This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/DoUjRDq4f4RlSd01A91vUzIaXbc.roa File: DoUjRDq4f4RlSd01A91vUzIaXbc.roa (raw, json) Hash identifier: WDggBQaa6iXBE9B1fTjOHIHynycu3WL+FvqiiQoyk0M= Subject key identifier: 0E:85:23:44:3A:B8:7F:84:65:49:DD:35:03:DD:6F:53:32:1A:5D:B7 Certificate issuer: /CN=ecba774ba82fb0427f766e783e770f4bd96416f9 Certificate serial: 019B7C12779AE980C0F670739619CEB91A43 Authority key identifier: EC:BA:77:4B:A8:2F:B0:42:7F:76:6E:78:3E:77:0F:4B:D9:64:16:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Lp3S6gvsEJ_dm54PncPS9lkFvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/DoUjRDq4f4RlSd01A91vUzIaXbc.roa Signing time: Fri 02 Jan 2026 00:19:03 +0000 ROA not before: Fri 02 Jan 2026 00:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198504 IP address blocks: 80.84.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.mft rsync://rpki.ripe.net/repository/DEFAULT/7Lp3S6gvsEJ_dm54PncPS9lkFvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:77:9a:e9:80:c0:f6:70:73:96:19:ce:b9:1a:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecba774ba82fb0427f766e783e770f4bd96416f9 Validity Not Before: Jan 2 00:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e8523443ab87f846549dd3503dd6f53321a5db7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4c:03:a9:ca:dc:06:38:35:50:1c:6b:a0:e4: b8:d4:e9:1a:d6:f9:ff:70:aa:30:fd:46:1b:c0:14: 13:ca:c1:9c:5b:3d:17:41:6d:65:d4:23:9f:08:1e: e0:17:46:b5:65:32:92:cb:0d:fc:48:91:a8:13:c9: b6:84:7a:df:68:81:75:8c:56:e5:e2:a5:a7:89:fd: dc:6c:e6:a7:e2:8f:eb:4d:2f:f4:ea:fe:20:36:43: e9:44:a5:fa:dd:7f:93:79:63:89:82:b7:19:9b:22: 8e:9a:ff:e1:4d:d0:fd:c2:58:95:1e:76:9e:44:4e: e7:a8:a7:73:95:b5:4b:e3:25:14:0e:17:00:5d:b9: 7a:74:be:ec:8e:e4:7c:8b:59:89:fb:3a:84:61:be: 37:c0:90:16:2a:9d:86:37:b1:0b:58:cf:3e:e3:9a: 77:f5:96:fa:17:79:13:f7:cc:7e:c0:42:f4:21:18: 6a:77:7a:bd:a4:05:64:84:3d:2d:ab:bb:0a:c7:e8: 88:fe:56:ca:e9:a5:02:05:9e:8d:c7:76:c9:9e:26: c4:5f:d9:06:38:bc:c6:62:ad:c4:aa:4c:e6:3c:6c: e5:ea:7e:bb:3a:4d:2a:dd:10:d1:db:72:e1:b0:1e: 6d:4e:1b:be:fc:37:da:11:da:33:15:7e:db:85:af: a7:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:85:23:44:3A:B8:7F:84:65:49:DD:35:03:DD:6F:53:32:1A:5D:B7 X509v3 Authority Key Identifier: keyid:EC:BA:77:4B:A8:2F:B0:42:7F:76:6E:78:3E:77:0F:4B:D9:64:16:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Lp3S6gvsEJ_dm54PncPS9lkFvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/DoUjRDq4f4RlSd01A91vUzIaXbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.84.147.0/24 