This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/Ac8C988WG2rKoPAyM0PJx2rNaoE.roa File: Ac8C988WG2rKoPAyM0PJx2rNaoE.roa (raw, json) Hash identifier: 89LOHLJ7QAy8vGNQbBqFUdTxIH6fXbqoySpOcf8nHiY= Subject key identifier: 01:CF:02:F7:CF:16:1B:6A:CA:A0:F0:32:33:43:C9:C7:6A:CD:6A:81 Certificate issuer: /CN=d423a5be5e21ca460732ae48f385a3ea150a2be1 Certificate serial: 019B7AC8641F14C5118349B03EB1B16134F8 Authority key identifier: D4:23:A5:BE:5E:21:CA:46:07:32:AE:48:F3:85:A3:EA:15:0A:2B:E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1COlvl4hykYHMq5I84Wj6hUKK-E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/Ac8C988WG2rKoPAyM0PJx2rNaoE.roa Signing time: Thu 01 Jan 2026 18:18:31 +0000 ROA not before: Thu 01 Jan 2026 18:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7029 IP address blocks: 81.31.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft rsync://rpki.ripe.net/repository/DEFAULT/1COlvl4hykYHMq5I84Wj6hUKK-E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:64:1f:14:c5:11:83:49:b0:3e:b1:b1:61:34:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d423a5be5e21ca460732ae48f385a3ea150a2be1 Validity Not Before: Jan 1 18:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=01cf02f7cf161b6acaa0f0323343c9c76acd6a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:10:66:1d:71:fe:e6:85:a4:be:7a:9c:d5:1c: c7:52:40:a2:f5:8f:2e:9d:08:5d:f5:6b:ba:12:9b: 7e:f4:d2:b0:5f:09:08:57:9b:9d:ad:56:dc:b3:0c: f2:c2:46:5f:5d:8b:b1:f0:a2:b6:2f:bf:bd:57:39: 0e:a8:55:7a:e2:88:dc:58:77:ee:5b:d9:22:59:e6: 2a:69:ed:cf:b7:45:3b:fa:c4:07:ca:80:61:80:18: c1:5d:ae:4f:60:83:ee:12:0b:c6:7d:34:74:82:72: 8a:5f:c3:d2:c2:de:11:11:41:c6:c1:08:34:3a:1c: 1d:ae:a6:c0:e3:c4:25:27:81:4e:2a:3e:3a:d7:f9: 77:50:54:de:33:18:54:a9:3d:6f:7d:b9:95:fd:c7: bc:c1:b1:7d:31:7b:13:b0:3a:a4:77:fb:9e:dc:67: 87:74:32:4f:5b:c6:73:25:af:cd:60:8e:72:fb:ca: 9a:9d:61:40:70:85:4a:30:3a:2b:c7:c6:25:07:99: 3a:dd:2c:10:8b:4b:ed:0d:80:a3:96:10:b6:b9:5e: 5f:db:1f:d8:f0:43:8f:ef:a0:56:1e:f2:54:22:f8: de:97:d9:88:81:b5:89:79:85:88:ca:ee:d5:d6:f2: c8:75:1b:ac:cc:d3:6f:94:55:fc:03:16:bf:51:48: 8b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:CF:02:F7:CF:16:1B:6A:CA:A0:F0:32:33:43:C9:C7:6A:CD:6A:81 X509v3 Authority Key Identifier: keyid:D4:23:A5:BE:5E:21:CA:46:07:32:AE:48:F3:85:A3:EA:15:0A:2B:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1COlvl4hykYHMq5I84Wj6hUKK-E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/Ac8C988WG2rKoPAyM0PJx2rNaoE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.31.128.0/20 