This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/YtD0hgbunNZVqmVM-mTLvyyQEfg.roa File: YtD0hgbunNZVqmVM-mTLvyyQEfg.roa (raw, json) Hash identifier: bXNfm9p7iVN39qRXUc3z+rEBdxvoCN2D2p6tjPh77Uk= Subject key identifier: 62:D0:F4:86:06:EE:9C:D6:55:AA:65:4C:FA:64:CB:BF:2C:90:11:F8 Certificate issuer: /CN=4dd1b2587490ad061cb207176bdeec81a531588c Certificate serial: 019B7AC95276BC44E28E9749F81699A6C99E Authority key identifier: 4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/YtD0hgbunNZVqmVM-mTLvyyQEfg.roa Signing time: Thu 01 Jan 2026 18:19:32 +0000 ROA not before: Thu 01 Jan 2026 18:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59605 IP address blocks: 80.231.213.0/24 maxlen: 24 2a01:3e0:2006::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:52:76:bc:44:e2:8e:97:49:f8:16:99:a6:c9:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd1b2587490ad061cb207176bdeec81a531588c Validity Not Before: Jan 1 18:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=62d0f48606ee9cd655aa654cfa64cbbf2c9011f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:86:44:b8:9d:28:62:1a:ad:89:7b:3b:1f:a6: c9:8b:51:3b:64:6d:78:a2:fe:5b:78:28:d8:1c:a4: b8:b9:de:03:fb:be:0c:2c:85:8b:c4:b3:15:74:ae: d9:ce:41:1d:52:3a:5f:4c:d4:1c:95:1d:92:98:ae: 01:ac:69:38:0d:46:c0:69:7b:13:64:6d:67:95:51: 37:27:c8:8e:43:2f:1a:7c:53:45:68:4c:c1:a3:e2: 01:d6:52:06:e4:5a:2c:0b:fe:6d:c7:8d:07:2a:b3: cd:a4:97:d2:1d:67:6e:79:c9:e4:ea:93:3e:1f:cb: 0a:16:7a:8d:4f:42:81:a4:02:5e:c9:39:65:3c:38: 37:0e:8b:6c:74:b2:59:86:3f:b9:e6:97:47:1a:c7: a3:b3:bc:83:42:83:dd:e5:b9:4b:f6:81:ad:fc:25: 5a:a3:49:85:2a:b5:e7:7c:9a:c2:79:c8:d8:c3:40: d2:f0:a8:5e:85:ee:ec:04:e9:4d:ed:71:32:66:1f: a1:b4:77:2f:ff:7d:b7:07:f7:57:45:6c:a4:5a:41: c0:78:4d:e0:34:ab:5b:23:05:78:0b:af:7d:3e:e0: 1c:fc:1e:ed:e2:cf:2d:49:f7:d9:ef:9f:84:16:58: 5c:bc:07:50:9d:54:d6:1b:ac:ff:54:8c:68:59:c7: fa:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:D0:F4:86:06:EE:9C:D6:55:AA:65:4C:FA:64:CB:BF:2C:90:11:F8 X509v3 Authority Key Identifier: keyid:4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/YtD0hgbunNZVqmVM-mTLvyyQEfg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.231.213.0/24 IPv6: 2a01:3e0:2006::/48 Signature Algorithm: sha256WithRSAEncryption 83:fa:9a:a1:8c:b2:21:f2:10:7a:8d:08:eb:0b:cb:82:9e:10: f4:d6:b9:85:a6:5a:7a:e9:0e:03:26:2d:7b:22:e0:50:d0:0c: bb:49:c9:24:0d:c4:49:68:7c:e3:8e:cb:00:96:35:43:4e:d7: