This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/Kgh0FblTxG8uuB7s_Tx7oYiHHwQ.roa File: Kgh0FblTxG8uuB7s_Tx7oYiHHwQ.roa (raw, json) Hash identifier: 1KEdvoLP6yhjWGPI+w0FZQ+G9oJgjKxPQ04M4Cgw2Vs= Subject key identifier: 2A:08:74:15:B9:53:C4:6F:2E:B8:1E:EC:FD:3C:7B:A1:88:87:1F:04 Certificate issuer: /CN=66306e3acf3eb903cc73973fb62860b663516c93 Certificate serial: 019B783520DF87C787422B48222124A678CF Authority key identifier: 66:30:6E:3A:CF:3E:B9:03:CC:73:97:3F:B6:28:60:B6:63:51:6C:93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZjBuOs8-uQPMc5c_tihgtmNRbJM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/Kgh0FblTxG8uuB7s_Tx7oYiHHwQ.roa Signing time: Thu 01 Jan 2026 06:18:26 +0000 ROA not before: Thu 01 Jan 2026 06:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203979 IP address blocks: 80.173.204.0/24 maxlen: 24 80.173.205.0/24 maxlen: 24 80.173.206.0/24 maxlen: 24 80.173.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.mft rsync://rpki.ripe.net/repository/DEFAULT/ZjBuOs8-uQPMc5c_tihgtmNRbJM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:20:df:87:c7:87:42:2b:48:22:21:24:a6:78:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66306e3acf3eb903cc73973fb62860b663516c93 Validity Not Before: Jan 1 06:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2a087415b953c46f2eb81eecfd3c7ba188871f04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b5:13:45:f5:34:e9:71:f3:ca:10:bb:59:3f: 13:06:4c:ff:59:7f:c3:aa:c7:2a:1d:3e:01:f3:0a: 27:57:55:e0:c4:7e:20:4f:d8:58:ff:af:50:e1:d3: a9:b0:04:ee:cc:39:33:af:a0:e6:cb:55:2d:38:ef: 4a:13:a9:09:40:1c:bd:4e:23:c9:6b:87:b5:7d:dc: d3:23:a9:99:a4:f3:91:96:80:b1:15:36:b7:6b:79: 2d:fd:19:2c:ec:f9:0e:a2:9b:58:07:25:6b:7e:81: 2b:32:de:78:13:67:09:a8:82:da:ff:47:72:7c:b6: a3:86:27:25:7c:25:69:85:ae:5e:47:ac:5e:2f:eb: 05:09:29:25:a1:6e:d1:8d:69:2e:83:b3:93:00:1b: 4d:0a:16:3a:6c:dd:68:64:7b:e4:fe:8f:54:9a:f6: 13:5a:22:6f:18:30:48:61:63:43:9b:ac:77:37:d4: 40:de:e7:f0:f9:46:8b:e2:93:e0:f6:56:72:d8:35: 6d:d8:24:4d:4e:42:6d:11:98:c4:8c:a3:65:22:fd: 8e:b2:f9:84:a1:a2:e9:d9:e3:f7:44:a2:c2:d1:e7: 31:32:a8:15:49:80:49:92:14:da:6f:10:e3:8f:ec: d2:b5:93:0c:80:c2:32:50:25:40:f1:3c:c2:ec:ee: 25:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:08:74:15:B9:53:C4:6F:2E:B8:1E:EC:FD:3C:7B:A1:88:87:1F:04 X509v3 Authority Key Identifier: keyid:66:30:6E:3A:CF:3E:B9:03:CC:73:97:3F:B6:28:60:B6:63:51:6C:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZjBuOs8-uQPMc5c_tihgtmNRbJM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/Kgh0FblTxG8uuB7s_Tx7oYiHHwQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.173.204.0/22 