This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/1-K_7lWF7x2JD5CuVFElsT4jaLrQ.roa File: 1-K_7lWF7x2JD5CuVFElsT4jaLrQ.roa (raw, json) Hash identifier: PKDin6Um4bSNTv37OWWtMgZ7JZ9EcI4/Ix0ai+0uf0w= Subject key identifier: F8:AF:FB:95:61:7B:C7:62:43:E4:2B:95:14:49:6C:4F:88:DA:2E:B4 Certificate issuer: /CN=63d92b8256159894d2b9b25f4d85986c172723c3 Certificate serial: 019B797E122B2AF23F83FBF0BB2C3F4FB1DF Authority key identifier: 63:D9:2B:82:56:15:98:94:D2:B9:B2:5F:4D:85:98:6C:17:27:23:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y9krglYVmJTSubJfTYWYbBcnI8M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/1-K_7lWF7x2JD5CuVFElsT4jaLrQ.roa Signing time: Thu 01 Jan 2026 12:17:43 +0000 ROA not before: Thu 01 Jan 2026 12:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 81.20.40.0/24 maxlen: 24 81.20.41.0/24 maxlen: 24 2a00:1fd0:ae00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.mft rsync://rpki.ripe.net/repository/DEFAULT/Y9krglYVmJTSubJfTYWYbBcnI8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 15:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:12:2b:2a:f2:3f:83:fb:f0:bb:2c:3f:4f:b1:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63d92b8256159894d2b9b25f4d85986c172723c3 Validity Not Before: Jan 1 12:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f8affb95617bc76243e42b9514496c4f88da2eb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d2:bb:cb:01:8f:41:20:ed:60:52:4b:3f:1a: ff:4b:32:b6:e1:39:1b:2e:60:71:56:bc:33:22:af: 7e:ec:0f:17:ca:5f:1c:64:df:d6:a9:fc:78:4f:0e: fe:7e:1b:d1:d0:d9:84:51:c6:09:5c:19:4b:09:08: f3:06:90:c1:d5:8e:a6:94:03:75:81:80:7a:d3:40: 14:e1:76:78:b3:0f:25:cd:60:7e:36:fb:29:ef:27: ca:f1:09:25:9a:3c:09:85:67:72:0e:b7:93:18:86: 8a:58:dc:af:86:a1:fb:32:79:25:f7:00:b6:1e:8b: f7:ef:2e:60:d5:96:45:28:7e:a5:29:01:29:fe:9d: 4b:17:20:fc:67:ed:39:5b:27:3c:96:fb:91:f4:39: 9d:67:8c:54:14:5e:5a:0d:2c:ce:16:d7:69:c3:54: 19:6f:87:74:9f:a8:20:5b:6b:00:9e:36:c4:f6:ac: 3f:32:93:76:13:67:f6:7e:d3:7e:62:7c:f1:7c:f3: d6:89:dd:b1:13:b8:87:96:70:40:d8:ed:1f:4a:24: 91:0b:cc:bf:da:84:23:b2:bc:88:56:d8:96:e7:4d: 3a:d9:c5:7a:c8:01:3e:2e:96:ba:37:21:78:53:03: 13:fd:af:86:18:8e:2f:bc:ab:c4:20:4b:01:98:50: e0:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:AF:FB:95:61:7B:C7:62:43:E4:2B:95:14:49:6C:4F:88:DA:2E:B4 X509v3 Authority Key Identifier: keyid:63:D9:2B:82:56:15:98:94:D2:B9:B2:5F:4D:85:98:6C:17:27:23:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9krglYVmJTSubJfTYWYbBcnI8M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/1-K_7lWF7x2JD5CuVFElsT4jaLrQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.20.40.0/23 IPv6: 