This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/IuvYb1hnFC_R3vbmr804zDcQ564.roa File: IuvYb1hnFC_R3vbmr804zDcQ564.roa (raw, json) Hash identifier: NxUdZjpgsvcOhxi2GuJmepTyufWX4gZ8PVnHKb+FC34= Subject key identifier: 22:EB:D8:6F:58:67:14:2F:D1:DE:F6:E6:AF:CD:38:CC:37:10:E7:AE Certificate issuer: /CN=061702d2c29195fa0a7db11ee465f0c0545d1709 Certificate serial: 019B7EA713B402E342216D6D180B43DA0D95 Authority key identifier: 06:17:02:D2:C2:91:95:FA:0A:7D:B1:1E:E4:65:F0:C0:54:5D:17:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhcC0sKRlfoKfbEe5GXwwFRdFwk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/IuvYb1hnFC_R3vbmr804zDcQ564.roa Signing time: Fri 02 Jan 2026 12:20:37 +0000 ROA not before: Fri 02 Jan 2026 12:20:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6730 IP address blocks: 80.67.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.crl rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.mft rsync://rpki.ripe.net/repository/DEFAULT/BhcC0sKRlfoKfbEe5GXwwFRdFwk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:13:b4:02:e3:42:21:6d:6d:18:0b:43:da:0d:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=061702d2c29195fa0a7db11ee465f0c0545d1709 Validity Not Before: Jan 2 12:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=22ebd86f5867142fd1def6e6afcd38cc3710e7ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ad:7a:5c:4e:9b:e8:8b:ae:78:77:b6:af:07: 03:39:8f:df:dd:cc:c1:4e:8e:78:81:e4:1b:04:e2: 30:a6:52:b3:bc:a8:15:6d:86:a1:ef:3e:7e:d7:4a: 32:ef:ba:3b:ab:ee:9d:f7:bd:7e:5c:f7:9f:f1:2f: de:70:aa:29:1c:fb:cd:f7:88:8f:6d:df:5a:5d:5c: 82:75:76:92:6d:2d:64:33:8c:66:96:84:01:7f:20: 0b:13:fc:e4:ec:2f:7b:69:59:2e:08:e2:58:78:8e: 24:f8:11:d4:a3:21:15:1f:76:73:33:d0:e7:76:90: 07:08:ec:35:0b:c5:31:1b:27:6b:9a:cb:59:60:cf: 8d:29:bb:c7:5d:5c:0f:7b:a3:c6:e6:c9:af:08:9c: dd:34:ed:e3:ae:93:3c:e6:2d:47:f2:4c:14:42:7f: 8f:12:d4:88:87:cf:1f:b4:a5:62:27:07:dc:8c:74: f9:30:6a:60:17:b3:30:42:2e:43:eb:50:a7:02:01: 81:23:3b:a2:b2:eb:ed:f2:9e:87:76:b6:31:4d:fb: 3a:72:75:17:33:75:c2:6b:2e:28:bb:47:97:5a:73: b5:0a:20:49:9a:02:b5:a3:7c:78:93:7e:cd:0f:41: 43:ef:c3:40:72:db:b2:08:a4:d4:9c:1a:8a:2c:fe: ab:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:EB:D8:6F:58:67:14:2F:D1:DE:F6:E6:AF:CD:38:CC:37:10:E7:AE X509v3 Authority Key Identifier: keyid:06:17:02:D2:C2:91:95:FA:0A:7D:B1:1E:E4:65:F0:C0:54:5D:17:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhcC0sKRlfoKfbEe5GXwwFRdFwk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/IuvYb1hnFC_R3vbmr804zDcQ564.