This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/kYEWFQU5-czKs7zv1vGT343BJ-g.roa File: kYEWFQU5-czKs7zv1vGT343BJ-g.roa (raw, json) Hash identifier: xWtvvMN7qcqpohmug6+MXQLfldtO5B6k2u+O9bf+VTA= Subject key identifier: 91:81:16:15:05:39:F9:CC:CA:B3:BC:EF:D6:F1:93:DF:8D:C1:27:E8 Certificate issuer: /CN=4dd1b2587490ad061cb207176bdeec81a531588c Certificate serial: 019B7AC94DB9D908074CAFD4C1E5DD2A34EC Authority key identifier: 4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/kYEWFQU5-czKs7zv1vGT343BJ-g.roa Signing time: Thu 01 Jan 2026 18:19:31 +0000 ROA not before: Thu 01 Jan 2026 18:19:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33517 IP address blocks: 80.231.25.0/24 maxlen: 24 80.231.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:4d:b9:d9:08:07:4c:af:d4:c1:e5:dd:2a:34:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd1b2587490ad061cb207176bdeec81a531588c Validity Not Before: Jan 1 18:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=918116150539f9cccab3bcefd6f193df8dc127e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:28:76:6c:f3:8d:05:e7:1d:b4:8e:4c:fa:c3: 94:61:32:70:20:ab:aa:00:87:56:9a:c3:91:a8:d4: f1:e5:36:a2:56:97:f4:8a:ed:1d:50:ba:89:d4:16: 8b:df:b4:ea:cf:43:d4:aa:0c:e5:0f:d7:54:1a:9c: 7c:81:25:fe:56:c6:d6:f4:a5:3f:99:28:da:57:28: d3:08:09:65:c8:9c:c9:9f:23:d5:81:10:e9:9a:46: 76:d7:11:9a:cc:b3:5f:4f:7d:aa:86:91:d3:7c:af: 23:40:db:6c:10:4c:ad:33:df:7e:bd:17:7c:a6:33: da:5a:6d:8f:03:cd:f2:ed:e8:5e:2f:e0:ba:73:8b: 81:16:e3:56:9c:ad:32:4e:d7:ef:b6:50:b7:59:d4: 36:ba:90:1d:29:20:22:05:62:d6:93:86:90:62:3d: e7:51:a1:f9:5d:2f:80:74:e5:ad:06:aa:ba:62:ca: 3f:b3:b6:5c:30:0c:9e:83:45:4a:1d:ae:a9:2e:d4: 23:14:98:3a:b6:b1:e2:f3:f2:20:e8:85:29:3c:c9: 2b:00:37:ff:ee:d2:c7:b5:e0:47:71:21:87:29:c7: 62:90:36:40:64:67:7b:03:1b:68:63:28:dc:c0:0a: 46:df:74:43:7b:95:a0:30:6d:22:f7:ea:b3:3e:66: dd:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:81:16:15:05:39:F9:CC:CA:B3:BC:EF:D6:F1:93:DF:8D:C1:27:E8 X509v3 Authority Key Identifier: keyid:4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/kYEWFQU5-czKs7zv1vGT343BJ-g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.231.25.0/24 80.231.219.