2a00:1fd0:ae00::/40 Signature Algorithm: sha256WithRSAEncryption 4f:db:7a:3f:4d:db:9a:cd:7d:91:53:a2:98:c1:a4:e5:45:22: 85:9e:16:62:3e:79:3a:62:2b:f4:94:b1:14:bf:76:a8:50:f7: de:3d:5c:eb:cb:60:df:5e:05:0f:7a:43:8e:7b:70:89:fc:18: dd:c8:2f:06:cd:01:aa:66:51:71:53:4f:86:fc:55:69:10:46: bc:44:0d:64:8b:c2:93:4d:5f:d9:43:b2:9f:90:84:a8:f4:fa: ee:63:2c:47:6c:bc:c4:8d:51:37:f7:1a:93:35:62:07:87:b0: 33:36:41:8f:49:e1:da:d1:1d:6a:ad:0b:cb:15:98:2c:9f:18: b4:a8:d8:b5:7d:2e:dd:8a:f3:d1:00:41:16:98:80:00:8b:44: 9a:56:7c:46:5e:80:63:65:56:fe:b4:7a:84:79:d0:94:94:c5: bb:ca:64:f0:86:73:4e:4e:8b:ac:28:ec:91:41:8c:7e:81:bf: 38:c6:01:49:f7:ff:ad:65:6b:52:80:a7:6b:d9:53:67:5c:77: 12:c8:d1:66:5c:70:50:58:b4:8a:97:13:20:83:78:7c:58:8f: 73:7b:15:90:a0:78:d1:61:39:f2:e4:28:da:5f:75:b1:b8:79: 3d:42:f5:9f:8e:2f:ef:d5:04:e1:22:ee:15:e5:3b:98:d6:c0: a6:e0:50:60 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt5fhIrKvI/g/vwuyw/T7HfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZDkyYjgyNTYxNTk4OTRkMmI5YjI1ZjRkODU5ODZjMTcy NzIzYzMwHhcNMjYwMTAxMTIxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOGFmZmI5NTYxN2JjNzYyNDNlNDJiOTUxNDQ5NmM0Zjg4ZGEyZWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9K7ywGPQSDtYFJLPxr/SzK24Tkb LmBxVrwzIq9+7A8Xyl8cZN/Wqfx4Tw7+fhvR0NmEUcYJXBlLCQjzBpDB1Y6mlAN1 gYB600AU4XZ4sw8lzWB+Nvsp7yfK8QklmjwJhWdyDreTGIaKWNyvhqH7Mnkl9wC2 Hov37y5g1ZZFKH6lKQEp/p1LFyD8Z+05Wyc8lvuR9DmdZ4xUFF5aDSzOFtdpw1QZ b4d0n6ggW2sAnjbE9qw/MpN2E2f2ftN+YnzxfPPWid2xE7iHlnBA2O0fSiSRC8y/ 2oQjsryIVtiW50062cV6yAE+Lpa6NyF4UwMT/a+GGI4vvKvEIEsBmFDgqwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFPiv+5Vhe8diQ+QrlRRJbE+I2i60MB8GA1UdIwQY MBaAFGPZK4JWFZiU0rmyX02FmGwXJyPDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTlrcmdsWVZtSlRTdWJKZlRZV1liQmNuSThNLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8yNmQ5MTctOGM5MS00NWFiLTg0NDIt ZTRlNTJhYzBmZWZlLzEvMS1LXzdsV0Y3eDJKRDVDdVZGRWxzVDRqYUxyUS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMGIvMjZkOTE3LThjOTEtNDVhYi04NDQyLWU0ZTUyYWMwZmVm ZS8xL1k5a3JnbFlWbUpUU3ViSmZUWVdZYkJjbkk4TS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAvBggrBgEFBQcBBwEB/wQgMB4wDAQCAAEwBgMEAVEUKDAO BAIAAjAIAwYAKgAf0K4wDQYJKoZIhvcNAQELBQADggEBAE/bej9N25rNfZFTopjB pOVFIoWeFmI+eTpiK/SUsRS/dqhQ9949XOvLYN9eBQ96Q457cIn8GN3ILwbNAapm UXFTT4b8VWkQRrxEDWSLwpNNX9lDsp+QhKj0+u5jLEdsvMSNUTf3GpM1YgeHsDM2 QY9J4drRHWqtC8sVmCyfGLSo2LV9Lt2K89EAQRaYgACLRJpWfEZegGNlVv60eoR5 0JSUxbvKZPCGc05Oi6wo7JFBjH6BvzjGAUn3/61la1KAp2vZU2dcdxLI0WZccFBY tIqXEyCDeHxYj3N7FZCgeNFhOfLkKNpfdbG4eT1C9Z+OL+/VBOEi7hXlO5jWwKbg UGA= -----END CERTIFICATE-----Generated at Fri Jan 9 00:56:56 2026 by rpki-client