This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/DEtXANHZs-ySfJ2DbeIG2FY0feA.roa File: DEtXANHZs-ySfJ2DbeIG2FY0feA.roa (raw, json) Hash identifier: CiC1X69cIhHbTBPnPYg9pS10KzYxN0NPXzJ/qp7bwgE= Subject key identifier: 0C:4B:57:00:D1:D9:B3:EC:92:7C:9D:83:6D:E2:06:D8:56:34:7D:E0 Certificate issuer: /CN=a9fb7be624a6f233198e2a34f3d9d98429aba461 Certificate serial: 019B76EB90A998A65E12B2D0999F6251DCEC Authority key identifier: A9:FB:7B:E6:24:A6:F2:33:19:8E:2A:34:F3:D9:D9:84:29:AB:A4:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qft75iSm8jMZjio089nZhCmrpGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/DEtXANHZs-ySfJ2DbeIG2FY0feA.roa Signing time: Thu 01 Jan 2026 00:18:28 +0000 ROA not before: Thu 01 Jan 2026 00:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25417 IP address blocks: 80.65.192.0/20 maxlen: 20 87.249.160.0/19 maxlen: 19 2001:1660::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/qft75iSm8jMZjio089nZhCmrpGE.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/qft75iSm8jMZjio089nZhCmrpGE.mft rsync://rpki.ripe.net/repository/DEFAULT/qft75iSm8jMZjio089nZhCmrpGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:90:a9:98:a6:5e:12:b2:d0:99:9f:62:51:dc:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9fb7be624a6f233198e2a34f3d9d98429aba461 Validity Not Before: Jan 1 00:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0c4b5700d1d9b3ec927c9d836de206d856347de0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ba:d0:60:53:a8:34:29:13:94:37:db:b0:59: 8c:98:d1:30:8c:94:b9:d9:c1:b3:dd:5a:19:dd:85: 97:ff:fa:7b:1b:93:bf:bf:78:69:33:2a:ad:58:75: c9:43:55:e2:13:e2:d4:19:b8:a0:5b:96:63:d0:2a: e5:2d:5e:42:01:2f:0b:2a:6a:74:f9:4d:b2:e1:2d: 17:b5:59:cd:c3:7d:d0:a9:d7:2f:74:3f:c6:8d:74: 2c:a2:f5:5d:ec:5a:2b:ee:ab:7d:95:cb:2a:7c:5d: 27:db:62:a6:1e:76:53:01:eb:7c:1f:bd:d9:bd:b4: 0d:88:d8:25:3b:74:e5:9d:25:ee:c4:42:d3:c0:f2: 17:47:38:c6:17:01:6c:52:6d:74:9e:70:b6:b3:f1: 24:d6:ff:15:fe:e3:34:61:e2:1a:22:ad:f2:7b:9e: 54:94:d4:5f:71:81:ae:d5:16:10:4a:a8:5b:2e:60: e6:e7:1c:4f:d9:18:f0:98:ba:f2:09:d4:1e:d0:26: 4a:c3:f6:95:eb:e4:c3:03:6e:fc:14:3d:7b:e0:70: 97:bb:65:01:37:b1:1f:ad:23:d6:f2:d4:3a:88:2b: 55:f0:43:6f:30:cb:07:76:49:24:ca:8e:85:ad:b7: 15:2b:bd:df:20:54:7d:01:34:e3:1e:a6:cd:e0:e9: a2:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:4B:57:00:D1:D9:B3:EC:92:7C:9D:83:6D:E2:06:D8:56:34:7D:E0 X509v3 Authority Key Identifier: keyid:A9:FB:7B:E6:24:A6:F2:33:19:8E:2A:34:F3:D9:D9:84:29:AB:A4:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qft75iSm8jMZjio089nZhCmrpGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/DEtXANHZs-ySfJ2DbeIG2FY0feA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/qft75iSm8jMZjio089nZhCmrpGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.65.192.0/20 