This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/O0zdzMf69p1geR9BzbHj8H6216Q.roa File: O0zdzMf69p1geR9BzbHj8H6216Q.roa (raw, json) Hash identifier: gB3ykbY7Zy2yOIDfRVoU3HqEBAgziuKZvTGr//ZJWIo= Subject key identifier: 3B:4C:DD:CC:C7:FA:F6:9D:60:79:1F:41:CD:B1:E3:F0:7E:B6:D7:A4 Certificate issuer: /CN=77b020308865c3360dab19f3a5703341864e9f50 Certificate serial: 019B7DC9FE04588BEAB5A28338826FF36C1C Authority key identifier: 77:B0:20:30:88:65:C3:36:0D:AB:19:F3:A5:70:33:41:86:4E:9F:50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/O0zdzMf69p1geR9BzbHj8H6216Q.roa Signing time: Fri 02 Jan 2026 08:19:08 +0000 ROA not before: Fri 02 Jan 2026 08:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 22351 IP address blocks: 80.73.219.0/24 maxlen: 24 80.73.220.0/24 maxlen: 24 91.232.129.0/24 maxlen: 24 91.232.198.0/24 maxlen: 24 91.232.208.0/24 maxlen: 24 91.232.235.0/24 maxlen: 24 185.87.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:fe:04:58:8b:ea:b5:a2:83:38:82:6f:f3:6c:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77b020308865c3360dab19f3a5703341864e9f50 Validity Not Before: Jan 2 08:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3b4cddccc7faf69d60791f41cdb1e3f07eb6d7a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:3b:ab:6a:ea:74:f9:30:53:79:5a:6d:d0:80: 1a:ad:c7:14:0b:79:17:76:81:f6:2d:d1:32:05:d4: b4:b2:8e:c9:e6:0b:da:23:db:78:52:60:df:76:00: 15:9e:14:44:f5:a8:9e:b5:de:7f:36:48:c1:77:2b: 61:71:57:d5:5c:8c:c2:e5:ab:df:05:d8:32:38:57: 45:dd:e7:36:bd:5d:1e:76:dc:03:a7:e8:d4:85:2b: 42:94:54:21:4b:20:81:74:07:8f:0a:ae:ec:4a:c5: 04:bf:50:00:d0:b8:5d:6f:9e:ac:fd:58:60:c6:5e: fb:95:a8:e3:6d:a3:3e:cc:e0:d7:e9:3c:25:9c:37: af:b1:d2:e6:ba:47:e2:88:5e:2e:4a:b2:04:83:2c: 71:be:8c:f1:7a:64:3a:0d:15:ec:f8:f0:5a:6d:b0: 41:54:f3:23:e2:78:27:f0:12:dd:0d:cb:4a:6d:cb: 91:e7:4c:a6:a2:c0:0d:6f:c1:53:a6:8a:88:51:2a: f4:6b:d2:7d:5e:64:11:7b:f7:40:1d:e5:c7:e2:26: 0c:56:ea:78:ad:42:fc:5b:6a:23:b8:a5:82:c8:eb: 8b:aa:41:fd:ed:54:cd:11:ac:7a:80:0d:60:af:e5: e4:cc:c7:92:ac:c4:c8:a7:6b:f5:44:a7:a1:36:f4: aa:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:4C:DD:CC:C7:FA:F6:9D:60:79:1F:41:CD:B1:E3:F0:7E:B6:D7:A4 X509v3 Authority Key Identifier: keyid:77:B0:20:30:88:65:C3:36:0D:AB:19:F3:A5:70:33:41:86:4E:9F:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/O0zdzMf69p1geR9BzbHj8H6216Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.73.219.0-80.73.220.255 91.232.129.0/24 91.232.198.0/24 91.232.208.0/24 91.232.235.0/24 185.87.144.0/22 Signature Algorithm: sha256WithRSAEncryption 