This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/cIN5A_WXv-VhBAWHo2TJzSLrqzE.roa File: cIN5A_WXv-VhBAWHo2TJzSLrqzE.roa (raw, json) Hash identifier: qG4xCdzmNNtxfyyqoXE7Rm34GZrOlq3wnUbNCct2B6U= Subject key identifier: 70:83:79:03:F5:97:BF:E5:61:04:05:87:A3:64:C9:CD:22:EB:AB:31 Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019BC635966AFDA4263168C728179DEFAFA8 Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/cIN5A_WXv-VhBAWHo2TJzSLrqzE.roa Signing time: Fri 16 Jan 2026 09:49:19 +0000 ROA not before: Fri 16 Jan 2026 09:49:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203997 IP address blocks: 81.18.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:17:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c6:35:96:6a:fd:a4:26:31:68:c7:28:17:9d:ef:af:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Jan 16 09:49:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=70837903f597bfe561040587a364c9cd22ebab31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3b:dc:62:b5:e8:94:93:45:a1:de:48:aa:a3: 92:55:f8:b9:80:b7:c0:d9:06:b4:39:aa:68:d5:fa: ec:82:ed:ff:39:df:7f:64:d5:1f:31:40:78:7a:44: 5c:ac:8a:21:41:7a:3a:ea:59:1e:25:92:4d:58:ad: 29:70:67:fb:6b:07:fb:47:d7:58:36:43:dc:1a:b6: 1c:7f:d7:a8:a4:8e:4d:0b:95:39:7f:cd:c2:53:03: 09:ab:b5:de:01:29:5b:e5:79:40:eb:80:78:38:ff: 78:90:83:36:5b:bb:ca:e8:42:94:a9:69:8c:43:99: 3c:de:b9:26:8b:3d:35:d3:38:1e:4d:8d:ca:0e:83: cd:f1:74:84:0e:ca:e8:8b:e1:43:f7:b0:36:e9:f7: 9a:e5:d8:43:9b:e6:ce:d6:9e:ed:72:be:a1:43:70: 1d:6d:05:c0:8b:c6:8a:48:d7:9a:38:e0:4e:77:3a: f2:d6:e9:fc:cd:1e:a8:1f:bc:e8:e6:9e:4d:3b:27: 4a:73:31:59:69:d8:c1:ff:88:25:87:af:bb:ce:53: b5:f3:42:d1:88:f4:2b:a6:23:23:a1:2a:6a:1b:1f: d9:8f:e8:19:a8:46:81:d4:54:c3:fb:b7:70:bf:e0: 15:11:1a:df:9a:c0:78:1e:94:b1:5c:bd:55:32:e7: 4a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:83:79:03:F5:97:BF:E5:61:04:05:87:A3:64:C9:CD:22:EB:AB:31 X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/cIN5A_WXv-VhBAWHo2TJzSLrqzE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.18.60.0/24 Signature Algorithm: sha256WithRSAEncryption 59:e1:db:8d:db:f7:b2:94:57:81:c1:56:86:d0:5d:bc:e4:e5: cd:3f:34:1c:1c:3b:9c:31:3c:0c:dd:dc:f9:24:dd:83:d5:e2: 28:02:79:c7:aa:6f:b5:11:9e:a7:c7:04:56:c9:36:20:5d:f6: e2:b3:83:3b:48:77:a5:9c:c8:5d:0d:88:e0:a6:5d:ea:44:aa: f2:a5:78:be:ae:30:e3:ad:56:ff:47:e7:06:98:2a:b4:75:03: 06:21:58:6c:da:2e:e4:4e:bb:69:dd:99:bb:a1:76:c6:0f:1b: 5a:df:55:70:fd:83:16:bd:49:ae:78:a1:71:0b:1a:f0:44:e0: 89:67:d0:b5:d8:34:c2:b6:14:4f:60:21:bd:51:9c:af:73:ee: 85:cf:2d:8d:0e:1e:d6:aa:e2:62:fb:b2:b9:4c:97:39:11:e1: df:bd:3b:28:32:ab:65:bd:31:58:b7:2f:6b:bc:f6:c6:9d:fe: 5d:f2:7a:b7:c6:a9:eb:e9:8f:cf:bb:d0:ca:50:c4:f8:99:99: 25:83:da:d1:25:2d:33:dd:31:15:89:8a:c4:e4:b0:e6:2f:b4: 1a:22:c2:78:c4:df:9f:c4:0a:ef:94:1c:d7:dc:9f:d1:78:f1: 4d:f7:38:be:cb:23:0d:05:c7:70:d7:df:eb:f9:fb:79:8a:c0: a1:77:22:cd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvGNZZq/aQmMWjHKBed76+oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjYwMTE2MDk0OTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDgzNzkwM2Y1OTdiZmU1NjEwNDA1ODdhMzY0YzljZDIyZWJhYjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTvcYrXolJNFod5IqqOSVfi5gLfA 2Qa0Oapo1frsgu3/Od9/ZNUfMUB4ekRcrIohQXo66lkeJZJNWK0pcGf7awf7R9dY NkPcGrYcf9eopI5NC5U5f83CUwMJq7XeASlb5XlA64B4OP94kIM2W7vK6EKUqWmM Q5k83rkmiz010zgeTY3KDoPN8XSEDsroi+FD97A26fea5dhDm+bO1p7tcr6hQ3Ad bQXAi8aKSNeaOOBOdzry1un8zR6oH7zo5p5NOydKczFZadjB/4glh6+7zlO180LR iPQrpiMjoSpqGx/Zj+gZqEaB1FTD+7dwv+AVERrfmsB4HpSxXL1VMudK8wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHCDeQP1l7/lYQQFh6Nkyc0i66sxMB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEvY0lONUFfV1h2LVZoQkFXSG8yVEp6U0xycXpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAURI8MA0G CSqGSIb3DQEBCwUAA4IBAQBZ4duN2/eylFeBwVaG0F285OXNPzQcHDucMTwM3dz5 JN2D1eIoAnnHqm+1EZ6nxwRWyTYgXfbis4M7SHelnMhdDYjgpl3qRKrypXi+rjDj rVb/R+cGmCq0dQMGIVhs2i7kTrtp3Zm7oXbGDxta31Vw/YMWvUmueKFxCxrwROCJ Z9C12DTCthRPYCG9UZyvc+6Fzy2NDh7WquJi+7K5TJc5EeHfvTsoMqtlvTFYty9r vPbGnf5d8nq3xqnr6Y/Pu9DKUMT4mZklg9rRJS0z3TEViYrE5LDmL7QaIsJ4xN+f xArvlBzX3J/RePFN9zi+yyMNBcdw19/r+ft5isChdyLN -----END CERTIFICATE-----Generated at Mon Jan 19 13:54:02 2026 by rpki-client