This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/rbrxUA36Uj_W2cv5ysZhTVIwxp4.roa File: rbrxUA36Uj_W2cv5ysZhTVIwxp4.roa (raw, json) Hash identifier: OT7C6O/C6TgYrrzLBRPYDZUiybzraaRPGIJN5wW++Ak= Subject key identifier: AD:BA:F1:50:0D:FA:52:3F:D6:D9:CB:F9:CA:C6:61:4D:52:30:C6:9E Certificate issuer: /CN=4dd1b2587490ad061cb207176bdeec81a531588c Certificate serial: 019B7AC94ACD0A2E9E13DC1A18AD90EE0700 Authority key identifier: 4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/rbrxUA36Uj_W2cv5ysZhTVIwxp4.roa Signing time: Thu 01 Jan 2026 18:19:30 +0000 ROA not before: Thu 01 Jan 2026 18:19:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14516 IP address blocks: 80.231.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:4a:cd:0a:2e:9e:13:dc:1a:18:ad:90:ee:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd1b2587490ad061cb207176bdeec81a531588c Validity Not Before: Jan 1 18:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=adbaf1500dfa523fd6d9cbf9cac6614d5230c69e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:da:3d:ef:16:e4:f9:d5:ac:45:8c:c9:bb:66: bb:f8:23:e0:59:91:ca:0e:f0:5a:db:ed:60:83:af: 5d:72:40:c1:5d:47:dd:a0:9e:a3:cc:da:6c:3e:b7: b4:fa:62:5b:8a:d7:b7:5e:b0:43:73:25:23:1a:f9: cf:e8:c5:30:8e:89:63:4a:90:71:1f:e6:dc:25:28: bb:bd:e2:ef:59:4d:f2:51:16:cc:f6:ee:0e:21:78: 23:87:48:37:5e:91:75:f6:a3:4b:51:2b:51:19:06: 0e:a2:20:9b:ef:53:f3:ee:a4:38:ac:88:27:93:1c: 82:93:b7:3a:33:0d:a1:63:6c:1b:9c:0a:ee:b4:70: 37:e0:0c:1f:18:e3:9a:01:a0:02:e0:31:0d:28:15: c7:3d:fc:ba:9d:ff:67:69:50:b2:65:ea:9b:3f:4c: 00:2a:d4:b4:9e:b2:e1:97:bf:17:64:11:e7:21:07: 97:05:86:ed:38:82:4e:d2:2a:c2:f9:c9:4d:e1:b0: 06:7b:13:97:cb:a7:d5:36:63:6e:5a:7f:22:35:ed: bf:b8:6f:26:f0:01:6a:62:1e:f0:42:d7:c8:7b:95: c5:92:96:ad:60:8a:f2:2a:31:68:c8:17:9c:78:8a: db:58:5f:ff:df:56:a0:d8:22:db:53:7c:18:b8:71: 77:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:BA:F1:50:0D:FA:52:3F:D6:D9:CB:F9:CA:C6:61:4D:52:30:C6:9E X509v3 Authority Key Identifier: keyid:4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/rbrxUA36Uj_W2cv5ysZhTVIwxp4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.231.216.0/24 Signature Algorithm: sha256WithRSAEncryption 49:db:0b:85:37:ea:12:7b:20:82:7e:8b:1a:08:51:84:69:d7: c3:25:ef:eb:57:e2:c5:69:ac:3c:89:3f:97:21:0e:04:ab:9b: 1b:6b:05:5d:a2:2f:20:bf:fd:33:39:14:4d:bd:37:b7:6f:28: 06:d7:fc:ff:6d:25:d0:e2:f2:13:d9:40:1c:51:21:58:8b:ed: f4:33:14:df:9c:70:d2:e6:52:a3:92:90:82:b3:1d:b5:31:a3: ff:f5:e3:6b:1a:ba:7f:a0:f7:9b:ed:72:c0:64:16:fc:48:0e: 40:66:6e:a8:52:a4:6d:c0:66:09:94:4f:7a:32:18:7f:79:c4: ff:bf:92:9d:4b:2b:6e:42:64:10:0b:f4:aa:1c:83:27:62:8f: 35:6e:17:c9:8b:96:25:28:c4:d6:79:b5:d1:f5:83:ee:04:3a: ed:6d:43:87:d4:d9:39:5d:b6:bc:3e:2b:6e:31:d7:a5:32:fe: 29:88:73:9d:cc:cb:b6:2f:df:5b:11:d4:0f:25:e2:aa:c9:3a: 77:69:dc:5e:e8:42:31:98:ba:9b:fb:99:56:10:5b:17:3b:b8: 33:d4:34:14:09:96:c5:2a:20:40:8c:be:96:2f:77:56:02:f8: 1e:af:3b:ee:76:7d:81:fc:d4:42:db:77:a2:70:92:13:81:31: 08:d7:80:60 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yUrNCi6eE9waGK2Q7gcAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDFiMjU4NzQ5MGFkMDYxY2IyMDcxNzZiZGVlYzgxYTUz MTU4OGMwHhcNMjYwMTAxMTgxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZGJhZjE1MDBkZmE1MjNmZDZkOWNiZjljYWM2NjE0ZDUyMzBjNjllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmto97xbk+dWsRYzJu2a7+CPgWZHK DvBa2+1gg69dckDBXUfdoJ6jzNpsPre0+mJbite3XrBDcyUjGvnP6MUwjoljSpBx H+bcJSi7veLvWU3yURbM9u4OIXgjh0g3XpF19qNLUStRGQYOoiCb71Pz7qQ4rIgn kxyCk7c6Mw2hY2wbnArutHA34AwfGOOaAaAC4DENKBXHPfy6nf9naVCyZeqbP0wA KtS0nrLhl78XZBHnIQeXBYbtOIJO0irC+clN4bAGexOXy6fVNmNuWn8iNe2/uG8m 8AFqYh7wQtfIe5XFkpatYIryKjFoyBeceIrbWF//31ag2CLbU3wYuHF3hwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK268VAN+lI/1tnL+crGYU1SMMaeMB8GA1UdIwQY MBaAFE3Rslh0kK0GHLIHF2ve7IGlMViMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRHeVdIU1FyUVljc2djWGE5N3NnYVV4V0l3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8wMWQyYWYtMWYyMS00YjgwLWI2NjUt ZGI0NjNjNWZiMGI0LzEvcmJyeFVBMzZVal9XMmN2NXlzWmhUVkl3eHA0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8wMWQyYWYtMWYyMS00YjgwLWI2NjUtZGI0NjNjNWZiMGI0 LzEvVGRHeVdIU1FyUVljc2djWGE5N3NnYVV4V0l3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUOfYMA0G CSqGSIb3DQEBCwUAA4IBAQBJ2wuFN+oSeyCCfosaCFGEadfDJe/rV+LFaaw8iT+X IQ4Eq5sbawVdoi8gv/0zORRNvTe3bygG1/z/bSXQ4vIT2UAcUSFYi+30MxTfnHDS 5lKjkpCCsx21MaP/9eNrGrp/oPeb7XLAZBb8SA5AZm6oUqRtwGYJlE96Mhh/ecT/ v5KdSytuQmQQC/SqHIMnYo81bhfJi5YlKMTWebXR9YPuBDrtbUOH1Nk5Xba8Pitu MdelMv4piHOdzMu2L99bEdQPJeKqyTp3adxe6EIxmLqb+5lWEFsXO7gz1DQUCZbF KiBAjL6WL3dWAvgerzvudn2B/NRC23eicJITgTEI14Bg -----END CERTIFICATE-----Generated at Sun Jan 25 16:54:58 2026 by rpki-client