This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/1-iB6z21RZrpXkSnGvhiW2wYr8L0.roa File: 1-iB6z21RZrpXkSnGvhiW2wYr8L0.roa (raw, json) Hash identifier: 51tw/udP13YguOvYrb1xizkGBlXzZHexEK8HlcpRMGs= Subject key identifier: FA:20:7A:CF:6D:51:66:BA:57:91:29:C6:BE:18:96:DB:06:2B:F0:BD Certificate issuer: /CN=ef1535978be6b0ad7a9cb70eb0522f8c950982a9 Certificate serial: 019B775898153465AC1CC5FABDD1E8ED0D51 Authority key identifier: EF:15:35:97:8B:E6:B0:AD:7A:9C:B7:0E:B0:52:2F:8C:95:09:82:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xU1l4vmsK16nLcOsFIvjJUJgqk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/1-iB6z21RZrpXkSnGvhiW2wYr8L0.roa Signing time: Thu 01 Jan 2026 02:17:33 +0000 ROA not before: Thu 01 Jan 2026 02:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 81.172.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/7xU1l4vmsK16nLcOsFIvjJUJgqk.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/7xU1l4vmsK16nLcOsFIvjJUJgqk.mft rsync://rpki.ripe.net/repository/DEFAULT/7xU1l4vmsK16nLcOsFIvjJUJgqk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:98:15:34:65:ac:1c:c5:fa:bd:d1:e8:ed:0d:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef1535978be6b0ad7a9cb70eb0522f8c950982a9 Validity Not Before: Jan 1 02:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa207acf6d5166ba579129c6be1896db062bf0bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ac:ea:cb:3e:69:1d:c5:50:bf:e1:a3:d4:5b: ab:5e:44:aa:ab:34:40:ce:0c:30:9d:ed:b0:75:35: b9:9c:8a:25:1f:9f:34:dd:47:78:45:8c:db:b5:b7: 74:aa:ae:1a:b9:49:23:aa:67:8a:6d:4a:0e:3d:c9: 6d:d0:f2:2f:3c:ed:d1:20:52:46:dc:ce:aa:1d:92: 9e:eb:24:a0:c4:28:4b:35:fd:53:d2:d8:7f:11:bf: 82:6b:77:d3:62:bc:10:f6:18:e4:8e:22:e7:41:13: 8b:e4:70:4d:c8:24:f7:6c:e6:6a:4d:02:06:fb:ea: 4d:31:8c:58:13:c7:a2:4a:9a:44:0c:02:74:78:81: 6a:6a:fe:db:c7:3f:70:cb:9d:33:aa:91:df:16:c3: 92:6b:1b:ce:10:84:e8:a8:ef:e4:af:ec:65:85:6b: a0:6f:6b:6d:25:84:9b:47:ba:1e:22:58:12:db:b9: dc:af:0a:f1:db:2b:a1:50:53:ac:00:e7:85:5b:d9: d9:e0:dc:c5:86:42:fe:41:a2:0d:75:16:99:52:41: a0:d3:2f:41:f3:87:59:95:56:9a:9e:d4:a6:da:26: e1:32:9d:ab:e6:a2:63:4d:83:cf:e3:33:59:64:a1: 47:6d:5e:c6:fd:45:48:1f:7c:2c:95:ff:d4:fb:46: e1:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:20:7A:CF:6D:51:66:BA:57:91:29:C6:BE:18:96:DB:06:2B:F0:BD X509v3 Authority Key Identifier: keyid:EF:15:35:97:8B:E6:B0:AD:7A:9C:B7:0E:B0:52:2F:8C:95:09:82:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xU1l4vmsK16nLcOsFIvjJUJgqk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/1-iB6z21RZrpXkSnGvhiW2wYr8L0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/7xU1l4vmsK16nLcOsFIvjJUJgqk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.172.99.