This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/CojXx1JmaKxd7zUwR7CRnZ1ihqY.roa File: CojXx1JmaKxd7zUwR7CRnZ1ihqY.roa (raw, json) Hash identifier: 5OB00df44KjyLd3bKGE+/VJagw32on0TTgmQX7KcBL0= Subject key identifier: 0A:88:D7:C7:52:66:68:AC:5D:EF:35:30:47:B0:91:9D:9D:62:86:A6 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A31C402E106962213D3DEA9B2B5B64 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/CojXx1JmaKxd7zUwR7CRnZ1ihqY.roa Signing time: Thu 01 Jan 2026 08:18:33 +0000 ROA not before: Thu 01 Jan 2026 08:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197625 IP address blocks: 81.161.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:1c:40:2e:10:69:62:21:3d:3d:ea:9b:2b:5b:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0a88d7c7526668ac5def353047b0919d9d6286a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:19:5e:69:28:5b:81:6d:6e:30:b0:64:c9:e3: 5b:2c:aa:89:7b:f2:d1:ca:4b:97:8c:f2:a9:62:9e: f9:d8:5a:14:d5:86:b9:c5:f6:b8:2f:00:88:43:c6: 2c:24:4d:37:54:a2:7c:80:5d:2b:2b:16:c1:43:90: f1:14:f2:c7:f2:a4:10:9f:36:1b:60:06:67:a7:3a: 87:40:02:a0:f7:d8:1e:3e:bc:6b:ca:65:c2:02:ed: e7:cc:62:85:d8:84:99:11:ce:36:5e:18:fa:cc:78: d3:9b:44:00:f3:20:40:ce:3f:36:c8:01:32:dc:cc: c4:af:19:95:01:0d:1e:79:72:63:28:8f:b4:f2:e6: cb:00:fd:db:07:47:e6:9b:54:25:13:92:5d:9a:be: 0c:eb:17:4f:17:11:d2:4e:83:c2:49:1f:a4:39:44: e0:98:c8:ef:2e:d1:56:e2:ae:e5:1f:0d:e1:af:ca: ed:d9:ab:73:35:82:c9:8e:b4:e9:3a:35:b2:d2:08: 4d:bf:44:86:10:b8:09:86:4a:71:68:e5:d0:b7:d6: 30:da:89:d8:41:f4:70:a4:69:33:4c:85:78:d3:b1: 9e:e0:07:85:34:2a:9a:1f:7e:85:81:61:1a:cf:71: 10:ae:b7:58:c8:6c:cc:c7:13:3c:71:1e:78:5e:b0: 1d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:88:D7:C7:52:66:68:AC:5D:EF:35:30:47:B0:91:9D:9D:62:86:A6 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/CojXx1JmaKxd7zUwR7CRnZ1ihqY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.161.231.0/24 Signature Algorithm: sha256WithRSAEncryption 24:2d:a7:83:94:af:ec:40:b4:c1:92:e2:b7:ee:00:5a:51:fa: cb:3b:40:e2:ae:d0:82:71:e0:ee:8c:88:6c:e6:9f:f5:98:50: 9b:25:95:be:6f:f7:fd:66:81:24:1d:37:00:1c:61:9d:70:ca: c7:da:b6:40:64:19:af:a7:5b:e5:75:e4:ee:8f:05:81:10:9e: bc:97:9d:74:9d:8e:a2:a6:e0:54:08:6f:6c:b3:f2:31:27:6e: 50:0b:6b:6e:e4:21:a9:c4:69:60:d1:c9:36:03:ac:dc:a3:05: 31:b2:8e:4e:0d:bb:26:9a:1d:9c:73:86:c4:1b:89:59:5b:2b: 0e:0b:2d:95:09:b6:6e:58:e1:81:29:59:b4:a8:ed:33:15:0b: 08:25:63:22:a9:c5:9f:2f:c3:f9:34:c9:69:56:db:02:49:d2: 8c:d3:f1:43:5b:c6:66:ca:b5:47:04:75:7e:c7:ca:ca:b4:5b: 86:68:56:7c:31:81:e9:df:87:5c:5b:87:9e:83:52:14:a3:f0: 72:7d:48:46:e2:d8:ef:01:45:87:0a:02:50:28:1f:e5:17:b6: 29:00:7e:a0:5b:8b:84:67:35:91:dd:0c:c9:54:f3:91:d6:6b: 30:87:4f:8e:97:48:f0:2e:59:74:c4:a7:e6:4a:3e:ad:61:33: d6:7f:a3:b3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oxxALhBpYiE9PeqbK1tkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYTg4ZDdjNzUyNjY2OGFjNWRlZjM1MzA0N2IwOTE5ZDlkNjI4NmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxleaShbgW1uMLBkyeNbLKqJe/LR ykuXjPKpYp752FoU1Ya5xfa4LwCIQ8YsJE03VKJ8gF0rKxbBQ5DxFPLH8qQQnzYb YAZnpzqHQAKg99gePrxrymXCAu3nzGKF2ISZEc42Xhj6zHjTm0QA8yBAzj82yAEy 3MzErxmVAQ0eeXJjKI+08ubLAP3bB0fmm1QlE5Jdmr4M6xdPFxHSToPCSR+kOUTg mMjvLtFW4q7lHw3hr8rt2atzNYLJjrTpOjWy0ghNv0SGELgJhkpxaOXQt9Yw2onY QfRwpGkzTIV407Ge4AeFNCqaH36FgWEaz3EQrrdYyGzMxxM8cR54XrAdkwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAqI18dSZmisXe81MEewkZ2dYoamMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvQ29qWHgxSm1hS3hkN3pVd1I3Q1JuWjFpaHFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUaHnMA0G CSqGSIb3DQEBCwUAA4IBAQAkLaeDlK/sQLTBkuK37gBaUfrLO0DirtCCceDujIhs 5p/1mFCbJZW+b/f9ZoEkHTcAHGGdcMrH2rZAZBmvp1vldeTujwWBEJ68l510nY6i puBUCG9ss/IxJ25QC2tu5CGpxGlg0ck2A6zcowUxso5ODbsmmh2cc4bEG4lZWysO Cy2VCbZuWOGBKVm0qO0zFQsIJWMiqcWfL8P5NMlpVtsCSdKM0/FDW8ZmyrVHBHV+ x8rKtFuGaFZ8MYHp34dcW4eeg1IUo/ByfUhG4tjvAUWHCgJQKB/lF7YpAH6gW4uE ZzWR3QzJVPOR1mswh0+Ol0jwLll0xKfmSj6tYTPWf6Oz -----END CERTIFICATE-----Generated at Fri Jan 2 12:09:37 2026 by rpki-client