This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/l_tuzCuoRF4mu9AwI9dz_K-Y1tM.roa File: l_tuzCuoRF4mu9AwI9dz_K-Y1tM.roa (raw, json) Hash identifier: su/FpcLSQKnDkvo4mw+tCyeYBE6fATPLKJQXfUzHupk= Subject key identifier: 97:FB:6E:CC:2B:A8:44:5E:26:BB:D0:30:23:D7:73:FC:AF:98:D6:D3 Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491 Certificate serial: 019B7AC8C4A93C06F47ED973CCCC1FA67DED Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/l_tuzCuoRF4mu9AwI9dz_K-Y1tM.roa Signing time: Thu 01 Jan 2026 18:18:56 +0000 ROA not before: Thu 01 Jan 2026 18:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43188 IP address blocks: 81.198.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.mft rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:c4:a9:3c:06:f4:7e:d9:73:cc:cc:1f:a6:7d:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491 Validity Not Before: Jan 1 18:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=97fb6ecc2ba8445e26bbd03023d773fcaf98d6d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:2c:d6:cc:05:08:91:54:39:93:2d:9f:70:c6: 90:d1:a3:3d:f0:88:62:ee:65:fd:ee:7a:dd:b1:a5: 27:f2:e9:c5:9b:ae:ce:e8:07:20:31:70:01:26:c9: 5b:22:92:14:af:58:4c:76:d6:0a:5e:1d:db:bb:3e: a4:b8:82:0e:05:4e:b7:4d:bc:06:57:6e:63:df:33: 61:e5:86:f4:75:38:d6:49:c0:87:3a:1d:3b:f9:25: 2d:72:38:ae:fa:ba:74:a0:89:55:50:f4:dc:6e:c4: a9:bd:76:8e:99:ac:6b:1f:84:ea:cd:70:15:e8:5a: 46:1b:97:f9:42:f9:b2:b6:ca:1e:1e:0d:9c:9e:a3: 6c:a7:25:8a:a5:f0:df:10:72:60:c6:ea:a4:64:a1: 6d:f4:2b:19:05:aa:21:19:80:3f:2b:b8:67:13:42: a2:72:95:c7:5b:c9:3d:63:53:30:f9:ef:c7:cb:66: e9:54:4b:a6:b7:4e:b6:35:fc:08:07:5d:97:71:6a: 49:34:76:f6:9a:de:c3:fd:65:e5:73:3d:3b:ee:ad: 4d:b0:91:a1:2b:c9:ca:d4:27:aa:a8:2a:9d:66:e5: 39:ea:d0:15:36:bf:3b:8c:06:f9:f3:3f:73:b6:d5: 3d:ae:9f:20:cf:e6:70:06:10:eb:15:59:60:f0:ff: dc:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:FB:6E:CC:2B:A8:44:5E:26:BB:D0:30:23:D7:73:FC:AF:98:D6:D3 X509v3 Authority Key Identifier: keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/l_tuzCuoRF4mu9AwI9dz_K-Y1tM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.198.175.0/24 Signature Algorithm: sha256WithRSAEncryption 07:58:fd:fa:7e:e0:92:36:48:e5:b4:97:b8:25:25:0d:53:90: 4b:0f:ef:7d:95:64:fb:61:11:97:a6:78:69:39:b1:14:00:66: 9d:35:65:ce:cb:e4:77:d4:b4:02:01:4c:90:76:12:2f:f0:f7: e6:01:d9:98:3b:77:f2:62:01:72:bd:72:53:36:84:96:9e:87: 07:d0:ec:fa:e1:7c:f8:27:20:d5:99:64:f0:e5:da:df:e1:56: 3d:31:62:69:71:d7:80:0c:a8:a0:28:56:25:bc:11:63:67:52: d9:f3:52:be:99:7b:18:d0:bc:c6:2d:63:56:5a:3c:af:af:31: f3:16:88:17:46:45:c0:31:f0:eb:76:4d:eb:c0:e8:59:53:6b: 21:92:6e:03:8b:3c:97:fa:36:20:b4:2f:2a:6d:47:dd:01:29: f7:d7:e6:90:f6:9d:a4:d4:f9:df:b6:34:02:2b:1c:a0:32:11: db:a5:73:7e:46:11:7a:ce:13:d6:26:de:86:99:5b:90:8d:2c: a1:5a:88:18:25:cc:1e:3f:db:f3:cc:2b:04:81:01:2d:85:8d: 6d:0d:f0:8c:f0:05:8a:8b:e4:bc:99:89:41:6e:0c:2f:ce:8e: 8d:da:8f:d1:b3:1b:b1:fa:b7:df:e4:8e:8e:4c:62:2d:01:11: d1:eb:15:f7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yMSpPAb0ftlzzMwfpn3tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzYmUwN2NiMWZkNGYxZTNjOTIyMzAzYjY3MGE4ODFiODJl NjE0OTEwHhcNMjYwMTAxMTgxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5N2ZiNmVjYzJiYTg0NDVlMjZiYmQwMzAyM2Q3NzNmY2FmOThkNmQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyzWzAUIkVQ5ky2fcMaQ0aM98Ihi 7mX97nrdsaUn8unFm67O6AcgMXABJslbIpIUr1hMdtYKXh3buz6kuIIOBU63TbwG V25j3zNh5Yb0dTjWScCHOh07+SUtcjiu+rp0oIlVUPTcbsSpvXaOmaxrH4TqzXAV 6FpGG5f5QvmytsoeHg2cnqNspyWKpfDfEHJgxuqkZKFt9CsZBaohGYA/K7hnE0Ki cpXHW8k9Y1Mw+e/Hy2bpVEumt062NfwIB12XcWpJNHb2mt7D/WXlcz077q1NsJGh K8nK1CeqqCqdZuU56tAVNr87jAb58z9zttU9rp8gz+ZwBhDrFVlg8P/cawIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJf7bswrqEReJrvQMCPXc/yvmNbTMB8GA1UdIwQY MBaAFOO+B8sf1PHjySIwO2cKiBuC5hSRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMt ZDRlZTFkMzg5ZTBkLzEvbF90dXpDdW9SRjRtdTlBd0k5ZHpfSy1ZMXRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMtZDRlZTFkMzg5ZTBk LzEvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUcavMA0G CSqGSIb3DQEBCwUAA4IBAQAHWP36fuCSNkjltJe4JSUNU5BLD+99lWT7YRGXpnhp ObEUAGadNWXOy+R31LQCAUyQdhIv8PfmAdmYO3fyYgFyvXJTNoSWnocH0Oz64Xz4 JyDVmWTw5drf4VY9MWJpcdeADKigKFYlvBFjZ1LZ81K+mXsY0LzGLWNWWjyvrzHz FogXRkXAMfDrdk3rwOhZU2shkm4DizyX+jYgtC8qbUfdASn31+aQ9p2k1PnftjQC KxygMhHbpXN+RhF6zhPWJt6GmVuQjSyhWogYJcweP9vzzCsEgQEthY1tDfCM8AWK i+S8mYlBbgwvzo6N2o/Rsxux+rff5I6OTGItARHR6xX3 -----END CERTIFICATE-----Generated at Mon Jan 19 23:20:50 2026 by rpki-client