This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/sRYXppUiSNJrW5d1MVXqJ1v0U0g.roa File: sRYXppUiSNJrW5d1MVXqJ1v0U0g.roa (raw, json) Hash identifier: e8cW0JrKBdNEagEPQSlGciScba5vYX0jEPFos43/Uno= Subject key identifier: B1:16:17:A6:95:22:48:D2:6B:5B:97:75:31:55:EA:27:5B:F4:53:48 Certificate issuer: /CN=7741d13a15a987dd60019c0265d2ecec4840944a Certificate serial: 019B7835006E24979B04C28B200270187F5D Authority key identifier: 77:41:D1:3A:15:A9:87:DD:60:01:9C:02:65:D2:EC:EC:48:40:94:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d0HROhWph91gAZwCZdLs7EhAlEo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/sRYXppUiSNJrW5d1MVXqJ1v0U0g.roa Signing time: Thu 01 Jan 2026 06:18:18 +0000 ROA not before: Thu 01 Jan 2026 06:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 81.161.62.0/24 maxlen: 24 91.227.193.0/24 maxlen: 24 194.34.104.0/24 maxlen: 24 2a01:fd40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/d0HROhWph91gAZwCZdLs7EhAlEo.crl rsync://rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/d0HROhWph91gAZwCZdLs7EhAlEo.mft rsync://rpki.ripe.net/repository/DEFAULT/d0HROhWph91gAZwCZdLs7EhAlEo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 00:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:00:6e:24:97:9b:04:c2:8b:20:02:70:18:7f:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7741d13a15a987dd60019c0265d2ecec4840944a Validity Not Before: Jan 1 06:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b11617a6952248d26b5b97753155ea275bf45348 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:31:6f:6b:7d:1e:27:ee:65:67:60:a2:e7:04: 8f:13:ff:44:bb:c1:fb:72:5d:c6:38:14:8a:ba:4c: 35:3e:95:c7:32:65:5a:3c:53:14:b0:61:e9:6b:de: e5:3d:de:9b:a9:28:d6:89:d4:64:38:cc:26:cc:f8: 58:f2:c5:83:de:66:60:c6:bf:34:e9:2b:80:7f:d3: b7:e5:49:ce:ba:7f:88:84:ed:07:24:31:73:52:cb: 1e:05:f8:ac:eb:32:46:69:13:26:e4:8a:b1:5a:56: 4a:b7:97:4f:aa:2c:e4:a9:59:7f:0a:00:49:74:48: c0:8e:87:c2:12:51:71:b0:7b:2c:29:42:3c:5b:4b: 05:32:8f:22:f9:15:9c:67:b9:cf:a6:ab:07:5c:4e: 5b:bc:02:1f:14:34:64:84:42:b1:4c:d4:43:ca:59: 1d:72:e8:80:7c:66:bb:d1:49:82:33:bf:ad:cf:9d: 48:b0:77:73:9c:17:7f:0b:02:b7:dc:a6:09:46:da: 56:22:8e:d8:b8:4d:2b:3a:28:f7:73:ce:e0:74:45: d4:99:b6:e6:dd:d4:8f:d1:17:da:76:d3:97:fe:20: 96:3a:9d:19:72:32:5c:c0:02:f5:ad:3a:42:54:66: e8:e7:a3:a3:ea:dd:e2:8e:24:d8:77:31:7a:1e:e2: 81:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:16:17:A6:95:22:48:D2:6B:5B:97:75:31:55:EA:27:5B:F4:53:48 X509v3 Authority Key Identifier: keyid:77:41:D1:3A:15:A9:87:DD:60:01:9C:02:65:D2:EC:EC:48:40:94:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0HROhWph91gAZwCZdLs7EhAlEo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/sRYXppUiSNJrW5d1MVXqJ1v0U0g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/d0HROhWph91gAZwCZdLs7EhAlEo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.161.62.0/24 