This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/131e2b-e18a-43dd-8a9b-0bb8a730b539/1/X9K0l2rCyvUlNf67QetfDPsKTvk.roa File: X9K0l2rCyvUlNf67QetfDPsKTvk.roa (raw, json) Hash identifier: SYfx2ip5BHRTUDDyhzpCkqxXM0rSgBrsGDJc73Lx6mQ= Subject key identifier: 5F:D2:B4:97:6A:C2:CA:F5:25:35:FE:BB:41:EB:5F:0C:FB:0A:4E:F9 Certificate issuer: /CN=38b07a002bb7bf0d3acc8dd4a95f237ac61fd678 Certificate serial: 019C22F077821B8FC0A71350526B4EDBB732 Authority key identifier: 38:B0:7A:00:2B:B7:BF:0D:3A:CC:8D:D4:A9:5F:23:7A:C6:1F:D6:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLB6ACu3vw06zI3UqV8jesYf1ng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/131e2b-e18a-43dd-8a9b-0bb8a730b539/1/X9K0l2rCyvUlNf67QetfDPsKTvk.roa Signing time: Tue 03 Feb 2026 09:58:30 +0000 ROA not before: Tue 03 Feb 2026 09:58:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215018 IP address blocks: 81.172.46.0/23 maxlen: 23 81.172.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/131e2b-e18a-43dd-8a9b-0bb8a730b539/1/OLB6ACu3vw06zI3UqV8jesYf1ng.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/131e2b-e18a-43dd-8a9b-0bb8a730b539/1/OLB6ACu3vw06zI3UqV8jesYf1ng.mft rsync://rpki.ripe.net/repository/DEFAULT/OLB6ACu3vw06zI3UqV8jesYf1ng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:22:f0:77:82:1b:8f:c0:a7:13:50:52:6b:4e:db:b7:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38b07a002bb7bf0d3acc8dd4a95f237ac61fd678 Validity Not Before: Feb 3 09:58:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5fd2b4976ac2caf52535febb41eb5f0cfb0a4ef9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:de:8e:a0:cd:2b:e1:c5:c1:2c:39:2e:57:b0: 67:1f:8f:14:78:7f:dc:0a:68:d0:a8:7c:cb:4b:16: a8:4c:48:10:42:91:25:d9:6f:fd:16:a2:07:ef:14: f0:47:4e:8a:ae:c8:7b:78:75:e2:76:5b:b1:67:03: 7d:b3:1c:3b:e4:08:de:db:d9:60:07:07:b0:3f:52: a1:11:b5:87:e3:96:e0:3a:14:2a:c5:05:11:58:9c: 7d:ae:bc:3a:9f:c5:c1:ca:31:2b:d2:94:48:61:17: 6d:e2:a8:76:41:f9:a0:65:20:62:35:2a:c5:7e:33: 13:04:b1:10:ea:20:ca:c8:d1:14:93:9c:21:dc:f9: f4:b7:98:55:ef:fc:2b:03:d1:3f:07:1c:f8:c0:d6: db:51:00:86:69:ac:cd:d8:4e:b9:fe:3e:2e:6e:06: a9:75:69:59:60:89:2c:e8:67:af:dc:65:f8:09:57: 54:70:0f:25:0f:c4:dd:50:6e:1d:ef:91:9e:38:72: 74:a1:bd:93:18:62:ee:3e:26:1e:fb:fc:99:46:82: e5:14:7f:1b:fc:4d:dc:9a:1d:ce:b1:da:94:99:04: ea:7d:10:7b:4b:af:ff:be:3c:0d:e5:4b:2b:f4:09: 30:d1:ad:df:f4:c6:7e:e8:e0:fd:21:6d:88:6b:28: 09:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:D2:B4:97:6A:C2:CA:F5:25:35:FE:BB:41:EB:5F:0C:FB:0A:4E:F9 X509v3 Authority Key Identifier: keyid:38:B0:7A:00:2B:B7:BF:0D:3A:CC:8D:D4:A9:5F:23:7A:C6:1F:D6:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLB6ACu3vw06zI3UqV8jesYf1ng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/131e2b-e18a-43dd-8a9b-0bb8a730b539/1/X9K0l2rCyvUlNf67QetfDPsKTvk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/131e2b-e18a-43dd-8a9b-0bb8a730b539/1/OLB6ACu3vw06zI3UqV8jesYf1ng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.172.46.0/23 81.172.102.