This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/KusUbEKkMUEHFUhl9tW25RRf7XY.roa File: KusUbEKkMUEHFUhl9tW25RRf7XY.roa (raw, json) Hash identifier: cxES9rqXrVJy31QC55da3pYSHAjICJUahqFygHhNjuU= Subject key identifier: 2A:EB:14:6C:42:A4:31:41:07:15:48:65:F6:D5:B6:E5:14:5F:ED:76 Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511 Certificate serial: 019B7C8015E6B2BA6D411D9C8DAECD9CA211 Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/KusUbEKkMUEHFUhl9tW25RRf7XY.roa Signing time: Fri 02 Jan 2026 02:18:47 +0000 ROA not before: Fri 02 Jan 2026 02:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29664 IP address blocks: 81.52.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:15:e6:b2:ba:6d:41:1d:9c:8d:ae:cd:9c:a2:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511 Validity Not Before: Jan 2 02:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2aeb146c42a4314107154865f6d5b6e5145fed76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e5:27:a1:a9:b3:11:a2:53:37:46:8f:2d:56: 78:c6:9e:7d:e1:b1:44:6a:87:53:c8:6b:ea:ae:f1: 53:48:24:81:d2:c2:ae:57:00:23:57:19:87:8d:e3: 33:a2:c2:13:55:35:59:38:74:de:63:e2:3a:20:49: 27:bf:94:b8:f9:4a:6c:28:3c:63:49:5a:12:1b:3c: b6:6e:90:6e:ca:68:3d:37:d9:b1:0b:50:f1:d9:b3: 83:b5:0d:79:08:83:45:9b:cf:9d:84:f4:5f:ae:5c: 12:6e:14:87:2a:b7:2b:8f:b9:26:2a:7a:b0:11:ea: 98:6f:57:f1:11:1f:43:7a:dd:b4:63:5a:14:40:b9: bc:b6:f9:33:11:b4:eb:c8:fa:ff:5b:82:d5:e6:9b: 87:eb:71:a3:62:f1:c3:9f:b7:9a:a5:bb:73:90:f2: a1:1c:f5:66:13:d9:ed:a7:24:3a:7f:f4:7e:d3:f3: d3:66:9c:67:43:8b:79:de:3f:cf:dc:73:a9:13:18: 89:36:4b:d1:ae:5c:1c:0f:27:f9:0c:1c:8c:ce:2e: b5:47:0a:37:be:d1:fb:6a:18:f0:c0:47:97:39:0b: 2e:73:f7:1c:f0:0f:9a:03:51:81:a2:db:6c:fb:79: 98:90:1a:6c:3d:37:0d:1d:1c:50:ad:ea:a5:50:f4: ff:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:EB:14:6C:42:A4:31:41:07:15:48:65:F6:D5:B6:E5:14:5F:ED:76 X509v3 Authority Key Identifier: keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/KusUbEKkMUEHFUhl9tW25RRf7XY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.52.199.0/24 Signature Algorithm: sha256WithRSAEncryption 48:89:48:94:e7:42:6f:5a:78:11:9a:69:bf:dd:db:29:95:04: fc:4d:ae:4e:b2:db:b2:28:aa:07:67:a8:41:f8:f5:7b:c8:6b: 4f:76:7d:ed:cf:41:7c:ef:5b:d8:99:dd:99:2f:13:30:f9:ab: 77:07:f2:9d:a7:2f:4d:cb:01:33:f5:cd:e2:60:80:ef:c7:6d: 1a:8f:5c:a3:6d:f4:33:c0:0e:2e:74:43:95:e5:68:95:af:a3: 13:32:e3:13:92:0b:ca:ee:3e:0b:7a:ac:cb:d0:4e:63:18:3b: d0:c9:83:f6:b5:38:ab:60:0c:bf:a3:8f:56:9b:ac:b9:5d:a5: 0e:46:55:c1:86:e5:a8:e6:e4:6f:17:b6:ed:fd:ab:8c:d2:e7: 72:b3:a5:67:f9:17:ce:44:2b:08:98:5f:44:1a:ae:f4:19:35: a1:fd:32:62:5a:04:f6:8f:3d:29:41:8e:d1:88:b6:85:ff:93: 1d:c9:53:8f:f4:ff:bd:cf:ba:de:4f:fa:79:18:6f:29:97:68: df:8d:4b:6c:63:94:a9:5f:ad:84:c5:4e:13:c8:b8:2b:aa:94: 78:04:08:dd:92:a1:df:4c:d7:61:0b:12:4d:39:d3:bf:30:49: 93:f3:43:90:1f:22:31:88:ef:a9:75:61:bc:5b:4b:7e:17:1e: ec:28:6b:41 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gBXmsrptQR2cja7NnKIRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZjA5YmEzM2I1YWU1ODFiMGQyOTMyMzI0OTMxNGY3NmFh MTA1MTEwHhcNMjYwMTAyMDIxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYWViMTQ2YzQyYTQzMTQxMDcxNTQ4NjVmNmQ1YjZlNTE0NWZlZDc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOUnoamzEaJTN0aPLVZ4xp594bFE aodTyGvqrvFTSCSB0sKuVwAjVxmHjeMzosITVTVZOHTeY+I6IEknv5S4+UpsKDxj SVoSGzy2bpBuymg9N9mxC1Dx2bODtQ15CINFm8+dhPRfrlwSbhSHKrcrj7kmKnqw EeqYb1fxER9Det20Y1oUQLm8tvkzEbTryPr/W4LV5puH63GjYvHDn7eapbtzkPKh HPVmE9ntpyQ6f/R+0/PTZpxnQ4t53j/P3HOpExiJNkvRrlwcDyf5DByMzi61Rwo3 vtH7ahjwwEeXOQsuc/cc8A+aA1GBotts+3mYkBpsPTcNHRxQreqlUPT/+QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCrrFGxCpDFBBxVIZfbVtuUUX+12MB8GA1UdIwQY MBaAFDrwm6M7WuWBsNKTIySTFPdqoQURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQt NDU5MzVmNTA2YTEyLzEvS3VzVWJFS2tNVUVIRlVobDl0VzI1UlJmN1hZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQtNDU5MzVmNTA2YTEy LzEvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUTTHMA0G CSqGSIb3DQEBCwUAA4IBAQBIiUiU50JvWngRmmm/3dsplQT8Ta5OstuyKKoHZ6hB +PV7yGtPdn3tz0F871vYmd2ZLxMw+at3B/Kdpy9NywEz9c3iYIDvx20aj1yjbfQz wA4udEOV5WiVr6MTMuMTkgvK7j4LeqzL0E5jGDvQyYP2tTirYAy/o49Wm6y5XaUO RlXBhuWo5uRvF7bt/auM0udys6Vn+RfORCsImF9EGq70GTWh/TJiWgT2jz0pQY7R iLaF/5MdyVOP9P+9z7reT/p5GG8pl2jfjUtsY5SpX62ExU4TyLgrqpR4BAjdkqHf TNdhCxJNOdO/MEmT80OQHyIxiO+pdWG8W0t+Fx7sKGtB -----END CERTIFICATE-----Generated at Sun Jan 25 19:02:16 2026 by rpki-client