This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c913dc-770f-4bd0-978f-46162786f8e1/1/jnkdZMAGt79DVLXoA3hlqjwSOjw.roa File: jnkdZMAGt79DVLXoA3hlqjwSOjw.roa (raw, json) Hash identifier: r96KiUvXGuB4ZHTQsqMOJD17aHw87ukowojBfpYCMJA= Subject key identifier: 8E:79:1D:64:C0:06:B7:BF:43:54:B5:E8:03:78:65:AA:3C:12:3A:3C Certificate issuer: /CN=1942a41559426b2f5a877c039eeda17b6b9e1d89 Certificate serial: 019B531B7F2764CE9F5BC2BA6FA7EE8440C5 Authority key identifier: 19:42:A4:15:59:42:6B:2F:5A:87:7C:03:9E:ED:A1:7B:6B:9E:1D:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUKkFVlCay9ah3wDnu2he2ueHYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/c913dc-770f-4bd0-978f-46162786f8e1/1/jnkdZMAGt79DVLXoA3hlqjwSOjw.roa Signing time: Thu 25 Dec 2025 01:24:29 +0000 ROA not before: Thu 25 Dec 2025 01:24:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 41109 IP address blocks: 81.200.80.0/21 maxlen: 21 81.200.88.0/23 maxlen: 23 81.200.90.0/24 maxlen: 24 81.200.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/c913dc-770f-4bd0-978f-46162786f8e1/1/GUKkFVlCay9ah3wDnu2he2ueHYk.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/c913dc-770f-4bd0-978f-46162786f8e1/1/GUKkFVlCay9ah3wDnu2he2ueHYk.mft rsync://rpki.ripe.net/repository/DEFAULT/GUKkFVlCay9ah3wDnu2he2ueHYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:1b:7f:27:64:ce:9f:5b:c2:ba:6f:a7:ee:84:40:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1942a41559426b2f5a877c039eeda17b6b9e1d89 Validity Not Before: Dec 25 01:24:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8e791d64c006b7bf4354b5e8037865aa3c123a3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:35:9c:70:01:7a:a9:52:0e:ac:6a:22:f2:6d: c4:f9:52:f8:c0:07:0c:cf:da:e4:20:6a:06:a6:ac: 83:aa:8c:49:9f:14:d3:c8:8c:bd:4f:22:b4:a1:e0: a3:c3:e5:db:16:0c:60:4d:89:b0:d3:ad:c7:b4:61: ca:88:4a:68:97:67:0f:c3:4c:bb:0e:bf:18:71:2e: 70:bd:7e:e9:e3:d7:3e:90:a8:58:25:19:eb:d0:23: a3:c9:86:54:c1:9c:0c:89:4d:f0:62:99:e7:6f:01: 20:18:3b:b2:20:36:27:cf:c2:51:7e:a3:ca:b2:e7: 55:80:59:a7:68:8c:ea:40:9d:20:89:fb:e4:03:44: d6:73:8e:d9:14:8f:32:33:60:29:56:70:84:11:c2: 5a:91:8a:4d:86:93:bb:93:62:cf:3a:a0:3c:e8:69: 4a:9d:70:e4:3c:cc:db:78:f1:a6:3c:52:cc:6e:85: 46:0a:d7:24:60:69:e7:09:de:94:aa:b2:1f:2e:75: 3d:43:77:b7:46:13:db:1a:4d:ec:57:ed:f0:ec:11: 20:af:e1:f7:72:30:17:bc:bc:2c:0d:71:e7:37:92: ea:77:59:a2:7d:e2:75:5b:a7:63:06:73:7e:37:33: 7e:27:60:c7:43:fb:74:90:4e:cf:ec:31:26:84:19: eb:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:79:1D:64:C0:06:B7:BF:43:54:B5:E8:03:78:65:AA:3C:12:3A:3C X509v3 Authority Key Identifier: