This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/fXgOCRgOegnV1PEEj7p5LXQbx44.roa File: fXgOCRgOegnV1PEEj7p5LXQbx44.roa (raw, json) Hash identifier: HzRwFTg0Qc4HS5vLz9pBbUoRgZKToj/APhUhfPnSo54= Subject key identifier: 7D:78:0E:09:18:0E:7A:09:D5:D4:F1:04:8F:BA:79:2D:74:1B:C7:8E Certificate issuer: /CN=7271506bfab912c7b8171b96b85a099b140e6cd8 Certificate serial: 019B7A5B61394204EDD765B94FCA568E3369 Authority key identifier: 72:71:50:6B:FA:B9:12:C7:B8:17:1B:96:B8:5A:09:9B:14:0E:6C:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cnFQa_q5Ese4FxuWuFoJmxQObNg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/fXgOCRgOegnV1PEEj7p5LXQbx44.roa Signing time: Thu 01 Jan 2026 16:19:27 +0000 ROA not before: Thu 01 Jan 2026 16:19:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49556 IP address blocks: 81.30.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft rsync://rpki.ripe.net/repository/DEFAULT/cnFQa_q5Ese4FxuWuFoJmxQObNg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:61:39:42:04:ed:d7:65:b9:4f:ca:56:8e:33:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7271506bfab912c7b8171b96b85a099b140e6cd8 Validity Not Before: Jan 1 16:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d780e09180e7a09d5d4f1048fba792d741bc78e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0b:ab:8f:e5:e4:a3:1f:4b:95:26:1f:00:ae: c7:d1:9f:6b:50:ed:d3:1e:ec:38:a3:81:9e:8f:98: cc:0b:f4:7a:81:a0:3d:62:d0:17:78:53:f2:34:57: ad:93:8d:f9:3c:fd:94:75:20:37:01:05:5a:74:19: a5:35:ba:09:8d:c9:11:02:eb:0c:9f:a3:fe:6c:83: df:35:4c:9a:2b:34:55:ce:f6:f2:5e:5a:c0:92:40: 87:a9:df:54:94:0f:d3:01:cf:49:e4:21:92:54:c6: 16:7c:e8:30:8d:a1:da:64:2a:ab:f0:7b:ea:81:7b: 99:11:53:c1:5d:1e:8b:87:15:50:81:9f:67:b9:89: ab:07:81:ee:29:70:a4:66:cc:56:98:ee:74:f8:90: ff:3b:76:1e:5f:09:9c:82:f2:ea:06:a9:ea:3b:15: ee:8d:46:d9:f7:0b:3d:6f:4f:63:9d:34:8b:91:14: 5e:9b:2b:8b:b5:86:1c:d5:f4:30:fa:57:06:79:51: 95:f5:8a:f2:d0:b7:85:5b:60:92:7a:90:b7:53:d0: e5:77:2b:fd:75:30:01:2c:3f:a1:11:13:9e:84:e1: a9:4e:0b:00:e6:c4:4d:76:89:e1:6d:3b:88:4a:76: 18:c3:b4:d8:78:b9:81:f3:07:5d:84:07:22:2e:bc: 31:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:78:0E:09:18:0E:7A:09:D5:D4:F1:04:8F:BA:79:2D:74:1B:C7:8E X509v3 Authority Key Identifier: keyid:72:71:50:6B:FA:B9:12:C7:B8:17:1B:96:B8:5A:09:9B:14:0E:6C:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnFQa_q5Ese4FxuWuFoJmxQObNg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/fXgOCRgOegnV1PEEj7p5LXQbx44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.30.108.