This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/1hsgVZkjGiwPGwbT4Yu5mw_gR1E.roa File: 1hsgVZkjGiwPGwbT4Yu5mw_gR1E.roa (raw, json) Hash identifier: sbJm7A7LKoBguraWEh+cEaoDEunVqRtivursvoz8Rkw= Subject key identifier: D6:1B:20:55:99:23:1A:2C:0F:1B:06:D3:E1:8B:B9:9B:0F:E0:47:51 Certificate issuer: /CN=ef7f31bd6d985e45299c31d052ca4a8ebef5578b Certificate serial: 019B78352B0B8D16DD9775BC5C962CEF60AA Authority key identifier: EF:7F:31:BD:6D:98:5E:45:29:9C:31:D0:52:CA:4A:8E:BE:F5:57:8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/738xvW2YXkUpnDHQUspKjr71V4s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/1hsgVZkjGiwPGwbT4Yu5mw_gR1E.roa Signing time: Thu 01 Jan 2026 06:18:28 +0000 ROA not before: Thu 01 Jan 2026 06:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208549 IP address blocks: 80.64.220.0/24 maxlen: 24 80.64.221.0/24 maxlen: 24 80.64.222.0/23 maxlen: 23 80.64.222.0/24 maxlen: 24 80.64.223.0/24 maxlen: 24 2a0d:1cc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.crl rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft rsync://rpki.ripe.net/repository/DEFAULT/738xvW2YXkUpnDHQUspKjr71V4s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:2b:0b:8d:16:dd:97:75:bc:5c:96:2c:ef:60:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef7f31bd6d985e45299c31d052ca4a8ebef5578b Validity Not Before: Jan 1 06:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d61b205599231a2c0f1b06d3e18bb99b0fe04751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cc:a0:64:b8:84:1a:4d:7d:a3:1e:92:b5:4d: 59:df:83:2d:ef:d5:fd:fa:ab:1d:30:a6:62:4e:89: 36:e5:03:6e:3b:b1:5d:e1:3a:63:69:50:d3:bb:18: 4d:8d:54:c6:c2:11:74:a9:51:2b:50:7e:e8:a3:94: f6:f1:a5:02:f2:fd:e3:8a:fe:78:b7:d2:27:4e:d4: b3:f9:9c:c6:7f:48:4a:8f:7c:ae:4b:14:cd:39:6a: b5:0e:dc:24:86:2d:ff:ab:cd:31:32:e0:d8:a5:20: 96:c9:ce:e7:07:44:4c:68:b1:dc:21:23:5d:6f:47: c4:b7:b3:67:9d:c4:21:82:7a:c6:91:0e:33:db:e5: c0:82:36:a6:28:be:b7:4d:23:05:fd:c7:dd:d2:d0: 06:29:f0:b4:52:6a:64:1d:54:fc:f3:4f:88:13:42: 4b:eb:52:f6:59:2e:53:bc:34:87:77:c0:75:61:9a: b2:cf:7d:1c:91:40:7c:79:a5:f7:f4:90:43:47:23: 8e:db:a9:36:0b:a1:bf:06:f1:11:3f:19:80:c6:a5: aa:cd:cd:3a:dd:ad:c5:eb:fe:05:a7:74:21:f8:35: 5f:0d:9d:2e:51:56:27:2d:63:1b:c3:70:80:c2:82: 94:86:cf:29:b2:ef:d9:fa:97:b7:94:8d:cf:d7:ff: 55:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:1B:20:55:99:23:1A:2C:0F:1B:06:D3:E1:8B:B9:9B:0F:E0:47:51 X509v3 Authority Key Identifier: keyid:EF:7F:31:BD:6D:98:5E:45:29:9C:31:D0:52:CA:4A:8E:BE:F5:57:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/738xvW2YXkUpnDHQUspKjr71V4s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/1hsgVZkjGiwPGwbT4Yu5mw_gR1E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.64.220.0/22 