c6:34:3a:4d:f7:52:89:bb:21:a1:30:47:37:fa:6a:fa:bd:e0: f0:f8:98:27:89:c0:f7:e7:e3:c5:2f:f8:d9:35:a7:7f:e2:10: 5d:b2:5f:d0:fd:fd:84:56:3b:a5:7a:b1:4e:cf:6b:77:a2:72: 2d:34:65:23:fa:4c:56:df:26:0e:ac:9d:0f:3c:cf:e9:6d:61: 43:f9:d4:42:2b:63:dc:8f:06:c0:4f:3f:82:91:bf:74:bd:fa: 57:1d:8c:a0:16:e9:d7:5f:a5:0b:7e:c4:57:af:70:24:ba:95: ac:ab:91:94:72:a4:42:80:17:42:e7:58:45:61:00:c2:c7:8d: 41:f6:07:e0:c5:d3:2f:8b:d4:d7:16:52:dc:92:b0:f3:b4:30: 98:92:29:75:19:5c:7d:54:07:91:d2:3d:9b:3c:40:9d:5a:5a: 09:a1:84:19:63:25:e3:5a:9a:e3:3f:1c:22:02:fc:51:d2:41: 32:20:14:a4:8a:e8:ba:0a:e3:70:15:7d:d5:cd:16:11:43:26: 86:9d:06:e3 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt6yVJ2vETijpdJ+BaZpsmeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDFiMjU4NzQ5MGFkMDYxY2IyMDcxNzZiZGVlYzgxYTUz MTU4OGMwHhcNMjYwMTAxMTgxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MmQwZjQ4NjA2ZWU5Y2Q2NTVhYTY1NGNmYTY0Y2JiZjJjOTAxMWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4ZEuJ0oYhqtiXs7H6bJi1E7ZG14 ov5beCjYHKS4ud4D+74MLIWLxLMVdK7ZzkEdUjpfTNQclR2SmK4BrGk4DUbAaXsT ZG1nlVE3J8iOQy8afFNFaEzBo+IB1lIG5FosC/5tx40HKrPNpJfSHWduecnk6pM+ H8sKFnqNT0KBpAJeyTllPDg3DotsdLJZhj+55pdHGsejs7yDQoPd5blL9oGt/CVa o0mFKrXnfJrCecjYw0DS8Khehe7sBOlN7XEyZh+htHcv/323B/dXRWykWkHAeE3g NKtbIwV4C699PuAc/B7t4s8tSffZ75+EFlhcvAdQnVTWG6z/VIxoWcf6EwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFGLQ9IYG7pzWVaplTPpky78skBH4MB8GA1UdIwQY MBaAFE3Rslh0kK0GHLIHF2ve7IGlMViMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRHeVdIU1FyUVljc2djWGE5N3NnYVV4V0l3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8wMWQyYWYtMWYyMS00YjgwLWI2NjUt ZGI0NjNjNWZiMGI0LzEvWXREMGhnYnVuTlpWcW1WTS1tVEx2eXlRRWZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8wMWQyYWYtMWYyMS00YjgwLWI2NjUtZGI0NjNjNWZiMGI0 LzEvVGRHeVdIU1FyUVljc2djWGE5N3NnYVV4V0l3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAUOfVMA8E AgACMAkDBwAqAQPgIAYwDQYJKoZIhvcNAQELBQADggEBAIP6mqGMsiHyEHqNCOsL y4KeEPTWuYWmWnrpDgMmLXsi4FDQDLtJySQNxElofOOOywCWNUNO18Y0Ok33Uom7 IaEwRzf6avq94PD4mCeJwPfn48Uv+Nk1p3/iEF2yX9D9/YRWO6V6sU7Pa3eici00 ZSP6TFbfJg6snQ88z+ltYUP51EIrY9yPBsBPP4KRv3S9+lcdjKAW6ddfpQt+xFev cCS6layrkZRypEKAF0LnWEVhAMLHjUH2B+DF0y+L1NcWUtySsPO0MJiSKXUZXH1U B5HSPZs8QJ1aWgmhhBljJeNamuM/HCIC/FHSQTIgFKSK6LoK43AVfdXNFhFDJoad BuM= -----END CERTIFICATE-----Generated at Sun Jan 25 15:36:25 2026 by rpki-client