Signature Algorithm: sha256WithRSAEncryption 2d:a7:26:8f:54:22:cd:fa:0e:44:1c:10:cf:62:fc:3c:ea:4f: bd:83:db:3b:58:4a:e6:18:2b:49:8d:d6:61:7e:ec:6c:20:f6: 19:be:3e:da:d8:41:59:5a:55:81:a8:d0:b5:86:89:13:1e:1e: e4:4b:62:8c:79:b3:cf:e7:d1:08:76:fc:89:75:e7:b0:a2:cd: 4a:31:e0:49:15:3e:54:99:75:d6:ae:be:2b:48:e2:37:d4:2b: 54:7c:b0:d8:5f:74:6d:81:5e:63:07:e8:9b:70:a7:39:ef:ed: 6d:41:e0:36:47:3c:37:18:17:79:52:de:ac:7f:d6:5d:50:b3: 04:25:44:a0:af:a4:8a:73:1d:95:76:62:eb:2b:eb:11:21:ad: c0:a0:64:76:62:31:a7:fe:bb:e2:97:27:3b:73:da:c6:b6:f8: ba:d4:67:64:66:ba:38:e6:44:28:26:bc:0a:74:bd:10:13:9a: 69:cd:1d:39:09:ad:a7:20:25:f9:68:62:1e:93:86:c9:63:e3: 30:c4:b2:31:21:5e:e9:ea:d4:73:a5:bf:dc:c7:a0:9c:c4:3f: 29:98:0b:d3:cf:f4:2b:c1:e1:72:41:48:e3:a2:2b:12:8d:f1: d1:18:1d:1f:c7:4f:5b:cb:df:ec:79:62:61:69:bf:f2:e4:d4: b7:31:bb:19 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yGQfFMURg0mwPrGxYTT4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0MjNhNWJlNWUyMWNhNDYwNzMyYWU0OGYzODVhM2VhMTUw YTJiZTEwHhcNMjYwMTAxMTgxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMWNmMDJmN2NmMTYxYjZhY2FhMGYwMzIzMzQzYzljNzZhY2Q2YTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxBmHXH+5oWkvnqc1RzHUkCi9Y8u nQhd9Wu6Ept+9NKwXwkIV5udrVbcswzywkZfXYux8KK2L7+9VzkOqFV64ojcWHfu W9kiWeYqae3Pt0U7+sQHyoBhgBjBXa5PYIPuEgvGfTR0gnKKX8PSwt4REUHGwQg0 OhwdrqbA48QlJ4FOKj461/l3UFTeMxhUqT1vfbmV/ce8wbF9MXsTsDqkd/ue3GeH dDJPW8ZzJa/NYI5y+8qanWFAcIVKMDorx8YlB5k63SwQi0vtDYCjlhC2uV5f2x/Y 8EOP76BWHvJUIvjel9mIgbWJeYWIyu7V1vLIdRuszNNvlFX8Axa/UUiLywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAHPAvfPFhtqyqDwMjNDycdqzWqBMB8GA1UdIwQY MBaAFNQjpb5eIcpGBzKuSPOFo+oVCivhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUNPbHZsNGh5a1lITXE1STg0V2o2aFVLSy1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9hM2UzYmItZmQ5Zi00MDQyLWIyY2It ZDk0NzY2NjU3NTVhLzEvQWM4Qzk4OFdHMnJLb1BBeU0wUEp4MnJOYW9FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9hM2UzYmItZmQ5Zi00MDQyLWIyY2ItZDk0NzY2NjU3NTVh LzEvMUNPbHZsNGh5a1lITXE1STg0V2o2aFVLSy1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEUR+AMA0G CSqGSIb3DQEBCwUAA4IBAQAtpyaPVCLN+g5EHBDPYvw86k+9g9s7WErmGCtJjdZh fuxsIPYZvj7a2EFZWlWBqNC1hokTHh7kS2KMebPP59EIdvyJdeewos1KMeBJFT5U mXXWrr4rSOI31CtUfLDYX3RtgV5jB+ibcKc57+1tQeA2Rzw3GBd5Ut6sf9ZdULME JUSgr6SKcx2VdmLrK+sRIa3AoGR2YjGn/rvilyc7c9rGtvi61GdkZro45kQoJrwK dL0QE5ppzR05Ca2nICX5aGIek4bJY+MwxLIxIV7p6tRzpb/cx6CcxD8pmAvTz/Qr weFyQUjjoisSjfHRGB0fx09by9/seWJhab/y5NS3MbsZ -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:52 2026 by rpki-client