This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/sOZAQKDJ6_4Z9N3yUIJGTBa92hI.roa File: sOZAQKDJ6_4Z9N3yUIJGTBa92hI.roa (raw, json) Hash identifier: TYha/rKs1ePCSrjre9LK7iVoQd2uvPGLNTbl1Ahn9QU= Subject key identifier: B0:E6:40:40:A0:C9:EB:FE:19:F4:DD:F2:50:82:46:4C:16:BD:DA:12 Certificate issuer: /CN=ce7fdff480bb90dd8b26d282309af160455ecb0b Certificate serial: 019B7A59BE3BC103AF006B3D722442C22FAD Authority key identifier: CE:7F:DF:F4:80:BB:90:DD:8B:26:D2:82:30:9A:F1:60:45:5E:CB:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zn_f9IC7kN2LJtKCMJrxYEVeyws.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/sOZAQKDJ6_4Z9N3yUIJGTBa92hI.roa Signing time: Thu 01 Jan 2026 16:17:40 +0000 ROA not before: Thu 01 Jan 2026 16:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198059 IP address blocks: 81.30.96.0/24 maxlen: 24 2a10:8540::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/zn_f9IC7kN2LJtKCMJrxYEVeyws.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/zn_f9IC7kN2LJtKCMJrxYEVeyws.mft rsync://rpki.ripe.net/repository/DEFAULT/zn_f9IC7kN2LJtKCMJrxYEVeyws.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:59:be:3b:c1:03:af:00:6b:3d:72:24:42:c2:2f:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce7fdff480bb90dd8b26d282309af160455ecb0b Validity Not Before: Jan 1 16:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b0e64040a0c9ebfe19f4ddf25082464c16bdda12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:82:b1:41:5f:43:ed:57:f7:2f:a3:4f:b0:b8: ae:d4:03:1a:c1:b5:f0:98:f4:3b:5b:3c:3a:e1:ca: 4b:ba:52:58:e1:51:83:58:24:fe:bc:98:af:b9:34: a8:19:59:10:df:39:e1:2c:b7:32:bb:56:6c:7b:2b: 65:f5:d7:82:f0:1e:23:c1:b4:80:d7:c7:b9:a0:94: ed:b5:f2:1d:86:f9:12:7b:6b:15:1a:ac:62:7a:03: 5e:a1:84:f9:1d:3d:8c:a5:fa:28:5e:aa:ac:d3:8b: a2:9f:2a:a2:f3:8e:d8:de:f5:19:96:98:a0:b8:b0: 9a:dd:90:4d:24:35:e1:e6:78:75:d2:83:a1:ab:dd: f5:f4:67:80:1f:99:d5:70:e9:28:ce:05:c5:ce:d5: 24:c4:2e:c8:ea:ed:f1:7f:03:51:94:7b:d6:48:6e: 52:49:6a:0e:22:ee:2c:6e:5d:cb:ed:50:51:37:0b: b4:a2:e9:9d:9c:54:d9:79:31:8c:e7:9e:d6:22:31: 8e:d2:39:82:64:51:1d:b1:17:23:d7:6d:ad:3d:a0: 3d:88:3c:52:2d:6f:5a:19:24:d3:58:c9:69:92:6d: ff:71:79:b8:73:88:e6:fb:8a:2f:e0:7a:7d:15:64: 27:37:dd:f6:3e:19:b6:09:4f:c6:78:1f:60:19:be: b0:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:E6:40:40:A0:C9:EB:FE:19:F4:DD:F2:50:82:46:4C:16:BD:DA:12 X509v3 Authority Key Identifier: keyid:CE:7F:DF:F4:80:BB:90:DD:8B:26:D2:82:30:9A:F1:60:45:5E:CB:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zn_f9IC7kN2LJtKCMJrxYEVeyws.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/sOZAQKDJ6_4Z9N3yUIJGTBa92hI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/zn_f9IC7kN2LJtKCMJrxYEVeyws.