This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/N-vlGE2QYKe6_pkwqZ531Yfln1Q.roa File: N-vlGE2QYKe6_pkwqZ531Yfln1Q.roa (raw, json) Hash identifier: sGu8T41tNOSVcc5nzb27wF7dErBaerBnas+mxrMtsSI= Subject key identifier: 37:EB:E5:18:4D:90:60:A7:BA:FE:99:30:A9:9E:77:D5:87:E5:9F:54 Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47 Certificate serial: 019B7CEE027C6F74B2F86BC364D8F13D22D0 Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/N-vlGE2QYKe6_pkwqZ531Yfln1Q.roa Signing time: Fri 02 Jan 2026 04:18:51 +0000 ROA not before: Fri 02 Jan 2026 04:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49981 IP address blocks: 81.29.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:02:7c:6f:74:b2:f8:6b:c3:64:d8:f1:3d:22:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47 Validity Not Before: Jan 2 04:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=37ebe5184d9060a7bafe9930a99e77d587e59f54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:96:5b:a0:9a:1b:c0:6c:99:40:5f:e2:2c:58: a7:6f:85:47:d5:24:b9:af:5a:34:96:d2:1b:04:2a: cf:81:58:79:65:cc:2b:04:2d:16:19:47:61:25:de: ae:c8:2f:80:65:03:fc:05:26:02:f8:1a:e4:93:87: f5:f2:7e:ab:44:27:72:17:54:7e:a1:35:a1:38:c4: 41:c0:d7:34:dd:90:04:69:16:e3:9d:9e:ee:d1:0b: 2a:2a:2f:4a:cc:85:19:0a:88:9c:3b:f0:f2:a7:3e: 27:28:c7:2d:09:3c:15:ef:ac:06:bc:0f:4e:3c:e0: a6:2d:e2:13:a8:65:de:13:86:95:5b:59:f1:cf:a3: 06:8b:47:c0:e4:0e:6f:e7:42:8c:d6:cb:b8:85:97: 12:6a:bc:d9:cb:9a:aa:39:11:91:95:16:66:19:fc: e7:4f:a2:52:30:a2:77:73:6f:40:80:c4:0b:5b:6a: 61:89:63:bf:be:5a:26:38:23:b5:00:7e:09:f5:8f: eb:df:e1:88:e2:0c:2b:bf:0c:15:c1:70:d9:f8:79: 76:72:2a:3f:c2:05:77:77:d6:54:d9:3a:c3:0c:0e: cc:c8:8b:97:2b:47:b6:c8:7d:05:fa:fe:fb:f8:d9: 93:b9:e6:33:a2:f9:de:11:33:95:83:bf:5d:eb:a5: da:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:EB:E5:18:4D:90:60:A7:BA:FE:99:30:A9:9E:77:D5:87:E5:9F:54 X509v3 Authority Key Identifier: keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/N-vlGE2QYKe6_pkwqZ531Yfln1Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.29.150.0/24 Signature Algorithm: sha256WithRSAEncryption 93:f2:a6:60:7b:f2:ca:a2:b4:62:7d:80:8a:0e:cf:f3:2d:e9: cb:d3:ee:e8:c8:e4:1c:7c:02:b4:7b:c4:90:0c:ee:77:0b:3b: 4f:03:cf:92:bf:a2:70:19:d7:a1:55:1d:10:c1:61:be:d3:74: dd:c3:3c:fb:ee:d9:8d:ff:66:be:2d:9a:b4:ec:d6:5c:ba:0b: 3e:6d:cf:bc:07:d2:7f:e0:bf:27:09:3f:c0:e2:01:2b:6e:54: 54:00:e3:65:19:dd:5e:6f:9a:5b:7e:b3:ad:45:c4:35:a9:b5: bf:24:f0:39:d2:3d:af:b5:a9:dd:67:40:03:07:4a:ad:dc:a3: a3:87:7c:83:f7:42:ca:56:43:84:07:14:ec:b0:58:ca:08:91: 7e:7b:4e:54:8b:57:7b:86:4e:43:a5:90:42:70:17:79:ab:df: 54:32:90:f8:74:8f:b5:29:40:73:04:0e:da:8b:ca:4c:8b:f2: 8d:80:46:4a:00:66:8a:76:12:aa:8a:a2:6a:1e:0c:b2:09:39: 1b:5d:39:0d:20:9a:58:55:38:37:a4:3b:a8:f9:13:14:a9:50: 17:89:7d:44:0c:58:7e:84:aa:63:d1:f3:d9:ef:d2:8a:9f:ad: 82:a4:5d:ea:fe:ca:a0:bc:5c:e8:4b:42:db:7c:62:41:57:d1: b7:8e:66:80 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87gJ8b3Sy+GvDZNjxPSLQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZTUxNjk0YzRkNDZiNGZjYzAyZmFlNzFlNWRiOTQyYTcx MDhlNDcwHhcNMjYwMTAyMDQxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzN2ViZTUxODRkOTA2MGE3YmFmZTk5MzBhOTllNzdkNTg3ZTU5ZjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35ZboJobwGyZQF/iLFinb4VH1SS5 r1o0ltIbBCrPgVh5ZcwrBC0WGUdhJd6uyC+AZQP8BSYC+Brkk4f18n6rRCdyF1R+ oTWhOMRBwNc03ZAEaRbjnZ7u0QsqKi9KzIUZCoicO/Dypz4nKMctCTwV76wGvA9O POCmLeITqGXeE4aVW1nxz6MGi0fA5A5v50KM1su4hZcSarzZy5qqORGRlRZmGfzn T6JSMKJ3c29AgMQLW2phiWO/vlomOCO1AH4J9Y/r3+GI4gwrvwwVwXDZ+Hl2cio/ wgV3d9ZU2TrDDA7MyIuXK0e2yH0F+v77+NmTueYzovneETOVg79d66Xa4wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDfr5RhNkGCnuv6ZMKmed9WH5Z9UMB8GA1UdIwQY MBaAFEnlFpTE1GtPzAL65x5duUKnEI5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQt MTkxODliM2M5YzdkLzEvTi12bEdFMlFZS2U2X3Brd3FaNTMxWWZsbjFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQtMTkxODliM2M5Yzdk LzEvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUR2WMA0G CSqGSIb3DQEBCwUAA4IBAQCT8qZge/LKorRifYCKDs/zLenL0+7oyOQcfAK0e8SQ DO53CztPA8+Sv6JwGdehVR0QwWG+03Tdwzz77tmN/2a+LZq07NZcugs+bc+8B9J/ 4L8nCT/A4gErblRUAONlGd1eb5pbfrOtRcQ1qbW/JPA50j2vtandZ0ADB0qt3KOj h3yD90LKVkOEBxTssFjKCJF+e05Ui1d7hk5DpZBCcBd5q99UMpD4dI+1KUBzBA7a i8pMi/KNgEZKAGaKdhKqiqJqHgyyCTkbXTkNIJpYVTg3pDuo+RMUqVAXiX1EDFh+ hKpj0fPZ79KKn62CpF3q/sqgvFzoS0LbfGJBV9G3jmaA -----END CERTIFICATE-----Generated at Mon Jan 19 17:34:11 2026 by rpki-client