This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/dq4qEueyUAfc-E8DxiI89xN_w1k.roa File: dq4qEueyUAfc-E8DxiI89xN_w1k.roa (raw, json) Hash identifier: +sf512QvwiJKOTL672YwxOgPjvz2CF7Var+rdmwLHoI= Subject key identifier: 76:AE:2A:12:E7:B2:50:07:DC:F8:4F:03:C6:22:3C:F7:13:7F:C3:59 Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47 Certificate serial: 019B7CEE037208FBF67A60F734529044CB2D Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/dq4qEueyUAfc-E8DxiI89xN_w1k.roa Signing time: Fri 02 Jan 2026 04:18:51 +0000 ROA not before: Fri 02 Jan 2026 04:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58061 IP address blocks: 81.29.148.0/24 maxlen: 24 81.29.153.0/24 maxlen: 24 81.29.155.0/24 maxlen: 24 81.29.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 16:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:03:72:08:fb:f6:7a:60:f7:34:52:90:44:cb:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47 Validity Not Before: Jan 2 04:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=76ae2a12e7b25007dcf84f03c6223cf7137fc359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2d:19:88:64:44:90:fb:c0:d7:a5:72:a0:4e: ad:e7:4b:b6:27:19:ca:77:dc:3f:52:fd:b2:06:01: 48:49:cf:72:e4:c4:3a:e3:ce:6f:78:88:a7:05:f8: be:2c:ac:ce:0a:76:c4:a5:1e:58:12:d4:11:4f:6f: a2:b8:d6:6b:f8:9c:ec:45:fc:a2:04:67:1c:cc:32: 36:55:22:ba:09:25:4b:cd:34:55:79:01:e3:15:81: 15:6b:50:b5:13:25:09:c4:35:f9:f6:d5:72:02:02: 4b:c8:8f:14:80:ef:ab:8d:c0:26:27:19:bf:15:37: 4b:f3:09:fa:ad:76:58:2f:bd:96:25:5b:2c:79:c1: cd:46:5d:73:b4:26:0e:0f:66:33:f5:41:be:1f:c6: bb:e8:43:22:bb:a5:fb:32:56:39:66:f9:50:58:19: 7b:45:95:36:da:14:b2:24:85:06:85:e4:ea:2f:95: 5d:4e:ff:88:0a:0d:80:0e:56:22:73:c8:61:7a:25: f7:ff:1e:1d:29:66:01:4e:3c:82:72:09:3a:32:a3: 18:15:75:c9:cc:4f:0c:33:a7:1e:1d:0c:57:1b:2c: 0e:1f:8a:40:5d:c3:41:93:a6:65:db:7f:07:23:7c: fa:f4:e4:23:2b:74:2e:7f:48:0e:47:c0:91:66:f1: 9e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:AE:2A:12:E7:B2:50:07:DC:F8:4F:03:C6:22:3C:F7:13:7F:C3:59 X509v3 Authority Key Identifier: keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/dq4qEueyUAfc-E8DxiI89xN_w1k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.29.148.0/24 81.29.153.0/24 81.29.155.0/24 81.29.159.0/24 Signature Algorithm: sha256WithRSAEncryption 10:8d:38:6a:06:ef:b5:a7:fb:c9:4e:1f:f3:94:9c:87:7f:1a: 58:68:d6:45:51:94:67:c6:ae:c5:ef:42:69:4a:3c:9c:5c:f9: 42:13:f7:88:5d:48:2c:7d:8c:16:90:34:4a:6d:05:d5:78:15: 3e:73:b7:c7:a2:5d:65:3c:64:d0:bf:f5:58:03:e6:76:d3:35: 92:59:1b:74:c9:0e:42:98:28:5b:8e:99:de:b2:4b:df:63:6d: bc:c5:ed:2d:0f:bb:03:e2:16:f8:84:a7:ce:06:72:d1:7c:69: 08:a9:7b:f8:9f:26:cb:b3:ee:20:8a:d7:9c:f9:aa:0d:c5:62: 63:dd:06:30:85:42:ac:7e:ae:e8:ab:6c:14:58:81:9d:db:18: ad:92:db:1a:06:db:f7:10:ac:15:6b:9c:1e:df:99:db:a0:b5: 1c:96:a9:52:74:a3:51:ed:2f:3b:db:d9:8e:3a:31:87:aa:e9: f4:98:59:4e:1c:17:07:ae:8f:7a:25:5e:e1:ba:f2:78:6f:d9: e7:94:d2:a8:bc:10:06:70:d3:20:b1:a3:2c:1e:d0:ff:f3:f8: 3e:d8:e2:ce:df:7b:8f:73:ed:55:70:45:e5:68:3d:c3:eb:86: d8:27:84:64:c4:5a:cf:31:9d:17:a4:81:0a:19:cf:f1:5c:25: 80:56:f4:9a -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt87gNyCPv2emD3NFKQRMstMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZTUxNjk0YzRkNDZiNGZjYzAyZmFlNzFlNWRiOTQyYTcx MDhlNDcwHhcNMjYwMTAyMDQxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NmFlMmExMmU3YjI1MDA3ZGNmODRmMDNjNjIyM2NmNzEzN2ZjMzU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoS0ZiGREkPvA16VyoE6t50u2JxnK d9w/Uv2yBgFISc9y5MQ6485veIinBfi+LKzOCnbEpR5YEtQRT2+iuNZr+JzsRfyi BGcczDI2VSK6CSVLzTRVeQHjFYEVa1C1EyUJxDX59tVyAgJLyI8UgO+rjcAmJxm/ FTdL8wn6rXZYL72WJVssecHNRl1ztCYOD2Yz9UG+H8a76EMiu6X7MlY5ZvlQWBl7 RZU22hSyJIUGheTqL5VdTv+ICg2ADlYic8hheiX3/x4dKWYBTjyCcgk6MqMYFXXJ zE8MM6ceHQxXGywOH4pAXcNBk6Zl238HI3z69OQjK3Quf0gOR8CRZvGejQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFHauKhLnslAH3PhPA8YiPPcTf8NZMB8GA1UdIwQY MBaAFEnlFpTE1GtPzAL65x5duUKnEI5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQt MTkxODliM2M5YzdkLzEvZHE0cUV1ZXlVQWZjLUU4RHhpSTg5eE5fdzFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQtMTkxODliM2M5Yzdk LzEvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAUR2UAwQA UR2ZAwQAUR2bAwQAUR2fMA0GCSqGSIb3DQEBCwUAA4IBAQAQjThqBu+1p/vJTh/z lJyHfxpYaNZFUZRnxq7F70JpSjycXPlCE/eIXUgsfYwWkDRKbQXVeBU+c7fHol1l PGTQv/VYA+Z20zWSWRt0yQ5CmChbjpneskvfY228xe0tD7sD4hb4hKfOBnLRfGkI qXv4nybLs+4gitec+aoNxWJj3QYwhUKsfq7oq2wUWIGd2xitktsaBtv3EKwVa5we 35nboLUclqlSdKNR7S8729mOOjGHqun0mFlOHBcHro96JV7huvJ4b9nnlNKovBAG cNMgsaMsHtD/8/g+2OLO33uPc+1VcEXlaD3D64bYJ4RkxFrPMZ0XpIEKGc/xXCWA VvSa -----END CERTIFICATE-----Generated at Thu Jan 22 21:39:29 2026 by rpki-client