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.30.96.0/24 IPv6: 2a10:8540::/29 Signature Algorithm: sha256WithRSAEncryption 4c:ce:40:4e:70:26:26:d5:e0:12:49:3a:d1:43:ed:b6:3e:74: 23:fa:8c:e4:e2:e9:56:b3:f6:d6:97:e1:27:6d:e1:c4:3a:47: b3:bb:ee:26:de:bc:2f:c2:2a:a4:43:2d:63:5d:e6:22:86:88: 4a:75:6e:ca:20:09:5d:21:c8:96:06:f5:77:58:b8:f8:0d:a1: 46:a7:ac:ea:e8:93:26:3d:d0:4c:56:79:f9:ce:f8:5c:a4:13: 8a:28:ef:2e:35:4e:0d:6c:30:e8:8f:4e:68:5e:ea:52:09:c4: a4:3e:f2:a3:58:90:5a:5c:bb:04:8b:ee:67:c5:40:0f:16:d2: 17:b7:bc:bd:da:e0:01:89:29:8b:2b:60:3b:02:54:5d:13:65: 25:cb:a6:eb:5b:d5:7e:1a:81:d2:ba:0c:be:87:8d:b1:6b:a2: 9f:c5:9c:b9:7a:3e:27:3a:ec:d3:d7:55:0d:37:95:48:18:88: 4e:21:b2:0b:f7:73:b7:73:25:ad:09:f4:20:ee:06:46:13:4b: d5:65:45:d8:aa:59:dc:c5:a9:52:87:8a:4d:94:f9:c2:69:5d: f5:1d:ee:32:2a:f4:6d:10:1f:c7:78:cb:fa:d9:a0:23:04:bb: 7f:e2:24:ac:e9:5c:9e:1f:19:05:89:02:1a:1a:cb:25:85:6d: 96:66:fc:19 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6Wb47wQOvAGs9ciRCwi+tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlN2ZkZmY0ODBiYjkwZGQ4YjI2ZDI4MjMwOWFmMTYwNDU1 ZWNiMGIwHhcNMjYwMTAxMTYxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMGU2NDA0MGEwYzllYmZlMTlmNGRkZjI1MDgyNDY0YzE2YmRkYTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3IKxQV9D7Vf3L6NPsLiu1AMawbXw mPQ7Wzw64cpLulJY4VGDWCT+vJivuTSoGVkQ3znhLLcyu1Zseytl9deC8B4jwbSA 18e5oJTttfIdhvkSe2sVGqxiegNeoYT5HT2MpfooXqqs04uinyqi847Y3vUZlpig uLCa3ZBNJDXh5nh10oOhq9319GeAH5nVcOkozgXFztUkxC7I6u3xfwNRlHvWSG5S SWoOIu4sbl3L7VBRNwu0oumdnFTZeTGM557WIjGO0jmCZFEdsRcj122tPaA9iDxS LW9aGSTTWMlpkm3/cXm4c4jm+4ov4Hp9FWQnN932Phm2CU/GeB9gGb6wsQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFLDmQECgyev+GfTd8lCCRkwWvdoSMB8GA1UdIwQY MBaAFM5/3/SAu5DdiybSgjCa8WBFXssLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvem5fZjlJQzdrTjJMSnRLQ01KcnhZRVZleXdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi81Y2UwM2ItY2QyYy00NDFhLWJjZWMt ZTEyZDE2ZjQ0MTUzLzEvc09aQVFLREo2XzRaOU4zeVVJSkdUQmE5MmhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi81Y2UwM2ItY2QyYy00NDFhLWJjZWMtZTEyZDE2ZjQ0MTUz LzEvem5fZjlJQzdrTjJMSnRLQ01KcnhZRVZleXdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAUR5gMA0E AgACMAcDBQMqEIVAMA0GCSqGSIb3DQEBCwUAA4IBAQBMzkBOcCYm1eASSTrRQ+22 PnQj+ozk4ulWs/bWl+EnbeHEOkezu+4m3rwvwiqkQy1jXeYihohKdW7KIAldIciW BvV3WLj4DaFGp6zq6JMmPdBMVnn5zvhcpBOKKO8uNU4NbDDoj05oXupSCcSkPvKj WJBaXLsEi+5nxUAPFtIXt7y92uABiSmLK2A7AlRdE2Uly6brW9V+GoHSugy+h42x a6KfxZy5ej4nOuzT11UNN5VIGIhOIbIL93O3cyWtCfQg7gZGE0vVZUXYqlncxalS h4pNlPnCaV31He4yKvRtEB/HeMv62aAjBLt/4iSs6VyeHxkFiQIaGsslhW2WZvwZ -----END CERTIFICATE-----Generated at Tue Feb 10 02:28:27 2026 by rpki-client