This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/K8lTuUwCfrLQzM8Ikje_MYmcQaE.roa File: K8lTuUwCfrLQzM8Ikje_MYmcQaE.roa (raw, json) Hash identifier: G63keaf67EvvJa/yqPhi7i+Hyn7znTZ/4a9T6hgsZKM= Subject key identifier: 2B:C9:53:B9:4C:02:7E:B2:D0:CC:CF:08:92:37:BF:31:89:9C:41:A1 Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47 Certificate serial: 019B7CEDFE6DF58289D1570EA8DEEB2353E7 Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/K8lTuUwCfrLQzM8Ikje_MYmcQaE.roa Signing time: Fri 02 Jan 2026 04:18:50 +0000 ROA not before: Fri 02 Jan 2026 04:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3269 IP address blocks: 80.71.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:fe:6d:f5:82:89:d1:57:0e:a8:de:eb:23:53:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47 Validity Not Before: Jan 2 04:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2bc953b94c027eb2d0cccf089237bf31899c41a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5e:45:ca:8b:60:8f:b0:31:69:3d:f5:66:ec: 9b:e9:03:34:31:c8:62:68:35:bc:c2:2f:41:2a:42: 4f:6d:b6:b4:4c:46:42:e4:fa:e5:b6:eb:f0:b3:0d: 5e:ec:45:a0:f9:e0:1d:9f:e2:e2:94:24:19:f2:2b: 85:6b:08:29:d1:c8:86:06:38:39:7c:8c:ab:00:c1: dd:2f:fa:ae:7c:02:1f:17:46:7f:e9:c8:c4:51:d5: 03:b6:80:b7:e8:98:d2:1c:06:67:91:94:bc:73:87: f8:01:83:f7:03:f7:77:fc:b3:4c:db:89:93:8e:be: d6:e0:f9:89:45:60:b2:a0:54:ff:67:61:fe:1f:0b: ee:f3:2e:39:c6:dd:f7:0f:35:0e:10:0e:01:95:5a: 0c:7a:71:a2:4e:02:d4:41:d9:63:c7:87:00:42:3a: ef:e1:16:ab:6a:79:6c:27:54:bb:f0:3b:fd:3b:a5: 5f:06:ed:74:26:30:df:0c:d6:ef:f8:06:1a:cc:d3: 0b:63:2a:6d:59:1b:a5:88:9e:45:01:12:a4:1a:0d: 5d:79:26:fb:a3:0c:0d:49:8b:8d:b0:15:d1:22:8c: 3c:b0:75:13:69:5b:02:f1:79:fe:59:5b:7a:b3:93: 00:0f:53:52:22:38:f9:39:03:c1:26:35:d6:0f:37: 01:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:C9:53:B9:4C:02:7E:B2:D0:CC:CF:08:92:37:BF:31:89:9C:41:A1 X509v3 Authority Key Identifier: keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/K8lTuUwCfrLQzM8Ikje_MYmcQaE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.71.234.0/24 Signature Algorithm: sha256WithRSAEncryption 15:d0:f5:c3:8b:49:82:11:fa:8d:1f:55:c6:5a:1a:c3:45:78: c7:1f:6c:5b:23:cd:c8:b7:be:d9:56:75:88:9a:f5:5b:52:48: 4a:ab:ac:65:ad:25:c9:fa:ee:f3:44:b7:9e:49:3e:05:08:01: 44:08:56:b3:9e:f1:46:32:08:22:be:b1:06:93:b2:04:5d:b4: 09:23:0c:99:c7:91:ff:8f:34:fd:4c:7e:3e:a9:b4:e2:39:58: 49:8a:4d:8a:58:09:9e:d5:b8:0f:2b:e1:19:8f:a8:ba:5b:fe: be:f4:82:32:98:e7:15:61:9d:9c:d5:f4:33:f6:b0:07:02:58: 7f:0d:bb:ab:62:81:28:9b:cd:14:57:52:60:e1:29:5c:ba:6c: 80:5b:47:bb:59:b8:be:b5:a5:20:43:4f:6b:b7:05:1c:22:83: 4f:97:20:3d:1b:4e:5c:f3:71:f3:43:7c:d3:d0:bc:aa:0d:52: fb:ff:40:f0:bb:ed:13:b8:da:85:2c:1d:0c:4b:e6:9f:ad:51: 29:19:2d:0b:ba:8e:0d:89:38:29:d5:9c:48:f3:ec:8d:1d:cd: 61:4f:f1:16:5d:f5:36:c6:b8:05:7d:ab:28:0c:a7:7a:30:5d: ff:58:42:f2:b9:b2:63:43:81:f8:c4:65:7b:49:80:c5:5a:ee: a7:17:12:aa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87f5t9YKJ0VcOqN7rI1PnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZTUxNjk0YzRkNDZiNGZjYzAyZmFlNzFlNWRiOTQyYTcx MDhlNDcwHhcNMjYwMTAyMDQxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYmM5NTNiOTRjMDI3ZWIyZDBjY2NmMDg5MjM3YmYzMTg5OWM0MWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArV5Fyotgj7AxaT31Zuyb6QM0Mchi aDW8wi9BKkJPbba0TEZC5Prltuvwsw1e7EWg+eAdn+LilCQZ8iuFawgp0ciGBjg5 fIyrAMHdL/qufAIfF0Z/6cjEUdUDtoC36JjSHAZnkZS8c4f4AYP3A/d3/LNM24mT jr7W4PmJRWCyoFT/Z2H+Hwvu8y45xt33DzUOEA4BlVoMenGiTgLUQdljx4cAQjrv 4RaranlsJ1S78Dv9O6VfBu10JjDfDNbv+AYazNMLYyptWRuliJ5FARKkGg1deSb7 owwNSYuNsBXRIow8sHUTaVsC8Xn+WVt6s5MAD1NSIjj5OQPBJjXWDzcB1QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCvJU7lMAn6y0MzPCJI3vzGJnEGhMB8GA1UdIwQY MBaAFEnlFpTE1GtPzAL65x5duUKnEI5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQt MTkxODliM2M5YzdkLzEvSzhsVHVVd0NmckxRek04SWtqZV9NWW1jUWFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQtMTkxODliM2M5Yzdk LzEvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUEfqMA0G CSqGSIb3DQEBCwUAA4IBAQAV0PXDi0mCEfqNH1XGWhrDRXjHH2xbI83It77ZVnWI mvVbUkhKq6xlrSXJ+u7zRLeeST4FCAFECFaznvFGMggivrEGk7IEXbQJIwyZx5H/ jzT9TH4+qbTiOVhJik2KWAme1bgPK+EZj6i6W/6+9IIymOcVYZ2c1fQz9rAHAlh/ DburYoEom80UV1Jg4SlcumyAW0e7Wbi+taUgQ09rtwUcIoNPlyA9G05c83HzQ3zT 0LyqDVL7/0Dwu+0TuNqFLB0MS+afrVEpGS0Luo4NiTgp1ZxI8+yNHc1hT/EWXfU2 xrgFfasoDKd6MF3/WELyubJjQ4H4xGV7SYDFWu6nFxKq -----END CERTIFICATE-----Generated at Sun Jan 25 14:04:46 2026 by rpki-client