This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/1U6aj4iJ-y4osFcsxDSCV5GyIkA.roa File: 1U6aj4iJ-y4osFcsxDSCV5GyIkA.roa (raw, json) Hash identifier: UcR0Wdw86ylcwoNswSuJ+itYBJCzYFEmZPLbaTiKVvU= Subject key identifier: D5:4E:9A:8F:88:89:FB:2E:28:B0:57:2C:C4:34:82:57:91:B2:22:40 Certificate issuer: /CN=68383ffa9f20bf021c090262994212d71667ed02 Certificate serial: 019B7758FF7C99670E5431EFEB544E7884B7 Authority key identifier: 68:38:3F:FA:9F:20:BF:02:1C:09:02:62:99:42:12:D7:16:67:ED:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDg_-p8gvwIcCQJimUIS1xZn7QI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/1U6aj4iJ-y4osFcsxDSCV5GyIkA.roa Signing time: Thu 01 Jan 2026 02:17:59 +0000 ROA not before: Thu 01 Jan 2026 02:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 81.90.143.0/24 maxlen: 24 2a00:e20:143::/48 maxlen: 48 2a00:e20:150::/44 maxlen: 48 2a00:e27:143::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft rsync://rpki.ripe.net/repository/DEFAULT/aDg_-p8gvwIcCQJimUIS1xZn7QI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:ff:7c:99:67:0e:54:31:ef:eb:54:4e:78:84:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68383ffa9f20bf021c090262994212d71667ed02 Validity Not Before: Jan 1 02:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d54e9a8f8889fb2e28b0572cc434825791b22240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:88:c0:dc:f0:c0:2d:5c:a0:cf:e7:35:5a:f6: fa:86:c8:24:86:2d:bc:f2:30:64:b0:8b:2d:6c:87: 01:3c:41:fe:08:21:fc:4d:75:cf:2a:f9:8a:c6:64: b1:e1:ea:79:69:2c:5e:59:91:76:af:d4:14:bc:15: 5d:c4:64:7f:3c:89:74:15:d6:3b:b2:d2:5f:3f:f5: 00:7a:27:f3:95:50:98:37:74:6e:cc:08:de:2c:91: 3c:73:cf:e6:aa:25:10:64:fb:a9:ef:d7:42:49:68: 44:35:ca:56:da:66:5e:81:89:3e:7b:82:ed:2c:fc: 81:8d:81:28:88:02:67:de:a5:08:f4:8d:58:35:69: 92:56:87:08:1f:14:5a:28:a6:d4:a3:75:20:97:f6: 03:e3:37:1b:65:5b:c4:82:cf:be:14:fd:39:f3:b9: be:40:6a:86:a2:df:37:d1:27:2d:b5:31:26:aa:8d: 57:dd:62:b3:64:69:8b:02:ee:4f:72:00:93:f1:e4: dc:92:2a:de:ae:7f:9e:c7:03:bc:84:d5:f2:9d:58: 3e:80:7d:b7:a1:0c:42:18:5d:54:cb:77:43:cf:c5: ec:bf:9b:e3:75:39:fc:b3:9e:12:64:67:2f:d1:5c: 6e:43:5a:0c:6d:56:63:c7:48:82:56:a3:19:d6:f7: 7a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:4E:9A:8F:88:89:FB:2E:28:B0:57:2C:C4:34:82:57:91:B2:22:40 X509v3 Authority Key Identifier: keyid:68:38:3F:FA:9F:20:BF:02:1C:09:02:62:99:42:12:D7:16:67:ED:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDg_-p8gvwIcCQJimUIS1xZn7QI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/1U6aj4iJ-y4osFcsxDSCV5GyIkA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.90.143.0/24 IPv6: 2a00:e20:143::/48 