This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/zeUawu4ugXygPjbpm1oUuM6S2Qk.roa File: zeUawu4ugXygPjbpm1oUuM6S2Qk.roa (raw, json) Hash identifier: aCfxam2MVMRvUYLCiABdpij5X01SNISKsQaVY7Vln8U= Subject key identifier: CD:E5:1A:C2:EE:2E:81:7C:A0:3E:36:E9:9B:5A:14:B8:CE:92:D9:09 Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491 Certificate serial: 019B7AC8C3428DCB09ADDCFDA5366BB2FED9 Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/zeUawu4ugXygPjbpm1oUuM6S2Qk.roa Signing time: Thu 01 Jan 2026 18:18:56 +0000 ROA not before: Thu 01 Jan 2026 18:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35407 IP address blocks: 80.233.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.mft rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:c3:42:8d:cb:09:ad:dc:fd:a5:36:6b:b2:fe:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491 Validity Not Before: Jan 1 18:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cde51ac2ee2e817ca03e36e99b5a14b8ce92d909 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ea:21:f9:92:d7:b2:55:f2:76:4e:a3:56:76: 52:96:b8:3e:4c:49:c2:62:49:c0:7e:f3:45:7f:27: 75:93:36:8d:59:95:4d:e3:b2:dd:22:5b:2b:fc:a0: 18:c3:c9:e9:86:ff:b3:52:16:87:3b:e0:f8:9d:76: c6:4a:a9:65:8d:6d:43:74:8b:ff:d0:a0:9c:08:bb: a2:39:27:42:e3:bb:a3:0d:0d:cc:12:3a:0b:c6:86: da:39:61:d1:07:1f:c6:96:c1:7f:5c:27:1e:68:7b: 54:41:a2:29:fb:bc:11:09:6b:9e:26:46:90:d8:7b: e0:5f:b5:90:c0:69:cb:d5:b4:e1:75:90:b4:d3:22: 9e:0b:eb:fb:e8:f9:29:7e:14:3f:e3:07:fc:08:48: 8e:8a:5c:6a:5f:ca:21:36:dc:29:9e:2e:80:07:c6: 0c:71:08:93:4f:99:49:78:5b:8e:e2:48:8b:df:bf: 6f:2f:fb:da:19:c7:84:f6:4f:16:45:1e:f8:2a:f6: 09:dc:4a:85:d3:ec:58:3c:07:c3:f0:c9:67:e8:7d: fe:60:76:ae:b6:6f:a3:d5:2b:6d:b3:b5:c9:c3:39: 99:1d:48:82:09:06:7a:10:af:90:ac:af:da:29:a5: 17:07:ad:8f:05:96:c8:03:d0:6e:9e:86:3a:14:bf: 94:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:E5:1A:C2:EE:2E:81:7C:A0:3E:36:E9:9B:5A:14:B8:CE:92:D9:09 X509v3 Authority Key Identifier: keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/zeUawu4ugXygPjbpm1oUuM6S2Qk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.233.251.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:a3:bb:14:bb:27:6d:73:83:80:d2:4b:ff:c1:12:79:ec:c2: 5c:d5:bb:a3:b5:77:56:0c:3e:35:6a:ae:49:d4:96:89:ad:5c: a3:7f:f4:03:83:d7:10:ae:b7:99:18:c4:4c:f1:b2:c3:b0:ba: 17:53:a8:c9:62:2e:83:3f:78:15:a4:5a:48:e4:f7:ff:89:e9: 0c:46:3c:86:a9:67:78:5d:76:3f:75:4e:b8:f3:78:27:59:7b: 24:32:fa:99:b8:f8:50:bc:6f:dd:2b:1d:9d:67:38:40:d3:46: 6c:f0:1a:33:a9:99:0a:62:76:79:1d:f3:3e:16:e2:7d:85:be: 6f:ce:da:38:a0:99:03:57:3a:2d:fc:92:e2:61:57:5a:5c:a7: e8:eb:c0:04:ee:ee:6e:60:2a:fd:34:c4:42:78:66:a7:ed:7d: b4:cc:ca:06:1f:3a:d6:5d:10:d8:e2:d3:f7:d9:05:2b:b9:5e: d7:8a:6a:1f:dd:2b:a4:96:38:4a:38:8a:fa:ac:7e:81:56:cb: f9:06:d9:45:a2:6c:a6:16:d5:b7:f1:ce:ea:a8:7c:60:3e:d1: 65:22:5f:11:b7:b1:27:ad:6f:7a:21:fa:be:8b:ce:81:2d:14: c7:73:d8:2a:5d:a0:77:ac:64:5a:5f:29:50:74:16:6a:82:ec: 95:74:0b:45 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yMNCjcsJrdz9pTZrsv7ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzYmUwN2NiMWZkNGYxZTNjOTIyMzAzYjY3MGE4ODFiODJl NjE0OTEwHhcNMjYwMTAxMTgxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZGU1MWFjMmVlMmU4MTdjYTAzZTM2ZTk5YjVhMTRiOGNlOTJkOTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuoh+ZLXslXydk6jVnZSlrg+TEnC YknAfvNFfyd1kzaNWZVN47LdIlsr/KAYw8nphv+zUhaHO+D4nXbGSqlljW1DdIv/ 0KCcCLuiOSdC47ujDQ3MEjoLxobaOWHRBx/GlsF/XCceaHtUQaIp+7wRCWueJkaQ 2HvgX7WQwGnL1bThdZC00yKeC+v76PkpfhQ/4wf8CEiOilxqX8ohNtwpni6AB8YM cQiTT5lJeFuO4kiL379vL/vaGceE9k8WRR74KvYJ3EqF0+xYPAfD8Mln6H3+YHau tm+j1Stts7XJwzmZHUiCCQZ6EK+QrK/aKaUXB62PBZbIA9BunoY6FL+UmwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM3lGsLuLoF8oD426ZtaFLjOktkJMB8GA1UdIwQY MBaAFOO+B8sf1PHjySIwO2cKiBuC5hSRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMt ZDRlZTFkMzg5ZTBkLzEvemVVYXd1NHVnWHlnUGpicG0xb1V1TTZTMlFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMtZDRlZTFkMzg5ZTBk LzEvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUOn7MA0G CSqGSIb3DQEBCwUAA4IBAQAMo7sUuydtc4OA0kv/wRJ57MJc1bujtXdWDD41aq5J 1JaJrVyjf/QDg9cQrreZGMRM8bLDsLoXU6jJYi6DP3gVpFpI5Pf/iekMRjyGqWd4 XXY/dU6483gnWXskMvqZuPhQvG/dKx2dZzhA00Zs8BozqZkKYnZ5HfM+FuJ9hb5v zto4oJkDVzot/JLiYVdaXKfo68AE7u5uYCr9NMRCeGan7X20zMoGHzrWXRDY4tP3 2QUruV7Ximof3SukljhKOIr6rH6BVsv5BtlFomymFtW38c7qqHxgPtFlIl8Rt7En rW96Ifq+i86BLRTHc9gqXaB3rGRaXylQdBZqguyVdAtF -----END CERTIFICATE-----Generated at Tue Jan 20 02:47:19 2026 by rpki-client