This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/LoYWP6wfrrIfPI1yzoriA06poO4.roa File: LoYWP6wfrrIfPI1yzoriA06poO4.roa (raw, json) Hash identifier: HNDBhqWHqeHMhLjyjUg8oWL+Pg/Gy8bOLDzYv12QV78= Subject key identifier: 2E:86:16:3F:AC:1F:AE:B2:1F:3C:8D:72:CE:8A:E2:03:4E:A9:A0:EE Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511 Certificate serial: 019B7C8012B0D1363C30D14B69714CE2A5BF Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/LoYWP6wfrrIfPI1yzoriA06poO4.roa Signing time: Fri 02 Jan 2026 02:18:46 +0000 ROA not before: Fri 02 Jan 2026 02:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24863 IP address blocks: 80.15.249.0/24 maxlen: 24 2a01:c9c0:c01e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:12:b0:d1:36:3c:30:d1:4b:69:71:4c:e2:a5:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511 Validity Not Before: Jan 2 02:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e86163fac1faeb21f3c8d72ce8ae2034ea9a0ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:90:ba:47:f9:0d:82:0d:77:06:85:b7:8e:f6: cc:66:9c:51:a6:23:da:f7:b2:77:b8:80:4e:bd:47: 09:08:f6:00:42:71:c4:fc:93:79:64:15:01:cb:98: ea:9b:44:b1:db:23:3b:1e:b9:f6:83:25:da:8a:e9: ef:34:6b:4a:85:83:e4:d2:5a:3e:62:cf:a3:c7:6a: a1:4d:dd:2a:d3:08:f1:b4:b0:f0:b5:dd:9c:45:59: 40:27:aa:04:d7:e1:5f:74:48:aa:71:84:b2:43:b8: ce:93:af:d0:86:a0:ca:ff:8e:62:f9:ac:57:0a:22: f4:1b:6e:95:07:c2:bc:9b:0a:5a:66:19:e8:87:b6: 33:88:aa:e4:cd:45:f6:68:a8:78:c4:8f:40:0d:a7: 7c:ef:08:a4:ce:b6:f9:31:95:cc:53:7b:e5:6d:04: 8e:92:24:14:00:56:04:21:fa:52:bb:86:d8:62:ef: 0e:1e:c1:20:a2:06:75:c5:3e:ac:70:69:ed:91:f0: 7a:7a:5d:cd:6f:c8:ba:2d:47:b7:29:73:aa:5f:34: ff:d5:82:93:69:a2:bd:cd:e8:1b:ab:79:e7:8a:ba: 93:e9:97:49:24:da:b1:94:10:31:c7:e6:34:30:e3: a3:76:3a:37:04:41:47:be:6a:e8:80:d1:46:d3:cf: 83:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:86:16:3F:AC:1F:AE:B2:1F:3C:8D:72:CE:8A:E2:03:4E:A9:A0:EE X509v3 Authority Key Identifier: keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/LoYWP6wfrrIfPI1yzoriA06poO4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.15.249.0/24 IPv6: 2a01:c9c0:c01e::/48 Signature Algorithm: sha256WithRSAEncryption 24:4b:86:56:0e:b9:62:31:11:7f:9c:46:e6:bb:f2:3d:95:95: b8:ae:89:9e:12:18:f2:30:65:0d:0b:ef:bc:3a:11:a6:d0:e7: 52:ec:6f:1e:0d:f3:35:a2:3b:56:78:28:5c:7a:6e:09:d3:54: a9:39:2b:33:4d:54:c6:5c:54:69:32:f0:b1:e3:e0:f8:59:03: a6:60:18:46:4d:25:32:75:74:fc:d8:68:6f:a8:3d:e6:e3:8a: c9:4f:a7:a8:13:dc:fd:e7:7f:2b:04:8d:47:a3:12:8e:38:ae: 50:31:f4:b7:3c:6c:de:71:be:b4:45:89:91:58:bf:27:f3:a2: 24:07:91:3e:82:f1:5f:72:c1:08:da:42:dd:42:6e:7e:5a:bd: d0:e9:4a:9a:d9:97:2d:cf:aa:19:c7:0b:68:9b:d6:55:05:72: d0:92:35:5f:74:b3:b9:ce:87:cd:99:33:4f:df:48:85:c1:b1: 11:ef:48:08:a9:29:20:91:2a:fc:a2:1a:88:c3:64:db:ee:f3: 61:c7:c0:96:77:36:ac:f7:4e:97:a0:37:3e:bc:46:70:f6:a7: 35:81:23:d0:4a:ec:b3:f1:60:c1:33:27:77:f3:62:8a:a4:82: 28:2d:5e:54:00:78:bf:75:d7:07:fb:18:2f:7e:05:fd:5d:35: 7c:32:dd:37 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt8gBKw0TY8MNFLaXFM4qW/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZjA5YmEzM2I1YWU1ODFiMGQyOTMyMzI0OTMxNGY3NmFh MTA1MTEwHhcNMjYwMTAyMDIxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTg2MTYzZmFjMWZhZWIyMWYzYzhkNzJjZThhZTIwMzRlYTlhMGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpC6R/kNgg13BoW3jvbMZpxRpiPa 97J3uIBOvUcJCPYAQnHE/JN5ZBUBy5jqm0Sx2yM7Hrn2gyXaiunvNGtKhYPk0lo+ Ys+jx2qhTd0q0wjxtLDwtd2cRVlAJ6oE1+FfdEiqcYSyQ7jOk6/QhqDK/45i+axX CiL0G26VB8K8mwpaZhnoh7YziKrkzUX2aKh4xI9ADad87wikzrb5MZXMU3vlbQSO kiQUAFYEIfpSu4bYYu8OHsEgogZ1xT6scGntkfB6el3Nb8i6LUe3KXOqXzT/1YKT aaK9zegbq3nnirqT6ZdJJNqxlBAxx+Y0MOOjdjo3BEFHvmrogNFG08+DaQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFC6GFj+sH66yHzyNcs6K4gNOqaDuMB8GA1UdIwQY MBaAFDrwm6M7WuWBsNKTIySTFPdqoQURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQt NDU5MzVmNTA2YTEyLzEvTG9ZV1A2d2ZycklmUEkxeXpvcmlBMDZwb080LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQtNDU5MzVmNTA2YTEy LzEvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAUA/5MA8E AgACMAkDBwAqAcnAwB4wDQYJKoZIhvcNAQELBQADggEBACRLhlYOuWIxEX+cRua7 8j2VlbiuiZ4SGPIwZQ0L77w6EabQ51Lsbx4N8zWiO1Z4KFx6bgnTVKk5KzNNVMZc VGky8LHj4PhZA6ZgGEZNJTJ1dPzYaG+oPebjislPp6gT3P3nfysEjUejEo44rlAx 9Lc8bN5xvrRFiZFYvyfzoiQHkT6C8V9ywQjaQt1Cbn5avdDpSprZly3PqhnHC2ib 1lUFctCSNV90s7nOh82ZM0/fSIXBsRHvSAipKSCRKvyiGojDZNvu82HHwJZ3Nqz3 TpegNz68RnD2pzWBI9BK7LPxYMEzJ3fzYoqkgigtXlQAeL911wf7GC9+Bf1dNXwy 3Tc= -----END CERTIFICATE-----Generated at Sun Jan 25 16:40:01 2026 by rpki-client