This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/sPKozshk0dw84yWnLecAcY4Jsz0.roa File: sPKozshk0dw84yWnLecAcY4Jsz0.roa (raw, json) Hash identifier: CVBUXh81vA8yv2uJ0Pq3RtuahHuKnl7ugAr2hYXTx7Q= Subject key identifier: B0:F2:A8:CE:C8:64:D1:DC:3C:E3:25:A7:2D:E7:00:71:8E:09:B3:3D Certificate issuer: /CN=e58024b729d99f05133ec6d14390c73eb36db99e Certificate serial: 019B7EA6A70F005573B838AFC693DB9688D3 Authority key identifier: E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/sPKozshk0dw84yWnLecAcY4Jsz0.roa Signing time: Fri 02 Jan 2026 12:20:09 +0000 ROA not before: Fri 02 Jan 2026 12:20:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56582 IP address blocks: 80.245.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:a7:0f:00:55:73:b8:38:af:c6:93:db:96:88:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e58024b729d99f05133ec6d14390c73eb36db99e Validity Not Before: Jan 2 12:20:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b0f2a8cec864d1dc3ce325a72de700718e09b33d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8b:8d:e1:62:06:4c:91:41:7f:c0:e2:12:c5: f8:6b:f4:5a:04:e5:af:00:96:9f:3f:84:bd:f0:ed: 73:5b:a0:81:fa:65:a7:af:81:54:8a:82:a2:0a:5a: 55:73:e5:94:3e:92:3f:b0:8f:c1:f2:bb:e0:47:7e: 6c:54:d8:fa:87:81:6a:e8:03:07:ea:75:a4:91:fd: 17:4e:fd:56:89:52:50:c9:f2:0f:f3:3c:b3:a9:28: 41:76:af:d1:57:9a:7c:b0:e9:9c:b6:72:fa:18:9e: cc:af:54:1f:93:80:78:10:3f:7c:fd:ec:d5:37:e7: 1d:0c:ee:44:e5:8f:96:04:43:85:7a:72:38:4e:83: 3e:d2:76:ca:43:a7:fa:1c:8a:eb:7a:0f:3c:1d:ba: 43:b8:af:1a:2c:fc:bb:10:92:b8:e8:98:1c:a7:f2: 73:ea:b3:c2:0c:c0:d1:a1:d7:cd:35:5a:ff:9e:46: 60:30:ec:40:bd:1c:54:bb:e1:6b:86:d9:ae:15:41: c9:37:19:82:b1:59:41:dd:aa:40:f2:ef:ba:a5:c1: 64:33:57:55:ab:34:5c:3b:2c:56:83:76:8c:5b:fe: bc:e2:52:0c:36:da:de:b0:ad:ee:c6:ab:21:23:ad: 43:a1:ea:45:68:d8:af:13:9f:b5:fd:0f:25:ca:90: 57:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:F2:A8:CE:C8:64:D1:DC:3C:E3:25:A7:2D:E7:00:71:8E:09:B3:3D X509v3 Authority Key Identifier: keyid:E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/sPKozshk0dw84yWnLecAcY4Jsz0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.245.47.0/24 Signature Algorithm: sha256WithRSAEncryption 87:58:dc:b8:84:02:5c:d5:4c:1f:7c:d4:a2:93:be:38:9e:b1: 29:9e:55:46:83:ed:44:84:65:a9:bd:5e:e6:fa:12:dc:2b:6d: ed:d0:fc:a2:f3:7b:af:07:5a:46:30:56:0c:15:c8:6f:32:5a: 41:d7:e9:e6:79:d6:e2:df:02:33:03:12:b6:a8:a9:4d:47:fb: ea:b0:f0:39:c1:cf:28:0e:66:40:fd:8e:c5:17:6e:ee:04:aa: 2c:95:65:f7:32:c7:5f:86:e2:7d:d4:63:8a:b3:88:04:3c:fe: 5a:a0:aa:e9:aa:85:10:fb:7e:6a:c8:be:b0:3d:eb:8d:2a:d5: 47:58:96:b0:8c:20:5a:9a:66:40:d0:9b:25:80:e8:dd:04:00: 15:62:44:f0:43:10:6f:36:3d:b4:c0:06:d3:68:ab:3e:53:0c: fe:d1:25:e4:47:64:df:c0:cd:bd:8d:44:e8:0e:c6:d9:9d:c6: d0:ad:ef:4d:f2:a0:9d:a1:ff:41:0f:8e:64:20:22:88:34:a2: 49:52:e3:3b:6f:47:24:ca:cc:97:82:d0:aa:b5:c4:bc:83:49: e3:0d:e9:e4:4e:b3:f4:f0:42:ec:aa:29:e2:37:f2:57:ab:20: a4:e7:a7:b1:bc:31:fd:65:5e:02:85:f1:49:4c:74:ce:79:94: 94:07:c8:34 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pqcPAFVzuDivxpPblojTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1ODAyNGI3MjlkOTlmMDUxMzNlYzZkMTQzOTBjNzNlYjM2 ZGI5OWUwHhcNMjYwMTAyMTIyMDA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMGYyYThjZWM4NjRkMWRjM2NlMzI1YTcyZGU3MDA3MThlMDliMzNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIuN4WIGTJFBf8DiEsX4a/RaBOWv AJafP4S98O1zW6CB+mWnr4FUioKiClpVc+WUPpI/sI/B8rvgR35sVNj6h4Fq6AMH 6nWkkf0XTv1WiVJQyfIP8zyzqShBdq/RV5p8sOmctnL6GJ7Mr1Qfk4B4ED98/ezV N+cdDO5E5Y+WBEOFenI4ToM+0nbKQ6f6HIrreg88HbpDuK8aLPy7EJK46Jgcp/Jz 6rPCDMDRodfNNVr/nkZgMOxAvRxUu+FrhtmuFUHJNxmCsVlB3apA8u+6pcFkM1dV qzRcOyxWg3aMW/684lIMNtresK3uxqshI61DoepFaNivE5+1/Q8lypBXmQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLDyqM7IZNHcPOMlpy3nAHGOCbM9MB8GA1UdIwQY MBaAFOWAJLcp2Z8FEz7G0UOQxz6zbbmeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVlBa3R5blpud1VUUHNiUlE1REhQck50dVo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9kNTYyOGEtZDliMS00ZGE5LWE3NDQt OTU2ZjZiNWM2MTcwLzEvc1BLb3pzaGswZHc4NHlXbkxlY0FjWTRKc3owLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9kNTYyOGEtZDliMS00ZGE5LWE3NDQtOTU2ZjZiNWM2MTcw LzEvNVlBa3R5blpud1VUUHNiUlE1REhQck50dVo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUPUvMA0G CSqGSIb3DQEBCwUAA4IBAQCHWNy4hAJc1UwffNSik744nrEpnlVGg+1EhGWpvV7m +hLcK23t0Pyi83uvB1pGMFYMFchvMlpB1+nmedbi3wIzAxK2qKlNR/vqsPA5wc8o DmZA/Y7FF27uBKoslWX3MsdfhuJ91GOKs4gEPP5aoKrpqoUQ+35qyL6wPeuNKtVH WJawjCBammZA0JslgOjdBAAVYkTwQxBvNj20wAbTaKs+Uwz+0SXkR2TfwM29jUTo DsbZncbQre9N8qCdof9BD45kICKINKJJUuM7b0ckysyXgtCqtcS8g0njDenkTrP0 8ELsqiniN/JXqyCk56exvDH9ZV4ChfFJTHTOeZSUB8g0 -----END CERTIFICATE-----Generated at Sun Jan 25 15:13:12 2026 by rpki-client