This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/JtY0Nc5KsnYFhq9gwtFkh9ll4_c.roa File: JtY0Nc5KsnYFhq9gwtFkh9ll4_c.roa (raw, json) Hash identifier: 2ee0ztpkOTTrJZ/rJndPjJzssmpY0MoOu/loesqHer8= Subject key identifier: 26:D6:34:35:CE:4A:B2:76:05:86:AF:60:C2:D1:64:87:D9:65:E3:F7 Certificate issuer: /CN=5ca053dfe7712ee63dbff640fae07308d66ce748 Certificate serial: 019B8D3F62DDCF617B4476ADB29DEE75785A Authority key identifier: 5C:A0:53:DF:E7:71:2E:E6:3D:BF:F6:40:FA:E0:73:08:D6:6C:E7:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XKBT3-dxLuY9v_ZA-uBzCNZs50g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/JtY0Nc5KsnYFhq9gwtFkh9ll4_c.roa Signing time: Mon 05 Jan 2026 08:21:40 +0000 ROA not before: Mon 05 Jan 2026 08:21:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8426 IP address blocks: 80.67.96.0/20 maxlen: 24 81.92.128.0/20 maxlen: 20 81.92.128.0/21 maxlen: 21 81.92.136.0/21 maxlen: 21 92.54.0.0/18 maxlen: 18 92.54.33.0/24 maxlen: 24 185.10.168.0/22 maxlen: 22 2a02:a0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft rsync://rpki.ripe.net/repository/DEFAULT/XKBT3-dxLuY9v_ZA-uBzCNZs50g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8d:3f:62:dd:cf:61:7b:44:76:ad:b2:9d:ee:75:78:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ca053dfe7712ee63dbff640fae07308d66ce748 Validity Not Before: Jan 5 08:21:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=26d63435ce4ab2760586af60c2d16487d965e3f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a8:a2:fa:05:79:99:3b:ef:11:42:02:d7:e1: 8d:54:ea:a0:65:ce:6a:ff:3f:68:e5:00:91:89:01: 16:40:a4:31:a8:bb:c1:86:55:6d:5b:6c:f4:a9:5d: c0:f6:75:37:d6:53:88:83:b0:b7:a9:ac:62:b6:47: 06:9b:3a:b1:a5:6a:8a:be:92:e2:a3:34:d8:79:e5: a9:dd:13:52:0e:c5:c7:41:67:b8:ac:e4:f2:45:42: c2:bb:77:c2:0c:15:aa:80:20:47:50:aa:d1:e8:70: 70:85:50:1e:a0:23:24:83:99:2a:6b:95:78:99:8b: 5f:26:cf:29:ab:38:7e:f8:76:4c:7f:95:a7:55:cc: 21:6e:9f:f9:a4:3f:8d:ef:a1:86:ad:c3:9b:b2:5c: 26:c5:b3:32:6a:fa:20:fa:c8:b2:0b:8f:a7:55:3e: 81:ce:79:43:7c:b7:26:97:40:cd:38:cd:bc:10:65: 9f:7d:a9:45:5b:9b:7c:a9:04:48:3b:61:c3:8d:51: 76:2e:4a:4a:6d:67:6e:25:71:b0:82:33:9a:d3:81: f6:9e:c3:44:25:41:97:63:18:af:ad:68:af:fd:3e: b1:dd:fa:49:4e:9e:50:2c:c7:32:aa:d1:80:6c:11: 22:ce:23:de:90:77:3f:88:a1:3a:ef:7a:5b:c1:f7: 99:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:D6:34:35:CE:4A:B2:76:05:86:AF:60:C2:D1:64:87:D9:65:E3:F7 X509v3 Authority Key Identifier: keyid:5C:A0:53:DF:E7:71:2E:E6:3D:BF:F6:40:FA:E0:73:08:D6:6C:E7:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XKBT3-dxLuY9v_ZA-uBzCNZs50g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/JtY0Nc5KsnYFhq9gwtFkh9ll4_c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.67.96.0/20 