This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/s4354gOCfSz1KMeZJxCIXfEOiQY.roa File: s4354gOCfSz1KMeZJxCIXfEOiQY.roa (raw, json) Hash identifier: gdWXX/J2UNkRytcmf78K4qBgH12Ae/neYo3Sp8Sub80= Subject key identifier: B3:8D:F9:E2:03:82:7D:2C:F5:28:C7:99:27:10:88:5D:F1:0E:89:06 Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47 Certificate serial: 019AEF2B15EE201117A1669A80DA157AFBB8 Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/s4354gOCfSz1KMeZJxCIXfEOiQY.roa Signing time: Fri 05 Dec 2025 15:39:29 +0000 ROA not before: Fri 05 Dec 2025 15:39:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 5511 IP address blocks: 80.71.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ef:2b:15:ee:20:11:17:a1:66:9a:80:da:15:7a:fb:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47 Validity Not Before: Dec 5 15:39:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b38df9e203827d2cf528c7992710885df10e8906 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:95:6d:69:6d:f0:bf:9a:2f:f3:3b:7e:fb:76: b0:99:44:23:71:8a:e0:a7:8f:a4:9d:a8:df:5b:21: 16:91:12:33:59:b7:22:fd:bb:5b:23:15:a6:53:74: 66:c2:b1:57:89:d8:25:92:6a:d9:91:ec:cc:1a:e6: 8b:4e:2d:de:fc:21:1e:ba:02:f6:3e:03:30:f6:9b: ec:8e:27:b1:23:ac:d2:a0:79:77:c1:0d:f9:a3:55: c1:11:4b:39:cc:52:53:de:5f:50:2b:37:ed:f2:7a: 72:59:bd:7a:6e:40:21:37:eb:4e:0f:e2:bc:2a:2b: 5c:4c:57:22:22:55:f8:60:ed:a2:a0:c8:91:1f:6a: 52:72:43:1d:4a:ab:bc:c5:bd:ab:75:db:61:9f:e7: 84:e5:41:67:f8:b5:0e:58:50:18:86:84:1e:82:73: 62:1c:50:41:e1:31:06:73:50:c6:f3:c5:ec:83:f1: 1d:e8:37:32:62:32:85:8d:a3:8a:b7:08:15:66:fd: b5:df:90:18:dc:2c:7c:21:09:ba:28:8b:14:0c:9f: 31:70:c6:71:68:21:16:12:ae:75:ed:a5:fe:82:2c: 0e:ef:1d:09:4a:11:14:b4:c4:c0:ba:c2:4b:89:72: c9:4f:c8:48:aa:88:64:20:83:2d:24:05:cd:02:4f: 63:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:8D:F9:E2:03:82:7D:2C:F5:28:C7:99:27:10:88:5D:F1:0E:89:06 X509v3 Authority Key Identifier: keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/s4354gOCfSz1KMeZJxCIXfEOiQY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.71.237.0/24 Signature Algorithm: sha256WithRSAEncryption 16:62:fa:84:d3:8e:e4:67:a5:41:49:4d:ee:cb:ea:08:73:ef: 67:f0:5e:55:36:e0:45:7a:11:8f:b9:cb:08:7d:3e:3a:87:72: ea:15:23:81:37:80:b6:da:09:85:2f:8b:91:c5:cc:2d:f0:9f: 43:40:f3:b4:0d:26:3a:18:f2:ea:b7:05:18:a6:63:17:d8:ce: 56:25:78:93:2a:06:03:cb:05:09:ec:25:ef:3b:95:3f:2a:d0: 24:82:bc:a3:6c:d8:1b:dc:31:58:d9:e2:f2:4f:ad:2b:a8:3a: 2f:43:3b:57:60:d5:8a:44:8d:ae:f3:f3:32:ef:ea:95:7c:3d: c8:6b:dc:94:16:d0:41:28:73:bc:3f:31:82:0f:e8:a1:aa:d4: 8a:59:02:89:f6:92:39:85:20:9d:74:cd:6d:a1:f9:50:59:8b: 48:7e:7e:b4:81:84:7c:c2:3d:a5:76:34:f8:b6:a1:da:24:94: 98:a9:32:c9:fb:4b:b5:e0:de:37:4a:6c:34:22:ee:d0:27:98: f4:92:b2:7e:95:09:68:22:27:72:b6:e7:ae:5f:12:74:cc:98: 0f:ec:52:0a:a2:77:2e:ce:d4:c6:78:7f:b7:a5:98:99:7e:43: 69:77:13:71:ff:db:7e:a4:e3:8b:e7:3a:cc:87:64:52:46:fa: 60:0e:b4:f3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrvKxXuIBEXoWaagNoVevu4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZTUxNjk0YzRkNDZiNGZjYzAyZmFlNzFlNWRiOTQyYTcx MDhlNDcwHhcNMjUxMjA1MTUzOTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzhkZjllMjAzODI3ZDJjZjUyOGM3OTkyNzEwODg1ZGYxMGU4OTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpVtaW3wv5ov8zt++3awmUQjcYrg p4+knajfWyEWkRIzWbci/btbIxWmU3RmwrFXidglkmrZkezMGuaLTi3e/CEeugL2 PgMw9pvsjiexI6zSoHl3wQ35o1XBEUs5zFJT3l9QKzft8npyWb16bkAhN+tOD+K8 KitcTFciIlX4YO2ioMiRH2pSckMdSqu8xb2rddthn+eE5UFn+LUOWFAYhoQegnNi HFBB4TEGc1DG88Xsg/Ed6DcyYjKFjaOKtwgVZv2135AY3Cx8IQm6KIsUDJ8xcMZx aCEWEq517aX+giwO7x0JShEUtMTAusJLiXLJT8hIqohkIIMtJAXNAk9jiQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLON+eIDgn0s9SjHmScQiF3xDokGMB8GA1UdIwQY MBaAFEnlFpTE1GtPzAL65x5duUKnEI5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQt MTkxODliM2M5YzdkLzEvczQzNTRnT0NmU3oxS01lWkp4Q0lYZkVPaVFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQtMTkxODliM2M5Yzdk LzEvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUEftMA0G CSqGSIb3DQEBCwUAA4IBAQAWYvqE047kZ6VBSU3uy+oIc+9n8F5VNuBFehGPucsI fT46h3LqFSOBN4C22gmFL4uRxcwt8J9DQPO0DSY6GPLqtwUYpmMX2M5WJXiTKgYD ywUJ7CXvO5U/KtAkgryjbNgb3DFY2eLyT60rqDovQztXYNWKRI2u8/My7+qVfD3I a9yUFtBBKHO8PzGCD+ihqtSKWQKJ9pI5hSCddM1toflQWYtIfn60gYR8wj2ldjT4 tqHaJJSYqTLJ+0u14N43Smw0Iu7QJ5j0krJ+lQloIidytueuXxJ0zJgP7FIKoncu ztTGeH+3pZiZfkNpdxNx/9t+pOOL5zrMh2RSRvpgDrTz -----END CERTIFICATE-----Generated at Fri Dec 19 16:48:58 2025 by rpki-client