IPv6: 2a0d:1cc0::/29 Signature Algorithm: sha256WithRSAEncryption 3a:aa:66:be:ec:0d:fe:8d:19:78:28:54:43:7a:f9:04:f9:b0: 56:8e:33:3b:a6:c5:21:4c:bb:06:7a:19:8f:24:38:22:bb:59: ce:bc:74:17:f8:ea:5f:60:03:17:4f:09:25:82:01:05:06:48: 1f:d6:16:d7:ec:92:3e:ab:c3:9b:47:59:f3:81:3c:c6:50:a0: 3b:c4:6d:bd:fe:dd:fd:8f:b0:c7:51:d9:dd:2d:8e:e6:dd:ea: 8b:b3:df:93:be:04:8d:e2:90:73:42:14:32:0d:88:8c:8f:8f: 1c:38:ec:f5:83:8a:dc:07:f3:fa:eb:f0:2b:52:75:58:c9:86: 48:19:99:05:24:eb:81:45:33:cd:c7:9d:f9:70:9a:ed:d3:9c: 7e:21:e2:64:82:cf:d7:97:fc:90:df:bb:d8:ac:14:ff:0d:e9: eb:36:cd:b9:cc:78:d9:79:c7:7a:8b:91:e5:8d:05:b2:7a:17: 5e:0f:b8:e3:31:6f:ca:34:f0:3f:a8:93:59:42:67:8c:54:b6: 76:e9:b4:fe:bf:9f:f6:cc:eb:86:44:b3:c2:e5:f6:db:35:bd: 0a:32:b7:48:0f:0c:06:24:82:85:cb:b8:d5:d7:ae:b7:13:1d: d1:2e:f5:aa:73:08:2e:8f:de:f8:73:40:e7:d2:d5:dc:10:4e: c4:b8:89:8f -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4NSsLjRbdl3W8XJYs72CqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmN2YzMWJkNmQ5ODVlNDUyOTljMzFkMDUyY2E0YThlYmVm NTU3OGIwHhcNMjYwMTAxMDYxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNjFiMjA1NTk5MjMxYTJjMGYxYjA2ZDNlMThiYjk5YjBmZTA0NzUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8ygZLiEGk19ox6StU1Z34Mt79X9 +qsdMKZiTok25QNuO7Fd4TpjaVDTuxhNjVTGwhF0qVErUH7oo5T28aUC8v3jiv54 t9InTtSz+ZzGf0hKj3yuSxTNOWq1Dtwkhi3/q80xMuDYpSCWyc7nB0RMaLHcISNd b0fEt7NnncQhgnrGkQ4z2+XAgjamKL63TSMF/cfd0tAGKfC0UmpkHVT880+IE0JL 61L2WS5TvDSHd8B1YZqyz30ckUB8eaX39JBDRyOO26k2C6G/BvERPxmAxqWqzc06 3a3F6/4Fp3Qh+DVfDZ0uUVYnLWMbw3CAwoKUhs8psu/Z+pe3lI3P1/9VdwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFNYbIFWZIxosDxsG0+GLuZsP4EdRMB8GA1UdIwQY MBaAFO9/Mb1tmF5FKZwx0FLKSo6+9VeLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzM4eHZXMllYa1VwbkRIUVVzcEtqcjcxVjRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lYmVhNjAtZDIzMS00ODBiLTg0ZmQt YTc2M2RmM2FlZTZkLzEvMWhzZ1Zaa2pHaXdQR3diVDRZdTVtd19nUjFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lYmVhNjAtZDIzMS00ODBiLTg0ZmQtYTc2M2RmM2FlZTZk LzEvNzM4eHZXMllYa1VwbkRIUVVzcEtqcjcxVjRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCUEDcMA0E AgACMAcDBQMqDRzAMA0GCSqGSIb3DQEBCwUAA4IBAQA6qma+7A3+jRl4KFRDevkE +bBWjjM7psUhTLsGehmPJDgiu1nOvHQX+OpfYAMXTwklggEFBkgf1hbX7JI+q8Ob R1nzgTzGUKA7xG29/t39j7DHUdndLY7m3eqLs9+TvgSN4pBzQhQyDYiMj48cOOz1 g4rcB/P66/ArUnVYyYZIGZkFJOuBRTPNx535cJrt05x+IeJkgs/Xl/yQ37vYrBT/ DenrNs25zHjZecd6i5HljQWyehdeD7jjMW/KNPA/qJNZQmeMVLZ26bT+v5/2zOuG RLPC5fbbNb0KMrdIDwwGJIKFy7jV1663Ex3RLvWqcwguj974c0Dn0tXcEE7EuImP -----END CERTIFICATE-----Generated at Sat Jan 10 03:55:36 2026 by rpki-client