This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/oitUYkAPeYiroXJK68BhqiN_Xek.roa File: oitUYkAPeYiroXJK68BhqiN_Xek.roa (raw, json) Hash identifier: zYA61o9aLXKLXeSg2vp84zehihqtVq61hd+jWJCYfGg= Subject key identifier: A2:2B:54:62:40:0F:79:88:AB:A1:72:4A:EB:C0:61:AA:23:7F:5D:E9 Certificate issuer: /CN=4dd1b2587490ad061cb207176bdeec81a531588c Certificate serial: 019B7AC949FA2A9952A709B9001EB6600354 Authority key identifier: 4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/oitUYkAPeYiroXJK68BhqiN_Xek.roa Signing time: Thu 01 Jan 2026 18:19:30 +0000 ROA not before: Thu 01 Jan 2026 18:19:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8529 IP address blocks: 80.231.213.0/24 maxlen: 24 2a01:3e0:2006::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:49:fa:2a:99:52:a7:09:b9:00:1e:b6:60:03:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd1b2587490ad061cb207176bdeec81a531588c Validity Not Before: Jan 1 18:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a22b5462400f7988aba1724aebc061aa237f5de9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d1:14:40:7e:ed:80:cd:08:2b:a5:fe:86:56: b7:9e:d2:da:7f:c2:6e:ce:1e:70:8b:75:00:19:9e: 7f:8f:f3:27:00:4e:72:1c:28:59:48:02:07:4c:12: 53:90:ea:57:64:8b:67:83:ee:07:e2:82:bc:3a:41: 41:30:5e:9c:e1:2f:ce:d3:21:5f:fa:4b:2b:88:1d: c0:f2:8d:f2:18:8f:23:1f:3a:19:1e:22:03:6b:b5: 16:e2:a5:20:9f:86:6e:ae:1f:fc:9a:07:80:49:46: 58:bf:5c:61:08:4b:0b:96:3c:53:1e:ba:69:08:b4: 9d:8b:d7:ff:fa:ab:1b:d3:b6:e6:d2:85:60:95:2c: ab:f5:5a:63:78:4b:53:90:02:82:0a:5e:a8:ab:07: 39:0e:d6:b2:76:1d:16:8e:d8:99:f3:ef:bd:7b:ec: 74:c1:96:4a:e1:37:9c:c9:fd:62:86:bd:9e:17:f5: db:a5:37:45:66:1a:df:0a:f6:83:e5:86:6f:63:10: ae:e1:61:1b:ac:76:ac:20:3a:e1:48:3a:3c:e1:c1: b5:ba:80:ed:42:aa:cc:5d:e2:ca:84:b8:1f:5f:84: 42:ea:c3:9b:4a:b9:3a:a2:e2:c4:77:ec:37:74:fd: 99:19:5f:74:37:fd:ef:bd:74:27:ff:e9:2a:23:c1: 14:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:2B:54:62:40:0F:79:88:AB:A1:72:4A:EB:C0:61:AA:23:7F:5D:E9 X509v3 Authority Key Identifier: keyid:4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/oitUYkAPeYiroXJK68BhqiN_Xek.