This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/rI_3cqL3-KdjQJLD5JNVYZ0PC7I.roa File: rI_3cqL3-KdjQJLD5JNVYZ0PC7I.roa (raw, json) Hash identifier: IMvnqVI7Pxn9M/xoV7ucEgQIFBZmeqaGx6nvvxRV2JI= Subject key identifier: AC:8F:F7:72:A2:F7:F8:A7:63:40:92:C3:E4:93:55:61:9D:0F:0B:B2 Certificate issuer: /CN=521d2c07c28ac7b726a825d3693afe2397209de6 Certificate serial: 019B7AC91E117A7E61B6142A4007D4FFA471 Authority key identifier: 52:1D:2C:07:C2:8A:C7:B7:26:A8:25:D3:69:3A:FE:23:97:20:9D:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh0sB8KKx7cmqCXTaTr-I5cgneY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/rI_3cqL3-KdjQJLD5JNVYZ0PC7I.roa Signing time: Thu 01 Jan 2026 18:19:19 +0000 ROA not before: Thu 01 Jan 2026 18:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25100 IP address blocks: 81.5.64.0/18 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Uh0sB8KKx7cmqCXTaTr-I5cgneY.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Uh0sB8KKx7cmqCXTaTr-I5cgneY.mft rsync://rpki.ripe.net/repository/DEFAULT/Uh0sB8KKx7cmqCXTaTr-I5cgneY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:1e:11:7a:7e:61:b6:14:2a:40:07:d4:ff:a4:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521d2c07c28ac7b726a825d3693afe2397209de6 Validity Not Before: Jan 1 18:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ac8ff772a2f7f8a7634092c3e49355619d0f0bb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:72:25:84:0b:6a:e3:fb:ac:d4:5a:68:7d:e5: 4e:17:cb:db:0c:09:61:71:ae:eb:6f:a9:ef:27:fa: 8b:d2:06:f8:ab:68:df:eb:b8:ef:db:17:35:8c:43: a8:ab:97:77:91:27:b6:ae:02:13:4f:7a:fe:93:d0: 2c:a5:ef:87:87:ac:a3:36:21:dd:19:f2:4e:d6:87: 46:dc:17:fb:af:97:5e:73:04:57:3d:42:45:92:c1: 34:2d:35:68:db:a8:c8:ca:f1:a3:f3:57:d2:fb:41: 70:75:ab:d0:29:49:e8:53:cb:30:82:4f:91:0d:ef: a4:1a:73:b5:3b:c8:93:c9:59:b3:d1:8a:82:c7:89: 58:a6:05:cc:06:c7:67:14:95:d4:9a:31:23:e0:24: 4c:7e:e8:41:f8:84:6d:cc:70:84:c7:29:d3:df:6b: eb:3b:04:c9:19:2d:66:6f:65:02:de:32:6f:b7:2c: b5:0d:fb:2f:26:1e:00:87:d0:93:09:98:48:3d:6f: 21:19:41:d8:2f:bd:43:f5:36:38:2e:58:48:90:46: 1e:ca:68:24:0b:e0:8e:60:47:50:b1:04:40:85:8d: 8f:c4:de:98:ea:92:67:e5:82:e0:b8:ce:4e:c0:09: 7f:65:6e:13:66:7b:ca:98:a0:e4:ad:fd:55:2f:9b: c6:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:8F:F7:72:A2:F7:F8:A7:63:40:92:C3:E4:93:55:61:9D:0F:0B:B2 X509v3 Authority Key Identifier: keyid:52:1D:2C:07:C2:8A:C7:B7:26:A8:25:D3:69:3A:FE:23:97:20:9D:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh0sB8KKx7cmqCXTaTr-I5cgneY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/rI_3cqL3-KdjQJLD5JNVYZ0PC7I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Uh0sB8KKx7cmqCXTaTr-I5cgneY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.5.64.0/18 