This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/OOfgMgyirAjAQpzlSeWvWZ7kZIQ.roa File: OOfgMgyirAjAQpzlSeWvWZ7kZIQ.roa (raw, json) Hash identifier: wpPBvbubRrWqOyJudWgmsWq2Hw2lni+AI3RKu2B28mg= Subject key identifier: 38:E7:E0:32:0C:A2:AC:08:C0:42:9C:E5:49:E5:AF:59:9E:E4:64:84 Certificate issuer: /CN=5d6f2e49a31e8df9c5aa08aaf240b5c832b9cb93 Certificate serial: 019B7D5C1B1E8FFCDFF42BBE1064F78A43E8 Authority key identifier: 5D:6F:2E:49:A3:1E:8D:F9:C5:AA:08:AA:F2:40:B5:C8:32:B9:CB:93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/OOfgMgyirAjAQpzlSeWvWZ7kZIQ.roa Signing time: Fri 02 Jan 2026 06:19:06 +0000 ROA not before: Fri 02 Jan 2026 06:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200751 IP address blocks: 80.247.80.0/21 maxlen: 21 80.247.88.0/22 maxlen: 22 80.247.92.0/23 maxlen: 23 80.247.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:1b:1e:8f:fc:df:f4:2b:be:10:64:f7:8a:43:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d6f2e49a31e8df9c5aa08aaf240b5c832b9cb93 Validity Not Before: Jan 2 06:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=38e7e0320ca2ac08c0429ce549e5af599ee46484 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ef:e4:fc:bf:41:1c:e4:8f:4e:1e:af:62:58: b3:a9:eb:fb:07:b9:f2:35:f7:bd:f1:2f:3e:ab:31: 00:fc:5b:d2:99:0e:75:f1:50:1d:04:33:19:4a:17: ed:8a:8d:a0:43:01:41:06:d2:79:0a:f7:21:21:e0: a8:91:78:e4:c9:c8:d6:b5:70:32:a7:e2:c1:15:fc: 08:e6:e5:6f:80:23:d2:4b:d8:12:3f:d4:42:16:87: f3:8a:82:6a:35:5c:8f:64:66:e4:ad:8c:4c:32:f2: 7c:19:f8:7b:d6:0a:84:12:7f:c7:b3:46:7f:d1:83: 0b:c9:fc:3a:72:37:88:56:38:92:1e:cb:dc:ec:bd: ba:f6:e3:6e:a9:f8:f4:2f:6f:ac:02:fc:30:61:01: 32:16:b1:aa:93:4c:22:69:ba:74:e7:51:64:32:44: 07:02:0f:49:d0:de:aa:08:75:1b:27:cd:28:f5:cd: f6:13:e0:88:72:bd:10:39:20:66:fc:0a:bc:af:96: 4d:b0:5d:a5:dc:54:eb:ff:93:18:60:54:49:77:c1: f9:ee:29:fa:ae:32:bb:4f:69:41:8f:6e:20:02:8f: 27:23:86:ff:53:b7:d4:e9:6a:30:1c:a3:71:ee:09: 31:56:fe:f8:e8:5e:09:b7:f2:29:e3:b0:f6:c2:ed: a8:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:E7:E0:32:0C:A2:AC:08:C0:42:9C:E5:49:E5:AF:59:9E:E4:64:84 X509v3 Authority Key Identifier: keyid:5D:6F:2E:49:A3:1E:8D:F9:C5:AA:08:AA:F2:40:B5:C8:32:B9:CB:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/OOfgMgyirAjAQpzlSeWvWZ7kZIQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.247.80.0-80.247.94.255 Signature Algorithm: sha256WithRSAEncryption 69:6e:b9:43:24:98:78:87:49:9c:cf:c9:1b:10:46:92:e8:52: 