This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/gOrhC3Rs6ZkPUS8bJ0Q8uGllb_s.roa File: gOrhC3Rs6ZkPUS8bJ0Q8uGllb_s.roa (raw, json) Hash identifier: bYWKYeeXDVqD6ocfaaGfzje6g+DprIe5/dFMotk0P/Q= Subject key identifier: 80:EA:E1:0B:74:6C:E9:99:0F:51:2F:1B:27:44:3C:B8:69:65:6F:FB Certificate issuer: /CN=b43b97a1d21f637b549130f0857a681cc7f6884c Certificate serial: 019B76EABCE7054157E0C303FCFB486772FE Authority key identifier: B4:3B:97:A1:D2:1F:63:7B:54:91:30:F0:85:7A:68:1C:C7:F6:88:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDuXodIfY3tUkTDwhXpoHMf2iEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/gOrhC3Rs6ZkPUS8bJ0Q8uGllb_s.roa Signing time: Thu 01 Jan 2026 00:17:33 +0000 ROA not before: Thu 01 Jan 2026 00:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48579 IP address blocks: 88.80.0.0/22 maxlen: 24 88.80.4.0/22 maxlen: 24 88.80.8.0/22 maxlen: 24 88.80.12.0/22 maxlen: 24 91.197.40.0/22 maxlen: 24 185.24.132.0/22 maxlen: 24 185.141.30.0/23 maxlen: 24 212.237.144.0/22 maxlen: 24 212.237.148.0/22 maxlen: 24 217.61.244.0/22 maxlen: 24 2a07:2180::/32 maxlen: 48 2a07:2182::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/tDuXodIfY3tUkTDwhXpoHMf2iEw.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/tDuXodIfY3tUkTDwhXpoHMf2iEw.mft rsync://rpki.ripe.net/repository/DEFAULT/tDuXodIfY3tUkTDwhXpoHMf2iEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:bc:e7:05:41:57:e0:c3:03:fc:fb:48:67:72:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b43b97a1d21f637b549130f0857a681cc7f6884c Validity Not Before: Jan 1 00:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=80eae10b746ce9990f512f1b27443cb869656ffb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:56:52:c4:c4:09:40:ed:25:b0:f0:a4:03:2a: 4e:81:91:2f:a4:e6:d0:72:dc:9d:d6:36:86:54:60: ec:56:d4:10:4f:cf:7a:b0:61:74:77:9e:d7:f4:24: e5:4d:3f:7b:4e:71:a0:3b:20:67:5e:e4:b4:ef:7d: 08:3f:43:45:27:6f:17:37:98:3f:b9:04:46:04:6e: a6:5b:91:e8:53:66:4e:67:af:ea:08:a5:4d:5a:72: 9b:cc:b4:dd:c3:5e:7c:00:da:59:69:41:88:80:21: 74:e8:aa:00:a5:77:ff:11:d8:dc:88:c1:24:8b:b9: bc:79:56:b8:cb:a4:d0:d0:82:28:b1:1c:dc:03:65: 7a:de:cf:53:fe:7f:6f:11:2d:72:69:91:00:2f:66: cc:0e:c4:dc:b8:10:83:0e:8d:13:e7:ed:6e:d2:7a: 8c:6a:13:49:35:9c:be:dc:f2:e1:ab:fb:2a:ab:7d: 88:ed:fb:50:6f:4a:82:df:b0:79:24:75:1d:2a:6a: 5b:0d:c1:74:f3:a8:9d:27:2d:1e:d6:ed:17:47:2c: c7:bd:48:8a:47:78:00:2a:04:03:a8:69:33:4a:67: 14:81:8b:4a:d3:67:e9:ed:55:4a:5b:10:6c:ab:27: 80:63:55:92:38:8d:95:30:a7:47:e9:7a:ba:af:3b: d6:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:EA:E1:0B:74:6C:E9:99:0F:51:2F:1B:27:44:3C:B8:69:65:6F:FB X509v3 Authority Key Identifier: keyid:B4:3B:97:A1:D2:1F:63:7B:54:91:30:F0:85:7A:68:1C:C7:F6:88:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDuXodIfY3tUkTDwhXpoHMf2iEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/gOrhC3Rs6ZkPUS8bJ0Q8uGllb_s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/tDuXodIfY3tUkTDwhXpoHMf2iEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.80.0.0/20 