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:54:37:5c:c8:67:48:2c:ca:33:64:a8:86:38:ba:57:44:5c: 81:e1:b2:71:7a:b8:77:bc:40:77:20:b0:fb:c8:94:ec:5e:56: 3d:a3:6d:eb:af:99:3a:35:8d:4f:36:8e:57:aa:de:9c:e4:60: 42:e5:e6:18:22:ab:f6:23:0a:bd:7f:78:41:9b:fb:77:a4:91: e5:f0:d5:f2:de:f0:33:23:1c:92:ac:18:85:b3:88:b1:d2:13: 5c:10:81:d1:b0:5d:9f:2e:49:9d:b7:87:51:81:e8:56:4b:2c: 6e:23:6f:f1:4e:f8:ee:6d:65:4a:e9:11:0c:5f:32:b9:4f:ac: 01:30:7c:ef:12:90:58:3f:f8:cb:bb:1d:42:6b:2c:64:41:65: db:64:5b:b7:9c:5c:7e:27:72:ea:25:89:6f:f1:4d:68:e8:c2: 4e:21:e2:73:92:b8:7e:f2:a2:67:d8:44:25:10:ec:93:38:e3: 56:04:44:da:e8:e3:e0:2e:e4:4b:c6:27:46:30:d6:06:a1:55: 77:d8:65:9c:20:20:04:80:d1:c9:3d:59:a6:07:8e:9c:fe:e2: c0:fd:66:0a:82:fa:c1:cf:34:5a:42:65:87:27:66:e0:0a:2a: 70:a5:09:d8:b9:b7:32:36:4c:ca:57:10:4d:21:94:0c:b0:a6: 5a:51:e4:e5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W2E5QgTt12W5T8pWjjNpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyNzE1MDZiZmFiOTEyYzdiODE3MWI5NmI4NWEwOTliMTQw ZTZjZDgwHhcNMjYwMTAxMTYxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDc4MGUwOTE4MGU3YTA5ZDVkNGYxMDQ4ZmJhNzkyZDc0MWJjNzhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQurj+Xkox9LlSYfAK7H0Z9rUO3T Huw4o4Gej5jMC/R6gaA9YtAXeFPyNFetk435PP2UdSA3AQVadBmlNboJjckRAusM n6P+bIPfNUyaKzRVzvbyXlrAkkCHqd9UlA/TAc9J5CGSVMYWfOgwjaHaZCqr8Hvq gXuZEVPBXR6LhxVQgZ9nuYmrB4HuKXCkZsxWmO50+JD/O3YeXwmcgvLqBqnqOxXu jUbZ9ws9b09jnTSLkRRemyuLtYYc1fQw+lcGeVGV9Yry0LeFW2CSepC3U9Dldyv9 dTABLD+hEROehOGpTgsA5sRNdonhbTuISnYYw7TYeLmB8wddhAciLrwx1wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH14DgkYDnoJ1dTxBI+6eS10G8eOMB8GA1UdIwQY MBaAFHJxUGv6uRLHuBcblrhaCZsUDmzYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY25GUWFfcTVFc2U0Rnh1V3VGb0pteFFPYk5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9jZDU4MjQtMmRkZS00MDNlLWIyYzQt ZDIyNTAzMmQxODU4LzEvZlhnT0NSZ09lZ25WMVBFRWo3cDVMWFFieDQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9jZDU4MjQtMmRkZS00MDNlLWIyYzQtZDIyNTAzMmQxODU4 LzEvY25GUWFfcTVFc2U0Rnh1V3VGb0pteFFPYk5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUR5sMA0G CSqGSIb3DQEBCwUAA4IBAQAKVDdcyGdILMozZKiGOLpXRFyB4bJxerh3vEB3ILD7 yJTsXlY9o23rr5k6NY1PNo5Xqt6c5GBC5eYYIqv2Iwq9f3hBm/t3pJHl8NXy3vAz IxySrBiFs4ix0hNcEIHRsF2fLkmdt4dRgehWSyxuI2/xTvjubWVK6REMXzK5T6wB MHzvEpBYP/jLux1CayxkQWXbZFu3nFx+J3LqJYlv8U1o6MJOIeJzkrh+8qJn2EQl EOyTOONWBETa6OPgLuRLxidGMNYGoVV32GWcICAEgNHJPVmmB46c/uLA/WYKgvrB zzRaQmWHJ2bgCipwpQnYubcyNkzKVxBNIZQMsKZaUeTl -----END CERTIFICATE-----Generated at Mon Jan 26 23:22:47 2026 by rpki-client