This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/hB3YY5wUUGfV6IIyHwEnpTSv42A.roa File: hB3YY5wUUGfV6IIyHwEnpTSv42A.roa (raw, json) Hash identifier: 1OC88dVocx3G+QkH4qBimK+HQdGVwhYEBjKSlW54FuM= Subject key identifier: 84:1D:D8:63:9C:14:50:67:D5:E8:82:32:1F:01:27:A5:34:AF:E3:60 Certificate issuer: /CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b Certificate serial: 019B7AC7EB4BFE552B5FD8862CBDC6F032E0 Authority key identifier: A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/hB3YY5wUUGfV6IIyHwEnpTSv42A.roa Signing time: Thu 01 Jan 2026 18:18:00 +0000 ROA not before: Thu 01 Jan 2026 18:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210644 IP address blocks: 81.19.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:eb:4b:fe:55:2b:5f:d8:86:2c:bd:c6:f0:32:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b Validity Not Before: Jan 1 18:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=841dd8639c145067d5e882321f0127a534afe360 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:eb:57:f1:da:73:f8:70:70:cf:e5:87:72:7b: c8:8b:47:f5:cf:db:22:a8:86:20:77:6b:f8:69:3f: a6:49:c4:49:8c:8f:c9:be:48:de:0e:e9:2f:61:b7: c1:c8:35:68:c5:65:a6:9c:9d:e4:30:e9:1b:81:e4: a9:f6:8f:ca:2e:3f:7f:ae:bb:74:a4:ab:50:45:57: ef:93:b2:21:98:c8:6d:16:2b:fb:14:3c:b3:30:ea: 7d:b6:b5:22:60:74:26:a7:be:64:29:bb:94:29:a9: 4d:98:7b:83:92:6e:18:e1:8c:ed:d5:4e:16:f8:fe: ea:31:7b:33:41:ec:54:6c:fb:38:9c:61:aa:9d:11: 4c:d3:b3:4c:6b:e8:25:53:52:25:bc:7e:7a:1b:6b: c2:60:7a:31:99:7f:b8:03:6f:f3:98:8d:c2:b5:2a: a5:fc:31:d0:f5:02:d4:37:d8:9c:63:2e:0d:ea:71: c1:ed:7f:cd:77:3d:c5:f4:f6:36:63:bd:e4:ef:44: aa:35:f4:aa:8c:da:db:3f:8e:a5:54:c9:68:b6:7b: 2d:12:03:77:e0:06:c8:0e:a4:45:d7:d8:aa:c7:78: 9b:ec:f2:ee:fe:bd:35:a6:7f:40:c2:55:09:cc:39: 2a:6d:98:be:21:66:ee:3b:44:dc:be:85:a8:f0:90: 8e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:1D:D8:63:9C:14:50:67:D5:E8:82:32:1F:01:27:A5:34:AF:E3:60 X509v3 Authority Key Identifier: keyid:A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/hB3YY5wUUGfV6IIyHwEnpTSv42A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.137.0/24 Signature Algorithm: sha256WithRSAEncryption 15:ab:8f:dc:ba:98:c7:64:d5:b3:b1:f7:31:73:46:cb:13:00: ce:db:f2:46:ef:d6:ed:c1:a5:6c:33:e2:e5:a7:fd:4d:a0:6a: 0c:a9:14:31:0d:5c:59:96:a8:c5:44:fa:59:49:2d:20:97:68: 36:e8:33:bd:cb:d3:1a:0f:c1:ae:ec:c0:0b:65:bb:1c:c9:db: 2a:86:1a:39:37:ed:7f:60:99:32:8d:f5:3d:5b:69:a9:f0:c5: 7e:27:ec:f1:9a:f8:32:fc:f7:61:7d:c1:8d:6b:5b:8c:32:43: 4c:f8:49:2f:26:d8:f6:0a:bd:05:27:37:05:a6:dc:d4:a6:6b: 7d:7e:14:db:f7:c7:13:81:21:6f:fe:48:3a:78:ca:a3:6d:06: c4:3c:97:a9:d1:8f:08:ea:59:17:02:77:21:aa:57:51:d2:24: 83:6a:b4:48:07:b4:8a:7d:d0:c7:6b:0e:0c:5c:37:13:ec:bb: 66:68:db:96:9b:1a:2f:11:a8:f4:8f:80:85:57:47:c5:ba:14: fe:4c:e4:79:fa:9b:2f:2c:e2:74:9a:5b:5c:08:9b:17:1d:97: 42:ec:75:59:78:64:44:65:18:5c:59:5a:e9:66:e9:6e:74:13: f9:9d:fb:7c:80:1f:8a:52:77:68:06:8c:f7:87:5d:40:31:c2: 5a:a8:50:be -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x+tL/lUrX9iGLL3G8DLgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0Y2U5NjQwYTNlZjJmZWExOTM3NGFkOGY5OWY0MjNkN2Fh N2M3NmIwHhcNMjYwMTAxMTgxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDFkZDg2MzljMTQ1MDY3ZDVlODgyMzIxZjAxMjdhNTM0YWZlMzYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+tX8dpz+HBwz+WHcnvIi0f1z9si qIYgd2v4aT+mScRJjI/JvkjeDukvYbfByDVoxWWmnJ3kMOkbgeSp9o/KLj9/rrt0 pKtQRVfvk7IhmMhtFiv7FDyzMOp9trUiYHQmp75kKbuUKalNmHuDkm4Y4Yzt1U4W +P7qMXszQexUbPs4nGGqnRFM07NMa+glU1IlvH56G2vCYHoxmX+4A2/zmI3CtSql /DHQ9QLUN9icYy4N6nHB7X/Ndz3F9PY2Y73k70SqNfSqjNrbP46lVMlotnstEgN3 4AbIDqRF19iqx3ib7PLu/r01pn9AwlUJzDkqbZi+IWbuO0TcvoWo8JCO2QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIQd2GOcFFBn1eiCMh8BJ6U0r+NgMB8GA1UdIwQY MBaAFKTOlkCj7y/qGTdK2PmfQj16p8drMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQt MjgzZmU1NGE2ZjJmLzEvaEIzWVk1d1VVR2ZWNklJeUh3RW5wVFN2NDJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQtMjgzZmU1NGE2ZjJm LzEvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUROJMA0G CSqGSIb3DQEBCwUAA4IBAQAVq4/cupjHZNWzsfcxc0bLEwDO2/JG79btwaVsM+Ll p/1NoGoMqRQxDVxZlqjFRPpZSS0gl2g26DO9y9MaD8Gu7MALZbscydsqhho5N+1/ YJkyjfU9W2mp8MV+J+zxmvgy/PdhfcGNa1uMMkNM+EkvJtj2Cr0FJzcFptzUpmt9 fhTb98cTgSFv/kg6eMqjbQbEPJep0Y8I6lkXAnchqldR0iSDarRIB7SKfdDHaw4M XDcT7LtmaNuWmxovEaj0j4CFV0fFuhT+TOR5+psvLOJ0mltcCJsXHZdC7HVZeGRE ZRhcWVrpZuludBP5nft8gB+KUndoBoz3h11AMcJaqFC+ -----END CERTIFICATE-----Generated at Tue Jan 20 06:02:32 2026 by rpki-client