8e:b8:78:4a:cc:b9:8a:13:24:42:e5:5b:22:ad:ff:b9:1f:3a: db:0e:ec:5a:26:58:5d:15:a6:45:77:24:85:2f:a7:e3:78:05: b6:4b:d9:13:9e:66:ad:e3:98:5a:1c:2b:19:84:da:2e:39:00: 40:9c:0d:4e:d2:21:19:c1:b4:97:eb:59:77:0c:04:e8:82:4d: 55:b6:ec:e2:2b:2e:0e:8e:99:a9:2e:a1:16:da:9e:6c:72:8b: 62:0e:de:a9:e4:aa:95:06:34:fe:d5:74:71:df:e0:c0:a4:37: 69:20:73:d8:83:d9:e4:13:82:4f:a9:6a:c3:59:69:7a:7c:42: f4:71:e7:26:ea:bb:fd:4e:01:26:5e:4f:32:78:81:fa:53:ae: 80:0b:27:6a:32:3a:6b:a6:76:44:bc:02:c2:c1:0c:4e:1e:64: 17:c0:63:6c:0f:80:f1:20:51:7f:6a:74:13:45:61:99:bc:37: 3c:0e:95:72:07:70:bc:6a:33:92:ce:f9:62:26:d9:22:80:92: 0c:83:9e:f1:9f:25:89:89:fb:62:97:82:9c:f1:94:9f:e8:b1: 79:92:9e:34:74:bd:6e:3f:09:09:d3:09:66:09:f7:85:06:ff: cf:7b:9e:d5:06:e3:c4:63:15:5e:e9:66:69:ca:12:8e:6c:29: 8b:ae:77:63 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISAZt9yf4EWIvqtaKDOIJv82wcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3YjAyMDMwODg2NWMzMzYwZGFiMTlmM2E1NzAzMzQxODY0 ZTlmNTAwHhcNMjYwMTAyMDgxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYjRjZGRjY2M3ZmFmNjlkNjA3OTFmNDFjZGIxZTNmMDdlYjZkN2E0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Turaup0+TBTeVpt0IAarccUC3kX doH2LdEyBdS0so7J5gvaI9t4UmDfdgAVnhRE9aietd5/NkjBdythcVfVXIzC5avf BdgyOFdF3ec2vV0edtwDp+jUhStClFQhSyCBdAePCq7sSsUEv1AA0Lhdb56s/Vhg xl77lajjbaM+zODX6TwlnDevsdLmukfiiF4uSrIEgyxxvozxemQ6DRXs+PBabbBB VPMj4ngn8BLdDctKbcuR50ymosANb8FTpoqIUSr0a9J9XmQRe/dAHeXH4iYMVup4 rUL8W2ojuKWCyOuLqkH97VTNEax6gA1gr+XkzMeSrMTIp2v1RKehNvSqPQIDAQAB o4ICLzCCAiswHQYDVR0OBBYEFDtM3czH+vadYHkfQc2x4/B+ttekMB8GA1UdIwQY MBaAFHewIDCIZcM2DasZ86VwM0GGTp9QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDdBZ01JaGx3ellOcXhuenBYQXpRWVpPbjFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9kMmFhYjAtODM2My00YjE0LTljYzIt YzhiYjhlYTM5ODA0LzEvTzB6ZHpNZjY5cDFnZVI5QnpiSGo4SDYyMTZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9kMmFhYjAtODM2My00YjE0LTljYzItYzhiYjhlYTM5ODA0 LzEvZDdBZ01JaGx3ellOcXhuenBYQXpRWVpPbjFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsMAwDBABQSdsD BABQSdwDBABb6IEDBABb6MYDBABb6NADBABb6OsDBAK5V5AwDQYJKoZIhvcNAQEL BQADggEBAI64eErMuYoTJELlWyKt/7kfOtsO7FomWF0VpkV3JIUvp+N4BbZL2ROe Zq3jmFocKxmE2i45AECcDU7SIRnBtJfrWXcMBOiCTVW27OIrLg6OmakuoRbanmxy i2IO3qnkqpUGNP7VdHHf4MCkN2kgc9iD2eQTgk+pasNZaXp8QvRx5ybqu/1OASZe TzJ4gfpTroALJ2oyOmumdkS8AsLBDE4eZBfAY2wPgPEgUX9qdBNFYZm8NzwOlXIH cLxqM5LO+WIm2SKAkgyDnvGfJYmJ+2KXgpzxlJ/osXmSnjR0vW4/CQnTCWYJ94UG /897ntUG48RjFV7pZmnKEo5sKYuud2M= -----END CERTIFICATE-----Generated at Sun Jan 25 16:54:07 2026 by rpki-client