Signature Algorithm: sha256WithRSAEncryption 23:06:bc:e0:92:da:2a:4f:62:31:39:d8:1f:e3:95:d9:84:b3: 2e:6e:d5:30:28:92:f1:db:67:c8:dc:f2:b4:53:4b:d8:cc:81: e6:5f:39:76:a0:74:1b:3a:19:7a:0b:79:46:a4:78:8c:ca:b8: 48:e4:22:87:ef:83:f0:44:90:78:84:ea:04:ac:b0:92:9f:c3: e9:f4:64:24:a8:76:89:e8:13:6c:ff:cf:e1:3f:1f:5f:ba:f7: 8e:1f:9f:4d:df:5b:82:73:cb:81:44:5a:ee:f4:d0:25:84:6d: 32:78:b6:7f:a7:9f:4c:cd:f6:73:d9:16:82:4c:97:60:a4:01: e5:78:e6:9f:c9:2b:a0:5d:8c:4c:7d:fa:ce:3b:d3:41:f4:ff: b2:07:e9:d4:e5:4f:93:91:77:55:1b:e9:8f:18:fa:99:db:92: b7:34:7d:94:7a:eb:14:91:59:31:c2:61:9d:a4:4f:9c:57:ac: c7:bb:f8:a3:5e:2b:83:1b:c2:f9:41:b3:ee:13:09:26:60:b9: af:f1:fd:be:67:81:7d:51:47:bd:fa:84:07:0d:39:b3:8a:c9: 4d:9e:b2:56:1d:b4:cd:21:1d:d5:ea:c3:1e:a7:3f:cc:4b:38: 76:1b:d2:28:be:0d:c3:96:fd:99:28:b7:e0:e2:f7:88:8b:83: 35:6f:6b:4d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yR4Ren5hthQqQAfU/6RxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyMWQyYzA3YzI4YWM3YjcyNmE4MjVkMzY5M2FmZTIzOTcy MDlkZTYwHhcNMjYwMTAxMTgxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYzhmZjc3MmEyZjdmOGE3NjM0MDkyYzNlNDkzNTU2MTlkMGYwYmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA43IlhAtq4/us1FpofeVOF8vbDAlh ca7rb6nvJ/qL0gb4q2jf67jv2xc1jEOoq5d3kSe2rgITT3r+k9Aspe+Hh6yjNiHd GfJO1odG3Bf7r5decwRXPUJFksE0LTVo26jIyvGj81fS+0FwdavQKUnoU8swgk+R De+kGnO1O8iTyVmz0YqCx4lYpgXMBsdnFJXUmjEj4CRMfuhB+IRtzHCExynT32vr OwTJGS1mb2UC3jJvtyy1DfsvJh4Ah9CTCZhIPW8hGUHYL71D9TY4LlhIkEYeymgk C+COYEdQsQRAhY2PxN6Y6pJn5YLguM5OwAl/ZW4TZnvKmKDkrf1VL5vGtQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKyP93Ki9/inY0CSw+STVWGdDwuyMB8GA1UdIwQY MBaAFFIdLAfCise3Jqgl02k6/iOXIJ3mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWgwc0I4S0t4N2NtcUNYVGFUci1JNWNnbmVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8xN2FjNjctMmQ1Zi00MzlhLThmZjkt Y2FjZmI2N2JmZjlkLzEvcklfM2NxTDMtS2RqUUpMRDVKTlZZWjBQQzdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8xN2FjNjctMmQ1Zi00MzlhLThmZjktY2FjZmI2N2JmZjlk LzEvVWgwc0I4S0t4N2NtcUNYVGFUci1JNWNnbmVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGUQVAMA0G CSqGSIb3DQEBCwUAA4IBAQAjBrzgktoqT2IxOdgf45XZhLMubtUwKJLx22fI3PK0 U0vYzIHmXzl2oHQbOhl6C3lGpHiMyrhI5CKH74PwRJB4hOoErLCSn8Pp9GQkqHaJ 6BNs/8/hPx9fuveOH59N31uCc8uBRFru9NAlhG0yeLZ/p59MzfZz2RaCTJdgpAHl eOafySugXYxMffrOO9NB9P+yB+nU5U+TkXdVG+mPGPqZ25K3NH2UeusUkVkxwmGd pE+cV6zHu/ijXiuDG8L5QbPuEwkmYLmv8f2+Z4F9UUe9+oQHDTmzislNnrJWHbTN IR3V6sMepz/MSzh2G9Iovg3Dlv2ZKLfg4veIi4M1b2tN -----END CERTIFICATE-----Generated at Tue Feb 10 02:33:33 2026 by rpki-client