZxHjYbArQXM0b5c+6B94LLN1mSzst94hRblN/jY4jYwg+4v9FO3y n1gvqeOQ9kgYzWsLZ28/cReGwG2oumo8r7hNkNJ6bTkgfYqDl0xP0B+5I+Dvhrwc m1ENgWwSnfEk8CQq/9sjj+jiHIMkT8LQguDY1x1+vJ0VIfrk3caEIlIX8dKM10Vd osejGc3jUZjYiACK2heeyvNt0BqjTxg8NiW3425kBF34u0g0Cxp9wI/CMC//OZ2u LFUM1/XHbqAzzM0jeVO/YvUwsYajm4EunK/GFleopyj2nIY7LpQeAF/+mQIDAQAB o4ICrDCCAqgwHQYDVR0OBBYEFNPDZjEaSQ9s7d1msxJ7Mkwf2HuJMB8GA1UdIwQY MBaAFL66SMfiyeBe2lRtiZFGuJ95nfhdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnJwSXgtTEo0RjdhVkcySmtVYTRuM21kLUYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC83Zjg4MjEtMTU2Ni00M2Y0LWFiMjYt M2Q1MjIxODFhMmM0LzEvMDhObU1ScEpEMnp0M1dhekVuc3lUQl9ZZTRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC83Zjg4MjEtMTU2Ni00M2Y0LWFiMjYtM2Q1MjIxODFhMmM0 LzEvdnJwSXgtTEo0RjdhVkcySmtVYTRuM21kLUYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHBBggrBgEFBQcBBwEB/wSBsTCBrjCBnAQCAAEwgZUDBARQ ScAwDAMEBFBP8AMEAVBP/AMEBFD5sAMEA1u+UAMEAFvGgjAMAwQCW9f8AwQAW9f+ AwQCW9u0AwQDXVzAAwQDXb7gAwQDXn0IAwQDbUewAwQCuSo8AwQCuZtwAwQDvF3w AwQAwRrWAwQAwS4CAwQCwW7sAwUHwpmegAMEAcNdzgMEAcO/kgMEA9VsIAMEBNl3 EDANBAIAAjAHAwUAKgIW6DANBgkqhkiG9w0BAQsFAAOCAQEASiDvMC8RtA2NuZud kjAaatG5uDTzCAdshx3JiI8yJx85jw14baB7BYE/nRChWAWqx+tuO62N3ssL3LPa PaEP9bhR8j+elXMVAKcSCTuy52IhtdgOZun/VzjgzhsT8Uqbjfh5w5YDpBD0mejJ iu21h0Z8oMADQPT06S7sBH3d5Pq7ck+oB6kuaNnwlapz2j7wgECQr7WnxbVWcoXk Kj0IlwvexURC8B9m4b8zoJ9TQtq2jCT43KEgZ4mhgSOIrLCyDKIDyewf0E5hW4xH JXGQbILCa419hiqOroMNJBjK3qJU5MF3zN6cUF4wxeoiADou1DQ6wwwuyZw8iQe0 dEYBXw== -----END CERTIFICATE-----Generated at Mon Jan 26 05:14:41 2026 by rpki-client