This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Fd3Qe4pwo4Dx9JbSdnPc1Mk3tGA.roa File: Fd3Qe4pwo4Dx9JbSdnPc1Mk3tGA.roa (raw, json) Hash identifier: jizPw+guz5WG8GMdQXWaAjym1QrqtYbWX9jWMAPVW7U= Subject key identifier: 15:DD:D0:7B:8A:70:A3:80:F1:F4:96:D2:76:73:DC:D4:C9:37:B4:60 Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722 Certificate serial: 019B7B35A08FC45A8C8E6C2DE81E43490F4A Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Fd3Qe4pwo4Dx9JbSdnPc1Mk3tGA.roa Signing time: Thu 01 Jan 2026 20:17:50 +0000 ROA not before: Thu 01 Jan 2026 20:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215362 IP address blocks: 81.181.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 04:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:a0:8f:c4:5a:8c:8e:6c:2d:e8:1e:43:49:0f:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722 Validity Not Before: Jan 1 20:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=15ddd07b8a70a380f1f496d27673dcd4c937b460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4f:ba:e3:64:10:fc:e2:94:ae:90:6b:da:9b: 38:d4:dc:7c:4d:59:e5:fb:e4:01:e5:19:22:2e:29: 4e:cc:25:12:b0:3b:ec:f2:51:2c:89:5a:2f:ef:1c: 69:8a:23:8c:47:ae:fa:2a:3d:c6:0f:bf:e5:af:27: b7:ac:44:52:5e:ee:e4:d7:3c:ad:35:3a:bf:e6:e1: 16:a2:51:5a:4e:de:69:53:4c:f4:18:1d:3b:43:56: 06:cb:05:c8:e3:8c:68:87:80:ec:d9:8f:02:bb:d4: 6f:5a:03:82:b5:1c:7e:ea:34:ff:c6:f8:18:09:85: 5a:30:e0:87:1c:6b:93:c5:3c:cf:0b:ba:5f:65:19: 85:73:8f:8f:b1:12:89:f4:6e:e8:75:e2:c4:bf:d6: ae:d7:57:9b:1e:d2:79:cc:e1:fb:48:df:23:8c:77: fa:72:ba:0f:23:70:d5:44:17:de:e9:d2:c4:57:ab: e3:33:f6:1d:8a:8f:d0:97:36:e9:44:81:3f:59:1f: c2:95:fe:db:ad:5f:50:02:0a:77:8a:51:04:be:62: 08:77:3b:78:db:a7:6b:70:9f:f3:a5:9a:3c:1b:69: 77:ea:b2:fb:d8:09:4f:3f:89:7a:3d:77:fc:06:db: 1d:d3:36:21:7e:d5:5f:d8:75:2e:a8:df:f4:09:d8: 5d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:DD:D0:7B:8A:70:A3:80:F1:F4:96:D2:76:73:DC:D4:C9:37:B4:60 X509v3 Authority Key Identifier: keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Fd3Qe4pwo4Dx9JbSdnPc1Mk3tGA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.181.113.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:4b:e6:48:eb:b8:85:04:f0:22:cf:8e:88:e5:32:a8:b7:aa: 92:16:24:53:bf:67:6d:40:8c:0b:12:8b:a9:cb:ae:b5:8a:21: c2:c5:f0:bd:09:e7:c7:77:bf:04:c2:69:15:34:b1:a2:fc:95: f0:1e:ad:5c:7b:93:08:bf:3f:25:80:b9:06:e7:ce:db:43:09: 9e:3e:38:63:40:b6:07:f3:94:9a:b9:47:1f:44:3e:0a:38:b6: 08:26:e7:5f:a7:f6:e8:88:04:75:a4:6d:dc:59:0f:3b:21:34: 02:bc:ef:04:8d:3d:86:0f:ae:22:90:a8:67:33:ad:97:cf:4d: 83:76:39:86:9f:e0:c7:0f:be:f6:7c:0f:5b:39:27:50:76:34: 7e:98:7c:46:d7:64:5c:4e:0d:9d:63:92:a1:83:6d:6a:8d:69: 10:3d:13:8c:1b:ee:b2:0c:db:d8:e1:76:37:2b:7b:b5:e6:87: 88:6c:bb:8e:2a:82:95:da:98:d3:91:f9:ec:b7:ce:b5:49:2c: 8f:a2:cc:5f:fa:b3:9d:48:f7:6d:2b:20:dc:2d:8d:87:c2:f2: e0:b2:57:92:98:44:3d:bf:50:4a:c5:c8:2e:af:63:75:b7:63: f0:fd:1c:5e:c9:25:fe:33:10:b3:91:d4:50:d0:fe:6b:dd:ff: 2a:06:3f:8d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NaCPxFqMjmwt6B5DSQ9KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh MTU3MjIwHhcNMjYwMTAxMjAxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNWRkZDA3YjhhNzBhMzgwZjFmNDk2ZDI3NjczZGNkNGM5MzdiNDYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0+642QQ/OKUrpBr2ps41Nx8TVnl ++QB5RkiLilOzCUSsDvs8lEsiVov7xxpiiOMR676Kj3GD7/lrye3rERSXu7k1zyt NTq/5uEWolFaTt5pU0z0GB07Q1YGywXI44xoh4Ds2Y8Cu9RvWgOCtRx+6jT/xvgY CYVaMOCHHGuTxTzPC7pfZRmFc4+PsRKJ9G7odeLEv9au11ebHtJ5zOH7SN8jjHf6 croPI3DVRBfe6dLEV6vjM/Ydio/QlzbpRIE/WR/Clf7brV9QAgp3ilEEvmIIdzt4 26drcJ/zpZo8G2l36rL72AlPP4l6PXf8Btsd0zYhftVf2HUuqN/0CdhdgwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBXd0HuKcKOA8fSW0nZz3NTJN7RgMB8GA1UdIwQY MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt ZjUyYzQ3YzIyNWRiLzEvRmQzUWU0cHdvNER4OUpiU2RuUGMxTWszdEdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUbVxMA0G CSqGSIb3DQEBCwUAA4IBAQCMS+ZI67iFBPAiz46I5TKot6qSFiRTv2dtQIwLEoup y661iiHCxfC9CefHd78EwmkVNLGi/JXwHq1ce5MIvz8lgLkG587bQwmePjhjQLYH 85SauUcfRD4KOLYIJudfp/boiAR1pG3cWQ87ITQCvO8EjT2GD64ikKhnM62Xz02D djmGn+DHD772fA9bOSdQdjR+mHxG12RcTg2dY5Khg21qjWkQPROMG+6yDNvY4XY3 K3u15oeIbLuOKoKV2pjTkfnst861SSyPosxf+rOdSPdtKyDcLY2HwvLgsleSmEQ9 v1BKxcgur2N1t2Pw/RxeySX+MxCzkdRQ0P5r3f8qBj+N -----END CERTIFICATE-----Generated at Mon Jan 19 11:09:18 2026 by rpki-client