This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/URkF_3wWv4caQ7gSHuTsb7r6MGI.roa File: URkF_3wWv4caQ7gSHuTsb7r6MGI.roa (raw, json) Hash identifier: Gjnz59P638W/IUVQMIM+Nm7HP3jZwW2uLN6LQ+PZObA= Subject key identifier: 51:19:05:FF:7C:16:BF:87:1A:43:B8:12:1E:E4:EC:6F:BA:FA:30:62 Certificate issuer: /CN=d423a5be5e21ca460732ae48f385a3ea150a2be1 Certificate serial: 019B7AC8657A2BB204ECDDE51691A477D46D Authority key identifier: D4:23:A5:BE:5E:21:CA:46:07:32:AE:48:F3:85:A3:EA:15:0A:2B:E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1COlvl4hykYHMq5I84Wj6hUKK-E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/URkF_3wWv4caQ7gSHuTsb7r6MGI.roa Signing time: Thu 01 Jan 2026 18:18:32 +0000 ROA not before: Thu 01 Jan 2026 18:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43289 IP address blocks: 81.31.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft rsync://rpki.ripe.net/repository/DEFAULT/1COlvl4hykYHMq5I84Wj6hUKK-E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:65:7a:2b:b2:04:ec:dd:e5:16:91:a4:77:d4:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d423a5be5e21ca460732ae48f385a3ea150a2be1 Validity Not Before: Jan 1 18:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=511905ff7c16bf871a43b8121ee4ec6fbafa3062 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:59:67:dc:27:09:f4:21:fe:42:0d:a9:a7:16: b1:e7:87:5b:c2:50:96:49:ba:65:8a:5d:c2:aa:98: 32:6b:a3:9b:66:cb:bd:44:b0:47:61:a1:60:ed:70: 66:be:76:8f:9a:8e:0f:b9:e0:19:7c:42:60:57:2d: 61:4d:8e:56:8c:b5:a9:07:e6:cd:80:9b:b7:fa:40: 79:aa:cf:08:6b:cf:42:a4:19:58:18:91:16:ad:ee: 8e:ca:66:bf:db:eb:84:96:50:51:de:11:77:0a:bd: ea:fe:39:23:ba:25:d4:15:72:bc:b4:49:8f:56:c1: d1:cd:b2:46:9a:1d:f0:2a:8b:2d:19:3d:4f:43:4e: 6d:1b:be:21:3e:eb:8c:ce:0b:c6:b4:98:b7:bc:ee: 77:93:dd:2b:d0:8b:64:8c:8e:2a:39:a3:bc:21:0c: dd:5b:81:bd:a4:20:9d:bd:a8:b8:27:9b:b0:0c:93: 87:65:ec:33:b8:27:e7:be:d6:16:96:65:7d:aa:91: 47:4e:e3:16:df:b7:1d:ca:56:c4:4e:a6:9d:01:cd: b9:4c:2e:a4:43:f1:ae:0e:57:f7:a1:65:14:87:14: 09:2a:6e:6f:89:81:5c:ca:9b:f3:39:ac:71:7e:2c: e4:3a:5d:4a:59:59:b9:a8:a3:48:bc:4c:24:25:1d: 39:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:19:05:FF:7C:16:BF:87:1A:43:B8:12:1E:E4:EC:6F:BA:FA:30:62 X509v3 Authority Key Identifier: keyid:D4:23:A5:BE:5E:21:CA:46:07:32:AE:48:F3:85:A3:EA:15:0A:2B:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1COlvl4hykYHMq5I84Wj6hUKK-E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/URkF_3wWv4caQ7gSHuTsb7r6MGI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.31.128.0/20 