This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/_by7AscKsdigQ-BwL976HgZ5JQ8.roa File: _by7AscKsdigQ-BwL976HgZ5JQ8.roa (raw, json) Hash identifier: wziiFvH1qv+pWQ/UztPiXiVxbkfYgEe33kjW55/pvyo= Subject key identifier: FD:BC:BB:02:C7:0A:B1:D8:A0:43:E0:70:2F:DE:FA:1E:06:79:25:0F Certificate issuer: /CN=b061bd3cca3d33645a276e0f3224ff89eee44857 Certificate serial: 019B78A3767CB78A724BC3A7397D5F9A8CDC Authority key identifier: B0:61:BD:3C:CA:3D:33:64:5A:27:6E:0F:32:24:FF:89:EE:E4:48:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sGG9PMo9M2RaJ24PMiT_ie7kSFc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/_by7AscKsdigQ-BwL976HgZ5JQ8.roa Signing time: Thu 01 Jan 2026 08:18:57 +0000 ROA not before: Thu 01 Jan 2026 08:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200034 IP address blocks: 81.30.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.crl rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft rsync://rpki.ripe.net/repository/DEFAULT/sGG9PMo9M2RaJ24PMiT_ie7kSFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:76:7c:b7:8a:72:4b:c3:a7:39:7d:5f:9a:8c:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b061bd3cca3d33645a276e0f3224ff89eee44857 Validity Not Before: Jan 1 08:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fdbcbb02c70ab1d8a043e0702fdefa1e0679250f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:68:3c:78:1a:e6:55:cd:dc:03:7c:1e:ee:ae: 14:66:f7:b1:54:c4:90:65:89:e7:27:76:f7:2f:d5: 63:eb:a8:62:5f:65:f9:60:73:9e:38:2d:26:04:48: d3:3f:e8:09:6f:8a:f9:02:9e:0c:21:62:72:20:ff: 29:22:f0:00:2f:ad:d9:73:55:03:a5:25:f0:f0:bd: 93:83:b8:76:13:ac:da:8c:d2:4e:03:0b:8c:20:a2: 38:90:ad:95:12:ce:a1:c7:f1:83:93:49:3e:02:30: 67:7a:a7:a5:08:b3:87:cf:a5:c9:0c:d6:4d:26:f2: 94:5e:4d:b3:d3:d9:45:13:26:95:91:80:72:85:66: 1a:b3:ec:88:ff:70:89:f0:77:05:3e:f6:ee:a0:16: 07:c4:4b:67:c7:d7:a8:3f:ec:a4:29:68:6e:41:23: 5c:de:bb:63:e2:2b:68:68:35:6b:8a:aa:88:4c:b4: 15:c6:70:f3:68:b7:03:45:6a:a2:6a:71:b1:c7:5f: 91:7b:6f:08:39:b2:f7:e6:56:37:c5:f5:b9:cb:e3: 9f:92:7d:4b:0d:28:60:ba:31:5c:ae:eb:30:0d:37: 32:45:3e:7d:50:01:ad:dc:c4:de:9c:d0:e5:32:e7: 1e:66:4b:0b:b5:51:55:6b:2a:43:fa:aa:24:f7:5e: 2c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:BC:BB:02:C7:0A:B1:D8:A0:43:E0:70:2F:DE:FA:1E:06:79:25:0F X509v3 Authority Key Identifier: keyid:B0:61:BD:3C:CA:3D:33:64:5A:27:6E:0F:32:24:FF:89:EE:E4:48:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sGG9PMo9M2RaJ24PMiT_ie7kSFc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/_by7AscKsdigQ-BwL976HgZ5JQ8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.30.110.0/24 