This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/Ct0sflIrK_cXgAXTEX8rXCBCKlM.roa File: Ct0sflIrK_cXgAXTEX8rXCBCKlM.roa (raw, json) Hash identifier: pgN9gxLU+eOKOCJZYi81vZeUlJY1MKjflpGIHAxbUlw= Subject key identifier: 0A:DD:2C:7E:52:2B:2B:F7:17:80:05:D3:11:7F:2B:5C:20:42:2A:53 Certificate issuer: /CN=d3cb5cecc213b9f86dbba518521e8546ec93861c Certificate serial: 019B77595C96227EB3943D56C8BC31A5F6FD Authority key identifier: D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/Ct0sflIrK_cXgAXTEX8rXCBCKlM.roa Signing time: Thu 01 Jan 2026 02:18:23 +0000 ROA not before: Thu 01 Jan 2026 02:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24806 IP address blocks: 80.211.192.0/19 maxlen: 24 194.182.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:5c:96:22:7e:b3:94:3d:56:c8:bc:31:a5:f6:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3cb5cecc213b9f86dbba518521e8546ec93861c Validity Not Before: Jan 1 02:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0add2c7e522b2bf7178005d3117f2b5c20422a53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:92:1b:96:b8:55:8f:a1:67:98:33:c1:f4:33: 4d:2c:56:87:f5:31:01:b7:85:ed:f3:54:23:d8:91: 4e:1b:92:b9:d7:45:8f:0f:6f:c1:84:67:1e:e6:08: 7c:ca:5a:bb:38:c4:61:a9:62:d6:27:e9:e7:6d:52: b0:da:7b:a1:ff:97:d6:f2:89:0d:a1:ee:1a:ad:e7: 98:66:8f:6e:06:e8:19:57:f8:a8:aa:47:b3:6e:51: e7:c0:e4:33:0c:a6:13:a8:1d:e4:c8:c9:a8:56:9d: a0:4a:ae:af:b1:e6:81:af:b2:de:52:3e:62:8f:24: fd:7b:cb:ea:b1:77:c8:b0:2c:98:09:b3:c9:35:ca: dc:b7:2c:d2:61:cd:5f:e4:76:cb:9f:d5:c3:e3:f4: 63:7f:40:a5:40:42:2a:f0:48:50:67:fa:88:40:85: 04:89:3a:de:56:3f:49:9b:19:af:33:08:1d:de:d3: 87:74:de:da:11:98:47:d2:44:51:69:03:5e:05:15: 1a:7c:b6:45:3a:74:7d:53:22:9f:7a:98:5d:c9:5c: 86:08:40:5c:cc:5f:30:2a:ee:6c:3b:7b:b0:c4:13: a3:82:71:3d:ea:d7:8d:c8:2c:19:ad:9a:55:ec:89: 29:48:e4:f5:23:0d:5f:80:3d:87:90:64:3d:1f:fd: 06:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:DD:2C:7E:52:2B:2B:F7:17:80:05:D3:11:7F:2B:5C:20:42:2A:53 X509v3 Authority Key Identifier: keyid:D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/Ct0sflIrK_cXgAXTEX8rXCBCKlM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.211.192.0/19 194.182.64.0/19 Signature Algorithm: sha256WithRSAEncryption 66:e5:9b:64:33:f1:73:df:ab:37:66:c3:d0:98:63:65:aa:ac: ad:ee:ab:89:80:fa:09:82:76:20:e9:2b:4d:aa:67:c6:f7:21: