This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/f431ea-5d30-4312-9f8b-6c3595fb7212/1/RXBYuM_vbvXcudnuqxXF-aAZIBI.roa File: RXBYuM_vbvXcudnuqxXF-aAZIBI.roa (raw, json) Hash identifier: ygatlUjuSPju9x/rM5pSSXGzshHRduyfzx3H900RDBY= Subject key identifier: 45:70:58:B8:CF:EF:6E:F5:DC:B9:D9:EE:AB:15:C5:F9:A0:19:20:12 Certificate issuer: /CN=baed98a44c167dcbde927cbb8e044fcfa3a1d862 Certificate serial: 019B77591BF6ED0325C15FBE4D5564598BD9 Authority key identifier: BA:ED:98:A4:4C:16:7D:CB:DE:92:7C:BB:8E:04:4F:CF:A3:A1:D8:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uu2YpEwWfcvekny7jgRPz6Oh2GI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/f431ea-5d30-4312-9f8b-6c3595fb7212/1/RXBYuM_vbvXcudnuqxXF-aAZIBI.roa Signing time: Thu 01 Jan 2026 02:18:07 +0000 ROA not before: Thu 01 Jan 2026 02:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34536 IP address blocks: 80.77.224.0/24 maxlen: 24 80.77.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/f431ea-5d30-4312-9f8b-6c3595fb7212/1/uu2YpEwWfcvekny7jgRPz6Oh2GI.crl rsync://rpki.ripe.net/repository/DEFAULT/da/f431ea-5d30-4312-9f8b-6c3595fb7212/1/uu2YpEwWfcvekny7jgRPz6Oh2GI.mft rsync://rpki.ripe.net/repository/DEFAULT/uu2YpEwWfcvekny7jgRPz6Oh2GI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:1b:f6:ed:03:25:c1:5f:be:4d:55:64:59:8b:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baed98a44c167dcbde927cbb8e044fcfa3a1d862 Validity Not Before: Jan 1 02:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=457058b8cfef6ef5dcb9d9eeab15c5f9a0192012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:46:dd:f3:62:07:de:f0:d2:dd:f6:55:35:c7: 1d:c9:ce:96:ab:16:0d:ca:9e:d1:33:d7:f5:2e:25: 94:f4:4d:25:29:9e:a5:cf:2e:05:c4:48:df:ce:ad: 13:fb:91:7e:2a:07:b9:e8:fa:d3:d0:4e:46:a2:ad: 42:db:b1:4d:a2:d1:69:7b:2d:b7:0e:f7:c2:44:ec: 8b:7c:dd:47:ec:c0:7c:9c:5c:67:bf:29:28:78:aa: ce:4c:20:ac:78:65:27:28:5d:3d:c5:a3:5f:23:d9: 26:ea:92:41:c4:cf:ae:57:3c:a4:f6:1a:d2:c4:41: 9f:56:a9:05:e2:fe:ae:bd:06:44:0c:11:c8:8c:1c: 5c:d3:84:af:18:04:64:52:0e:ea:09:49:28:76:3e: ad:b0:d3:a5:b1:53:58:95:cb:01:68:47:15:be:52: bd:63:fb:32:48:2b:ee:95:f1:25:4e:ef:06:ad:e3: 81:dd:7f:1a:ae:7d:97:26:d3:0a:9f:b8:49:e8:65: ad:b6:e5:52:87:c9:6b:33:f0:6d:ea:88:28:e2:24: a2:25:27:d2:ae:c8:f0:c6:58:c9:b6:39:7e:98:eb: 7a:7d:28:35:53:c0:2f:6e:d9:58:9e:5f:97:10:43: 49:cb:ee:e4:4d:c1:e8:b9:f5:57:15:97:e7:41:0e: dc:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:70:58:B8:CF:EF:6E:F5:DC:B9:D9:EE:AB:15:C5:F9:A0:19:20:12 X509v3 Authority Key Identifier: keyid:BA:ED:98:A4:4C:16:7D:CB:DE:92:7C:BB:8E:04:4F:CF:A3:A1:D8:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uu2YpEwWfcvekny7jgRPz6Oh2GI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/f431ea-5d30-4312-9f8b-6c3595fb7212/1/RXBYuM_vbvXcudnuqxXF-aAZIBI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/f431ea-5d30-4312-9f8b-6c3595fb7212/1/uu2YpEwWfcvekny7jgRPz6Oh2GI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.77.224.0/23 