This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/k87TUd7a1kuOcniBzYfnlX8a-W4.roa File: k87TUd7a1kuOcniBzYfnlX8a-W4.roa (raw, json) Hash identifier: cKelYB7nuRbmwJFd5LKfRP7a7BoXOJMN2zYhG4umK0g= Subject key identifier: 93:CE:D3:51:DE:DA:D6:4B:8E:72:78:81:CD:87:E7:95:7F:1A:F9:6E Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7 Certificate serial: 019B7CEDE2B52C205386AA6BF3950988BBBB Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/k87TUd7a1kuOcniBzYfnlX8a-W4.roa Signing time: Fri 02 Jan 2026 04:18:43 +0000 ROA not before: Fri 02 Jan 2026 04:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61317 IP address blocks: 81.21.0.0/24 maxlen: 24 176.57.48.0/24 maxlen: 24 176.57.54.0/24 maxlen: 24 176.57.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:e2:b5:2c:20:53:86:aa:6b:f3:95:09:88:bb:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7 Validity Not Before: Jan 2 04:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=93ced351dedad64b8e727881cd87e7957f1af96e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:36:60:a5:21:ef:06:b9:02:4b:e8:c7:f3:2c: db:e0:04:36:e8:a4:c7:be:c2:c3:fa:4e:fe:ee:ed: 8b:42:a4:6e:84:96:b8:d8:8a:a7:12:20:64:c4:9d: 03:f5:fd:42:11:a3:f8:db:aa:07:08:89:3a:7c:ef: 26:28:2b:1a:ce:e1:40:9e:21:e4:42:bf:4e:0e:47: 61:19:aa:61:b9:6a:58:94:0f:3a:b4:64:34:b4:c7: 7f:2e:71:86:96:6c:22:a6:8b:8d:ef:46:f5:4f:bb: 4b:c4:53:6b:5b:a5:a1:69:5d:4c:bf:2a:88:36:45: 2b:5a:53:31:0a:26:a0:28:0e:2a:8c:1e:5b:2f:5d: b3:72:99:af:2e:0c:1d:e8:fd:fb:5c:7e:39:3b:f5: e9:3d:16:86:e5:2a:32:e0:52:88:b8:f1:bb:33:9f: 98:2b:c6:ba:fb:33:0d:e5:c7:c6:0e:ba:b4:44:1f: e4:e6:d6:a6:76:76:0c:bc:c7:49:f7:1b:4e:ce:d6: b4:32:97:e2:8a:ae:d5:e5:23:bd:c3:4e:d9:91:4a: 97:85:e9:58:8a:cb:5f:40:6b:4a:e8:9e:d8:82:50: 68:f0:69:13:74:82:09:52:66:04:10:4e:ab:d5:4b: 4b:02:6a:7e:68:85:c9:7d:ec:44:b8:7e:b0:b9:82: b8:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:CE:D3:51:DE:DA:D6:4B:8E:72:78:81:CD:87:E7:95:7F:1A:F9:6E X509v3 Authority Key Identifier: keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/k87TUd7a1kuOcniBzYfnlX8a-W4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.21.0.0/24 176.57.48.0/24 176.57.54.0/24 176.57.60.0/24 Signature Algorithm: sha256WithRSAEncryption 81:e4:26:71:23:cb:f7:08:6e:c3:09:f5:b9:76:07:25:5e:b8: 67:9b:1f:b3:8f:23:5e:94:45:3b:64:7e:6b:b9:2b:dc:49:14: b3:3d:08:7e:b5:e9:ba:00:cd:cd:4d:57:6e:fd:9a:9c:1d:68: fb:76:86:48:ef:17:e2:36:cb:31:6f:26:e1:a6:2a:6b:6a:14: 57:96:54:45:a7:ca:b3:bb:3d:90:39:b8:3c:be:dd:6a:ff:53: a8:4d:73:9b:3b:27:dc:dc:fa:42:7d:91:6b:f9:60:80:ff:be: 28:c7:cf:70:70:0b:29:f0:06:8a:6c:48:7a:82:dc:83:06:be: 3f:51:4e:68:b0:55:2b:f5:88:cf:40:bd:b2:9b:7b:31:4b:e7: 25:e9:ed:cc:57:97:58:4a:4c:e2:ef:a5:23:59:bd:eb:e9:8e: 4b:f8:9f:80:43:5d:25:3b:18:59:48:cc:e8:8a:cb:4f:c2:29: 85:61:97:b8:71:86:de:30:89:0a:37:24:fc:66:05:bc:64:01: 52:db:62:8e:44:97:80:92:ab:7b:93:07:80:db:0f:99:dd:e1: cb:ca:4a:70:1b:f1:ed:e9:e9:a7:4e:1d:c8:29:3c:bb:e6:53: 54:bf:cb:78:0e:44:ae:a8:32:e7:42:05:11:b2:bf:71:4b:02: cc:72:f3:7a -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt87eK1LCBThqpr85UJiLu7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl ZTQ2ZDcwHhcNMjYwMTAyMDQxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5M2NlZDM1MWRlZGFkNjRiOGU3Mjc4ODFjZDg3ZTc5NTdmMWFmOTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzZgpSHvBrkCS+jH8yzb4AQ26KTH vsLD+k7+7u2LQqRuhJa42IqnEiBkxJ0D9f1CEaP426oHCIk6fO8mKCsazuFAniHk Qr9ODkdhGaphuWpYlA86tGQ0tMd/LnGGlmwipouN70b1T7tLxFNrW6WhaV1MvyqI NkUrWlMxCiagKA4qjB5bL12zcpmvLgwd6P37XH45O/XpPRaG5Soy4FKIuPG7M5+Y K8a6+zMN5cfGDrq0RB/k5tamdnYMvMdJ9xtOzta0Mpfiiq7V5SO9w07ZkUqXhelY istfQGtK6J7YglBo8GkTdIIJUmYEEE6r1UtLAmp+aIXJfexEuH6wuYK4HQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFJPO01He2tZLjnJ4gc2H55V/GvluMB8GA1UdIwQY MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt NTYyNDRmNDMwZGNjLzEvazg3VFVkN2Exa3VPY25pQnpZZm5sWDhhLVc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAURUAAwQA sDkwAwQAsDk2AwQAsDk8MA0GCSqGSIb3DQEBCwUAA4IBAQCB5CZxI8v3CG7DCfW5 dgclXrhnmx+zjyNelEU7ZH5ruSvcSRSzPQh+tem6AM3NTVdu/ZqcHWj7doZI7xfi NssxbybhpiprahRXllRFp8qzuz2QObg8vt1q/1OoTXObOyfc3PpCfZFr+WCA/74o x89wcAsp8AaKbEh6gtyDBr4/UU5osFUr9YjPQL2ym3sxS+cl6e3MV5dYSkzi76Uj Wb3r6Y5L+J+AQ10lOxhZSMzoistPwimFYZe4cYbeMIkKNyT8ZgW8ZAFS22KORJeA kqt7kweA2w+Z3eHLykpwG/Ht6emnTh3IKTy75lNUv8t4DkSuqDLnQgURsr9xSwLM cvN6 -----END CERTIFICATE-----Generated at Fri Jan 2 17:57:07 2026 by rpki-client