df:24:9d:3c:69:c9:17:02:9f:92:c6:78:c4:f7:c1:64:64:9c: 8d:96:9f:68:ee:e5:d0:65:68:c3:52:df:46:49:bd:5e:c2:aa: e7:15:34:08:c4:cf:f2:40:28:af:68:17:04:35:c8:ed:3b:b8: b0:86:5d:ef:a0:c0:b9:34:bb:d7:f7:fb:89:cb:dc:22:82:df: c9:62:f7:86:bc:5b:66:ae:68:70:53:cd:6c:a7:69:32:24:bf: 03:84:48:44:2f:75:c2:89:bc:19:fc:87:72:84:67:d7:e3:55: 3c:72:c5:33:af:16:7d:b2:64:0e:20:36:98:ad:37:e8:ca:d9: e1:10:42:1e:36:ae:41:31:f4:bb:18:4c:14:0b:f9:bd:88:81: c1:79:6d:64:97:8d:ab:6f:c2:00:2e:37:bb:94:db:ba:06:96: 32:4a:60:6a:8a:b0:af:7c:9a:11:a3:d4:55:0b:ef:9c:79:c1: 3e:87:0f:4f:3a:54:3a:fd:a3:c9:bf:16:a4:64:2c:1a:38:62: da:c7:d1:94:bd:6e:22:d8:54:a9:bd:2b:5a:f8:76:db:c7:14: 29:a6:98:f5 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3WVyWIn6zlD1WyLwxpfb9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzY2I1Y2VjYzIxM2I5Zjg2ZGJiYTUxODUyMWU4NTQ2ZWM5 Mzg2MWMwHhcNMjYwMTAxMDIxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYWRkMmM3ZTUyMmIyYmY3MTc4MDA1ZDMxMTdmMmI1YzIwNDIyYTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZIblrhVj6FnmDPB9DNNLFaH9TEB t4Xt81Qj2JFOG5K510WPD2/BhGce5gh8ylq7OMRhqWLWJ+nnbVKw2nuh/5fW8okN oe4areeYZo9uBugZV/ioqkezblHnwOQzDKYTqB3kyMmoVp2gSq6vseaBr7LeUj5i jyT9e8vqsXfIsCyYCbPJNcrctyzSYc1f5HbLn9XD4/Rjf0ClQEIq8EhQZ/qIQIUE iTreVj9JmxmvMwgd3tOHdN7aEZhH0kRRaQNeBRUafLZFOnR9UyKfephdyVyGCEBc zF8wKu5sO3uwxBOjgnE96teNyCwZrZpV7IkpSOT1Iw1fgD2HkGQ9H/0GqwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFArdLH5SKyv3F4AF0xF/K1wgQipTMB8GA1UdIwQY MBaAFNPLXOzCE7n4bbulGFIehUbsk4YcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDh0YzdNSVR1Zmh0dTZVWVVoNkZSdXlUaGh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9lMTE3ZmUtYzllNy00ZDQxLTk0ZGYt ODQyNjk0MTJkNTYxLzEvQ3Qwc2ZsSXJLX2NYZ0FYVEVYOHJYQ0JDS2xNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9lMTE3ZmUtYzllNy00ZDQxLTk0ZGYtODQyNjk0MTJkNTYx LzEvMDh0YzdNSVR1Zmh0dTZVWVVoNkZSdXlUaGh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFUNPAAwQF wrZAMA0GCSqGSIb3DQEBCwUAA4IBAQBm5ZtkM/Fz36s3ZsPQmGNlqqyt7quJgPoJ gnYg6StNqmfG9yHfJJ08ackXAp+SxnjE98FkZJyNlp9o7uXQZWjDUt9GSb1ewqrn FTQIxM/yQCivaBcENcjtO7iwhl3voMC5NLvX9/uJy9wigt/JYveGvFtmrmhwU81s p2kyJL8DhEhEL3XCibwZ/IdyhGfX41U8csUzrxZ9smQOIDaYrTfoytnhEEIeNq5B MfS7GEwUC/m9iIHBeW1kl42rb8IALje7lNu6BpYySmBqirCvfJoRo9RVC++cecE+ hw9POlQ6/aPJvxakZCwaOGLax9GUvW4i2FSpvSta+HbbxxQpppj1 -----END CERTIFICATE-----Generated at Mon Jan 26 05:49:43 2026 by rpki-client