Signature Algorithm: sha256WithRSAEncryption 63:33:7e:a4:63:41:a2:03:b6:08:9b:85:6d:3e:fd:2b:8d:27: 12:e9:ae:fa:5f:f5:2a:e7:b3:9e:2b:18:78:af:b9:ea:ed:c8: f8:cc:9a:1a:a8:ef:73:28:5d:5f:18:57:38:f4:0f:8e:01:fd: d5:13:e9:d0:e5:82:e0:38:98:df:aa:4b:c4:22:c8:cd:1f:a7: 34:49:1b:c7:a3:9b:91:eb:cc:95:ac:e4:2b:7f:a3:3c:98:1b: 72:20:45:e2:61:41:44:33:91:de:8f:41:71:17:1b:72:c4:ea: cd:3e:35:ab:be:41:83:04:3f:07:5e:e3:6e:92:a7:34:19:5c: e2:3a:70:ee:32:b9:59:cf:dc:77:52:f8:3e:20:5c:2a:93:b0: cb:f5:d6:4b:69:3b:34:56:86:83:7d:70:cb:5e:56:9c:21:8c: 36:fa:2d:7d:76:bb:66:db:e3:f7:37:cc:22:21:b7:e3:01:6b: 24:b4:61:24:c4:0a:90:a3:ce:7d:fd:c8:fc:2f:37:5c:c2:ee: 7e:f3:85:48:ee:6b:93:e7:22:4e:eb:ab:04:9a:0d:9a:73:3b: c8:47:e1:b2:f4:77:85:60:51:c6:90:fc:df:88:c5:e7:9d:ec: 2e:e1:6a:ea:32:da:73:7f:9a:23:88:be:20:4a:4a:fb:34:c1: 90:10:3d:7d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WRv27QMlwV++TVVkWYvZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhZWQ5OGE0NGMxNjdkY2JkZTkyN2NiYjhlMDQ0ZmNmYTNh MWQ4NjIwHhcNMjYwMTAxMDIxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTcwNThiOGNmZWY2ZWY1ZGNiOWQ5ZWVhYjE1YzVmOWEwMTkyMDEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUbd82IH3vDS3fZVNccdyc6WqxYN yp7RM9f1LiWU9E0lKZ6lzy4FxEjfzq0T+5F+Kge56PrT0E5Goq1C27FNotFpey23 DvfCROyLfN1H7MB8nFxnvykoeKrOTCCseGUnKF09xaNfI9km6pJBxM+uVzyk9hrS xEGfVqkF4v6uvQZEDBHIjBxc04SvGARkUg7qCUkodj6tsNOlsVNYlcsBaEcVvlK9 Y/sySCvulfElTu8GreOB3X8arn2XJtMKn7hJ6GWttuVSh8lrM/Bt6ogo4iSiJSfS rsjwxljJtjl+mOt6fSg1U8AvbtlYnl+XEENJy+7kTcHoufVXFZfnQQ7coQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEVwWLjP72713LnZ7qsVxfmgGSASMB8GA1UdIwQY MBaAFLrtmKRMFn3L3pJ8u44ET8+jodhiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXUyWXBFd1dmY3Zla255N2pnUlB6Nk9oMkdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9mNDMxZWEtNWQzMC00MzEyLTlmOGIt NmMzNTk1ZmI3MjEyLzEvUlhCWXVNX3ZidlhjdWRudXF4WEYtYUFaSUJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS9mNDMxZWEtNWQzMC00MzEyLTlmOGItNmMzNTk1ZmI3MjEy LzEvdXUyWXBFd1dmY3Zla255N2pnUlB6Nk9oMkdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBUE3gMA0G CSqGSIb3DQEBCwUAA4IBAQBjM36kY0GiA7YIm4VtPv0rjScS6a76X/Uq57OeKxh4 r7nq7cj4zJoaqO9zKF1fGFc49A+OAf3VE+nQ5YLgOJjfqkvEIsjNH6c0SRvHo5uR 68yVrOQrf6M8mBtyIEXiYUFEM5Hej0FxFxtyxOrNPjWrvkGDBD8HXuNukqc0GVzi OnDuMrlZz9x3Uvg+IFwqk7DL9dZLaTs0VoaDfXDLXlacIYw2+i19drtm2+P3N8wi IbfjAWsktGEkxAqQo859/cj8Lzdcwu5+84VI7muT5yJO66sEmg2aczvIR+Gy9HeF YFHGkPzfiMXnnewu4WrqMtpzf5ojiL4gSkr7NMGQED19 -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:40 2026 by rpki-client