keyid:19:42:A4:15:59:42:6B:2F:5A:87:7C:03:9E:ED:A1:7B:6B:9E:1D:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUKkFVlCay9ah3wDnu2he2ueHYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c913dc-770f-4bd0-978f-46162786f8e1/1/jnkdZMAGt79DVLXoA3hlqjwSOjw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c913dc-770f-4bd0-978f-46162786f8e1/1/GUKkFVlCay9ah3wDnu2he2ueHYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.200.80.0-81.200.90.255 81.200.92.0/22 Signature Algorithm: sha256WithRSAEncryption b9:d2:84:50:42:3d:9d:e0:29:ea:f0:57:1b:1a:5b:51:b5:c6: 83:16:a7:6f:77:1e:b6:d1:fc:16:8f:82:ab:9a:95:90:66:3b: da:d6:f8:42:0a:97:52:53:fe:5e:51:d0:95:c1:90:49:f3:b1: 48:e4:0a:f0:71:50:83:86:f8:ec:5b:9a:f3:67:07:0b:f5:8f: 0c:e1:56:20:3f:d2:d9:05:0d:c7:be:95:e8:11:a8:05:c8:b6: d0:74:0c:70:7e:58:a7:5b:93:72:bf:e4:1e:61:36:c6:0a:1f: 65:ff:4c:4a:e4:61:f4:c1:6f:b5:12:e8:d7:72:65:86:82:61: a6:a8:0d:ed:1a:e1:72:f0:94:fb:26:66:62:b1:4e:04:0d:aa: ca:d5:ae:61:c2:63:b5:34:fb:d0:16:d5:bd:84:ba:22:db:00: 29:08:ad:e6:59:45:6e:5c:46:cf:73:46:0d:c0:2d:dc:e5:9a: 32:ba:36:38:31:ff:d8:47:50:bf:37:cb:c7:f4:91:89:bf:4d: 2c:bb:ee:99:6a:ab:f3:c8:ba:e6:1e:00:70:38:38:f0:5c:8e: 1a:f9:b9:83:95:61:7a:6e:5b:51:87:52:76:26:f8:62:79:9d: 32:1c:cd:66:96:77:91:94:a2:19:45:23:85:c4:28:4b:2e:9c: 58:8c:fb:3c -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZtTG38nZM6fW8K6b6fuhEDFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NDJhNDE1NTk0MjZiMmY1YTg3N2MwMzllZWRhMTdiNmI5 ZTFkODkwHhcNMjUxMjI1MDEyNDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTc5MWQ2NGMwMDZiN2JmNDM1NGI1ZTgwMzc4NjVhYTNjMTIzYTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszWccAF6qVIOrGoi8m3E+VL4wAcM z9rkIGoGpqyDqoxJnxTTyIy9TyK0oeCjw+XbFgxgTYmw063HtGHKiEpol2cPw0y7 Dr8YcS5wvX7p49c+kKhYJRnr0COjyYZUwZwMiU3wYpnnbwEgGDuyIDYnz8JRfqPK sudVgFmnaIzqQJ0gifvkA0TWc47ZFI8yM2ApVnCEEcJakYpNhpO7k2LPOqA86GlK nXDkPMzbePGmPFLMboVGCtckYGnnCd6UqrIfLnU9Q3e3RhPbGk3sV+3w7BEgr+H3 cjAXvLwsDXHnN5Lqd1mifeJ1W6djBnN+NzN+J2DHQ/t0kE7P7DEmhBnrGwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFI55HWTABre/Q1S16AN4Zao8Ejo8MB8GA1UdIwQY MBaAFBlCpBVZQmsvWod8A57toXtrnh2JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1VLa0ZWbENheTlhaDN3RG51MmhlMnVlSFlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9jOTEzZGMtNzcwZi00YmQwLTk3OGYt NDYxNjI3ODZmOGUxLzEvam5rZFpNQUd0NzlEVkxYb0EzaGxxandTT2p3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9jOTEzZGMtNzcwZi00YmQwLTk3OGYtNDYxNjI3ODZmOGUx LzEvR1VLa0ZWbENheTlhaDN3RG51MmhlMnVlSFlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBARRyFAD BABRyFoDBAJRyFwwDQYJKoZIhvcNAQELBQADggEBALnShFBCPZ3gKerwVxsaW1G1 xoMWp293HrbR/BaPgqualZBmO9rW+EIKl1JT/l5R0JXBkEnzsUjkCvBxUIOG+Oxb mvNnBwv1jwzhViA/0tkFDce+legRqAXIttB0DHB+WKdbk3K/5B5hNsYKH2X/TErk YfTBb7US6NdyZYaCYaaoDe0a4XLwlPsmZmKxTgQNqsrVrmHCY7U0+9AW1b2EuiLb ACkIreZZRW5cRs9zRg3ALdzlmjK6Njgx/9hHUL83y8f0kYm/TSy77plqq/PIuuYe AHA4OPBcjhr5uYOVYXpuW1GHUnYm+GJ5nTIczWaWd5GUohlFI4XEKEsunFiM+zw= -----END CERTIFICATE-----Generated at Fri Dec 26 17:23:35 2025 by rpki-client