This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/dM9zh5E81r9UWVSK8u7mzgQlyvU.roa File: dM9zh5E81r9UWVSK8u7mzgQlyvU.roa (raw, json) Hash identifier: aq1TqgSAbBjOuDN0o6DtvSCaK7Bm/i/PBbH93DWX1FE= Subject key identifier: 74:CF:73:87:91:3C:D6:BF:54:59:54:8A:F2:EE:E6:CE:04:25:CA:F5 Certificate issuer: /CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426 Certificate serial: 019B7D5B3FD3F66BC8A6766A23F9A8F86CA1 Authority key identifier: 81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/dM9zh5E81r9UWVSK8u7mzgQlyvU.roa Signing time: Fri 02 Jan 2026 06:18:10 +0000 ROA not before: Fri 02 Jan 2026 06:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 5.181.166.0/24 maxlen: 24 45.81.148.0/24 maxlen: 24 185.229.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 13:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:3f:d3:f6:6b:c8:a6:76:6a:23:f9:a8:f8:6c:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426 Validity Not Before: Jan 2 06:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=74cf7387913cd6bf5459548af2eee6ce0425caf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4a:67:29:1a:a2:8b:06:9b:49:fd:01:c9:7a: ab:71:46:1c:a2:b3:c4:8a:f1:1d:88:cc:62:e4:99: 94:15:d2:ce:44:d4:35:77:4d:8d:12:6b:f5:d7:80: 43:22:68:a1:69:f0:a4:85:3a:f2:3f:96:c0:17:82: cb:03:f1:1a:fc:e2:5b:19:76:71:67:fc:8b:fc:0d: 38:87:2a:91:96:f1:6f:99:a5:90:8d:df:67:83:74: 39:7f:84:a9:51:2f:b5:91:d2:20:22:31:9e:97:d2: 65:af:16:38:3c:25:60:5f:f8:4b:8c:37:c0:9e:f7: a5:4f:08:8c:17:12:aa:0f:96:61:af:14:6a:49:e4: ab:00:7b:b6:e2:5a:be:d6:f2:58:f5:be:77:bf:2d: 35:7e:0f:73:b9:21:1d:92:22:b9:05:bc:79:d5:79: 14:da:a6:34:bf:a9:bd:e5:79:37:f1:fb:a5:76:11: 7c:46:49:c5:ab:46:e4:a7:a7:b9:03:77:aa:b7:c2: 47:96:2a:a2:80:a0:2e:6c:b5:50:ff:f8:6e:fe:62: b5:00:f5:1a:f3:8c:98:01:06:6f:93:04:8f:60:53: 1e:19:cf:78:da:4a:9f:17:33:d9:e8:de:9c:24:e2: 66:b0:d4:d9:f1:c8:a2:7a:da:b3:82:f1:75:d6:9b: e8:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:CF:73:87:91:3C:D6:BF:54:59:54:8A:F2:EE:E6:CE:04:25:CA:F5 X509v3 Authority Key Identifier: keyid:81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/dM9zh5E81r9UWVSK8u7mzgQlyvU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.181.166.0/24 45.81.148.0/24 185.229.243.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:1c:78:18:48:f2:15:ff:95:c1:d8:6b:d1:79:4e:78:30:fc: 43:12:81:9b:8a:74:53:98:89:50:ce:03:85:8a:2f:04:6e:bf: 17:b7:ff:e6:49:ae:d7:d3:fc:e9:fb:74:c5:c7:7e:3d:e7:35: 68:dd:65:0e:ff:07:f7:42:dd:64:4a:73:18:da:0b:92:69:e6: f2:cb:74:14:59:de:1d:f7:64:0a:d8:fd:b0:48:fc:d5:36:03: a1:34:25:bd:6f:3b:ba:b6:0b:6e:0e:17:07:4f:e1:67:9d:bb: ab:47:39:96:05:2f:59:b5:d7:4f:5f:d6:8d:75:4b:05:73:cc: 56:05:e7:ef:ce:c4:9d:e8:cb:4b:2c:1a:fe:13:1b:c6:be:f8: ca:ae:bc:0c:62:c1:7d:0a:3b:50:4b:ff:43:ad:58:f5:78:37: c7:86:4b:7c:16:e7:46:3a:1d:b6:56:58:2c:dc:4a:3f:e7:8e: db:05:b5:94:e4:f1:64:ac:d8:2d:a5:58:8e:e7:8c:92:8a:08: 0d:66:e6:0d:49:37:42:50:93:09:ea:b1:db:6e:eb:8e:62:a2: a3:56:cc:6e:c0:ac:83:c5:46:85:9f:f3:df:42:bc:82:12:a7: ca:5a:9b:bc:d1:46:5a:27:12:0d:de:be:a7:c3:78:1b:ae:e6: 81:48:ed:8a -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9Wz/T9mvIpnZqI/mo+GyhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxYzhiNzNhYjdiZGViNzZmZjQ4YjJjYTA5OTYxNmVkYmU3 MWM0MjYwHhcNMjYwMTAyMDYxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NGNmNzM4NzkxM2NkNmJmNTQ1OTU0OGFmMmVlZTZjZTA0MjVjYWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEpnKRqiiwabSf0ByXqrcUYcorPE ivEdiMxi5JmUFdLORNQ1d02NEmv114BDImihafCkhTryP5bAF4LLA/Ea/OJbGXZx Z/yL/A04hyqRlvFvmaWQjd9ng3Q5f4SpUS+1kdIgIjGel9JlrxY4PCVgX/hLjDfA nvelTwiMFxKqD5ZhrxRqSeSrAHu24lq+1vJY9b53vy01fg9zuSEdkiK5Bbx51XkU 2qY0v6m95Xk38fuldhF8RknFq0bkp6e5A3eqt8JHliqigKAubLVQ//hu/mK1APUa 84yYAQZvkwSPYFMeGc942kqfFzPZ6N6cJOJmsNTZ8ciietqzgvF11pvoPQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFHTPc4eRPNa/VFlUivLu5s4EJcr1MB8GA1UdIwQY MBaAFIHItzq3vet2/0iyygmWFu2+ccQmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2NpM09yZTk2M2JfU0xMS0NaWVc3YjV4eENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8yMDc5MzQtOWVkYy00YTg5LTgyMGUt ZDg0ODhiM2FiNDJmLzEvZE05emg1RTgxcjlVV1ZTSzh1N216Z1FseXZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8yMDc5MzQtOWVkYy00YTg5LTgyMGUtZDg0ODhiM2FiNDJm LzEvZ2NpM09yZTk2M2JfU0xMS0NaWVc3YjV4eENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABbWmAwQA LVGUAwQAueXzMA0GCSqGSIb3DQEBCwUAA4IBAQArHHgYSPIV/5XB2GvReU54MPxD EoGbinRTmIlQzgOFii8Ebr8Xt//mSa7X0/zp+3TFx3495zVo3WUO/wf3Qt1kSnMY 2guSaebyy3QUWd4d92QK2P2wSPzVNgOhNCW9bzu6tgtuDhcHT+FnnburRzmWBS9Z tddPX9aNdUsFc8xWBefvzsSd6MtLLBr+ExvGvvjKrrwMYsF9CjtQS/9DrVj1eDfH hkt8FudGOh22Vlgs3Eo/547bBbWU5PFkrNgtpViO54ySiggNZuYNSTdCUJMJ6rHb buuOYqKjVsxuwKyDxUaFn/PfQryCEqfKWpu80UZaJxIN3r6nw3gbruaBSO2K -----END CERTIFICATE-----Generated at Sat Jan 24 21:35:05 2026 by rpki-client