This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/aAyVuuEIHLwQ7ZHvWqkGtvcUni0.roa File: aAyVuuEIHLwQ7ZHvWqkGtvcUni0.roa (raw, json) Hash identifier: d/cfte0Wyd3CC2IffTn5EkzEJV3P14N6JlX8s6ghdWU= Subject key identifier: 68:0C:95:BA:E1:08:1C:BC:10:ED:91:EF:5A:A9:06:B6:F7:14:9E:2D Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511 Certificate serial: 019B7C800BDCF1E0489524EDF845AB853B9B Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/aAyVuuEIHLwQ7ZHvWqkGtvcUni0.roa Signing time: Fri 02 Jan 2026 02:18:45 +0000 ROA not before: Fri 02 Jan 2026 02:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12826 IP address blocks: 81.80.237.0/24 maxlen: 24 194.250.211.0/24 maxlen: 24 195.101.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:0b:dc:f1:e0:48:95:24:ed:f8:45:ab:85:3b:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511 Validity Not Before: Jan 2 02:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=680c95bae1081cbc10ed91ef5aa906b6f7149e2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:0c:e0:ff:2a:66:bb:a6:08:23:29:16:38:dc: 6b:05:fb:9a:59:bd:f8:18:4e:6c:6f:00:ed:51:62: fb:f5:c2:25:65:5e:0f:8d:b9:33:7d:a3:e7:6a:26: 11:52:a0:62:80:ce:7a:ed:47:66:61:eb:f1:2f:37: 65:7c:2a:9a:0c:a4:f2:46:17:42:bc:9a:4b:24:11: 9f:c9:02:db:f8:42:f5:3a:ef:1e:8e:9c:25:7e:ef: 9e:8a:b9:60:81:c2:26:5e:c0:24:c1:c3:f3:fb:cc: cb:bc:03:b4:53:24:8f:d7:90:08:43:80:c4:55:22: 7f:54:3f:e1:d0:0c:01:53:d6:d8:7a:b8:a8:18:60: 8c:fc:4f:b6:4a:92:89:59:e3:5e:16:43:19:ce:ab: 0e:e5:dd:ec:d1:96:c4:f8:6b:36:29:c2:44:19:23: 31:14:f2:96:2e:ac:9a:c3:1c:20:e4:0b:4f:95:ae: 12:cf:90:b9:4f:61:8a:6d:24:8f:cf:d8:41:71:74: 9c:32:65:53:de:e6:9f:9b:5f:58:3d:4c:42:73:38: b5:6f:18:89:14:c3:37:02:4b:78:75:2e:37:f9:2a: f4:88:65:71:2d:d4:28:b8:03:95:ca:54:a5:2e:93: 72:ab:96:7a:b6:2a:8d:de:dc:27:d6:e0:1e:2a:87: 8a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:0C:95:BA:E1:08:1C:BC:10:ED:91:EF:5A:A9:06:B6:F7:14:9E:2D X509v3 Authority Key Identifier: keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/aAyVuuEIHLwQ7ZHvWqkGtvcUni0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.80.237.0/24 194.250.211.0/24 195.101.158.0/24 Signature Algorithm: sha256WithRSAEncryption 05:7e:a2:e7:8c:72:d4:78:8f:51:c3:b2:a6:65:e2:0f:bf:5d: 4f:dc:0e:ad:00:cc:8a:88:50:0c:29:bf:25:7b:b7:6e:6a:92: 60:1b:ef:c2:68:50:a7:81:0b:6e:ca:c5:f8:6d:b4:84:9a:7f: 54:d5:56:28:c7:10:1a:51:7c:3f:d1:c4:56:7c:65:4a:9b:78: 7c:89:20:c2:17:5c:12:86:ba:93:67:3d:f3:5a:61:14:28:15: 3a:66:da:f2:59:16:d8:d7:93:25:1b:d9:bc:e9:bd:8f:55:83: 2e:c0:bf:3f:89:19:9b:88:57:8c:c9:92:de:65:7a:d5:3d:6a: 97:66:0f:12:a0:e7:86:33:12:03:39:18:20:94:bb:47:c3:a4: fe:88:fc:79:02:d8:d8:60:e4:e8:0c:ae:96:6c:57:28:0d:c3: ae:7e:5b:7a:db:66:37:d1:c8:d6:64:ad:c3:a9:eb:b8:8c:18: ba:af:48:25:64:88:4d:32:b4:bd:d9:0b:a9:dd:bc:3c:d0:14: 83:35:80:59:69:00:d8:36:34:f6:8c:32:db:34:44:56:6e:74: d2:9f:94:89:7c:97:bf:e7:ce:7a:0c:98:65:54:6c:1c:d8:3f: e1:ed:79:d8:8f:71:7f:69:19:41:a1:13:94:be:ac:4d:a5:87: 57:f3:44:40 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8gAvc8eBIlSTt+EWrhTubMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZjA5YmEzM2I1YWU1ODFiMGQyOTMyMzI0OTMxNGY3NmFh MTA1MTEwHhcNMjYwMTAyMDIxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODBjOTViYWUxMDgxY2JjMTBlZDkxZWY1YWE5MDZiNmY3MTQ5ZTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Azg/ypmu6YIIykWONxrBfuaWb34 GE5sbwDtUWL79cIlZV4PjbkzfaPnaiYRUqBigM567UdmYevxLzdlfCqaDKTyRhdC vJpLJBGfyQLb+EL1Ou8ejpwlfu+eirlggcImXsAkwcPz+8zLvAO0UySP15AIQ4DE VSJ/VD/h0AwBU9bYerioGGCM/E+2SpKJWeNeFkMZzqsO5d3s0ZbE+Gs2KcJEGSMx FPKWLqyawxwg5AtPla4Sz5C5T2GKbSSPz9hBcXScMmVT3uafm19YPUxCczi1bxiJ FMM3Akt4dS43+Sr0iGVxLdQouAOVylSlLpNyq5Z6tiqN3twn1uAeKoeKPwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFGgMlbrhCBy8EO2R71qpBrb3FJ4tMB8GA1UdIwQY MBaAFDrwm6M7WuWBsNKTIySTFPdqoQURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQt NDU5MzVmNTA2YTEyLzEvYUF5VnV1RUlITHdRN1pIdldxa0d0dmNVbmkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQtNDU5MzVmNTA2YTEy LzEvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAUVDtAwQA wvrTAwQAw2WeMA0GCSqGSIb3DQEBCwUAA4IBAQAFfqLnjHLUeI9Rw7KmZeIPv11P 3A6tAMyKiFAMKb8le7duapJgG+/CaFCngQtuysX4bbSEmn9U1VYoxxAaUXw/0cRW fGVKm3h8iSDCF1wShrqTZz3zWmEUKBU6ZtryWRbY15MlG9m86b2PVYMuwL8/iRmb iFeMyZLeZXrVPWqXZg8SoOeGMxIDORgglLtHw6T+iPx5AtjYYOToDK6WbFcoDcOu flt622Y30cjWZK3Dqeu4jBi6r0glZIhNMrS92Qup3bw80BSDNYBZaQDYNjT2jDLb NERWbnTSn5SJfJe/5856DJhlVGwc2D/h7XnYj3F/aRlBoROUvqxNpYdX80RA -----END CERTIFICATE-----Generated at Sun Jan 25 19:01:18 2026 by rpki-client