This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/7mvF9myTKlEKYunZpLTQD5KEFrY.roa File: 7mvF9myTKlEKYunZpLTQD5KEFrY.roa (raw, json) Hash identifier: 1UIT2TzCE1FlQDr/AW6XvHwVdir3xpnco3QCOUshSZI= Subject key identifier: EE:6B:C5:F6:6C:93:2A:51:0A:62:E9:D9:A4:B4:D0:0F:92:84:16:B6 Certificate issuer: /CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b Certificate serial: 019B7AC7EA8DC28021563C04087D04A1FB7A Authority key identifier: A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/7mvF9myTKlEKYunZpLTQD5KEFrY.roa Signing time: Thu 01 Jan 2026 18:18:00 +0000 ROA not before: Thu 01 Jan 2026 18:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198369 IP address blocks: 81.19.132.0/24 maxlen: 32 81.19.134.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:ea:8d:c2:80:21:56:3c:04:08:7d:04:a1:fb:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b Validity Not Before: Jan 1 18:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee6bc5f66c932a510a62e9d9a4b4d00f928416b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cc:7b:43:37:29:63:6a:79:ed:b3:3e:69:d3: 83:0b:3b:f9:bc:5f:cb:2f:80:53:26:51:fe:f1:a1: 34:84:ea:dc:8b:09:95:e6:e6:66:1a:da:d5:0a:2e: 28:78:f8:db:08:60:68:03:ca:23:1f:9c:fd:ff:05: 47:2e:b3:58:95:6b:6e:28:18:cb:a0:22:40:91:80: 66:f9:a7:25:0b:4b:6a:77:e5:b5:c0:a7:8b:ff:c2: ec:10:6d:c7:f7:30:02:ef:59:33:e0:d5:fd:3a:a5: 98:3e:fa:60:36:ed:37:44:5c:e1:7d:e7:c6:be:bb: 52:74:99:84:7a:c6:b1:e8:fc:8e:03:ba:55:73:05: fd:2d:6e:f0:bb:69:8c:ce:10:c0:5c:e0:ff:a2:90: 44:da:b9:b2:23:63:80:26:a2:28:b2:19:12:2b:26: b6:aa:cf:6d:d7:23:c3:cd:14:05:97:fc:ab:23:9b: ec:1c:2d:e5:e6:a9:eb:4a:dd:02:67:87:5b:f2:49: d5:1f:e6:f5:f6:0f:1e:d1:b7:4a:45:a4:35:47:d8: ce:e6:19:47:ef:bb:51:fc:a2:d0:63:a0:50:37:e1: a3:07:b3:e6:45:a9:01:b1:b8:31:e2:6f:09:fd:bb: 1b:fd:03:93:8a:54:34:01:c1:9a:e3:6e:26:e7:89: 0b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:6B:C5:F6:6C:93:2A:51:0A:62:E9:D9:A4:B4:D0:0F:92:84:16:B6 X509v3 Authority Key Identifier: keyid:A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/7mvF9myTKlEKYunZpLTQD5KEFrY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.132.0/24 81.19.134.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:6d:c5:17:ab:af:9d:51:a4:e2:8d:26:87:40:35:6c:cc:2c: b3:e7:9d:ca:f0:62:c7:2c:5d:17:d9:36:90:9f:d4:33:dc:d5: 5c:32:81:77:d4:2c:2d:19:fe:38:c4:61:86:81:53:24:5c:f9: 60:8b:35:fd:63:5d:50:3c:5b:fe:6c:73:a2:ce:18:30:91:46: a3:2f:05:56:0f:6b:54:c2:76:24:e9:ae:7b:cb:c4:29:e8:ae: bf:3b:54:e0:ff:74:a0:10:50:5d:c6:a8:60:f0:a2:95:7a:1d: 56:2e:1b:89:62:6e:56:0a:09:e0:1e:cf:3c:26:3e:01:d7:9e: 6c:d1:ed:e3:40:d5:0f:a0:be:2f:f0:fb:eb:ea:a4:2b:bd:4c: 9a:35:4f:b5:08:5c:b7:e9:13:35:d1:19:5c:30:f1:e0:a7:15: 43:89:e0:86:f1:7f:7e:74:34:57:16:cb:69:7d:6c:69:82:b5: 07:52:d3:1a:c2:d0:c5:4d:31:ac:42:9a:4e:bf:af:7f:e7:02: d3:a0:85:a1:3c:bb:e4:5a:dc:47:c7:18:5d:12:3a:ce:13:06: 9b:f3:fd:73:19:df:c9:a4:4a:02:9c:b7:4f:07:ac:66:02:1a: 7b:b2:5e:d8:06:6f:b5:d9:2f:1f:9b:40:97:45:ed:67:56:75: 67:be:8d:94 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6x+qNwoAhVjwECH0Eoft6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0Y2U5NjQwYTNlZjJmZWExOTM3NGFkOGY5OWY0MjNkN2Fh N2M3NmIwHhcNMjYwMTAxMTgxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTZiYzVmNjZjOTMyYTUxMGE2MmU5ZDlhNGI0ZDAwZjkyODQxNmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8x7QzcpY2p57bM+adODCzv5vF/L L4BTJlH+8aE0hOrciwmV5uZmGtrVCi4oePjbCGBoA8ojH5z9/wVHLrNYlWtuKBjL oCJAkYBm+aclC0tqd+W1wKeL/8LsEG3H9zAC71kz4NX9OqWYPvpgNu03RFzhfefG vrtSdJmEesax6PyOA7pVcwX9LW7wu2mMzhDAXOD/opBE2rmyI2OAJqIoshkSKya2 qs9t1yPDzRQFl/yrI5vsHC3l5qnrSt0CZ4db8knVH+b19g8e0bdKRaQ1R9jO5hlH 77tR/KLQY6BQN+GjB7PmRakBsbgx4m8J/bsb/QOTilQ0AcGa424m54kLvwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFO5rxfZskypRCmLp2aS00A+ShBa2MB8GA1UdIwQY MBaAFKTOlkCj7y/qGTdK2PmfQj16p8drMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQt MjgzZmU1NGE2ZjJmLzEvN212RjlteVRLbEVLWXVuWnBMVFFENUtFRnJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQtMjgzZmU1NGE2ZjJm LzEvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUROEAwQA UROGMA0GCSqGSIb3DQEBCwUAA4IBAQAcbcUXq6+dUaTijSaHQDVszCyz553K8GLH LF0X2TaQn9Qz3NVcMoF31CwtGf44xGGGgVMkXPlgizX9Y11QPFv+bHOizhgwkUaj LwVWD2tUwnYk6a57y8Qp6K6/O1Tg/3SgEFBdxqhg8KKVeh1WLhuJYm5WCgngHs88 Jj4B155s0e3jQNUPoL4v8Pvr6qQrvUyaNU+1CFy36RM10RlcMPHgpxVDieCG8X9+ dDRXFstpfWxpgrUHUtMawtDFTTGsQppOv69/5wLToIWhPLvkWtxHxxhdEjrOEwab 8/1zGd/JpEoCnLdPB6xmAhp7sl7YBm+12S8fm0CXRe1nVnVnvo2U -----END CERTIFICATE-----Generated at Sun Jan 25 12:15:28 2026 by rpki-client