This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/T1J09VpyviSDvFsKHDZZTsDAPTk.roa File: T1J09VpyviSDvFsKHDZZTsDAPTk.roa (raw, json) Hash identifier: b2OpY5ab27SuuE73gGppDI5hVP0JDhOGTXHrQ4oXP4I= Subject key identifier: 4F:52:74:F5:5A:72:BE:24:83:BC:5B:0A:1C:36:59:4E:C0:C0:3D:39 Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019B797ED0BF641EC0FF53B1AAB25270E154 Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/T1J09VpyviSDvFsKHDZZTsDAPTk.roa Signing time: Thu 01 Jan 2026 12:18:32 +0000 ROA not before: Thu 01 Jan 2026 12:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 142561 IP address blocks: 81.18.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:17:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:d0:bf:64:1e:c0:ff:53:b1:aa:b2:52:70:e1:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Jan 1 12:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4f5274f55a72be2483bc5b0a1c36594ec0c03d39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7e:31:fd:4e:1e:cc:dd:04:86:f4:10:2c:3c: eb:57:b1:26:26:6b:8d:50:b3:1d:b1:23:c4:65:c8: d3:0a:3b:d4:4d:cc:6e:6b:32:c4:d5:03:2f:ef:89: ef:3b:1f:77:94:f8:d2:d0:c7:f6:eb:fc:65:0f:bc: 07:36:d7:4e:d6:39:73:a1:df:58:78:de:1a:a7:0c: e1:79:02:27:69:55:a1:f3:32:8e:99:0c:2d:ca:e2: 81:78:76:78:e2:bc:29:47:b6:8b:01:a0:e5:5b:2d: f0:9c:0e:c6:b6:ce:98:a0:45:e0:f2:5a:e8:67:f9: a2:6c:f6:d2:27:a8:9a:e7:17:40:0f:3e:9a:24:99: 1e:02:80:8b:19:1f:f2:11:32:02:c6:3f:6b:bb:cd: e4:71:64:f7:c3:29:31:d3:bd:4a:a0:d6:19:ff:21: c1:7f:64:12:69:c4:93:8c:f7:2e:31:18:5c:80:d3: 74:e0:5d:81:e7:90:b3:2c:d2:4b:5f:1a:92:8a:dc: d1:26:db:de:8c:b7:26:70:ea:4f:76:76:65:b1:e9: 08:c2:87:97:ae:1b:c7:93:ae:a2:f0:b8:2e:51:e0: b1:fe:eb:15:a7:40:4f:c7:b3:41:ad:fe:3e:a2:52: 91:e7:1d:e5:d1:6b:0e:00:15:b5:85:ad:1f:9a:e5: 7f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:52:74:F5:5A:72:BE:24:83:BC:5B:0A:1C:36:59:4E:C0:C0:3D:39 X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/T1J09VpyviSDvFsKHDZZTsDAPTk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.18.60.0/24 Signature Algorithm: sha256WithRSAEncryption 25:ec:f5:84:f2:8e:a3:a2:95:7b:f8:20:65:c7:92:72:31:62: 1b:a0:33:ee:a3:13:22:57:0b:92:d3:89:38:81:36:f4:09:5d: b0:6a:55:f4:6e:71:e3:8a:67:61:f7:f4:4d:92:14:8b:23:8d: 3e:d3:b9:88:ec:8a:23:6b:36:20:f0:1f:28:3d:7f:19:d5:15: 56:47:cb:aa:87:01:ce:39:b2:00:1d:dc:08:e0:8e:81:b9:aa: 9d:33:63:e7:fc:b0:b2:d5:00:ab:89:15:d1:41:d8:31:e8:56: 47:32:81:92:29:80:6f:bf:60:00:ca:c0:46:25:b0:09:74:63: fa:c3:a8:f5:da:8f:44:1c:b0:73:08:a2:28:a3:8b:d9:d3:46: ef:b2:d6:67:73:20:14:aa:b6:c8:d4:ae:a4:c2:9d:1f:c0:da: b1:2a:a7:84:31:61:98:eb:75:1d:c9:60:d0:c1:9c:7b:8d:db: 82:f5:ac:c7:cc:3b:9e:a3:95:cf:8f:a5:fe:e9:60:96:a6:88: c1:b7:a1:d2:e5:00:08:b6:66:71:95:7b:ac:bd:98:48:ea:de: 63:bd:30:89:bc:3a:ac:07:68:18:97:58:e0:5b:bb:ae:14:60: 25:0e:9b:62:45:5d:ea:72:49:ad:7d:e9:83:9b:bc:65:3f:29: 89:f7:b9:e9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ftC/ZB7A/1OxqrJScOFUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjYwMTAxMTIxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZjUyNzRmNTVhNzJiZTI0ODNiYzViMGExYzM2NTk0ZWMwYzAzZDM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy34x/U4ezN0EhvQQLDzrV7EmJmuN ULMdsSPEZcjTCjvUTcxuazLE1QMv74nvOx93lPjS0Mf26/xlD7wHNtdO1jlzod9Y eN4apwzheQInaVWh8zKOmQwtyuKBeHZ44rwpR7aLAaDlWy3wnA7Gts6YoEXg8lro Z/mibPbSJ6ia5xdADz6aJJkeAoCLGR/yETICxj9ru83kcWT3wykx071KoNYZ/yHB f2QSacSTjPcuMRhcgNN04F2B55CzLNJLXxqSitzRJtvejLcmcOpPdnZlsekIwoeX rhvHk66i8LguUeCx/usVp0BPx7NBrf4+olKR5x3l0WsOABW1ha0fmuV/bwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE9SdPVacr4kg7xbChw2WU7AwD05MB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEvVDFKMDlWcHl2aVNEdkZzS0hEWlpUc0RBUFRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAURI8MA0G CSqGSIb3DQEBCwUAA4IBAQAl7PWE8o6jopV7+CBlx5JyMWIboDPuoxMiVwuS04k4 gTb0CV2walX0bnHjimdh9/RNkhSLI40+07mI7IojazYg8B8oPX8Z1RVWR8uqhwHO ObIAHdwI4I6BuaqdM2Pn/LCy1QCriRXRQdgx6FZHMoGSKYBvv2AAysBGJbAJdGP6 w6j12o9EHLBzCKIoo4vZ00bvstZncyAUqrbI1K6kwp0fwNqxKqeEMWGY63UdyWDQ wZx7jduC9azHzDueo5XPj6X+6WCWpojBt6HS5QAItmZxlXusvZhI6t5jvTCJvDqs B2gYl1jgW7uuFGAlDptiRV3qckmtfemDm7xlPymJ97np -----END CERTIFICATE-----Generated at Mon Jan 19 13:53:01 2026 by rpki-client