This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/IagD82X6oKrp12_fDOcPXuPhMyY.roa File: IagD82X6oKrp12_fDOcPXuPhMyY.roa (raw, json) Hash identifier: wLotZLccHvEvF9Nxqm1LceMiMXRNnkLf/Jo8/bo1wjA= Subject key identifier: 21:A8:03:F3:65:FA:A0:AA:E9:D7:6F:DF:0C:E7:0F:5E:E3:E1:33:26 Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47 Certificate serial: 019BEEF8066E54A46FE9A6F717907251D9B7 Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/IagD82X6oKrp12_fDOcPXuPhMyY.roa Signing time: Sat 24 Jan 2026 07:46:30 +0000 ROA not before: Sat 24 Jan 2026 07:46:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206963 IP address blocks: 80.71.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ee:f8:06:6e:54:a4:6f:e9:a6:f7:17:90:72:51:d9:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47 Validity Not Before: Jan 24 07:46:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=21a803f365faa0aae9d76fdf0ce70f5ee3e13326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4f:a0:c2:a5:10:6f:dc:7a:6c:23:da:86:74: 5c:69:2d:69:2d:48:2d:09:de:9c:4a:b7:27:53:ff: 54:35:ee:97:d7:ad:07:b2:b4:e8:27:92:76:38:39: 02:83:28:03:67:39:54:48:34:c9:64:8e:d5:9b:d2: 54:28:84:37:9a:45:c6:23:10:34:85:da:33:2f:89: ba:8a:e5:d0:a0:f5:29:1a:8a:38:65:65:71:a2:5e: af:3a:12:de:41:6b:72:ba:e4:c4:6b:19:3c:cc:97: 49:7e:7f:1f:02:3e:70:43:e0:2d:02:3a:bb:b2:71: d0:ca:d8:35:4f:17:f2:cc:bb:d8:3e:3a:62:42:9c: ad:e7:7d:68:6e:5a:89:70:e3:d2:e4:af:ed:bd:68: 6e:65:c5:08:62:cb:fa:0a:70:5f:85:b9:f5:a0:b2: 09:40:1c:de:e4:7b:77:78:9b:99:a6:4d:51:59:7e: 01:b7:d4:3e:c4:36:d9:51:b1:fb:64:5d:1d:2a:20: 5f:bc:ff:37:79:7c:e3:68:82:3a:fd:cf:cc:f7:3e: 19:d6:f9:a8:39:a2:94:da:55:4c:7a:24:87:83:73: 34:c2:c2:87:4c:94:ad:6e:0a:50:15:07:86:09:3c: d3:aa:0a:72:3c:fc:56:e9:52:17:c7:2c:7c:95:5b: 19:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:A8:03:F3:65:FA:A0:AA:E9:D7:6F:DF:0C:E7:0F:5E:E3:E1:33:26 X509v3 Authority Key Identifier: keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/IagD82X6oKrp12_fDOcPXuPhMyY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.71.230.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:91:ec:d8:79:e5:aa:a2:ab:ea:2b:f0:4c:36:18:57:e3:5e: a0:82:e8:c7:eb:70:0a:cf:45:a2:84:23:5c:a1:e2:25:31:82: e6:4e:52:af:08:ec:ee:29:17:1e:5d:f2:7c:85:01:ef:f0:5e: 00:56:02:ae:c7:97:c3:a1:af:fd:a4:25:d1:c0:e3:33:66:f8: 2f:dd:da:e9:c7:fa:0c:aa:23:68:5d:68:5c:e4:2c:bf:5e:36: 83:47:4b:6b:4c:76:5d:de:04:be:23:bc:d1:a5:de:05:3e:a1: b4:5b:a8:29:91:0c:9c:f7:01:c2:0b:74:6f:78:d6:55:24:a9: 67:16:18:9c:ae:d3:e9:37:43:19:7e:c7:73:1e:99:0b:d9:3a: 0f:bd:0e:ba:23:e2:08:e3:3a:b1:d0:93:2f:2d:4d:63:87:86: bb:75:41:3f:2d:42:e6:39:a9:94:3a:e5:60:c5:36:2e:59:ee: 02:a7:87:73:f8:e9:36:22:be:03:ee:47:95:33:69:98:16:2f: 10:7d:2b:c7:07:be:21:a0:69:65:5b:f4:b1:dc:c8:69:03:6b: dc:0e:fd:8d:c2:7f:70:f8:d3:33:a1:eb:93:7a:26:e0:8b:f0: 65:d4:9d:27:e8:e9:5b:68:95:d3:85:b7:de:19:00:98:bb:35: b0:f5:0e:01 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvu+AZuVKRv6ab3F5ByUdm3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZTUxNjk0YzRkNDZiNGZjYzAyZmFlNzFlNWRiOTQyYTcx MDhlNDcwHhcNMjYwMTI0MDc0NjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMWE4MDNmMzY1ZmFhMGFhZTlkNzZmZGYwY2U3MGY1ZWUzZTEzMzI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0+gwqUQb9x6bCPahnRcaS1pLUgt Cd6cSrcnU/9UNe6X160HsrToJ5J2ODkCgygDZzlUSDTJZI7Vm9JUKIQ3mkXGIxA0 hdozL4m6iuXQoPUpGoo4ZWVxol6vOhLeQWtyuuTEaxk8zJdJfn8fAj5wQ+AtAjq7 snHQytg1TxfyzLvYPjpiQpyt531oblqJcOPS5K/tvWhuZcUIYsv6CnBfhbn1oLIJ QBze5Ht3eJuZpk1RWX4Bt9Q+xDbZUbH7ZF0dKiBfvP83eXzjaII6/c/M9z4Z1vmo OaKU2lVMeiSHg3M0wsKHTJStbgpQFQeGCTzTqgpyPPxW6VIXxyx8lVsZaQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCGoA/Nl+qCq6ddv3wznD17j4TMmMB8GA1UdIwQY MBaAFEnlFpTE1GtPzAL65x5duUKnEI5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQt MTkxODliM2M5YzdkLzEvSWFnRDgyWDZvS3JwMTJfZkRPY1BYdVBoTXlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQtMTkxODliM2M5Yzdk LzEvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUEfmMA0G CSqGSIb3DQEBCwUAA4IBAQAtkezYeeWqoqvqK/BMNhhX416ggujH63AKz0WihCNc oeIlMYLmTlKvCOzuKRceXfJ8hQHv8F4AVgKux5fDoa/9pCXRwOMzZvgv3drpx/oM qiNoXWhc5Cy/XjaDR0trTHZd3gS+I7zRpd4FPqG0W6gpkQyc9wHCC3RveNZVJKln FhicrtPpN0MZfsdzHpkL2ToPvQ66I+II4zqx0JMvLU1jh4a7dUE/LULmOamUOuVg xTYuWe4Cp4dz+Ok2Ir4D7keVM2mYFi8QfSvHB74hoGllW/Sx3MhpA2vcDv2Nwn9w +NMzoeuTeibgi/Bl1J0n6OlbaJXThbfeGQCYuzWw9Q4B -----END CERTIFICATE-----Generated at Sun Jan 25 16:54:52 2026 by rpki-client