This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/B8rWlO5zBSZ0rFhZVTmxxBCW08U.roa
File: B8rWlO5zBSZ0rFhZVTmxxBCW08U.roa (raw, json)
Hash identifier: BvIksHHAQXEVjtiNQOfNtwSiFiMBb9MNFSH1VLW/crc=
Subject key identifier: 07:CA:D6:94:EE:73:05:26:74:AC:58:59:55:39:B1:C4:10:96:D3:C5
Certificate issuer: /CN=fb236b213d56493f3b077e6b41f42e4f3df8cdce
Certificate serial: 019B7911272616DE5439671F9EFB2BFB8E45
Authority key identifier: FB:23:6B:21:3D:56:49:3F:3B:07:7E:6B:41:F4:2E:4F:3D:F8:CD:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/B8rWlO5zBSZ0rFhZVTmxxBCW08U.roa
Signing time: Thu 01 Jan 2026 10:18:45 +0000
ROA not before: Thu 01 Jan 2026 10:18:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200611
IP address blocks: 80.210.80.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 01:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:11:27:26:16:de:54:39:67:1f:9e:fb:2b:fb:8e:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb236b213d56493f3b077e6b41f42e4f3df8cdce
Validity
Not Before: Jan 1 10:18:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=07cad694ee73052674ac58595539b1c41096d3c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:bb:d3:81:47:cd:a8:bd:e1:7a:db:75:dc:68:
5d:cd:83:68:56:e7:65:a8:2d:ba:27:2e:2f:0b:f9:
58:ce:df:e8:50:65:57:31:56:46:04:63:39:8e:32:
49:f7:1d:e5:90:ff:0e:98:ef:6b:c2:ee:5c:dd:b6:
a4:35:c9:ac:2d:5f:24:b2:88:3a:d1:9d:2a:6e:0a:
b2:3e:db:15:a9:63:b8:3c:47:a8:94:1d:a2:4f:65:
79:93:5d:a4:0c:a3:d3:5b:39:25:c7:4b:90:fc:e4:
55:a3:8f:79:c1:e6:58:d3:08:29:91:f9:d3:63:c5:
30:60:f9:5e:62:2a:31:cf:fe:70:3f:bb:da:bc:ec:
72:e3:6c:23:35:50:22:71:78:dd:ff:a0:c9:cd:c5:
b6:75:4a:b9:84:74:9a:41:6b:43:8c:51:35:84:96:
dc:4c:40:db:24:44:4a:68:93:ae:d7:12:ca:5e:c0:
68:11:60:7c:ed:06:7f:d0:bc:12:dd:8d:55:76:ad:
7e:93:50:07:98:f8:10:14:c0:ca:ce:ec:13:df:c9:
bd:2a:d3:3a:1c:0d:8b:d6:36:df:7e:a3:d4:09:f3:
6e:cc:1d:21:1d:36:77:9f:08:73:ce:80:70:f0:60:
d4:a7:57:44:ac:e8:05:c9:08:e8:0c:98:db:9a:a6:
7b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:CA:D6:94:EE:73:05:26:74:AC:58:59:55:39:B1:C4:10:96:D3:C5
X509v3 Authority Key Identifier:
keyid:FB:23:6B:21:3D:56:49:3F:3B:07:7E:6B:41:F4:2E:4F:3D:F8:CD:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/B8rWlO5zBSZ0rFhZVTmxxBCW08U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.210.80.0/20
Signature Algorithm: sha256WithRSAEncryption
20:08:4d:44:5a:97:f0:ce:75:1f:48:89:80:92:b8:fd:4e:aa:
5c:cb:f1:6a:4b:35:fa:d0:8f:95:b7:09:2d:be:82:17:5a:24:
5a:9a:5e:11:42:50:19:4e:b1:29:4b:2a:37:12:69:d1:7f:b6:
19:a5:9c:51:36:1b:98:c5:39:9b:05:db:b0:7d:03:98:77:d7:
9f:64:73:ef:71:38:bd:a4:a3:45:38:cd:33:c4:ea:0b:13:a2:
18:51:c8:a3:f4:54:ed:31:82:d1:2c:ee:1b:62:a2:d3:aa:71:
dd:d1:12:7e:64:46:0f:08:0a:7c:fd:32:c9:ea:06:67:17:aa:
1c:70:9c:77:c5:a2:0f:70:52:68:92:db:39:04:4c:06:0a:bc:
80:b1:11:81:86:1a:a8:99:38:4f:17:a8:3f:10:8d:8f:c6:17:
cd:ca:38:04:1f:23:ca:c8:30:0a:b6:07:94:cd:cc:df:38:19:
c3:b2:96:8d:96:9c:7d:0c:e2:bf:9b:e3:37:db:de:5d:7c:d5:
02:f1:eb:62:61:e3:41:ba:7a:cc:30:e0:e3:07:09:c4:81:01:
7d:11:3f:f1:f5:7e:da:ed:bc:fc:b2:db:73:31:73:ba:46:6b:
53:60:76:a1:d3:8b:08:46:71:4e:6b:fa:5a:b5:8b:df:5d:56:
92:ca:c8:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:03:32 2026 by rpki-client