This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/F0ubE8ZoOIcH6EOeRRsm7BjDGv0.roa File: F0ubE8ZoOIcH6EOeRRsm7BjDGv0.roa (raw, json) Hash identifier: jxUQ0KKcc1cvSdaRZ9vh81k1iQSpuyreVGWce3iIfz4= Subject key identifier: 17:4B:9B:13:C6:68:38:87:07:E8:43:9E:45:1B:26:EC:18:C3:1A:FD Certificate issuer: /CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b Certificate serial: 019B7AC7E9AD93316537D7E9146C920A5845 Authority key identifier: A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/F0ubE8ZoOIcH6EOeRRsm7BjDGv0.roa Signing time: Thu 01 Jan 2026 18:18:00 +0000 ROA not before: Thu 01 Jan 2026 18:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 63023 IP address blocks: 81.19.131.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:e9:ad:93:31:65:37:d7:e9:14:6c:92:0a:58:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b Validity Not Before: Jan 1 18:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=174b9b13c668388707e8439e451b26ec18c31afd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:43:a2:43:16:90:07:cb:42:52:43:b9:48:87: 45:46:3d:22:56:77:fd:4c:88:90:8e:bd:88:01:cb: e8:0c:88:3e:21:e2:f3:34:fa:61:27:38:2d:8f:c1: 1d:a8:82:87:1e:98:f4:07:b7:40:4f:3d:76:95:96: b1:01:20:11:cd:ec:2e:5c:14:c4:5b:4b:05:94:26: 0a:a5:73:36:95:47:c3:53:2d:bc:5e:93:ae:6e:b8: b8:cd:37:ef:9e:30:9d:a7:7a:d1:3b:c7:8d:bf:31: 85:13:22:1f:69:72:05:05:4d:d1:fc:fa:ab:fd:ee: a8:6f:32:c9:6c:7d:15:08:5b:3a:a9:dd:0a:10:64: 14:59:63:89:0c:b3:8c:9b:91:c2:40:d1:5b:8a:c7: 84:fd:8a:27:ac:13:5c:f9:f0:63:9a:ac:1e:88:4a: ec:ed:3f:85:a0:b4:9b:df:34:24:e6:5d:72:35:e4: 33:e8:80:0d:32:4a:77:38:92:ec:68:da:92:23:84: 33:9c:11:da:a6:5c:cb:16:cf:87:51:13:60:c2:2c: e6:09:ed:94:19:39:77:88:64:1e:52:92:fb:1d:9b: de:f1:ae:46:88:d0:31:52:23:66:9f:1b:b8:6e:98: 52:fa:79:c1:b0:e2:65:62:e8:91:11:af:cf:e7:29: 77:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:4B:9B:13:C6:68:38:87:07:E8:43:9E:45:1B:26:EC:18:C3:1A:FD X509v3 Authority Key Identifier: keyid:A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/F0ubE8ZoOIcH6EOeRRsm7BjDGv0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.131.0/24 Signature Algorithm: sha256WithRSAEncryption a3:9d:6c:df:0a:75:52:9e:e0:0d:51:f6:f4:37:3d:c1:68:1d: 15:44:34:2d:27:db:91:d0:ae:4b:b0:9d:ef:50:fc:4f:d3:92: 77:0c:17:82:c3:55:db:f6:a4:9b:e0:93:c8:9b:81:ac:71:32: 63:15:8c:15:7b:45:76:3f:a9:6a:83:25:83:11:90:b3:c1:c3: c4:b4:34:b2:0a:10:a1:3f:6f:4d:ca:a5:5e:4b:c4:f0:65:fd: 7c:e0:4c:f6:96:90:9f:96:a2:53:f5:e5:17:42:3a:0f:88:ed: c7:72:21:f5:63:52:f3:19:31:4f:69:e3:67:18:aa:04:14:4e: 8f:4c:6a:6e:16:3c:d6:7c:72:d7:41:89:34:12:91:d9:7c:49: 12:63:ba:16:23:45:4a:ea:6e:fd:88:b9:64:97:6d:3b:e4:00: 1d:20:ad:3a:a0:3d:df:c4:cf:1f:08:de:f9:a3:db:b0:b1:ad: 02:73:49:7f:ea:1d:e6:67:43:0e:9e:0a:7a:a6:2f:f7:6f:22: e5:29:01:3e:52:ad:50:3c:5e:2f:82:a3:5d:aa:48:41:b9:0d: ad:d4:d1:63:fc:c5:90:03:3f:3f:65:93:31:00:be:03:9e:86: b0:ec:fa:4f:a0:03:b9:49:00:7f:be:f5:e7:1d:9d:bd:67:04: 98:fa:67:b9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x+mtkzFlN9fpFGySClhFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0Y2U5NjQwYTNlZjJmZWExOTM3NGFkOGY5OWY0MjNkN2Fh N2M3NmIwHhcNMjYwMTAxMTgxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzRiOWIxM2M2NjgzODg3MDdlODQzOWU0NTFiMjZlYzE4YzMxYWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEOiQxaQB8tCUkO5SIdFRj0iVnf9 TIiQjr2IAcvoDIg+IeLzNPphJzgtj8EdqIKHHpj0B7dATz12lZaxASARzewuXBTE W0sFlCYKpXM2lUfDUy28XpOubri4zTfvnjCdp3rRO8eNvzGFEyIfaXIFBU3R/Pqr /e6obzLJbH0VCFs6qd0KEGQUWWOJDLOMm5HCQNFbiseE/YonrBNc+fBjmqweiErs 7T+FoLSb3zQk5l1yNeQz6IANMkp3OJLsaNqSI4QznBHaplzLFs+HURNgwizmCe2U GTl3iGQeUpL7HZve8a5GiNAxUiNmnxu4bphS+nnBsOJlYuiREa/P5yl3nQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBdLmxPGaDiHB+hDnkUbJuwYwxr9MB8GA1UdIwQY MBaAFKTOlkCj7y/qGTdK2PmfQj16p8drMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQt MjgzZmU1NGE2ZjJmLzEvRjB1YkU4Wm9PSWNINkVPZVJSc203QmpER3YwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQtMjgzZmU1NGE2ZjJm LzEvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAURODMA0G CSqGSIb3DQEBCwUAA4IBAQCjnWzfCnVSnuANUfb0Nz3BaB0VRDQtJ9uR0K5LsJ3v UPxP05J3DBeCw1Xb9qSb4JPIm4GscTJjFYwVe0V2P6lqgyWDEZCzwcPEtDSyChCh P29NyqVeS8TwZf184Ez2lpCflqJT9eUXQjoPiO3HciH1Y1LzGTFPaeNnGKoEFE6P TGpuFjzWfHLXQYk0EpHZfEkSY7oWI0VK6m79iLlkl2075AAdIK06oD3fxM8fCN75 o9uwsa0Cc0l/6h3mZ0MOngp6pi/3byLlKQE+Uq1QPF4vgqNdqkhBuQ2t1NFj/MWQ Az8/ZZMxAL4Dnoaw7PpPoAO5SQB/vvXnHZ29ZwSY+me5 -----END CERTIFICATE-----Generated at Mon Jan 19 18:02:09 2026 by rpki-client