91.227.193.0/24 194.34.104.0/24 IPv6: 2a01:fd40::/32 Signature Algorithm: sha256WithRSAEncryption c6:9b:3e:1d:bc:66:a1:e8:f4:e4:5b:2a:dd:cb:67:c9:dd:cf: bb:5d:87:65:25:6d:d5:05:a3:dd:6c:4f:a5:96:a0:93:ef:d4: 5d:d0:4c:42:da:e9:11:55:0f:53:a7:5d:b7:29:6a:dc:c3:b6: 55:1f:3c:24:6f:bb:3d:5c:49:b3:a3:6e:05:75:54:a9:2c:b0: 73:46:1f:82:c3:36:43:4b:8c:10:27:17:09:39:8a:55:aa:ad: 72:df:72:00:52:a4:62:0d:7b:7b:06:d8:08:68:be:57:fc:b9: c8:0e:7f:15:93:cf:4d:22:05:e9:66:da:5a:a7:93:dd:01:a3: 62:6e:05:5b:a6:90:00:d3:be:20:03:15:47:d9:d5:7c:46:e5: 81:6a:20:52:a5:d4:93:af:c2:b9:f6:c5:4e:7f:9c:fa:ba:d0: 84:54:04:35:21:b2:b3:5d:2a:03:7b:73:ec:f5:fd:00:49:8b: e4:db:65:3a:cc:6d:b2:c9:52:3f:bd:16:29:95:a4:22:21:6a: 6b:23:40:5b:e4:81:69:81:2c:d3:97:0c:3d:c7:38:2e:30:23: dd:4a:7e:e6:94:c7:f3:4c:20:35:6f:62:bb:5f:e9:b7:cf:62: 53:da:ba:28:84:c0:a1:db:20:3a:26:f7:fc:98:30:f4:79:31: 24:3d:2b:7d -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt4NQBuJJebBMKLIAJwGH9dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3NDFkMTNhMTVhOTg3ZGQ2MDAxOWMwMjY1ZDJlY2VjNDg0 MDk0NGEwHhcNMjYwMTAxMDYxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTE2MTdhNjk1MjI0OGQyNmI1Yjk3NzUzMTU1ZWEyNzViZjQ1MzQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjFva30eJ+5lZ2Ci5wSPE/9Eu8H7 cl3GOBSKukw1PpXHMmVaPFMUsGHpa97lPd6bqSjWidRkOMwmzPhY8sWD3mZgxr80 6SuAf9O35UnOun+IhO0HJDFzUsseBfis6zJGaRMm5IqxWlZKt5dPqizkqVl/CgBJ dEjAjofCElFxsHssKUI8W0sFMo8i+RWcZ7nPpqsHXE5bvAIfFDRkhEKxTNRDylkd cuiAfGa70UmCM7+tz51IsHdznBd/CwK33KYJRtpWIo7YuE0rOij3c87gdEXUmbbm 3dSP0RfadtOX/iCWOp0ZcjJcwAL1rTpCVGbo56Oj6t3ijiTYdzF6HuKBgQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFLEWF6aVIkjSa1uXdTFV6idb9FNIMB8GA1UdIwQY MBaAFHdB0ToVqYfdYAGcAmXS7OxIQJRKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDBIUk9oV3BoOTFnQVp3Q1pkTHM3RWhBbEVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8wYmU5ZDAtOTk5YS00NDlhLTg1MTkt MzUyM2UzMDMwYmU0LzEvc1JZWHBwVWlTTkpyVzVkMU1WWHFKMXYwVTBnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My8wYmU5ZDAtOTk5YS00NDlhLTg1MTktMzUyM2UzMDMwYmU0 LzEvZDBIUk9oV3BoOTFnQVp3Q1pkTHM3RWhBbEVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAUaE+AwQA W+PBAwQAwiJoMA0EAgACMAcDBQAqAf1AMA0GCSqGSIb3DQEBCwUAA4IBAQDGmz4d vGah6PTkWyrdy2fJ3c+7XYdlJW3VBaPdbE+llqCT79Rd0ExC2ukRVQ9Tp123KWrc w7ZVHzwkb7s9XEmzo24FdVSpLLBzRh+CwzZDS4wQJxcJOYpVqq1y33IAUqRiDXt7 BtgIaL5X/LnIDn8Vk89NIgXpZtpap5PdAaNibgVbppAA074gAxVH2dV8RuWBaiBS pdSTr8K59sVOf5z6utCEVAQ1IbKzXSoDe3Ps9f0ASYvk22U6zG2yyVI/vRYplaQi IWprI0Bb5IFpgSzTlww9xzguMCPdSn7mlMfzTCA1b2K7X+m3z2JT2roohMCh2yA6 Jvf8mDD0eTEkPSt9 -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:10 2026 by rpki-client