87.249.160.0/19 IPv6: 2001:1660::/32 Signature Algorithm: sha256WithRSAEncryption 56:9e:91:e0:8e:b3:13:83:c9:b3:05:18:54:ab:b0:25:5a:f4: 7a:77:ca:83:fd:3c:93:c5:6b:b9:51:78:7a:c7:b7:b5:43:32: c4:67:a3:a1:7b:ef:5b:de:61:4c:7e:7c:a0:0f:6d:ec:56:c8: 6e:d4:6c:a4:46:31:cc:c4:23:00:50:37:3e:d8:2d:8a:11:4b: 7a:a3:f7:2f:78:9a:75:9b:7d:33:a0:a9:39:ce:05:7d:e9:6c: 37:67:55:14:01:0f:3c:33:d7:1e:25:9d:de:1e:af:43:8b:8a: 2d:fd:a2:bc:08:9c:2f:40:0e:f9:b4:8f:85:6d:c5:c6:72:cd: a9:b1:de:a3:c5:32:25:bc:da:4f:82:c4:50:ba:36:82:cb:f7: 98:4f:62:80:22:8d:0e:3e:07:d0:cd:e5:74:22:aa:60:06:b3: 34:8b:7a:c0:a5:6e:35:0b:5c:28:5e:73:58:e2:10:06:a4:c9: f2:81:cc:c0:24:ee:eb:b8:d3:c6:12:57:04:ee:1b:54:50:de: a0:da:2b:e3:c0:df:a5:5d:8f:b8:2e:56:84:7f:a8:91:c4:b2: 75:c0:5a:54:38:a4:99:ff:39:92:6f:e3:f1:ae:a7:24:d1:20: d1:61:58:4c:f0:9c:6b:73:ad:c4:91:d3:a2:af:83:4a:43:cc: ab:f3:da:ce -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt265CpmKZeErLQmZ9iUdzsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5ZmI3YmU2MjRhNmYyMzMxOThlMmEzNGYzZDlkOTg0Mjlh YmE0NjEwHhcNMjYwMTAxMDAxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzRiNTcwMGQxZDliM2VjOTI3YzlkODM2ZGUyMDZkODU2MzQ3ZGUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbrQYFOoNCkTlDfbsFmMmNEwjJS5 2cGz3VoZ3YWX//p7G5O/v3hpMyqtWHXJQ1XiE+LUGbigW5Zj0CrlLV5CAS8LKmp0 +U2y4S0XtVnNw33QqdcvdD/GjXQsovVd7For7qt9lcsqfF0n22KmHnZTAet8H73Z vbQNiNglO3TlnSXuxELTwPIXRzjGFwFsUm10nnC2s/Ek1v8V/uM0YeIaIq3ye55U lNRfcYGu1RYQSqhbLmDm5xxP2RjwmLryCdQe0CZKw/aV6+TDA278FD174HCXu2UB N7EfrSPW8tQ6iCtV8ENvMMsHdkkkyo6FrbcVK73fIFR9ATTjHqbN4OmiRQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFAxLVwDR2bPsknydg23iBthWNH3gMB8GA1UdIwQY MBaAFKn7e+YkpvIzGY4qNPPZ2YQpq6RhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWZ0NzVpU204ak1aamlvMDg5blpoQ21ycEdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC85NWIyMTYtNTJiOC00MDUzLWE0YmEt MGE5N2JiZjVmNDU2LzEvREV0WEFOSFpzLXlTZkoyRGJlSUcyRlkwZmVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC85NWIyMTYtNTJiOC00MDUzLWE0YmEtMGE5N2JiZjVmNDU2 LzEvcWZ0NzVpU204ak1aamlvMDg5blpoQ21ycEdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEUEHAAwQF V/mgMA0EAgACMAcDBQAgARZgMA0GCSqGSIb3DQEBCwUAA4IBAQBWnpHgjrMTg8mz BRhUq7AlWvR6d8qD/TyTxWu5UXh6x7e1QzLEZ6Ohe+9b3mFMfnygD23sVshu1Gyk RjHMxCMAUDc+2C2KEUt6o/cveJp1m30zoKk5zgV96Ww3Z1UUAQ88M9ceJZ3eHq9D i4ot/aK8CJwvQA75tI+FbcXGcs2psd6jxTIlvNpPgsRQujaCy/eYT2KAIo0OPgfQ zeV0IqpgBrM0i3rApW41C1woXnNY4hAGpMnygczAJO7ruNPGElcE7htUUN6g2ivj wN+lXY+4LlaEf6iRxLJ1wFpUOKSZ/zmSb+Pxrqck0SDRYVhM8Jxrc63EkdOir4NK Q8yr89rO -----END CERTIFICATE-----Generated at Sun Jan 25 16:55:02 2026 by rpki-client