This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/9f2y3QOHPcUlj4GbD4dbGsxczc0.roa File: 9f2y3QOHPcUlj4GbD4dbGsxczc0.roa (raw, json) Hash identifier: VohUE6fGs/MuTX+1KJCdVNA7yWjIfacNBWLSKnhBm6g= Subject key identifier: F5:FD:B2:DD:03:87:3D:C5:25:8F:81:9B:0F:87:5B:1A:CC:5C:CD:CD Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5AEC049CE7ED2F2974FA3CC6933D6C Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/9f2y3QOHPcUlj4GbD4dbGsxczc0.roa Signing time: Thu 01 Jan 2026 16:18:57 +0000 ROA not before: Thu 01 Jan 2026 16:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 400810 IP address blocks: 80.240.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:ec:04:9c:e7:ed:2f:29:74:fa:3c:c6:93:3d:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f5fdb2dd03873dc5258f819b0f875b1acc5ccdcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:92:2a:f1:18:82:36:86:0b:6a:4a:24:16:f9: 2d:45:1f:bb:54:51:40:9b:ef:1d:9a:08:97:84:88: 82:47:34:01:a6:54:24:52:e9:1c:83:1c:3e:54:54: 0c:a6:f1:04:bd:ad:40:89:ac:bf:d8:03:c7:c8:33: fc:c1:67:98:bd:48:13:5d:06:ca:7d:55:db:2c:db: 7e:52:f9:5d:b1:ac:af:43:b5:07:9e:35:46:e7:0e: e2:33:5a:38:07:7c:84:47:18:0d:86:2c:87:02:ee: d0:d5:5e:a4:db:62:da:9f:99:ff:ea:d0:d0:43:f9: cf:8b:cc:7f:55:84:11:bf:01:56:ba:ba:97:4d:27: 05:6b:34:c3:68:31:c9:13:44:e7:0b:23:76:36:4f: f5:0c:e8:b5:89:10:41:a6:6b:d2:e9:79:18:46:66: 06:21:4e:47:eb:3d:01:c7:53:03:66:ca:e2:7d:c7: 50:bd:3a:05:3c:c3:0b:34:fe:2f:96:bb:c4:e8:8a: de:f6:5c:b7:bd:e5:73:e3:fe:c5:f6:01:1b:29:53: 4a:6f:50:57:7e:e5:20:69:a7:86:8b:4c:17:db:55: e7:66:75:f7:ea:ac:b9:50:25:ce:40:ae:a1:ef:57: 2c:54:69:91:80:69:28:1e:c9:1c:33:01:dd:9a:3b: 4f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:FD:B2:DD:03:87:3D:C5:25:8F:81:9B:0F:87:5B:1A:CC:5C:CD:CD X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/9f2y3QOHPcUlj4GbD4dbGsxczc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.240.84.0/24 Signature Algorithm: sha256WithRSAEncryption 80:85:85:5c:ce:69:28:a8:5b:13:85:93:d1:5d:3f:18:7d:8c: 10:27:44:d2:3a:72:3a:6b:63:2e:d5:35:62:53:84:4a:33:8b: bb:26:23:02:d2:8e:79:61:f2:f8:f9:32:7f:22:2c:5c:27:c1: ab:d1:a9:c1:63:8a:78:9c:d6:03:ea:b0:68:94:51:f0:70:12: be:79:af:42:98:12:cd:04:94:8e:2c:24:ea:0f:df:a7:e8:9f: d8:2c:4c:cc:f3:66:00:6c:82:39:3e:fd:fd:e2:0f:b6:d2:86: 8a:5a:22:b5:11:7a:bd:c2:bd:36:0c:0f:6a:c9:54:c9:cf:ed: c5:08:3e:0d:df:4a:92:59:41:d8:2a:e0:81:e9:c6:88:f9:b9: 54:28:3d:55:b0:80:f1:6a:51:a0:3e:c5:aa:0f:21:87:44:4a: 1c:6f:0b:a7:9b:d0:3b:03:9e:9c:2e:d6:5b:42:20:4b:e1:f4: b2:1a:58:63:f5:29:66:fd:78:17:99:fc:68:70:64:7c:30:71: e5:15:75:f9:5c:69:1f:aa:b3:f5:3e:48:36:34:81:60:16:6b: 48:f9:93:1e:ed:4a:ac:1b:5a:2b:99:b9:5a:a4:26:d6:5e:d5: b5:15:fa:2e:52:30:a7:c2:82:bb:3c:e3:9a:2f:8c:63:db:32: 7b:6f:00:a3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WuwEnOftLyl0+jzGkz1sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNWZkYjJkZDAzODczZGM1MjU4ZjgxOWIwZjg3NWIxYWNjNWNjZGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpIq8RiCNoYLakokFvktRR+7VFFA m+8dmgiXhIiCRzQBplQkUukcgxw+VFQMpvEEva1Aiay/2APHyDP8wWeYvUgTXQbK fVXbLNt+UvldsayvQ7UHnjVG5w7iM1o4B3yERxgNhiyHAu7Q1V6k22Lan5n/6tDQ Q/nPi8x/VYQRvwFWurqXTScFazTDaDHJE0TnCyN2Nk/1DOi1iRBBpmvS6XkYRmYG IU5H6z0Bx1MDZsrifcdQvToFPMMLNP4vlrvE6Ire9ly3veVz4/7F9gEbKVNKb1BX fuUgaaeGi0wX21XnZnX36qy5UCXOQK6h71csVGmRgGkoHskcMwHdmjtP8QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPX9st0Dhz3FJY+Bmw+HWxrMXM3NMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvOWYyeTNRT0hQY1VsajRHYkQ0ZGJHc3hjemMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUPBUMA0G CSqGSIb3DQEBCwUAA4IBAQCAhYVczmkoqFsThZPRXT8YfYwQJ0TSOnI6a2Mu1TVi U4RKM4u7JiMC0o55YfL4+TJ/IixcJ8Gr0anBY4p4nNYD6rBolFHwcBK+ea9CmBLN BJSOLCTqD9+n6J/YLEzM82YAbII5Pv394g+20oaKWiK1EXq9wr02DA9qyVTJz+3F CD4N30qSWUHYKuCB6caI+blUKD1VsIDxalGgPsWqDyGHREocbwunm9A7A56cLtZb QiBL4fSyGlhj9Slm/XgXmfxocGR8MHHlFXX5XGkfqrP1Pkg2NIFgFmtI+ZMe7Uqs G1ormblapCbWXtW1FfouUjCnwoK7POOaL4xj2zJ7bwCj -----END CERTIFICATE-----Generated at Sun Jan 25 07:17:13 2026 by rpki-client