81.92.128.0/20 92.54.0.0/18 185.10.168.0/22 IPv6: 2a02:a0::/32 Signature Algorithm: sha256WithRSAEncryption a3:fe:64:cb:a5:b7:c0:66:e0:5b:cc:5c:5e:b0:58:3c:8c:38: 05:06:b8:e9:31:f0:97:7c:9b:20:d2:58:11:c3:a0:07:fd:4b: 84:aa:4d:cf:ff:b0:70:8c:9f:c9:c6:0d:db:2d:c8:85:f1:c2: 32:e7:4c:7b:f1:9f:7d:82:08:71:48:56:40:e1:16:7b:22:34: 3b:3c:90:ca:33:97:1a:a5:b0:2b:52:f5:29:53:a5:ca:b4:70: e2:d8:27:c8:a0:58:66:14:35:14:2d:ca:1e:a5:b5:6b:23:b0: 12:5a:c5:4f:02:3d:92:1a:aa:42:bb:d6:2c:21:46:67:26:13: a4:6d:eb:3e:7f:12:3a:ec:d4:24:54:9d:ac:cc:74:ab:ad:e5: fc:d8:3c:6c:3f:0c:7e:77:7d:42:0b:08:5d:66:b9:5f:78:35: 51:f6:7f:35:26:60:ca:33:7d:5c:e2:89:3b:fb:fa:47:f6:44: 2f:d0:31:fe:7c:26:34:37:cf:08:8f:ae:29:df:5c:68:20:92: 2d:9d:e7:d2:5e:07:08:d7:54:ea:20:3b:78:bd:02:fa:42:31: c9:ed:72:0c:b9:32:c4:23:2a:d8:b7:88:d1:d3:c8:a8:73:6d: 67:39:8c:bd:02:56:25:6d:b4:bb:0f:5c:0f:79:e6:43:5c:31: eb:03:e2:74 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZuNP2Ldz2F7RHatsp3udXhaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjYTA1M2RmZTc3MTJlZTYzZGJmZjY0MGZhZTA3MzA4ZDY2 Y2U3NDgwHhcNMjYwMTA1MDgyMTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNmQ2MzQzNWNlNGFiMjc2MDU4NmFmNjBjMmQxNjQ4N2Q5NjVlM2Y3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqii+gV5mTvvEUIC1+GNVOqgZc5q /z9o5QCRiQEWQKQxqLvBhlVtW2z0qV3A9nU31lOIg7C3qaxitkcGmzqxpWqKvpLi ozTYeeWp3RNSDsXHQWe4rOTyRULCu3fCDBWqgCBHUKrR6HBwhVAeoCMkg5kqa5V4 mYtfJs8pqzh++HZMf5WnVcwhbp/5pD+N76GGrcObslwmxbMyavog+siyC4+nVT6B znlDfLcml0DNOM28EGWffalFW5t8qQRIO2HDjVF2LkpKbWduJXGwgjOa04H2nsNE JUGXYxivrWiv/T6x3fpJTp5QLMcyqtGAbBEiziPekHc/iKE673pbwfeZEQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFCbWNDXOSrJ2BYavYMLRZIfZZeP3MB8GA1UdIwQY MBaAFFygU9/ncS7mPb/2QPrgcwjWbOdIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEtCVDMtZHhMdVk5dl9aQS11QnpDTlpzNTBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9lYmJkMmMtYmY1YS00NmRhLTg2ZmIt ODBjM2VhNGZkMDAwLzEvSnRZME5jNUtzbllGaHE5Z3d0RmtoOWxsNF9jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy9lYmJkMmMtYmY1YS00NmRhLTg2ZmItODBjM2VhNGZkMDAw LzEvWEtCVDMtZHhMdVk5dl9aQS11QnpDTlpzNTBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQEUENgAwQE UVyAAwQGXDYAAwQCuQqoMA0EAgACMAcDBQAqAgCgMA0GCSqGSIb3DQEBCwUAA4IB AQCj/mTLpbfAZuBbzFxesFg8jDgFBrjpMfCXfJsg0lgRw6AH/UuEqk3P/7BwjJ/J xg3bLciF8cIy50x78Z99gghxSFZA4RZ7IjQ7PJDKM5capbArUvUpU6XKtHDi2CfI oFhmFDUULcoepbVrI7ASWsVPAj2SGqpCu9YsIUZnJhOkbes+fxI67NQkVJ2szHSr reX82DxsPwx+d31CCwhdZrlfeDVR9n81JmDKM31c4ok7+/pH9kQv0DH+fCY0N88I j64p31xoIJItnefSXgcI11TqIDt4vQL6QjHJ7XIMuTLEIyrYt4jR08ioc21nOYy9 AlYlbbS7D1wPeeZDXDHrA+J0 -----END CERTIFICATE-----Generated at Sun Jan 25 21:26:06 2026 by rpki-client