Signature Algorithm: sha256WithRSAEncryption 86:7f:4a:2f:31:b4:37:58:83:36:de:ea:b1:7a:fc:14:62:af: f9:6d:98:b4:86:84:c2:ed:92:47:ab:79:fb:8f:b5:ff:bb:fe: 8a:ba:6f:40:24:1e:e7:9e:85:9b:70:d3:fa:26:8c:c5:db:e0: 88:2a:ec:0e:4f:28:c0:74:db:15:29:ef:2b:d6:d7:39:91:60: 33:f6:16:e3:d5:c7:de:5b:da:4d:47:40:dd:52:2f:e9:18:ea: 93:dc:b9:0f:31:35:bd:ef:97:b6:24:e3:37:5c:76:e1:fb:6e: 0c:27:fb:a3:36:d1:19:72:67:6c:df:39:81:1c:f1:c1:d9:34: 38:2a:38:13:e2:64:10:e1:4e:16:88:75:fd:50:a7:a0:e7:4e: 6e:27:a2:86:bd:ae:70:30:3a:bc:4a:f8:35:80:8d:a8:6e:90: c7:83:c2:41:3b:86:1a:62:d5:be:57:7e:f5:81:cb:86:c8:09: 84:73:db:be:0f:53:1d:28:ae:f2:c9:89:c6:6c:65:ab:f7:e9: 98:ba:35:58:08:9e:df:37:4e:bc:35:24:8d:86:e4:ce:bb:90: d2:54:b1:24:c5:9b:09:e7:7c:b3:b5:2d:20:57:f5:4b:d1:78: 94:5c:77:18:ef:e7:4c:fd:3e:9b:75:7c:ae:f4:cb:1e:c4:70: 06:1e:c1:3e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o3Z8t4pyS8OnOX1fmozcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwNjFiZDNjY2EzZDMzNjQ1YTI3NmUwZjMyMjRmZjg5ZWVl NDQ4NTcwHhcNMjYwMTAxMDgxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZGJjYmIwMmM3MGFiMWQ4YTA0M2UwNzAyZmRlZmExZTA2NzkyNTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWg8eBrmVc3cA3we7q4UZvexVMSQ ZYnnJ3b3L9Vj66hiX2X5YHOeOC0mBEjTP+gJb4r5Ap4MIWJyIP8pIvAAL63Zc1UD pSXw8L2Tg7h2E6zajNJOAwuMIKI4kK2VEs6hx/GDk0k+AjBneqelCLOHz6XJDNZN JvKUXk2z09lFEyaVkYByhWYas+yI/3CJ8HcFPvbuoBYHxEtnx9eoP+ykKWhuQSNc 3rtj4itoaDVriqqITLQVxnDzaLcDRWqianGxx1+Re28IObL35lY3xfW5y+Ofkn1L DShgujFcruswDTcyRT59UAGt3MTenNDlMuceZksLtVFVaypD+qok914srwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP28uwLHCrHYoEPgcC/e+h4GeSUPMB8GA1UdIwQY MBaAFLBhvTzKPTNkWiduDzIk/4nu5EhXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0dHOVBNbzlNMlJhSjI0UE1pVF9pZTdrU0ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS82NTc1MzMtMTFlYy00ODRiLWJlNmEt MzJmZGEzMTE4NmVmLzEvX2J5N0FzY0tzZGlnUS1Cd0w5NzZIZ1o1SlE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS82NTc1MzMtMTFlYy00ODRiLWJlNmEtMzJmZGEzMTE4NmVm LzEvc0dHOVBNbzlNMlJhSjI0UE1pVF9pZTdrU0ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUR5uMA0G CSqGSIb3DQEBCwUAA4IBAQCGf0ovMbQ3WIM23uqxevwUYq/5bZi0hoTC7ZJHq3n7 j7X/u/6Kum9AJB7nnoWbcNP6JozF2+CIKuwOTyjAdNsVKe8r1tc5kWAz9hbj1cfe W9pNR0DdUi/pGOqT3LkPMTW975e2JOM3XHbh+24MJ/ujNtEZcmds3zmBHPHB2TQ4 KjgT4mQQ4U4WiHX9UKeg505uJ6KGva5wMDq8Svg1gI2obpDHg8JBO4YaYtW+V371 gcuGyAmEc9u+D1MdKK7yyYnGbGWr9+mYujVYCJ7fN068NSSNhuTOu5DSVLEkxZsJ 53yztS0gV/VL0XiUXHcY7+dM/T6bdXyu9MsexHAGHsE+ -----END CERTIFICATE-----Generated at Mon Feb 9 23:56:08 2026 by rpki-client