This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/_--bDRLpVJn5ESSyxJSpW0DOSUc.roa File: _--bDRLpVJn5ESSyxJSpW0DOSUc.roa (raw, json) Hash identifier: jjKzpCx4NtQk69fcR1J9Uzz4/4fgj31euBnzQ36sziM= Subject key identifier: FF:EF:9B:0D:12:E9:54:99:F9:11:24:B2:C4:94:A9:5B:40:CE:49:47 Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21 Certificate serial: 019B7F14FB47B0DF37F4B375B9EA6E03D8DD Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/_--bDRLpVJn5ESSyxJSpW0DOSUc.roa Signing time: Fri 02 Jan 2026 14:20:40 +0000 ROA not before: Fri 02 Jan 2026 14:20:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48944 IP address blocks: 81.12.126.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:fb:47:b0:df:37:f4:b3:75:b9:ea:6e:03:d8:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21 Validity Not Before: Jan 2 14:20:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ffef9b0d12e95499f91124b2c494a95b40ce4947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:49:9a:07:04:54:1f:e5:ad:06:4e:e8:3c:d6: fc:86:64:e8:e4:33:d2:28:ee:70:e5:b0:d8:58:e2: b6:da:76:a6:b6:58:76:81:68:e9:c3:0b:f6:ca:f1: 3b:31:52:ad:5a:fa:19:46:bd:10:e9:f7:9b:34:4e: ec:d6:9d:d8:78:42:bf:f0:e8:25:7a:8a:cc:57:e1: da:e2:57:23:dd:9a:42:e7:86:cd:67:27:97:18:7f: bf:7d:43:d7:43:e8:80:20:67:d5:16:2f:a6:2c:15: c0:0e:64:32:91:5b:0d:d3:b2:97:04:72:e6:33:51: 3e:c6:6d:ee:d7:2c:23:7c:b8:bc:5d:b8:2b:83:48: b1:b2:10:05:6b:5c:91:cf:ed:93:e0:29:ea:9e:6f: 1b:41:9e:d7:17:ea:2d:c2:01:b6:8f:13:17:de:1b: 83:1d:22:a6:a3:40:bf:29:67:07:67:8d:02:ab:60: de:66:c1:92:09:2f:ec:99:4f:e1:66:45:8f:50:2b: 79:33:4e:b7:95:13:6a:fd:fe:f9:a2:d8:a7:d5:10: 2c:18:e5:ce:54:07:96:c3:62:b4:7a:af:df:71:ac: 48:b7:b5:97:43:42:09:07:7e:93:8d:c9:e1:48:01: 87:52:fc:ad:36:74:ce:5e:fb:43:a2:c6:f9:0c:ff: b6:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:EF:9B:0D:12:E9:54:99:F9:11:24:B2:C4:94:A9:5B:40:CE:49:47 X509v3 Authority Key Identifier: keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/_--bDRLpVJn5ESSyxJSpW0DOSUc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.12.126.0/23 Signature Algorithm: sha256WithRSAEncryption 5c:7b:98:68:12:da:4b:e8:07:41:14:93:41:ea:d6:68:95:e3: 44:33:e2:4d:f1:1a:ba:ab:73:b1:d6:b4:a6:30:a7:a8:2a:2b: ef:f6:82:cd:97:4b:f7:b8:33:ca:b3:c1:19:9f:87:cb:dd:d4: 4d:70:78:77:5e:12:3d:0e:1e:c4:6c:16:25:55:d1:2f:f3:bc: a4:c3:5b:6b:2d:b1:37:91:79:0c:53:ea:e9:d4:40:ce:59:0c: 86:10:33:2e:07:7b:37:4d:b2:c8:80:2a:52:0b:eb:d3:ee:4e: c0:4a:b3:70:0b:67:e5:8d:f3:ad:5e:84:c8:f0:6f:31:ed:5e: 74:a9:a0:e5:e3:65:e6:3f:71:3a:2a:66:98:a1:51:9b:d7:7b: 14:55:17:0c:d6:81:06:c0:84:39:05:9e:5a:3b:8f:5d:f7:1f: 44:a6:fb:4b:1a:b5:6b:e7:ab:66:2c:90:7d:74:cd:ec:13:a1: b5:d0:1a:ac:41:28:ed:b9:8a:75:29:dd:92:44:41:b4:d4:15: ef:e9:50:80:fc:34:7c:12:5d:f1:e8:b9:e0:e6:7b:26:dc:9c: 8d:20:33:17:b3:2e:47:fe:3c:a7:84:ca:e4:c4:c7:fc:f2:60: c8:92:f3:08:0e:14:07:23:90:f4:37:0b:64:ae:b1:c7:4c:4c: 6c:71:ee:fc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FPtHsN839LN1uepuA9jdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwNzc1ZDk0NzFiODVkOTYzZmVmNmQyODM1OTBlMmQ5NDJk ZDVjMjEwHhcNMjYwMTAyMTQyMDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZmVmOWIwZDEyZTk1NDk5ZjkxMTI0YjJjNDk0YTk1YjQwY2U0OTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEmaBwRUH+WtBk7oPNb8hmTo5DPS KO5w5bDYWOK22namtlh2gWjpwwv2yvE7MVKtWvoZRr0Q6febNE7s1p3YeEK/8Ogl eorMV+Ha4lcj3ZpC54bNZyeXGH+/fUPXQ+iAIGfVFi+mLBXADmQykVsN07KXBHLm M1E+xm3u1ywjfLi8Xbgrg0ixshAFa1yRz+2T4Cnqnm8bQZ7XF+otwgG2jxMX3huD HSKmo0C/KWcHZ40Cq2DeZsGSCS/smU/hZkWPUCt5M063lRNq/f75otin1RAsGOXO VAeWw2K0eq/fcaxIt7WXQ0IJB36TjcnhSAGHUvytNnTOXvtDosb5DP+2ZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP/vmw0S6VSZ+REkssSUqVtAzklHMB8GA1UdIwQY MBaAFAB3XZRxuF2WP+9tKDWQ4tlC3VwhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQt NzZiMzNlNGNlODIxLzEvXy0tYkRSTHBWSm41RVNTeXhKU3BXMERPU1VjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQtNzZiMzNlNGNlODIx LzEvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBUQx+MA0G CSqGSIb3DQEBCwUAA4IBAQBce5hoEtpL6AdBFJNB6tZoleNEM+JN8Rq6q3Ox1rSm MKeoKivv9oLNl0v3uDPKs8EZn4fL3dRNcHh3XhI9Dh7EbBYlVdEv87ykw1trLbE3 kXkMU+rp1EDOWQyGEDMuB3s3TbLIgCpSC+vT7k7ASrNwC2fljfOtXoTI8G8x7V50 qaDl42XmP3E6KmaYoVGb13sUVRcM1oEGwIQ5BZ5aO49d9x9EpvtLGrVr56tmLJB9 dM3sE6G10BqsQSjtuYp1Kd2SREG01BXv6VCA/DR8El3x6Lng5nsm3JyNIDMXsy5H /jynhMrkxMf88mDIkvMIDhQHI5D0NwtkrrHHTExsce78 -----END CERTIFICATE-----Generated at Mon Jan 26 23:22:56 2026 by rpki-client