91.197.40.0/22 185.24.132.0/22 185.141.30.0/23 212.237.144.0/21 217.61.244.0/22 IPv6: 2a07:2180::/32 2a07:2182::/32 Signature Algorithm: sha256WithRSAEncryption 29:59:10:07:cd:e4:90:b2:77:6c:0a:16:f7:dc:c7:a8:b3:f9: 4b:18:23:ed:bf:a5:34:58:a8:d9:ef:3b:d3:9f:1f:5e:28:d8: c2:b9:b5:6f:c5:b6:25:c5:69:1d:36:d0:a7:5f:27:13:23:8e: 70:01:e8:96:19:87:36:93:29:15:f5:b3:6b:40:ae:93:b4:a0: 81:74:45:38:ed:44:25:9a:eb:c0:52:e8:46:dd:92:a5:18:dc: 5c:76:1c:66:c5:34:89:47:81:43:c5:d7:e7:44:98:02:d1:57: fe:4c:55:23:bc:3d:e0:e1:95:24:d1:54:63:77:3e:04:13:41: 75:a3:91:ab:2c:5d:d7:bb:00:82:4e:74:98:44:ab:9b:90:86: b0:ba:f8:ef:7b:ac:9d:a2:46:ab:33:90:fd:ef:b7:28:e8:34: 46:a6:5c:5a:15:51:a2:18:60:f3:9d:8b:da:f6:34:6d:7f:7a: a2:09:8f:4e:b9:7a:30:60:77:c1:2a:dc:c4:bb:ef:5b:a6:28: e0:dc:e9:34:ca:dc:93:48:e5:9b:04:5f:18:a4:8c:0f:1d:21: f0:28:ac:3e:09:74:24:aa:87:b3:d7:1a:21:46:e0:e3:7d:23: a1:1c:e6:42:49:4b:2f:2d:64:f5:2e:a0:0f:ec:e6:81:9c:9d: 43:30:61:1a -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgISAZt26rznBUFX4MMD/PtIZ3L+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0M2I5N2ExZDIxZjYzN2I1NDkxMzBmMDg1N2E2ODFjYzdm Njg4NGMwHhcNMjYwMTAxMDAxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MGVhZTEwYjc0NmNlOTk5MGY1MTJmMWIyNzQ0M2NiODY5NjU2ZmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVZSxMQJQO0lsPCkAypOgZEvpObQ ctyd1jaGVGDsVtQQT896sGF0d57X9CTlTT97TnGgOyBnXuS0730IP0NFJ28XN5g/ uQRGBG6mW5HoU2ZOZ6/qCKVNWnKbzLTdw158ANpZaUGIgCF06KoApXf/EdjciMEk i7m8eVa4y6TQ0IIosRzcA2V63s9T/n9vES1yaZEAL2bMDsTcuBCDDo0T5+1u0nqM ahNJNZy+3PLhq/sqq32I7ftQb0qC37B5JHUdKmpbDcF086idJy0e1u0XRyzHvUiK R3gAKgQDqGkzSmcUgYtK02fp7VVKWxBsqyeAY1WSOI2VMKdH6Xq6rzvWtQIDAQAB o4ICPTCCAjkwHQYDVR0OBBYEFIDq4Qt0bOmZD1EvGydEPLhpZW/7MB8GA1UdIwQY MBaAFLQ7l6HSH2N7VJEw8IV6aBzH9ohMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdER1WG9kSWZZM3RVa1REd2hYcG9ITWYyaUV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS81NDU0YWQtNmNmMy00ZWU1LWE0Yjkt MDQ2NGU5NDVmMWNjLzEvZ09yaEMzUnM2WmtQVVM4YkowUTh1R2xsYl9zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS81NDU0YWQtNmNmMy00ZWU1LWE0YjktMDQ2NGU5NDVmMWNj LzEvdER1WG9kSWZZM3RVa1REd2hYcG9ITWYyaUV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFMGCCsGAQUFBwEHAQH/BEQwQjAqBAIAATAkAwQEWFAAAwQC W8UoAwQCuRiEAwQBuY0eAwQD1O2QAwQC2T30MBQEAgACMA4DBQAqByGAAwUAKgch gjANBgkqhkiG9w0BAQsFAAOCAQEAKVkQB83kkLJ3bAoW99zHqLP5Sxgj7b+lNFio 2e87058fXijYwrm1b8W2JcVpHTbQp18nEyOOcAHolhmHNpMpFfWza0Cuk7SggXRF OO1EJZrrwFLoRt2SpRjcXHYcZsU0iUeBQ8XX50SYAtFX/kxVI7w94OGVJNFUY3c+ BBNBdaORqyxd17sAgk50mESrm5CGsLr473usnaJGqzOQ/e+3KOg0RqZcWhVRohhg 852L2vY0bX96ogmPTrl6MGB3wSrcxLvvW6Yo4NzpNMrck0jlmwRfGKSMDx0h8Cis Pgl0JKqHs9caIUbg430joRzmQklLLy1k9S6gD+zmgZydQzBhGg== -----END CERTIFICATE-----Generated at Thu Jan 1 17:28:23 2026 by rpki-client