This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/ODSmnD95d2Jr_JTaPe13IWewOF0.roa File: ODSmnD95d2Jr_JTaPe13IWewOF0.roa (raw, json) Hash identifier: 6ppsymssal4/4jSeEiGkK1Zc02HPAUAf6tg24yy7s8A= Subject key identifier: 38:34:A6:9C:3F:79:77:62:6B:FC:94:DA:3D:ED:77:21:67:B0:38:5D Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725 Certificate serial: 019B79EBE346EECBE8A82469A836D29C1D85 Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/ODSmnD95d2Jr_JTaPe13IWewOF0.roa Signing time: Thu 01 Jan 2026 14:17:40 +0000 ROA not before: Thu 01 Jan 2026 14:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202856 IP address blocks: 80.120.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:e3:46:ee:cb:e8:a8:24:69:a8:36:d2:9c:1d:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725 Validity Not Before: Jan 1 14:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3834a69c3f7977626bfc94da3ded772167b0385d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:0f:dc:45:fc:ac:6e:56:90:e2:73:53:ca:25: ea:12:02:22:a8:43:77:7e:cf:69:51:a4:61:10:64: d3:cc:58:83:2a:38:b8:62:07:fe:f0:3b:72:9b:04: 24:dd:d7:81:b3:4a:eb:a5:be:97:9c:cd:6e:53:a7: a3:9f:75:21:2e:6c:ed:1a:a2:f2:d1:b1:44:08:58: 32:c0:8b:2a:0b:65:1c:81:dc:3e:64:de:9c:07:1c: da:18:fd:7d:f0:bd:ba:59:46:8f:5a:20:04:1c:ac: ba:b3:f8:da:15:3c:b3:a9:93:ca:0b:5d:fe:5a:1e: 3e:01:91:f2:29:a1:28:63:7c:97:6d:c3:a4:66:88: 6d:09:d3:9f:d0:d1:a5:50:3c:15:a5:65:39:67:d3: 01:aa:96:33:a7:e3:71:84:3b:61:fe:5c:70:02:de: 30:43:bd:f4:ac:b3:1a:29:a5:f6:f4:51:1a:73:95: d3:17:44:c6:c9:84:3f:49:ef:00:ed:da:6d:62:2b: bb:7c:73:20:8a:a5:92:0e:d9:bf:3b:4d:80:3e:7a: c4:cc:32:5f:db:84:74:24:74:31:94:4c:e6:fe:f4: d8:e3:35:a1:1f:e8:95:e0:1a:bd:28:59:d0:83:59: c7:d8:53:c9:cf:65:7f:db:9e:17:de:03:68:9b:37: 36:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:34:A6:9C:3F:79:77:62:6B:FC:94:DA:3D:ED:77:21:67:B0:38:5D X509v3 Authority Key Identifier: keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/ODSmnD95d2Jr_JTaPe13IWewOF0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.120.145.0/24 Signature Algorithm: sha256WithRSAEncryption d8:50:3f:a0:70:12:58:4e:75:1b:2d:c8:22:28:da:e2:d3:57: d9:7f:e2:06:86:7b:af:4f:b0:b8:d8:78:fa:ff:cd:9b:5c:50: 9f:fc:93:67:21:d0:c8:a3:c3:bd:fe:b3:8b:6a:f5:bd:c5:b9: 9d:e3:9c:9b:eb:ce:87:8a:6e:b4:32:63:cd:e6:a3:37:cd:22: 74:16:8f:1d:c6:aa:a1:20:63:f3:11:84:37:3f:dd:cb:b3:94: 34:3a:d9:67:61:54:8b:74:68:d7:83:4d:e8:83:5e:4e:81:2a: 29:24:d8:16:e3:ca:83:b4:3c:d4:76:5b:84:de:63:33:7e:c2: 59:5b:26:ad:a3:db:e4:e8:fd:bd:ae:a6:2f:79:56:3d:2e:5b: 49:78:27:6e:f3:54:78:34:91:31:7c:96:2c:d4:2d:f2:e4:e4: 9c:f3:40:69:97:76:42:85:d8:3d:12:e6:13:6c:76:9c:61:e2: d3:c3:9f:4e:01:a7:6a:c0:6f:39:5e:6e:3d:2d:d8:eb:0a:d6: ed:c0:ba:88:3a:63:2f:fa:a4:1f:b3:50:0b:aa:1e:38:5a:2a: 61:fc:f6:48:20:eb:9c:53:3d:46:ad:2c:58:59:b7:ff:87:64: f7:f5:bc:f0:94:d9:5f:b6:71:0c:0f:6b:51:bd:80:0f:0d:dd: 90:c6:d8:da -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt56+NG7svoqCRpqDbSnB2FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3MGM1ODlhNGYyMmE5Y2EyZmY5OWI0YzQ4ZjhiZGY0OTI4 NzE3MjUwHhcNMjYwMTAxMTQxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODM0YTY5YzNmNzk3NzYyNmJmYzk0ZGEzZGVkNzcyMTY3YjAzODVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2w/cRfysblaQ4nNTyiXqEgIiqEN3 fs9pUaRhEGTTzFiDKji4Ygf+8DtymwQk3deBs0rrpb6XnM1uU6ejn3UhLmztGqLy 0bFECFgywIsqC2Ucgdw+ZN6cBxzaGP198L26WUaPWiAEHKy6s/jaFTyzqZPKC13+ Wh4+AZHyKaEoY3yXbcOkZohtCdOf0NGlUDwVpWU5Z9MBqpYzp+NxhDth/lxwAt4w Q730rLMaKaX29FEac5XTF0TGyYQ/Se8A7dptYiu7fHMgiqWSDtm/O02APnrEzDJf 24R0JHQxlEzm/vTY4zWhH+iV4Bq9KFnQg1nH2FPJz2V/254X3gNomzc2OQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDg0ppw/eXdia/yU2j3tdyFnsDhdMB8GA1UdIwQY MBaAFIcMWJpPIqnKL/mbTEj4vfSShxclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWIt ODQ5ZDNhNmI5YzJkLzEvT0RTbW5EOTVkMkpyX0pUYVBlMTNJV2V3T0YwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWItODQ5ZDNhNmI5YzJk LzEvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUHiRMA0G CSqGSIb3DQEBCwUAA4IBAQDYUD+gcBJYTnUbLcgiKNri01fZf+IGhnuvT7C42Hj6 /82bXFCf/JNnIdDIo8O9/rOLavW9xbmd45yb686Him60MmPN5qM3zSJ0Fo8dxqqh IGPzEYQ3P93Ls5Q0OtlnYVSLdGjXg03og15OgSopJNgW48qDtDzUdluE3mMzfsJZ Wyato9vk6P29rqYveVY9LltJeCdu81R4NJExfJYs1C3y5OSc80Bpl3ZChdg9EuYT bHacYeLTw59OAadqwG85Xm49LdjrCtbtwLqIOmMv+qQfs1ALqh44Wiph/PZIIOuc Uz1GrSxYWbf/h2T39bzwlNlftnEMD2tRvYAPDd2Qxtja -----END CERTIFICATE-----Generated at Mon Jan 26 07:40:25 2026 by rpki-client