This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/istOwulN0TBtCeTz_FD-nhvpIck.roa File: istOwulN0TBtCeTz_FD-nhvpIck.roa (raw, json) Hash identifier: IbiJxrUh2vHPG6p5xcqxXoKoxW9imoB9piUbP1LLjPs= Subject key identifier: 8A:CB:4E:C2:E9:4D:D1:30:6D:09:E4:F3:FC:50:FE:9E:1B:E9:21:C9 Certificate issuer: /CN=ebfabfa628063f6b8e9888566f5f3fcfa798c621 Certificate serial: 019B7C12A71740344687D448AABB9F1BE1F4 Authority key identifier: EB:FA:BF:A6:28:06:3F:6B:8E:98:88:56:6F:5F:3F:CF:A7:98:C6:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6_q_pigGP2uOmIhWb18_z6eYxiE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/istOwulN0TBtCeTz_FD-nhvpIck.roa Signing time: Fri 02 Jan 2026 00:19:15 +0000 ROA not before: Fri 02 Jan 2026 00:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39275 IP address blocks: 80.79.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/6_q_pigGP2uOmIhWb18_z6eYxiE.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/6_q_pigGP2uOmIhWb18_z6eYxiE.mft rsync://rpki.ripe.net/repository/DEFAULT/6_q_pigGP2uOmIhWb18_z6eYxiE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:a7:17:40:34:46:87:d4:48:aa:bb:9f:1b:e1:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebfabfa628063f6b8e9888566f5f3fcfa798c621 Validity Not Before: Jan 2 00:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8acb4ec2e94dd1306d09e4f3fc50fe9e1be921c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9b:2d:2a:fb:3d:c3:cf:07:46:c0:91:e7:cc: c2:67:7e:1c:e5:c6:35:ec:63:fe:3e:9c:7b:0c:8a: 21:1c:7b:ee:3d:a3:ba:a7:23:42:dc:1e:2b:cd:29: 07:2d:76:89:dc:2b:10:df:d2:45:ea:d4:52:62:24: a4:f3:63:5f:ce:30:86:1d:66:be:67:b6:87:14:39: cf:7c:e2:67:d1:a7:b0:1f:0c:3a:af:4d:c7:2b:4d: e2:18:aa:8c:8b:f8:63:9a:4b:02:39:d4:35:bb:5f: 17:d0:9a:7c:17:e7:f3:d1:b1:3f:2e:c9:cd:59:c1: 24:78:c5:f8:93:75:6b:83:d9:ae:09:dc:14:31:18: 47:d3:8e:83:f2:ad:7a:59:d3:0b:ac:26:f2:b4:3f: e9:e8:34:fa:ce:70:79:87:e0:42:7b:a9:13:b3:5c: d4:1f:6b:ad:98:62:75:ec:23:5a:ac:1c:d2:ce:5b: 97:b6:b9:d3:2a:3c:77:e4:8b:98:9b:1d:03:88:fb: 23:bc:9d:42:16:88:f5:6c:41:45:4c:83:79:7c:9c: 54:f0:db:ad:e0:db:fa:3e:e9:de:d4:b2:b3:fe:72: 28:b9:87:08:1e:5f:ab:5a:1a:f8:bd:da:b0:93:6e: 10:64:90:e9:cd:43:a8:9a:0f:1b:ce:8f:f9:eb:d5: ae:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:CB:4E:C2:E9:4D:D1:30:6D:09:E4:F3:FC:50:FE:9E:1B:E9:21:C9 X509v3 Authority Key Identifier: keyid:EB:FA:BF:A6:28:06:3F:6B:8E:98:88:56:6F:5F:3F:CF:A7:98:C6:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_q_pigGP2uOmIhWb18_z6eYxiE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/istOwulN0TBtCeTz_FD-nhvpIck.