This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/i99u0goUMp8noCiOxLvsF0PjThg.roa File: i99u0goUMp8noCiOxLvsF0PjThg.roa (raw, json) Hash identifier: BlAXZTEbYm5C8kWdW14+SQaoI4/b99p1HyX+X4SArGA= Subject key identifier: 8B:DF:6E:D2:0A:14:32:9F:27:A0:28:8E:C4:BB:EC:17:43:E3:4E:18 Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b Certificate serial: 019B7A5AFC97090E0FD1B6559D2ACFA23937 Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/i99u0goUMp8noCiOxLvsF0PjThg.roa Signing time: Thu 01 Jan 2026 16:19:01 +0000 ROA not before: Thu 01 Jan 2026 16:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44400 IP address blocks: 81.31.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:fc:97:09:0e:0f:d1:b6:55:9d:2a:cf:a2:39:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b Validity Not Before: Jan 1 16:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8bdf6ed20a14329f27a0288ec4bbec1743e34e18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:74:04:3b:05:ae:6c:27:d9:41:5f:23:15:f2: 3b:8b:9f:3b:c7:31:0d:a5:7a:ef:7b:31:2d:52:e2: 9e:5f:32:69:ef:7b:59:6f:3a:8e:ce:78:6c:d2:aa: d6:24:e9:1d:6e:08:25:fe:ef:08:2f:8f:c2:4a:ab: df:07:cd:5d:94:a6:9c:79:b6:8f:e3:5f:23:ff:87: cd:d9:94:f7:e8:e9:8c:03:cc:b7:94:b1:c9:c5:ef: 2c:95:3e:9a:60:03:91:e3:50:a1:19:b3:26:85:30: f4:48:97:c8:c2:66:be:6c:51:c3:4e:16:df:a8:c8: 2b:39:c5:97:3a:0f:1e:43:b7:03:b0:40:2d:f4:c8: a1:ae:6a:f9:cd:a7:de:4c:3f:a7:c5:11:f8:86:52: d9:17:05:24:3e:a4:71:8f:6d:6e:f4:09:42:74:6e: 4c:8d:f8:6e:7c:87:00:ef:87:0f:ba:75:6f:b5:01: ef:5b:d5:ee:75:ae:e7:3a:c8:68:ac:fb:d3:3f:e4: 1e:b9:b4:3e:f5:34:2d:39:9a:ba:31:65:77:96:3f: 61:b7:f0:87:49:7b:f0:1c:39:3b:ee:5f:44:08:b0: 6c:f5:a5:a5:50:70:57:ab:4f:a8:23:ca:70:56:39: e6:ff:56:f6:9e:c9:ed:2a:9f:f0:11:90:6e:85:5b: 27:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:DF:6E:D2:0A:14:32:9F:27:A0:28:8E:C4:BB:EC:17:43:E3:4E:18 X509v3 Authority Key Identifier: keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/i99u0goUMp8noCiOxLvsF0PjThg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.31.252.0/22 Signature Algorithm: sha256WithRSAEncryption 78:d5:01:a9:b7:97:c0:58:e0:99:bf:ac:6d:29:48:2a:bd:f9: 40:bf:79:63:14:64:23:b8:76:4f:d0:0f:55:79:31:6b:2a:7d: 6d:d0:f3:e5:39:cd:f8:c6:4e:58:c3:19:ed:87:fa:64:a5:cd: 20:cc:7e:a3:f9:11:a6:49:67:72:87:ea:f1:a1:ea:43:e3:3c: 6b:d5:0d:f8:8f:27:bf:e8:c5:8d:0b:11:93:cd:0a:8a:c3:94: 21:c8:eb:be:d6:64:f5:d6:bf:67:d9:4d:10:3a:a9:3d:b8:2f: df:e1:24:f8:b7:20:cd:16:99:07:ff:8f:29:25:11:70:c1:ab: cd:e0:16:a4:4c:f8:c5:bb:6c:77:0d:52:0c:fc:cc:d6:b6:65: a7:14:d1:1c:17:85:02:f2:aa:c2:67:c1:e0:36:ac:2c:17:cd: a3:0d:4c:8c:5a:24:47:49:89:a8:8a:47:3f:c2:cf:e8:0b:ac: 6d:56:c5:a3:33:9f:72:56:2f:f2:23:f3:19:26:d3:b5:87:6c: 9b:10:33:d1:2b:e4:89:81:25:e8:cd:c9:cb:be:ad:d3:ce:ba: b6:ab:7e:90:4a:a0:72:a5:f6:09:2a:91:44:83:83:93:5e:c2: e9:9d:c0:be:e9:d0:25:4d:8d:2d:06:50:de:a6:2f:85:65:9c: 24:b2:75:8a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WvyXCQ4P0bZVnSrPojk3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwNTZiY2Q0MjZmZDg3Y2Q2ZjQxNDdlMTMzMjE2ZDAzMTEy YjE4MWIwHhcNMjYwMTAxMTYxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YmRmNmVkMjBhMTQzMjlmMjdhMDI4OGVjNGJiZWMxNzQzZTM0ZTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3QEOwWubCfZQV8jFfI7i587xzEN pXrvezEtUuKeXzJp73tZbzqOznhs0qrWJOkdbggl/u8IL4/CSqvfB81dlKacebaP 418j/4fN2ZT36OmMA8y3lLHJxe8slT6aYAOR41ChGbMmhTD0SJfIwma+bFHDThbf qMgrOcWXOg8eQ7cDsEAt9Mihrmr5zafeTD+nxRH4hlLZFwUkPqRxj21u9AlCdG5M jfhufIcA74cPunVvtQHvW9Xuda7nOshorPvTP+QeubQ+9TQtOZq6MWV3lj9ht/CH SXvwHDk77l9ECLBs9aWlUHBXq0+oI8pwVjnm/1b2nsntKp/wEZBuhVsntQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIvfbtIKFDKfJ6AojsS77BdD404YMB8GA1UdIwQY MBaAFBBWvNQm/YfNb0FH4TMhbQMRKxgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNmY0ZTQtNjhiYi00NDk2LTkwYzct YWE4NTllMTkyYjE2LzEvaTk5dTBnb1VNcDhub0NpT3hMdnNGMFBqVGhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9lNmY0ZTQtNjhiYi00NDk2LTkwYzctYWE4NTllMTkyYjE2 LzEvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCUR/8MA0G CSqGSIb3DQEBCwUAA4IBAQB41QGpt5fAWOCZv6xtKUgqvflAv3ljFGQjuHZP0A9V eTFrKn1t0PPlOc34xk5Ywxnth/pkpc0gzH6j+RGmSWdyh+rxoepD4zxr1Q34jye/ 6MWNCxGTzQqKw5QhyOu+1mT11r9n2U0QOqk9uC/f4ST4tyDNFpkH/48pJRFwwavN 4BakTPjFu2x3DVIM/MzWtmWnFNEcF4UC8qrCZ8HgNqwsF82jDUyMWiRHSYmoikc/ ws/oC6xtVsWjM59yVi/yI/MZJtO1h2ybEDPRK+SJgSXozcnLvq3Tzrq2q36QSqBy pfYJKpFEg4OTXsLpncC+6dAlTY0tBlDepi+FZZwksnWK -----END CERTIFICATE-----Generated at Thu Jan 8 16:19:47 2026 by rpki-client