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:63:1c:be:23:7d:73:7f:05:f7:11:3c:5a:86:cb:c4:2d:3a: 60:da:32:36:ee:92:1d:68:3f:57:98:f9:93:60:75:cb:ea:61: 97:57:1e:e8:17:6e:3a:c6:2a:96:f0:26:f8:17:bb:86:5e:c9: de:9f:33:3a:0a:6f:c6:1b:60:e9:dd:a5:54:7b:c9:40:5f:7b: bb:78:da:d7:c2:3a:ae:98:5b:02:dd:72:e2:71:ef:13:b7:0e: 29:a2:c4:8b:7d:9b:77:ea:4a:63:f1:95:6f:93:a1:44:8f:49: 13:e0:70:3b:31:65:6e:69:6b:e7:e9:1d:1a:9b:f4:41:0c:6d: b0:e7:24:d0:31:b3:eb:ee:43:0d:04:0e:6b:12:4b:e7:46:03: 7f:bb:e3:d0:8b:0a:3d:ff:dd:00:31:1e:48:3b:36:36:3e:85: 61:31:94:10:4c:6e:2c:85:37:25:11:14:45:be:eb:55:da:70: b7:1c:76:be:c6:03:42:9d:fb:7e:af:d3:2e:0c:2f:1d:32:d0: 8a:f2:c3:b5:02:63:1c:53:9d:a6:1a:70:97:9b:4d:b5:93:dd: 11:2a:ee:8b:f2:04:dc:46:ba:46:02:20:0f:ed:78:83:97:21: a7:7a:d2:1f:36:43:ca:2b:4b:8f:60:41:b0:eb:8a:76:ca:34: 73:76:13:3d -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt3WJgVNGWsHMX6vdHo7Q1RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmMTUzNTk3OGJlNmIwYWQ3YTljYjcwZWIwNTIyZjhjOTUw OTgyYTkwHhcNMjYwMTAxMDIxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTIwN2FjZjZkNTE2NmJhNTc5MTI5YzZiZTE4OTZkYjA2MmJmMGJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6zqyz5pHcVQv+Gj1FurXkSqqzRA zgwwne2wdTW5nIolH5803Ud4RYzbtbd0qq4auUkjqmeKbUoOPclt0PIvPO3RIFJG 3M6qHZKe6ySgxChLNf1T0th/Eb+Ca3fTYrwQ9hjkjiLnQROL5HBNyCT3bOZqTQIG ++pNMYxYE8eiSppEDAJ0eIFqav7bxz9wy50zqpHfFsOSaxvOEIToqO/kr+xlhWug b2ttJYSbR7oeIlgS27ncrwrx2yuhUFOsAOeFW9nZ4NzFhkL+QaINdRaZUkGg0y9B 84dZlVaantSm2ibhMp2r5qJjTYPP4zNZZKFHbV7G/UVIH3wslf/U+0bhAwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPoges9tUWa6V5Epxr4YltsGK/C9MB8GA1UdIwQY MBaAFO8VNZeL5rCtepy3DrBSL4yVCYKpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3hVMWw0dm1zSzE2bkxjT3NGSXZqSlVKZ3FrLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8zYjZlYWItZjkwOS00MmM5LWI1ODgt MTVjNjVmZjI1OGU4LzEvMS1pQjZ6MjFSWnJwWGtTbkd2aGlXMndZcjhMMC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMmQvM2I2ZWFiLWY5MDktNDJjOS1iNTg4LTE1YzY1ZmYyNThl OC8xLzd4VTFsNHZtc0sxNm5MY09zRkl2akpVSmdxay5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFGsYzAN BgkqhkiG9w0BAQsFAAOCAQEAHWMcviN9c38F9xE8WobLxC06YNoyNu6SHWg/V5j5 k2B1y+phl1ce6BduOsYqlvAm+Be7hl7J3p8zOgpvxhtg6d2lVHvJQF97u3ja18I6 rphbAt1y4nHvE7cOKaLEi32bd+pKY/GVb5OhRI9JE+BwOzFlbmlr5+kdGpv0QQxt sOck0DGz6+5DDQQOaxJL50YDf7vj0IsKPf/dADEeSDs2Nj6FYTGUEExuLIU3JREU Rb7rVdpwtxx2vsYDQp37fq/TLgwvHTLQivLDtQJjHFOdphpwl5tNtZPdESrui/IE 3Ea6RgIgD+14g5chp3rSHzZDyitLj2BBsOuKdso0c3YTPQ== -----END CERTIFICATE-----Generated at Wed Jan 7 23:47:56 2026 by rpki-client