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:05:c0:e2:b7:16:78:0b:e1:b7:9f:c0:49:e1:f2:1d:6d:69: 27:40:f3:45:fa:9a:aa:c4:92:28:68:2d:6c:55:10:6c:60:93: 15:52:3e:35:38:6b:3e:c0:45:f4:97:05:5f:7e:86:aa:03:47: 73:84:bd:50:8e:7b:98:18:ad:d2:49:ab:97:53:ae:76:17:f4: e3:bc:27:b1:1d:a6:42:35:49:ec:fd:5e:99:00:e1:b1:44:40: 85:89:66:ac:30:8c:18:72:9d:ac:d7:d6:2d:f0:fe:78:b6:95: 0d:21:13:1d:4a:a5:74:94:69:40:aa:ce:08:42:5f:8b:ed:12: 49:de:44:52:09:9e:f1:a6:f6:ca:83:ef:6e:21:9b:d0:e2:69: a6:f6:ab:d6:f9:49:45:aa:9a:e8:c8:d8:9c:bf:c4:b3:60:b8: cd:6b:05:1d:db:d8:1b:00:b8:30:ff:de:f6:be:ec:9e:59:0b: f0:86:16:9f:6d:13:45:e6:7a:34:89:b7:f4:e5:94:e9:69:f0: 7a:4d:30:e5:c9:10:70:8e:a3:a9:30:90:5e:0e:00:8f:e3:29: 1c:4f:e9:c7:6c:18:1d:f5:02:f6:9d:21:e6:71:33:d3:69:3f: 67:ba:fa:8e:3f:c2:52:22:51:99:42:80:1f:83:06:9c:5f:83: cc:a6:b1:d5 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6yU252QgHTK/UweXdKjTsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDFiMjU4NzQ5MGFkMDYxY2IyMDcxNzZiZGVlYzgxYTUz MTU4OGMwHhcNMjYwMTAxMTgxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTgxMTYxNTA1MzlmOWNjY2FiM2JjZWZkNmYxOTNkZjhkYzEyN2U4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2yh2bPONBecdtI5M+sOUYTJwIKuq AIdWmsORqNTx5TaiVpf0iu0dULqJ1BaL37Tqz0PUqgzlD9dUGpx8gSX+VsbW9KU/ mSjaVyjTCAllyJzJnyPVgRDpmkZ21xGazLNfT32qhpHTfK8jQNtsEEytM99+vRd8 pjPaWm2PA83y7eheL+C6c4uBFuNWnK0yTtfvtlC3WdQ2upAdKSAiBWLWk4aQYj3n UaH5XS+AdOWtBqq6Yso/s7ZcMAyeg0VKHa6pLtQjFJg6trHi8/Ig6IUpPMkrADf/ 7tLHteBHcSGHKcdikDZAZGd7AxtoYyjcwApG33RDe5WgMG0i9+qzPmbdgQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJGBFhUFOfnMyrO879bxk9+NwSfoMB8GA1UdIwQY MBaAFE3Rslh0kK0GHLIHF2ve7IGlMViMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRHeVdIU1FyUVljc2djWGE5N3NnYVV4V0l3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8wMWQyYWYtMWYyMS00YjgwLWI2NjUt ZGI0NjNjNWZiMGI0LzEva1lFV0ZRVTUtY3pLczd6djF2R1QzNDNCSi1nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8wMWQyYWYtMWYyMS00YjgwLWI2NjUtZGI0NjNjNWZiMGI0 LzEvVGRHeVdIU1FyUVljc2djWGE5N3NnYVV4V0l3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUOcZAwQA UOfbMA0GCSqGSIb3DQEBCwUAA4IBAQAcBcDitxZ4C+G3n8BJ4fIdbWknQPNF+pqq xJIoaC1sVRBsYJMVUj41OGs+wEX0lwVffoaqA0dzhL1QjnuYGK3SSauXU652F/Tj vCexHaZCNUns/V6ZAOGxRECFiWasMIwYcp2s19Yt8P54tpUNIRMdSqV0lGlAqs4I Ql+L7RJJ3kRSCZ7xpvbKg+9uIZvQ4mmm9qvW+UlFqproyNicv8SzYLjNawUd29gb ALgw/972vuyeWQvwhhafbRNF5no0ibf05ZTpafB6TTDlyRBwjqOpMJBeDgCP4ykc T+nHbBgd9QL2nSHmcTPTaT9nuvqOP8JSIlGZQoAfgwacX4PMprHV -----END CERTIFICATE-----Generated at Sun Jan 25 15:15:25 2026 by rpki-client