This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/b2A87lKXZV-LA0ZGDO4bCLP_qZk.roa File: b2A87lKXZV-LA0ZGDO4bCLP_qZk.roa (raw, json) Hash identifier: fj4a7LJXRs7D1MouPdKAx8xun8DGteQiIPGE+YxQovY= Subject key identifier: 6F:60:3C:EE:52:97:65:5F:8B:03:46:46:0C:EE:1B:08:B3:FF:A9:99 Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733 Certificate serial: 019B79102DFEDA64BFC3A885E8A9A5576A0C Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/b2A87lKXZV-LA0ZGDO4bCLP_qZk.roa Signing time: Thu 01 Jan 2026 10:17:42 +0000 ROA not before: Thu 01 Jan 2026 10:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 142561 IP address blocks: 80.246.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:2d:fe:da:64:bf:c3:a8:85:e8:a9:a5:57:6a:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733 Validity Not Before: Jan 1 10:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f603cee5297655f8b0346460cee1b08b3ffa999 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:66:ed:e3:0f:e2:4d:cf:34:2f:b7:cb:57:49: db:e5:7e:df:e7:86:1b:1c:50:02:72:72:fb:e2:2b: 9e:f2:b6:79:fb:91:ad:1b:52:10:c5:d0:25:37:44: 24:60:98:7c:f4:ed:ae:9e:f7:61:0f:33:dc:bc:3f: 4a:4b:92:a1:b6:a1:68:3c:f3:25:79:a4:74:1d:c8: 39:00:d7:c3:21:8f:d6:d8:35:5f:7b:d7:09:9f:24: 40:d5:04:bd:e4:f0:e4:34:96:14:57:69:5c:71:35: e6:68:4e:40:eb:ab:fb:e0:67:6f:04:eb:89:cb:27: 41:b4:75:04:16:3b:5e:81:ed:0b:7b:89:d2:e6:08: d1:76:51:da:07:d6:0d:89:90:ca:61:3c:6a:9e:f9: 81:65:4e:80:92:32:fa:36:71:40:cf:ed:1a:aa:0d: 43:2b:25:a2:ba:f5:af:45:a0:b9:9a:a9:77:41:c5: d7:3b:e8:15:ba:32:96:5f:cc:2f:d8:4c:cb:89:8a: f0:72:9b:73:d1:a2:88:14:41:5e:1d:30:71:76:61: 1b:51:6e:55:b9:c9:e0:55:67:84:fb:f5:c0:af:4d: 45:fd:a7:69:81:eb:cb:6e:77:df:c1:93:23:c3:95: 23:a2:03:66:10:5f:67:75:35:ce:58:4f:91:3f:13: 74:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:60:3C:EE:52:97:65:5F:8B:03:46:46:0C:EE:1B:08:B3:FF:A9:99 X509v3 Authority Key Identifier: keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/b2A87lKXZV-LA0ZGDO4bCLP_qZk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.246.224.0/24 Signature Algorithm: sha256WithRSAEncryption 02:f6:57:5f:51:37:a7:1d:b4:50:ec:ca:01:ac:a3:46:34:8e: bd:d0:8c:5c:9c:23:f7:72:23:6d:c3:85:39:63:f5:22:61:bc: 62:fa:6b:d1:c3:a1:2b:cf:c1:3c:f9:db:8e:3b:eb:4b:70:eb: 35:1a:5a:af:88:5b:12:9d:68:c2:ea:23:6e:d1:51:b2:f8:a5: 86:78:60:6b:e1:0c:ee:05:03:0a:46:bc:bb:9d:04:fd:b2:8a: fc:b6:14:e5:69:b7:e9:d2:51:ec:b4:d7:ea:41:97:1a:48:46: 59:9d:02:26:f0:ea:cd:be:56:50:6c:3a:9e:dc:e0:c2:ee:2b: c6:54:ed:7b:f8:22:97:3a:04:4a:66:47:e9:32:51:40:b7:0c: 22:3a:3a:78:ba:52:b4:15:2c:23:6c:56:16:85:7e:48:93:5c: 75:cc:b7:2c:a7:0f:5c:a2:a1:b8:c0:40:4e:ef:b0:eb:c8:b2: 00:52:96:54:c1:7e:45:99:b1:db:48:90:86:11:c6:19:73:f0: 6a:a8:97:5a:f0:45:79:cf:aa:16:7e:3d:7d:9e:93:8d:63:e1: 50:29:33:96:45:37:00:7a:f1:9b:73:e5:b9:26:cb:3f:10:4e: 9c:4c:55:c2:92:43:07:8a:5b:ef:cd:71:db:79:37:33:ab:9a: 07:51:88:c2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EC3+2mS/w6iF6KmlV2oMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1NjM3NjkyZmY1YzQ1NDg2ZDEwNTNiMTQ5ZGMxNDIwMDI2 Y2Q3MzMwHhcNMjYwMTAxMTAxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjYwM2NlZTUyOTc2NTVmOGIwMzQ2NDYwY2VlMWIwOGIzZmZhOTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGbt4w/iTc80L7fLV0nb5X7f54Yb HFACcnL74iue8rZ5+5GtG1IQxdAlN0QkYJh89O2unvdhDzPcvD9KS5KhtqFoPPMl eaR0Hcg5ANfDIY/W2DVfe9cJnyRA1QS95PDkNJYUV2lccTXmaE5A66v74GdvBOuJ yydBtHUEFjtege0Le4nS5gjRdlHaB9YNiZDKYTxqnvmBZU6AkjL6NnFAz+0aqg1D KyWiuvWvRaC5mql3QcXXO+gVujKWX8wv2EzLiYrwcptz0aKIFEFeHTBxdmEbUW5V ucngVWeE+/XAr01F/adpgevLbnffwZMjw5UjogNmEF9ndTXOWE+RPxN0UwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG9gPO5Sl2VfiwNGRgzuGwiz/6mZMB8GA1UdIwQY MBaAFNVjdpL/XEVIbRBTsUncFCACbNczMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDkt YWRlYWRlMjg2NWMxLzEvYjJBODdsS1haVi1MQTBaR0RPNGJDTFBfcVprLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDktYWRlYWRlMjg2NWMx LzEvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUPbgMA0G CSqGSIb3DQEBCwUAA4IBAQAC9ldfUTenHbRQ7MoBrKNGNI690IxcnCP3ciNtw4U5 Y/UiYbxi+mvRw6Erz8E8+duOO+tLcOs1GlqviFsSnWjC6iNu0VGy+KWGeGBr4Qzu BQMKRry7nQT9sor8thTlabfp0lHstNfqQZcaSEZZnQIm8OrNvlZQbDqe3ODC7ivG VO17+CKXOgRKZkfpMlFAtwwiOjp4ulK0FSwjbFYWhX5Ik1x1zLcspw9coqG4wEBO 77DryLIAUpZUwX5FmbHbSJCGEcYZc/BqqJda8EV5z6oWfj19npONY+FQKTOWRTcA evGbc+W5Jss/EE6cTFXCkkMHilvvzXHbeTczq5oHUYjC -----END CERTIFICATE-----Generated at Sun Jan 25 16:09:36 2026 by rpki-client