Signature Algorithm: sha256WithRSAEncryption bc:13:45:fc:92:47:6e:8f:d4:ba:57:48:1b:67:5f:fe:46:c2: 74:9c:db:0f:c5:e7:52:75:a8:b4:cc:07:73:01:a3:0d:20:1d: de:3b:0b:96:e1:47:4b:0a:ad:db:e8:b4:88:f4:39:e7:46:c3: b9:9f:46:86:45:31:45:ec:82:26:72:6d:fb:ef:24:41:3b:29: a1:29:2a:0e:7b:3a:27:eb:d0:af:47:cd:b8:3e:3b:5d:4d:19: 74:9a:c1:b7:66:b0:b6:6c:29:40:58:d5:58:08:75:93:a6:d0: 55:0e:cc:44:09:ec:4b:86:dc:f3:18:39:81:27:30:72:84:06: 4e:c7:f7:1c:26:0a:f6:72:d6:e0:0d:11:e9:d9:dc:7a:aa:82: e6:3a:71:75:83:ff:22:9e:79:57:e9:ed:93:ec:ea:53:93:47: 4d:ba:83:87:e1:60:c0:ad:05:7b:71:ee:c4:2c:07:e6:47:84: bb:b8:b3:77:d4:aa:4d:85:b3:25:fc:45:8c:09:d2:75:c4:a8: 9e:87:6e:ae:7b:d9:46:5c:8b:11:96:56:5b:2c:da:d3:0b:de: d9:45:6b:8f:2b:fe:ba:13:86:73:c7:4e:bb:50:e5:a9:02:cc: ee:bc:61:7b:ad:60:f0:d0:36:7b:71:f0:8b:99:1a:b4:38:8c: 12:7a:74:08 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NSDfh8eHQitIIiEkpnjPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2MzA2ZTNhY2YzZWI5MDNjYzczOTczZmI2Mjg2MGI2NjM1 MTZjOTMwHhcNMjYwMTAxMDYxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYTA4NzQxNWI5NTNjNDZmMmViODFlZWNmZDNjN2JhMTg4ODcxZjA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7UTRfU06XHzyhC7WT8TBkz/WX/D qscqHT4B8wonV1XgxH4gT9hY/69Q4dOpsATuzDkzr6Dmy1UtOO9KE6kJQBy9TiPJ a4e1fdzTI6mZpPORloCxFTa3a3kt/Rks7PkOoptYByVrfoErMt54E2cJqILa/0dy fLajhiclfCVpha5eR6xeL+sFCSkloW7RjWkug7OTABtNChY6bN1oZHvk/o9UmvYT WiJvGDBIYWNDm6x3N9RA3ufw+UaL4pPg9lZy2DVt2CRNTkJtEZjEjKNlIv2OsvmE oaLp2eP3RKLC0ecxMqgVSYBJkhTabxDjj+zStZMMgMIyUCVA8TzC7O4lLQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCoIdBW5U8RvLrge7P08e6GIhx8EMB8GA1UdIwQY MBaAFGYwbjrPPrkDzHOXP7YoYLZjUWyTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmpCdU9zOC11UVBNYzVjX3RpaGd0bU5SYkpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82NGRhYmItN2EwMS00MGQ1LWE1ODct ZWUyN2NiY2E3NDdlLzEvS2doMEZibFR4Rzh1dUI3c19UeDdvWWlISHdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS82NGRhYmItN2EwMS00MGQ1LWE1ODctZWUyN2NiY2E3NDdl LzEvWmpCdU9zOC11UVBNYzVjX3RpaGd0bU5SYkpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCUK3MMA0G CSqGSIb3DQEBCwUAA4IBAQC8E0X8kkduj9S6V0gbZ1/+RsJ0nNsPxedSdai0zAdz AaMNIB3eOwuW4UdLCq3b6LSI9DnnRsO5n0aGRTFF7IImcm377yRBOymhKSoOezon 69CvR824PjtdTRl0msG3ZrC2bClAWNVYCHWTptBVDsxECexLhtzzGDmBJzByhAZO x/ccJgr2ctbgDRHp2dx6qoLmOnF1g/8innlX6e2T7OpTk0dNuoOH4WDArQV7ce7E LAfmR4S7uLN31KpNhbMl/EWMCdJ1xKieh26ue9lGXIsRllZbLNrTC97ZRWuPK/66 E4Zzx067UOWpAszuvGF7rWDw0DZ7cfCLmRq0OIwSenQI -----END CERTIFICATE-----Generated at Mon Jan 26 07:07:09 2026 by rpki-client