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:ba:71:d1:4f:9b:f0:c2:75:1e:99:be:c5:94:bc:1e:40:0c: 1d:56:e2:ce:41:87:aa:e1:5d:e8:e3:6b:e4:72:20:d7:a6:e1: e9:7a:c9:4c:85:80:39:5a:16:b3:bc:20:79:cb:80:2d:3f:e5: 49:64:3e:77:cd:4d:e8:e1:cf:62:4a:3b:c6:c9:cd:a9:19:73: 23:1c:c5:10:da:2a:cb:53:39:a7:c9:84:6c:d7:a6:31:8e:97: 60:47:f8:a7:9a:4f:b2:d4:b7:e2:05:4a:d2:aa:63:60:1a:67: 47:cf:24:15:8f:c0:85:d2:23:ab:2d:e8:49:db:a2:1e:1b:29: 9e:f8:d8:7c:24:0d:ca:6f:c5:82:bc:4c:75:89:4a:92:3c:14: b2:08:b6:d1:79:9b:a0:37:4e:5d:21:59:1f:64:85:92:88:8e: e5:bd:26:cc:0c:5e:ed:2a:d3:84:5f:ac:58:ee:44:ab:9b:3b: d5:17:af:94:19:28:d5:73:28:32:f5:a5:4b:0e:6a:87:bb:c4: eb:75:39:1d:a0:17:cd:47:28:e4:fc:d4:06:83:75:d6:c4:5b: 5b:55:2e:32:fe:54:e1:5c:0b:61:6b:1b:cd:2b:da:57:cf:02: 82:c6:ff:fc:a8:d0:4a:74:7a:63:d2:8d:7c:2b:b1:0f:61:09: d7:43:95:9c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZwi8HeCG4/ApxNQUmtO27cyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4YjA3YTAwMmJiN2JmMGQzYWNjOGRkNGE5NWYyMzdhYzYx ZmQ2NzgwHhcNMjYwMjAzMDk1ODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZmQyYjQ5NzZhYzJjYWY1MjUzNWZlYmI0MWViNWYwY2ZiMGE0ZWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjN6OoM0r4cXBLDkuV7BnH48UeH/c CmjQqHzLSxaoTEgQQpEl2W/9FqIH7xTwR06Krsh7eHXidluxZwN9sxw75Aje29lg BwewP1KhEbWH45bgOhQqxQURWJx9rrw6n8XByjEr0pRIYRdt4qh2QfmgZSBiNSrF fjMTBLEQ6iDKyNEUk5wh3Pn0t5hV7/wrA9E/Bxz4wNbbUQCGaazN2E65/j4ubgap dWlZYIks6Gev3GX4CVdUcA8lD8TdUG4d75GeOHJ0ob2TGGLuPiYe+/yZRoLlFH8b /E3cmh3OsdqUmQTqfRB7S6//vjwN5Usr9Akw0a3f9MZ+6OD9IW2IaygJCwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFF/StJdqwsr1JTX+u0HrXwz7Ck75MB8GA1UdIwQY MBaAFDiwegArt78NOsyN1KlfI3rGH9Z4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0xCNkFDdTN2dzA2ekkzVXFWOGplc1lmMW5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8xMzFlMmItZTE4YS00M2RkLThhOWIt MGJiOGE3MzBiNTM5LzEvWDlLMGwyckN5dlVsTmY2N1FldGZEUHNLVHZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8xMzFlMmItZTE4YS00M2RkLThhOWItMGJiOGE3MzBiNTM5 LzEvT0xCNkFDdTN2dzA2ekkzVXFWOGplc1lmMW5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBUawuAwQA UaxmMA0GCSqGSIb3DQEBCwUAA4IBAQALunHRT5vwwnUemb7FlLweQAwdVuLOQYeq 4V3o42vkciDXpuHpeslMhYA5WhazvCB5y4AtP+VJZD53zU3o4c9iSjvGyc2pGXMj HMUQ2irLUzmnyYRs16YxjpdgR/inmk+y1LfiBUrSqmNgGmdHzyQVj8CF0iOrLehJ 26IeGyme+Nh8JA3Kb8WCvEx1iUqSPBSyCLbReZugN05dIVkfZIWSiI7lvSbMDF7t KtOEX6xY7kSrmzvVF6+UGSjVcygy9aVLDmqHu8TrdTkdoBfNRyjk/NQGg3XWxFtb VS4y/lThXAthaxvNK9pXzwKCxv/8qNBKdHpj0o18K7EPYQnXQ5Wc -----END CERTIFICATE-----Generated at Mon Feb 9 19:38:16 2026 by rpki-client