This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/aBJGwoNtwjYYCfL_vY3KC-5KRiw.roa File: aBJGwoNtwjYYCfL_vY3KC-5KRiw.roa (raw, json) Hash identifier: qe/bdX+L1Ag/Xhut7yjVu6KrdVE0BnulRsPIthNL1pg= Subject key identifier: 68:12:46:C2:83:6D:C2:36:18:09:F2:FF:BD:8D:CA:0B:EE:4A:46:2C Certificate issuer: /CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b Certificate serial: 019B9EDD7D837F2E16F864F048787680E282 Authority key identifier: A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/aBJGwoNtwjYYCfL_vY3KC-5KRiw.roa Signing time: Thu 08 Jan 2026 18:27:54 +0000 ROA not before: Thu 08 Jan 2026 18:27:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24658 IP address blocks: 81.19.128.0/20 maxlen: 20 81.19.128.0/23 maxlen: 23 81.19.130.0/24 maxlen: 24 81.19.142.0/23 maxlen: 23 2a10:ad80::/48 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9e:dd:7d:83:7f:2e:16:f8:64:f0:48:78:76:80:e2:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b Validity Not Before: Jan 8 18:27:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=681246c2836dc2361809f2ffbd8dca0bee4a462c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:bc:b7:74:ed:9c:5e:fe:32:ea:39:46:12:9f: 15:e4:71:a3:69:e9:4f:f8:7c:da:4e:8d:a3:eb:64: 50:29:af:8d:b1:d1:92:a4:f3:ae:65:fd:6f:09:14: 3a:12:7a:54:04:ac:73:30:e8:76:f5:9e:03:a2:29: ac:8f:ee:49:05:3b:c0:8d:38:da:4a:51:90:ef:07: 36:61:6b:05:8a:bc:6a:e0:0e:ba:74:69:05:de:ae: 9b:5c:36:6c:40:40:44:eb:a7:b5:77:ef:ac:ce:4c: 80:c3:c1:6e:93:78:6e:6d:57:74:64:c4:01:16:b6: e1:18:8f:ae:5e:6e:80:44:26:66:64:25:78:f4:00: 6c:00:6f:7d:6e:7d:3a:58:83:8a:06:d9:fb:bc:5b: a4:05:15:35:84:72:e3:99:a4:d2:f8:3b:54:a6:02: 7a:66:9a:b1:53:bc:2c:b1:e4:89:31:c2:53:9d:ac: a7:1b:45:82:cb:df:49:31:4e:59:3f:3b:1a:b7:04: 27:c2:d9:07:73:53:14:4e:b6:d0:be:99:6e:7d:84: 41:2b:f0:e4:8a:37:fc:54:53:82:a1:ff:f8:b4:9a: 4b:ce:c4:c1:c9:27:31:28:cb:5a:98:06:af:f2:73: 1a:ef:c0:0e:63:d1:6a:08:2c:58:30:0f:90:f9:0a: 3e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:12:46:C2:83:6D:C2:36:18:09:F2:FF:BD:8D:CA:0B:EE:4A:46:2C X509v3 Authority Key Identifier: keyid:A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/aBJGwoNtwjYYCfL_vY3KC-5KRiw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.128.0/20 IPv6: 2a10:ad80::/48 Signature Algorithm: sha256WithRSAEncryption 8d:70:94:68:ff:1b:ce:de:f6:c4:a2:ed:b3:06:57:bb:58:46: c5:00:e6:b1:84:bc:13:37:cc:82:42:95:2e:8b:e0:98:65:81: 5e:5e:03:23:cb:bd:67:39:ca:65:c5:f5:26:71:9e:dc:9d:54: 61:f1:fc:0b:8b:82:a5:2c:1c:13:c7:6c:65:1d:95:c8:c5:e1: a3:a9:47:02:0c:0d:74:38:6f:f7:e5:96:49:77:2b:3d:a3:1e: 64:2f:eb:ec:51:af:d0:91:ce:7f:ad:3e:e6:a6:22:ac:90:14: f7:d1:78:9f:1e:da:a0:a4:f8:1f:3a:66:74:27:94:32:88:7a: 67:e7:7d:0c:96:a0:d3:a1:77:7e:9e:f5:b0:d8:3c:a1:b4:7d: 34:1f:41:be:3d:e5:dd:2c:b0:16:d1:c8:cf:d4:e4:81:57:e6: 0b:04:62:0d:23:9d:4d:68:d1:59:68:91:58:3c:61:88:3b:e2: 00:0e:60:e9:9f:e9:c0:3f:3e:66:ab:b1:c6:31:32:62:58:fd: da:97:72:73:7c:69:bf:55:af:51:4a:ce:ee:a3:54:cf:11:8c: af:22:bd:30:11:f9:d7:04:b9:57:3d:0f:0e:ad:9a:ec:d7:15: 8c:a2:d8:ac:68:54:8f:8c:40:62:a9:c9:a5:b8:42:b5:71:af: a6:5c:45:61 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZue3X2Dfy4W+GTwSHh2gOKCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0Y2U5NjQwYTNlZjJmZWExOTM3NGFkOGY5OWY0MjNkN2Fh N2M3NmIwHhcNMjYwMTA4MTgyNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODEyNDZjMjgzNmRjMjM2MTgwOWYyZmZiZDhkY2EwYmVlNGE0NjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtby3dO2cXv4y6jlGEp8V5HGjaelP +HzaTo2j62RQKa+NsdGSpPOuZf1vCRQ6EnpUBKxzMOh29Z4Doimsj+5JBTvAjTja SlGQ7wc2YWsFirxq4A66dGkF3q6bXDZsQEBE66e1d++szkyAw8Fuk3hubVd0ZMQB FrbhGI+uXm6ARCZmZCV49ABsAG99bn06WIOKBtn7vFukBRU1hHLjmaTS+DtUpgJ6 ZpqxU7wsseSJMcJTnaynG0WCy99JMU5ZPzsatwQnwtkHc1MUTrbQvplufYRBK/Dk ijf8VFOCof/4tJpLzsTByScxKMtamAav8nMa78AOY9FqCCxYMA+Q+Qo+SwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFGgSRsKDbcI2GAny/72NygvuSkYsMB8GA1UdIwQY MBaAFKTOlkCj7y/qGTdK2PmfQj16p8drMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQt MjgzZmU1NGE2ZjJmLzEvYUJKR3dvTnR3allZQ2ZMX3ZZM0tDLTVLUml3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQtMjgzZmU1NGE2ZjJm LzEvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQEUROAMA8E AgACMAkDBwAqEK2AAAAwDQYJKoZIhvcNAQELBQADggEBAI1wlGj/G87e9sSi7bMG V7tYRsUA5rGEvBM3zIJClS6L4JhlgV5eAyPLvWc5ymXF9SZxntydVGHx/AuLgqUs HBPHbGUdlcjF4aOpRwIMDXQ4b/fllkl3Kz2jHmQv6+xRr9CRzn+tPuamIqyQFPfR eJ8e2qCk+B86ZnQnlDKIemfnfQyWoNOhd36e9bDYPKG0fTQfQb495d0ssBbRyM/U 5IFX5gsEYg0jnU1o0VlokVg8YYg74gAOYOmf6cA/PmarscYxMmJY/dqXcnN8ab9V r1FKzu6jVM8RjK8ivTAR+dcEuVc9Dw6tmuzXFYyi2KxoVI+MQGKpyaW4QrVxr6Zc RWE= -----END CERTIFICATE-----Generated at Sun Jan 25 12:15:29 2026 by rpki-client