51:f5:80:bf:96:ba:bc:ac:08:72:3f:93:94:f8:aa:f2:30:1c: 50:20:85:e5:21:c4:67:34:fd:c5:c9:49:a4:7a:ca:15:f8:b5: fd:d9:d2:bb:e5:22:5c:53:96:6f:68:5a:81:59:f3:a4:72:ec: ee:56:b0:35:b8:fb:55:3c:da:55:e1:df:dd:dd:5d:df:4e:77: d6:ce:e5:ef:24:92:3c:92:cc:b9:91:b6:d5:30:fa:36:b7:fd: aa:ba:ef:91:25:04:a7:65:dd:3c:38:7d:e7:eb:59:05:41:e6: fe:be:ed:9d:65:79:fd:3b:f3:e5:c3:bf:59:2b:8b:ea:4d:4e: 0a:5e:d9:d0:50:a8:9b:cc:a0:89:89:8a:3d:af:84:8c:16:9f: 80:c8:de:e9:98:19:ff:e4:da:00:54:e1:6b:89:62:1a:3d:78: b3:20:66:ce:ac:ca:28:51:bf:5e:01:e0:0e:b8:b5:3d:64:3b: bf:72:6f:b5:1a:5d:1a:f5:62:42:1e:2c:b7:ec:f0:b0:f0:cc: 4d:81:ba:0f:22:9a:fa:07:86:5a:70:44:29:5f:90:17:1a:9b: 73:32:15:81:35:14:01:27:5d:8a:eb:6c:d8:30:71:b0:d5:a2: 2a:f1:ac:8a -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt9XBsej/zf9Cu+EGT3ikPoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkNmYyZTQ5YTMxZThkZjljNWFhMDhhYWYyNDBiNWM4MzJi OWNiOTMwHhcNMjYwMTAyMDYxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOGU3ZTAzMjBjYTJhYzA4YzA0MjljZTU0OWU1YWY1OTllZTQ2NDg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtu/k/L9BHOSPTh6vYlizqev7B7ny Nfe98S8+qzEA/FvSmQ518VAdBDMZShftio2gQwFBBtJ5CvchIeCokXjkycjWtXAy p+LBFfwI5uVvgCPSS9gSP9RCFofzioJqNVyPZGbkrYxMMvJ8Gfh71gqEEn/Hs0Z/ 0YMLyfw6cjeIVjiSHsvc7L269uNuqfj0L2+sAvwwYQEyFrGqk0wiabp051FkMkQH Ag9J0N6qCHUbJ80o9c32E+CIcr0QOSBm/Aq8r5ZNsF2l3FTr/5MYYFRJd8H57in6 rjK7T2lBj24gAo8nI4b/U7fU6WowHKNx7gkxVv746F4Jt/Ip47D2wu2oFwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFDjn4DIMoqwIwEKc5Unlr1me5GSEMB8GA1UdIwQY MBaAFF1vLkmjHo35xaoIqvJAtcgyucuTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFc4dVNhTWVqZm5GcWdpcThrQzF5REs1eTVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi81NTIxZjctMmY3MS00YmY5LWExNDgt MmU5ZGUyNTJkMWY2LzEvT09mZ01neWlyQWpBUXB6bFNlV3ZXWjdrWklRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi81NTIxZjctMmY3MS00YmY5LWExNDgtMmU5ZGUyNTJkMWY2 LzEvWFc4dVNhTWVqZm5GcWdpcThrQzF5REs1eTVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBARQ91AD BABQ914wDQYJKoZIhvcNAQELBQADggEBAGluuUMkmHiHSZzPyRsQRpLoUlH1gL+W urysCHI/k5T4qvIwHFAgheUhxGc0/cXJSaR6yhX4tf3Z0rvlIlxTlm9oWoFZ86Ry 7O5WsDW4+1U82lXh393dXd9Od9bO5e8kkjySzLmRttUw+ja3/aq675ElBKdl3Tw4 fefrWQVB5v6+7Z1lef078+XDv1kri+pNTgpe2dBQqJvMoImJij2vhIwWn4DI3umY Gf/k2gBU4WuJYho9eLMgZs6syihRv14B4A64tT1kO79yb7UaXRr1YkIeLLfs8LDw zE2Bug8imvoHhlpwRClfkBcam3MyFYE1FAEnXYrrbNgwcbDVoirxrIo= -----END CERTIFICATE-----Generated at Mon Jan 26 12:27:01 2026 by rpki-client