This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/aA_qu5IgNcJltCsGsxXyXwjv3A8.roa File: aA_qu5IgNcJltCsGsxXyXwjv3A8.roa (raw, json) Hash identifier: Dy2evysieg8Bw8Kefzu6MvOLG6ZrZ3EW+74fqHbs4Tc= Subject key identifier: 68:0F:EA:BB:92:20:35:C2:65:B4:2B:06:B3:15:F2:5F:08:EF:DC:0F Certificate issuer: /CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b Certificate serial: 019B7AC7E609937E93C3CDFF5A636EB0E706 Authority key identifier: A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/aA_qu5IgNcJltCsGsxXyXwjv3A8.roa Signing time: Thu 01 Jan 2026 18:17:59 +0000 ROA not before: Thu 01 Jan 2026 18:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9123 IP address blocks: 81.19.135.0/24 maxlen: 24 81.19.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 03:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:e6:09:93:7e:93:c3:cd:ff:5a:63:6e:b0:e7:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b Validity Not Before: Jan 1 18:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=680feabb922035c265b42b06b315f25f08efdc0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ca:15:30:aa:ae:7a:b7:92:88:a2:ab:a7:84: 6d:0a:b1:9b:b0:93:fd:19:d0:c2:d7:7c:07:dc:82: f4:95:70:7c:4e:aa:94:29:de:34:be:e1:e1:e5:6a: a4:a0:97:02:d9:06:fb:af:ac:ae:b0:57:33:07:51: 1e:7a:50:0b:4f:43:1f:1e:10:d8:bd:97:99:41:ac: 4a:e0:41:08:ea:0c:16:dc:0f:52:45:ea:05:d7:23: d9:24:0c:3c:3e:21:07:f2:a4:44:e0:f5:fc:b2:79: b2:66:71:04:e5:8e:97:14:88:b9:8d:21:46:f0:40: 63:0f:33:c1:ad:08:4e:29:d2:a4:a5:85:51:f5:6e: b1:d4:03:d3:a6:93:2a:ee:af:81:c2:4d:80:fe:0a: 24:60:fd:10:a6:3a:7f:f7:01:ec:3f:22:11:f4:b2: 3c:2e:a0:6b:5e:6e:4a:46:56:dc:71:d1:0a:ad:4c: b2:8d:5f:63:9b:e7:9b:90:4a:e4:58:bd:1d:42:fc: 70:66:52:dc:94:9c:3b:65:20:f2:76:f4:3e:d9:9a: 78:2c:f0:b5:2a:fe:88:81:1a:85:03:92:5a:0a:db: d6:c4:76:39:4a:04:43:01:25:c3:af:6b:16:c0:79: dc:e0:91:93:22:8c:f9:2e:6e:31:61:b7:73:40:79: 3c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:0F:EA:BB:92:20:35:C2:65:B4:2B:06:B3:15:F2:5F:08:EF:DC:0F X509v3 Authority Key Identifier: keyid:A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/aA_qu5IgNcJltCsGsxXyXwjv3A8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.135.0-81.19.136.255 Signature Algorithm: sha256WithRSAEncryption 46:ac:ce:f1:0f:d2:56:dd:e6:59:e3:56:f0:73:07:51:49:d2: 00:b0:31:c6:86:a6:2b:0f:7b:5f:b4:54:b2:5e:be:a0:66:b1: 27:a5:e8:9e:5e:f3:5e:95:08:6f:54:3e:07:e8:65:09:77:3e: 1e:10:c9:d3:97:0a:ac:88:72:ec:0d:27:ab:80:22:36:df:9a: 9d:9b:ac:7d:49:78:ef:e4:75:29:80:d8:8c:48:92:7e:a1:a3: 1f:4f:fd:48:65:7b:1c:a1:8c:3e:74:5d:f3:ab:e9:0c:1d:e1: e2:e0:a7:82:8a:72:0a:c2:4c:f1:8b:b4:0b:c4:ed:71:fd:ef: 3f:00:d4:c7:6b:11:25:eb:94:2c:6c:20:27:b8:f7:5b:65:4d: 82:1d:65:10:a6:25:5b:98:53:fe:f3:a0:79:69:39:8c:5d:4c: 53:53:ee:63:ab:01:84:60:d1:24:d8:7b:26:74:71:58:1b:9a: 08:e3:ac:e2:df:84:05:68:62:08:b5:53:02:fa:e8:b5:ba:5a: 5d:8a:a5:69:82:2e:7d:ee:35:de:3c:aa:03:c0:9b:70:d9:26: b9:47:9b:ec:57:70:1c:e7:6f:0c:a2:72:80:f9:1a:e0:e3:f4: 66:63:b7:14:5c:de:83:6b:19:85:9e:34:f1:4b:ab:ef:4b:a1: 8b:ef:ad:de -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt6x+YJk36Tw83/WmNusOcGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0Y2U5NjQwYTNlZjJmZWExOTM3NGFkOGY5OWY0MjNkN2Fh N2M3NmIwHhcNMjYwMTAxMTgxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODBmZWFiYjkyMjAzNWMyNjViNDJiMDZiMzE1ZjI1ZjA4ZWZkYzBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMoVMKquereSiKKrp4RtCrGbsJP9 GdDC13wH3IL0lXB8TqqUKd40vuHh5WqkoJcC2Qb7r6yusFczB1EeelALT0MfHhDY vZeZQaxK4EEI6gwW3A9SReoF1yPZJAw8PiEH8qRE4PX8snmyZnEE5Y6XFIi5jSFG 8EBjDzPBrQhOKdKkpYVR9W6x1APTppMq7q+Bwk2A/gokYP0Qpjp/9wHsPyIR9LI8 LqBrXm5KRlbccdEKrUyyjV9jm+ebkErkWL0dQvxwZlLclJw7ZSDydvQ+2Zp4LPC1 Kv6IgRqFA5JaCtvWxHY5SgRDASXDr2sWwHnc4JGTIoz5Lm4xYbdzQHk8bQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFGgP6ruSIDXCZbQrBrMV8l8I79wPMB8GA1UdIwQY MBaAFKTOlkCj7y/qGTdK2PmfQj16p8drMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQt MjgzZmU1NGE2ZjJmLzEvYUFfcXU1SWdOY0psdENzR3N4WHlYd2p2M0E4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQtMjgzZmU1NGE2ZjJm LzEvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABRE4cD BABRE4gwDQYJKoZIhvcNAQELBQADggEBAEaszvEP0lbd5lnjVvBzB1FJ0gCwMcaG pisPe1+0VLJevqBmsSel6J5e816VCG9UPgfoZQl3Ph4QydOXCqyIcuwNJ6uAIjbf mp2brH1JeO/kdSmA2IxIkn6hox9P/UhlexyhjD50XfOr6Qwd4eLgp4KKcgrCTPGL tAvE7XH97z8A1MdrESXrlCxsICe491tlTYIdZRCmJVuYU/7zoHlpOYxdTFNT7mOr AYRg0STYeyZ0cVgbmgjjrOLfhAVoYgi1UwL66LW6Wl2KpWmCLn3uNd48qgPAm3DZ JrlHm+xXcBznbwyicoD5GuDj9GZjtxRc3oNrGYWeNPFLq+9LoYvvrd4= -----END CERTIFICATE-----Generated at Wed Jan 21 11:14:24 2026 by rpki-client