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.231.213.0/24 IPv6: 2a01:3e0:2006::/48 Signature Algorithm: sha256WithRSAEncryption 48:4f:96:5c:0c:ac:04:8a:5c:76:48:e5:07:b4:b2:2b:f4:3a: fe:d0:ca:29:8a:3a:12:66:3f:e8:a6:3d:c7:13:2c:4e:98:9d: a3:d8:4a:1f:09:44:64:6d:e7:c8:9a:6d:bb:f9:c9:f1:20:2e: 95:c7:58:38:91:8e:3d:f0:d2:be:96:f7:a0:6b:df:cb:ff:77: 25:34:9f:aa:c1:e6:0a:85:9c:fd:8d:3a:69:7e:41:0d:82:dc: a0:1e:b3:b9:bc:60:00:c0:3d:9f:6c:cc:dd:5e:aa:8f:55:11: 68:ad:dc:28:ec:32:f8:52:38:b8:7d:37:4a:e4:f1:2b:56:97: f8:d4:ce:93:43:11:ea:3b:6d:94:c1:65:c5:b0:8b:0c:72:71: 50:6f:27:27:84:4b:bb:72:8d:0c:9e:77:c2:ea:9b:7c:69:2e: 0d:ec:7e:1b:61:3e:72:f6:1a:69:23:fa:53:9e:4f:17:05:16: c3:58:bd:9a:82:5a:d2:ff:34:23:20:a5:f5:f6:2d:a5:30:75: 75:5f:49:f8:09:8d:0e:57:aa:3f:ce:ef:25:15:82:11:5f:48: ed:0d:aa:e5:29:f5:35:cb:86:64:cf:47:b4:46:08:ab:1b:24: 89:20:6c:75:ca:82:81:99:78:95:ca:0f:85:9f:bd:46:97:48: 87:56:77:27 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt6yUn6KplSpwm5AB62YANUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDFiMjU4NzQ5MGFkMDYxY2IyMDcxNzZiZGVlYzgxYTUz MTU4OGMwHhcNMjYwMTAxMTgxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMjJiNTQ2MjQwMGY3OTg4YWJhMTcyNGFlYmMwNjFhYTIzN2Y1ZGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9EUQH7tgM0IK6X+hla3ntLaf8Ju zh5wi3UAGZ5/j/MnAE5yHChZSAIHTBJTkOpXZItng+4H4oK8OkFBMF6c4S/O0yFf +ksriB3A8o3yGI8jHzoZHiIDa7UW4qUgn4Zurh/8mgeASUZYv1xhCEsLljxTHrpp CLSdi9f/+qsb07bm0oVglSyr9VpjeEtTkAKCCl6oqwc5Dtaydh0WjtiZ8++9e+x0 wZZK4Tecyf1ihr2eF/XbpTdFZhrfCvaD5YZvYxCu4WEbrHasIDrhSDo84cG1uoDt QqrMXeLKhLgfX4RC6sObSrk6ouLEd+w3dP2ZGV90N/3vvXQn/+kqI8EUeQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFKIrVGJAD3mIq6FySuvAYaojf13pMB8GA1UdIwQY MBaAFE3Rslh0kK0GHLIHF2ve7IGlMViMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRHeVdIU1FyUVljc2djWGE5N3NnYVV4V0l3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8wMWQyYWYtMWYyMS00YjgwLWI2NjUt ZGI0NjNjNWZiMGI0LzEvb2l0VVlrQVBlWWlyb1hKSzY4QmhxaU5fWGVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8wMWQyYWYtMWYyMS00YjgwLWI2NjUtZGI0NjNjNWZiMGI0 LzEvVGRHeVdIU1FyUVljc2djWGE5N3NnYVV4V0l3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAUOfVMA8E AgACMAkDBwAqAQPgIAYwDQYJKoZIhvcNAQELBQADggEBAEhPllwMrASKXHZI5Qe0 siv0Ov7QyimKOhJmP+imPccTLE6YnaPYSh8JRGRt58iabbv5yfEgLpXHWDiRjj3w 0r6W96Br38v/dyU0n6rB5gqFnP2NOml+QQ2C3KAes7m8YADAPZ9szN1eqo9VEWit 3CjsMvhSOLh9N0rk8StWl/jUzpNDEeo7bZTBZcWwiwxycVBvJyeES7tyjQyed8Lq m3xpLg3sfhthPnL2Gmkj+lOeTxcFFsNYvZqCWtL/NCMgpfX2LaUwdXVfSfgJjQ5X qj/O7yUVghFfSO0NquUp9TXLhmTPR7RGCKsbJIkgbHXKgoGZeJXKD4WfvUaXSIdW dyc= -----END CERTIFICATE-----Generated at Sun Jan 25 15:12:53 2026 by rpki-client