2a00:e20:150::/44 2a00:e27:143::/48 Signature Algorithm: sha256WithRSAEncryption 48:9d:18:05:d5:ef:ea:59:df:2c:aa:61:00:fa:88:67:c8:b5: 84:0e:f8:72:b9:d7:9a:9d:38:4b:77:ea:05:01:af:bb:b9:47: 6d:f7:36:c7:18:e7:74:a8:03:f6:da:82:43:dd:04:59:f8:1e: e5:ec:27:ae:a0:e4:b9:a3:6a:fb:90:ae:d7:04:97:5b:85:19: f5:05:ae:db:6c:2a:6b:4f:b1:0e:4b:8e:58:0f:38:05:30:9e: f3:d7:b3:2c:15:9e:cc:0c:0e:2f:af:68:d6:5d:7f:2c:74:9e: 0c:3c:26:75:6c:a6:a2:26:c7:3c:1a:33:e1:2e:e5:81:f6:66: b0:14:1e:0c:3e:2f:ce:41:58:4c:92:7f:0a:0e:00:44:13:06: f1:e2:c2:6a:73:97:3f:47:ef:1e:34:f1:f0:54:d1:d0:6f:0c: 46:cd:d8:6d:b7:53:0e:ba:38:b8:40:da:36:dc:c9:1a:5b:8f: bb:a3:f1:5e:4a:4e:6f:df:67:68:21:9b:b0:fd:78:d1:b9:63: 24:5e:79:c5:d4:f3:92:dd:b0:4a:94:d7:11:76:47:6f:59:32: d8:eb:d7:b5:61:11:09:be:18:46:1e:1e:99:88:42:cb:9f:ec: af:05:5e:94:0e:6c:e8:50:9b:68:3b:76:77:cd:4b:47:e8:f9: ca:27:f1:c1 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt3WP98mWcOVDHv61ROeIS3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4MzgzZmZhOWYyMGJmMDIxYzA5MDI2Mjk5NDIxMmQ3MTY2 N2VkMDIwHhcNMjYwMTAxMDIxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTRlOWE4Zjg4ODlmYjJlMjhiMDU3MmNjNDM0ODI1NzkxYjIyMjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4jA3PDALVygz+c1Wvb6hsgkhi28 8jBksIstbIcBPEH+CCH8TXXPKvmKxmSx4ep5aSxeWZF2r9QUvBVdxGR/PIl0FdY7 stJfP/UAeifzlVCYN3RuzAjeLJE8c8/mqiUQZPup79dCSWhENcpW2mZegYk+e4Lt LPyBjYEoiAJn3qUI9I1YNWmSVocIHxRaKKbUo3Ugl/YD4zcbZVvEgs++FP0587m+ QGqGot830ScttTEmqo1X3WKzZGmLAu5PcgCT8eTckirern+exwO8hNXynVg+gH23 oQxCGF1Uy3dDz8Xsv5vjdTn8s54SZGcv0VxuQ1oMbVZjx0iCVqMZ1vd6eQIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFNVOmo+IifsuKLBXLMQ0gleRsiJAMB8GA1UdIwQY MBaAFGg4P/qfIL8CHAkCYplCEtcWZ+0CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYURnXy1wOGd2d0ljQ1FKaW1VSVMxeFpuN1FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9iOGU5NDAtMjIwMS00MDZlLThhYWYt NDA2MGU5ZWVlYjllLzEvMVU2YWo0aUoteTRvc0Zjc3hEU0NWNUd5SWtBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9iOGU5NDAtMjIwMS00MDZlLThhYWYtNDA2MGU5ZWVlYjll LzEvYURnXy1wOGd2d0ljQ1FKaW1VSVMxeFpuN1FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAMBAIAATAGAwQAUVqPMCEE AgACMBsDBwAqAA4gAUMDBwQqAA4gAVADBwAqAA4nAUMwDQYJKoZIhvcNAQELBQAD ggEBAEidGAXV7+pZ3yyqYQD6iGfItYQO+HK515qdOEt36gUBr7u5R233NscY53So A/bagkPdBFn4HuXsJ66g5LmjavuQrtcEl1uFGfUFrttsKmtPsQ5LjlgPOAUwnvPX sywVnswMDi+vaNZdfyx0ngw8JnVspqImxzwaM+Eu5YH2ZrAUHgw+L85BWEySfwoO AEQTBvHiwmpzlz9H7x408fBU0dBvDEbN2G23Uw66OLhA2jbcyRpbj7uj8V5KTm/f Z2ghm7D9eNG5YyReecXU85LdsEqU1xF2R29ZMtjr17VhEQm+GEYeHpmIQsuf7K8F XpQObOhQm2g7dnfNS0fo+con8cE= -----END CERTIFICATE-----Generated at Fri Jan 9 00:56:57 2026 by rpki-client