Signature Algorithm: sha256WithRSAEncryption 59:fd:41:ba:d1:4f:43:92:0e:fd:ca:21:73:24:0a:a6:83:08: 9a:8f:b2:0a:bc:e0:f8:b3:cd:4e:f9:7b:93:47:53:af:1a:92: 15:22:ec:26:a0:42:5b:a5:ca:38:ef:d7:db:50:d9:8a:ac:19: 43:12:32:cf:a4:44:39:0e:c3:55:69:50:11:fb:26:3a:89:c9: 3f:04:34:77:a4:cf:ba:5e:b6:2a:a1:77:57:9b:c4:4d:ad:e5: 2f:96:69:6d:58:55:6b:ff:92:49:8d:09:7b:11:3f:a0:a7:4d: 98:a7:b6:dc:d9:43:8c:a6:24:31:e2:72:c0:49:c6:e2:de:5b: 34:d6:56:12:46:3e:f2:d7:67:bf:6b:52:fe:9a:63:68:29:07: ad:ba:9b:0e:ae:e1:ee:50:6d:e4:91:77:64:98:ba:0d:26:d0: 1a:32:89:50:57:9c:48:0c:85:c7:cd:4b:e3:08:e5:b8:3f:d3: 59:58:79:a1:89:7a:36:ba:0b:e6:e5:9f:99:64:25:aa:0c:e4: 55:f6:13:df:96:c4:ef:2d:65:31:35:2e:43:e2:75:c4:1f:7f: a9:b5:55:c7:c7:ab:47:d5:e4:e3:71:ec:db:85:34:56:d0:ff: f5:82:60:78:fa:76:b8:7c:d6:0e:e2:46:9f:09:62:a6:a1:89: ed:04:a4:e1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yGV6K7IE7N3lFpGkd9RtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0MjNhNWJlNWUyMWNhNDYwNzMyYWU0OGYzODVhM2VhMTUw YTJiZTEwHhcNMjYwMTAxMTgxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MTE5MDVmZjdjMTZiZjg3MWE0M2I4MTIxZWU0ZWM2ZmJhZmEzMDYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlln3CcJ9CH+Qg2ppxax54dbwlCW Sbplil3Cqpgya6ObZsu9RLBHYaFg7XBmvnaPmo4PueAZfEJgVy1hTY5WjLWpB+bN gJu3+kB5qs8Ia89CpBlYGJEWre6Oyma/2+uEllBR3hF3Cr3q/jkjuiXUFXK8tEmP VsHRzbJGmh3wKostGT1PQ05tG74hPuuMzgvGtJi3vO53k90r0ItkjI4qOaO8IQzd W4G9pCCdvai4J5uwDJOHZewzuCfnvtYWlmV9qpFHTuMW37cdylbETqadAc25TC6k Q/GuDlf3oWUUhxQJKm5viYFcypvzOaxxfizkOl1KWVm5qKNIvEwkJR05CQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFEZBf98Fr+HGkO4Eh7k7G+6+jBiMB8GA1UdIwQY MBaAFNQjpb5eIcpGBzKuSPOFo+oVCivhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUNPbHZsNGh5a1lITXE1STg0V2o2aFVLSy1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9hM2UzYmItZmQ5Zi00MDQyLWIyY2It ZDk0NzY2NjU3NTVhLzEvVVJrRl8zd1d2NGNhUTdnU0h1VHNiN3I2TUdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9hM2UzYmItZmQ5Zi00MDQyLWIyY2ItZDk0NzY2NjU3NTVh LzEvMUNPbHZsNGh5a1lITXE1STg0V2o2aFVLSy1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEUR+AMA0G CSqGSIb3DQEBCwUAA4IBAQBZ/UG60U9Dkg79yiFzJAqmgwiaj7IKvOD4s81O+XuT R1OvGpIVIuwmoEJbpco479fbUNmKrBlDEjLPpEQ5DsNVaVAR+yY6ick/BDR3pM+6 XrYqoXdXm8RNreUvlmltWFVr/5JJjQl7ET+gp02Yp7bc2UOMpiQx4nLAScbi3ls0 1lYSRj7y12e/a1L+mmNoKQetupsOruHuUG3kkXdkmLoNJtAaMolQV5xIDIXHzUvj COW4P9NZWHmhiXo2ugvm5Z+ZZCWqDORV9hPflsTvLWUxNS5D4nXEH3+ptVXHx6tH 1eTjcezbhTRW0P/1gmB4+na4fNYO4kafCWKmoYntBKTh -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:11 2026 by rpki-client