Signature Algorithm: sha256WithRSAEncryption 09:7d:1c:40:b0:e7:9b:5e:e6:35:ca:53:78:ba:6a:2f:a6:bb: df:2f:28:1c:70:21:ff:b6:73:47:44:95:55:b0:ad:b6:da:0c: f0:24:fb:9c:28:62:dd:13:6e:ca:94:a1:c5:fa:da:71:66:37: 39:77:c1:db:73:8b:e3:e6:e0:bb:72:04:b8:9d:c0:9c:e3:97: f8:00:fc:7a:33:8d:75:dc:8e:2c:88:52:75:e4:aa:df:14:bf: 0f:be:e6:d8:4a:d8:02:5e:67:dc:f6:0b:90:d5:1e:a4:9e:f8: b6:5e:ca:92:7e:e4:ef:28:56:33:e1:5a:64:4d:62:a0:fd:f5: 26:17:59:b0:26:5d:5b:66:8f:73:7c:d2:4c:33:d1:22:42:6a: 44:31:2a:6f:51:f5:94:c4:31:a6:26:d9:de:e3:a7:f4:ff:7b: 9c:19:bc:53:1e:1e:a0:7d:61:7e:69:5d:69:93:db:93:03:b2: 82:c5:3c:ac:18:52:41:a3:fd:64:f6:65:74:59:dd:54:6f:fe: 8c:c6:5e:4e:6f:67:07:84:20:44:06:7b:2f:34:1a:4f:fc:7a: 97:c1:24:5b:37:b2:2f:8a:d8:c9:86:8d:ac:c9:74:83:49:bc: b0:d0:51:f5:e6:fd:05:8e:98:1b:1c:22:0b:49:82:1c:9e:78: ee:fe:11:ee -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Enea6YDA9nBzlhnOuRpDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjYmE3NzRiYTgyZmIwNDI3Zjc2NmU3ODNlNzcwZjRiZDk2 NDE2ZjkwHhcNMjYwMTAyMDAxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTg1MjM0NDNhYjg3Zjg0NjU0OWRkMzUwM2RkNmY1MzMyMWE1ZGI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0wDqcrcBjg1UBxroOS41Oka1vn/ cKow/UYbwBQTysGcWz0XQW1l1COfCB7gF0a1ZTKSyw38SJGoE8m2hHrfaIF1jFbl 4qWnif3cbOan4o/rTS/06v4gNkPpRKX63X+TeWOJgrcZmyKOmv/hTdD9wliVHnae RE7nqKdzlbVL4yUUDhcAXbl6dL7sjuR8i1mJ+zqEYb43wJAWKp2GN7ELWM8+45p3 9Zb6F3kT98x+wEL0IRhqd3q9pAVkhD0tq7sKx+iI/lbK6aUCBZ6Nx3bJnibEX9kG OLzGYq3EqkzmPGzl6n67Ok0q3RDR23LhsB5tThu+/DfaEdozFX7bha+nXQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA6FI0Q6uH+EZUndNQPdb1MyGl23MB8GA1UdIwQY MBaAFOy6d0uoL7BCf3ZueD53D0vZZBb5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0xwM1M2Z3ZzRUpfZG01NFBuY1BTOWxrRnZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi84MTBjMTEtYTEwNS00ZGIxLWE2YjUt MzkyYjg2M2M5ZjAzLzEvRG9ValJEcTRmNFJsU2QwMUE5MXZVeklhWGJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi84MTBjMTEtYTEwNS00ZGIxLWE2YjUtMzkyYjg2M2M5ZjAz LzEvN0xwM1M2Z3ZzRUpfZG01NFBuY1BTOWxrRnZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUFSTMA0G CSqGSIb3DQEBCwUAA4IBAQAJfRxAsOebXuY1ylN4umovprvfLygccCH/tnNHRJVV sK222gzwJPucKGLdE27KlKHF+tpxZjc5d8Hbc4vj5uC7cgS4ncCc45f4APx6M411 3I4siFJ15KrfFL8PvubYStgCXmfc9guQ1R6knvi2XsqSfuTvKFYz4VpkTWKg/fUm F1mwJl1bZo9zfNJMM9EiQmpEMSpvUfWUxDGmJtne46f0/3ucGbxTHh6gfWF+aV1p k9uTA7KCxTysGFJBo/1k9mV0Wd1Ub/6Mxl5Ob2cHhCBEBnsvNBpP/HqXwSRbN7Iv itjJho2syXSDSbyw0FH15v0FjpgbHCILSYIcnnju/hHu -----END CERTIFICATE-----Generated at Sun Jan 25 13:47:35 2026 by rpki-client