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/6_q_pigGP2uOmIhWb18_z6eYxiE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.79.153.0/24 Signature Algorithm: sha256WithRSAEncryption 86:af:7d:8d:7f:b6:a8:8c:81:78:f7:69:5e:b9:74:3c:fa:88: 24:9b:61:bf:7a:6f:dc:f7:da:9b:42:e5:a1:cb:35:cc:58:ed: 86:5b:71:3b:1e:31:f5:2d:44:d6:c9:b9:78:13:e0:f7:77:38: 32:23:f9:4a:fb:af:f0:e7:84:e8:af:2c:8f:88:23:6b:0e:8c: 40:17:a3:41:0a:60:99:12:be:2d:a8:33:7b:6b:0f:2b:84:1b: b1:b4:42:8e:d6:40:fd:14:52:e0:04:d5:13:21:89:2d:2f:29: d1:be:0e:46:81:d9:c2:06:84:62:70:b1:00:e5:cd:d6:5e:8d: fb:8f:dc:d9:3d:2c:a5:5f:d0:72:c4:cc:c3:e5:7d:0a:74:56: 45:9d:04:0f:6d:8b:9b:ee:76:5b:3c:76:d6:c1:7e:5a:4f:94: e8:76:a5:7b:9a:02:8e:2e:31:c5:1e:04:f4:cf:01:2c:3b:c0: f8:98:8a:95:0e:49:37:90:3c:0b:e7:85:41:f8:f4:ef:7f:3d: 34:0d:bc:55:d7:23:40:04:1c:2c:35:4b:88:6e:42:9f:69:00: 5d:34:1d:fe:98:bd:21:ca:90:65:a2:7a:12:aa:8e:ed:25:5d: a0:da:f3:d7:c9:8d:0a:6c:e4:b3:53:05:f2:5a:98:9d:89:d7: 48:32:eb:c1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EqcXQDRGh9RIqrufG+H0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViZmFiZmE2MjgwNjNmNmI4ZTk4ODg1NjZmNWYzZmNmYTc5 OGM2MjEwHhcNMjYwMTAyMDAxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YWNiNGVjMmU5NGRkMTMwNmQwOWU0ZjNmYzUwZmU5ZTFiZTkyMWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5stKvs9w88HRsCR58zCZ34c5cY1 7GP+Ppx7DIohHHvuPaO6pyNC3B4rzSkHLXaJ3CsQ39JF6tRSYiSk82NfzjCGHWa+ Z7aHFDnPfOJn0aewHww6r03HK03iGKqMi/hjmksCOdQ1u18X0Jp8F+fz0bE/LsnN WcEkeMX4k3Vrg9muCdwUMRhH046D8q16WdMLrCbytD/p6DT6znB5h+BCe6kTs1zU H2utmGJ17CNarBzSzluXtrnTKjx35IuYmx0DiPsjvJ1CFoj1bEFFTIN5fJxU8Nut 4Nv6Pune1LKz/nIouYcIHl+rWhr4vdqwk24QZJDpzUOomg8bzo/569WuLwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIrLTsLpTdEwbQnk8/xQ/p4b6SHJMB8GA1UdIwQY MBaAFOv6v6YoBj9rjpiIVm9fP8+nmMYhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNl9xX3BpZ0dQMnVPbUloV2IxOF96NmVZeGlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9hM2EzMTEtMzc4NC00ODE4LWFiZjkt ZTVmZDZlOTg0MmFiLzEvaXN0T3d1bE4wVEJ0Q2VUel9GRC1uaHZwSWNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9hM2EzMTEtMzc4NC00ODE4LWFiZjktZTVmZDZlOTg0MmFi LzEvNl9xX3BpZ0dQMnVPbUloV2IxOF96NmVZeGlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUE+ZMA0G CSqGSIb3DQEBCwUAA4IBAQCGr32Nf7aojIF492leuXQ8+ogkm2G/em/c99qbQuWh yzXMWO2GW3E7HjH1LUTWybl4E+D3dzgyI/lK+6/w54ToryyPiCNrDoxAF6NBCmCZ Er4tqDN7aw8rhBuxtEKO1kD9FFLgBNUTIYktLynRvg5GgdnCBoRicLEA5c3WXo37 j9zZPSylX9ByxMzD5X0KdFZFnQQPbYub7nZbPHbWwX5aT5TodqV7mgKOLjHFHgT0 zwEsO8D4mIqVDkk3kDwL54VB+PTvfz00DbxV1yNABBwsNUuIbkKfaQBdNB3+mL0h ypBlonoSqo7tJV2g2vPXyY0KbOSzUwXyWpididdIMuvB -----END CERTIFICATE-----Generated at Mon Jan 26 04:40:36 2026 by rpki-client