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.67.144.0/20 Signature Algorithm: sha256WithRSAEncryption 46:72:5b:c1:eb:27:92:76:ca:19:ce:77:04:54:d0:84:1b:9e: da:24:40:09:63:3c:52:80:a4:fd:5b:d7:a3:c2:bf:79:3c:29: a2:7f:6b:c2:04:04:2a:ea:1e:f7:da:cb:aa:6a:31:fd:5c:c0: 4a:6f:f2:c6:88:3c:75:a1:47:9c:21:1f:6a:9c:57:0b:63:70: 73:12:e4:a0:f1:d3:24:66:e8:37:c3:44:fd:fe:c0:92:b1:0e: e8:3a:f4:1f:1e:24:b2:14:4c:2b:b8:97:c2:40:7f:99:50:38: 43:79:b1:ed:97:34:a9:52:a8:a8:9e:d6:60:9e:7f:bb:8a:1a: 52:18:5c:09:e6:0c:71:fd:67:6c:90:92:ee:ba:e1:6d:60:83: 54:ff:36:e5:b4:9c:3d:ff:9e:29:86:05:5c:d3:14:92:76:31: 8c:b3:05:e9:03:6c:f0:1a:75:6d:f6:df:0c:42:7a:7a:17:bd: af:61:d3:73:9f:f1:1e:67:2d:8a:39:d0:73:40:1f:f2:0a:80: 2d:c1:1b:73:4e:95:de:a4:7c:dd:89:6a:d0:d1:8a:00:2d:68: b0:ec:a2:87:49:ec:84:af:e9:16:47:d9:ac:c8:f4:e4:8c:c7: 2b:4a:78:8a:50:e9:b3:5c:ee:57:0a:90:6b:2d:a8:d1:f2:70: da:96:36:4a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pxO0AuNCIW1tGAtD2g2VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2MTcwMmQyYzI5MTk1ZmEwYTdkYjExZWU0NjVmMGMwNTQ1 ZDE3MDkwHhcNMjYwMTAyMTIyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMmViZDg2ZjU4NjcxNDJmZDFkZWY2ZTZhZmNkMzhjYzM3MTBlN2FlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2K16XE6b6IuueHe2rwcDOY/f3czB To54geQbBOIwplKzvKgVbYah7z5+10oy77o7q+6d971+XPef8S/ecKopHPvN94iP bd9aXVyCdXaSbS1kM4xmloQBfyALE/zk7C97aVkuCOJYeI4k+BHUoyEVH3ZzM9Dn dpAHCOw1C8UxGydrmstZYM+NKbvHXVwPe6PG5smvCJzdNO3jrpM85i1H8kwUQn+P EtSIh88ftKViJwfcjHT5MGpgF7MwQi5D61CnAgGBIzuisuvt8p6HdrYxTfs6cnUX M3XCay4ou0eXWnO1CiBJmgK1o3x4k37ND0FD78NActuyCKTUnBqKLP6rJQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCLr2G9YZxQv0d725q/NOMw3EOeuMB8GA1UdIwQY MBaAFAYXAtLCkZX6Cn2xHuRl8MBUXRcJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmhjQzBzS1JsZm9LZmJFZTVHWHd3RlJkRndrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8wMGIyOGItY2M3Mi00NDA2LWI2ZDgt NGM1MWM2Nzk3YzFmLzEvSXV2WWIxaG5GQ19SM3ZibXI4MDR6RGNRNTY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS8wMGIyOGItY2M3Mi00NDA2LWI2ZDgtNGM1MWM2Nzk3YzFm LzEvQmhjQzBzS1JsZm9LZmJFZTVHWHd3RlJkRndrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEUEOQMA0G CSqGSIb3DQEBCwUAA4IBAQBGclvB6yeSdsoZzncEVNCEG57aJEAJYzxSgKT9W9ej wr95PCmif2vCBAQq6h732suqajH9XMBKb/LGiDx1oUecIR9qnFcLY3BzEuSg8dMk Zug3w0T9/sCSsQ7oOvQfHiSyFEwruJfCQH+ZUDhDebHtlzSpUqiontZgnn+7ihpS GFwJ5gxx/WdskJLuuuFtYINU/zbltJw9/54phgVc0xSSdjGMswXpA2zwGnVt9t8M Qnp6F72vYdNzn/EeZy2KOdBzQB/yCoAtwRtzTpXepHzdiWrQ0YoALWiw7KKHSeyE r+kWR9msyPTkjMcrSniKUOmzXO5XCpBrLajR8nDaljZK -----END CERTIFICATE-----Generated at Mon Jan 26 02:02:54 2026 by rpki-client