This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/DBnA1ZT38CocWqz4lECcDH92nSA.roa File: DBnA1ZT38CocWqz4lECcDH92nSA.roa (raw, json) Hash identifier: cTbJr5qdO8Ge9Q+ojcd0Ziv6ZIxinGPDSjvfRqcRuH4= Subject key identifier: 0C:19:C0:D5:94:F7:F0:2A:1C:5A:AC:F8:94:40:9C:0C:7F:76:9D:20 Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47 Certificate serial: 019AEF2B187844163371FAF1D6479F341D25 Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/DBnA1ZT38CocWqz4lECcDH92nSA.roa Signing time: Fri 05 Dec 2025 15:39:30 +0000 ROA not before: Fri 05 Dec 2025 15:39:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 216159 IP address blocks: 80.71.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ef:2b:18:78:44:16:33:71:fa:f1:d6:47:9f:34:1d:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47 Validity Not Before: Dec 5 15:39:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0c19c0d594f7f02a1c5aacf894409c0c7f769d20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4f:eb:ec:63:d9:a9:24:6a:2e:c8:e0:f9:0e: 56:c7:ab:72:32:6d:70:01:29:00:0a:15:20:19:db: 8b:ba:82:a5:1c:fc:12:0a:86:b9:b5:64:99:74:76: bf:05:73:17:e6:99:3a:fa:43:46:ef:9f:4b:1a:a5: a8:4d:02:c6:77:5a:14:3f:7f:4f:78:53:86:b6:d1: bd:1d:f5:db:0d:64:9e:c5:11:fa:40:f2:bf:d0:99: 25:be:f3:e1:33:98:98:fa:a7:c7:ce:ee:02:50:99: 7f:0d:20:7e:61:c5:0a:9e:20:72:fd:54:61:f0:60: c0:eb:08:09:80:a4:65:66:1c:69:0a:0c:67:cb:0a: 4f:78:9c:45:96:39:b6:0a:4f:da:33:bb:2b:e0:17: 58:3b:2b:1d:5c:8a:b4:2c:42:34:e5:59:78:dc:92: 99:07:47:ab:e7:7b:85:87:57:b3:a8:35:08:b5:ea: 0e:11:13:29:6f:f3:3b:05:63:e7:01:3a:f4:8f:28: 76:e0:a3:ce:0a:b1:4a:96:e9:63:45:d8:2a:0d:e0: 5f:f4:09:b7:6a:31:40:67:b1:7e:08:29:99:cd:5e: fd:e7:3d:52:b3:87:26:53:69:63:af:1b:ba:35:a9: 01:a5:70:48:5e:99:88:f4:5f:50:f3:ce:10:d1:3e: 20:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:19:C0:D5:94:F7:F0:2A:1C:5A:AC:F8:94:40:9C:0C:7F:76:9D:20 X509v3 Authority Key Identifier: keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/DBnA1ZT38CocWqz4lECcDH92nSA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.71.237.0/24 Signature Algorithm: sha256WithRSAEncryption 69:e2:52:fa:27:ab:76:7e:76:6c:2a:7e:9b:11:e8:bc:64:40: c8:b5:4e:07:5d:ce:b0:1d:e0:ea:ec:8c:f9:4f:71:0c:42:09: de:77:7e:9f:99:f2:1f:cc:b9:28:31:8d:e7:df:2b:30:6e:7d: 85:91:76:e7:77:81:a0:83:73:0b:06:a9:df:03:fa:87:f9:43: 0b:b2:75:cd:9a:90:c2:13:05:7f:c6:5d:eb:4f:5f:67:70:01: cc:3e:41:86:36:96:b0:83:7e:39:0b:1b:76:ba:e7:33:4b:e4: b1:45:a5:76:84:c8:e6:c2:5c:b0:43:4c:76:84:ea:a1:00:34: e4:48:fa:58:a1:ba:91:ab:de:3c:69:6e:ac:e3:3b:36:b1:3b: 02:f6:a3:9b:b8:8c:34:f5:b0:e5:87:f6:d8:ed:b7:56:e9:75: 9a:a9:c6:b9:73:50:df:1e:51:ae:81:93:75:08:6f:4e:f8:6e: 94:73:ae:89:2d:da:0f:c6:de:82:ba:6b:04:97:d8:56:2a:4b: e1:35:11:97:a0:33:3f:af:a0:c3:74:53:c0:fb:81:19:d1:df: 6a:09:7e:2d:13:8c:1c:e3:2b:9b:fa:2b:b6:32:c1:0f:1a:80: f1:cc:61:75:ef:7e:0a:0b:f7:c5:7c:79:9c:ec:19:46:5e:1a: 4e:e2:f4:e0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrvKxh4RBYzcfrx1kefNB0lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZTUxNjk0YzRkNDZiNGZjYzAyZmFlNzFlNWRiOTQyYTcx MDhlNDcwHhcNMjUxMjA1MTUzOTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzE5YzBkNTk0ZjdmMDJhMWM1YWFjZjg5NDQwOWMwYzdmNzY5ZDIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0/r7GPZqSRqLsjg+Q5Wx6tyMm1w ASkAChUgGduLuoKlHPwSCoa5tWSZdHa/BXMX5pk6+kNG759LGqWoTQLGd1oUP39P eFOGttG9HfXbDWSexRH6QPK/0JklvvPhM5iY+qfHzu4CUJl/DSB+YcUKniBy/VRh 8GDA6wgJgKRlZhxpCgxnywpPeJxFljm2Ck/aM7sr4BdYOysdXIq0LEI05Vl43JKZ B0er53uFh1ezqDUIteoOERMpb/M7BWPnATr0jyh24KPOCrFKluljRdgqDeBf9Am3 ajFAZ7F+CCmZzV795z1Ss4cmU2ljrxu6NakBpXBIXpmI9F9Q884Q0T4gBwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAwZwNWU9/AqHFqs+JRAnAx/dp0gMB8GA1UdIwQY MBaAFEnlFpTE1GtPzAL65x5duUKnEI5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQt MTkxODliM2M5YzdkLzEvREJuQTFaVDM4Q29jV3F6NGxFQ2NESDkyblNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQtMTkxODliM2M5Yzdk LzEvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUEftMA0G CSqGSIb3DQEBCwUAA4IBAQBp4lL6J6t2fnZsKn6bEei8ZEDItU4HXc6wHeDq7Iz5 T3EMQgned36fmfIfzLkoMY3n3yswbn2FkXbnd4Ggg3MLBqnfA/qH+UMLsnXNmpDC EwV/xl3rT19ncAHMPkGGNpawg345Cxt2uuczS+SxRaV2hMjmwlywQ0x2hOqhADTk SPpYobqRq948aW6s4zs2sTsC9qObuIw09bDlh/bY7bdW6XWaqca5c1DfHlGugZN1 CG9O+G6Uc66JLdoPxt6CumsEl9hWKkvhNRGXoDM/r6DDdFPA+4EZ0d9qCX4tE4wc 4yub+iu2MsEPGoDxzGF1734KC/fFfHmc7BlGXhpO4vTg -----END CERTIFICATE-----Generated at Sat Dec 6 16:17:19 2025 by rpki-client