This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/9sF1jixqL9hKqMRyWL5XaGpT7Pc.roa File: 9sF1jixqL9hKqMRyWL5XaGpT7Pc.roa (raw, json) Hash identifier: DizidAYQS5ZwrXI/9g8YwAagIVsjFjTthHLQ6Upp2AA= Subject key identifier: F6:C1:75:8E:2C:6A:2F:D8:4A:A8:C4:72:58:BE:57:68:6A:53:EC:F7 Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Certificate serial: 019B78A2CD1CA965A883967C5255D282465C Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/9sF1jixqL9hKqMRyWL5XaGpT7Pc.roa Signing time: Thu 01 Jan 2026 08:18:13 +0000 ROA not before: Thu 01 Jan 2026 08:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200017 IP address blocks: 81.22.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:cd:1c:a9:65:a8:83:96:7c:52:55:d2:82:46:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Validity Not Before: Jan 1 08:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f6c1758e2c6a2fd84aa8c47258be57686a53ecf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:55:1a:4b:d8:b8:b2:f2:b1:e8:46:27:b6:a9: 4b:a1:73:bf:0a:b0:20:4d:da:38:67:5f:2e:51:09: 79:c8:b3:18:9d:6c:c9:5a:89:0d:bf:97:7d:ce:53: 74:10:94:93:48:65:85:69:b4:2a:2c:91:56:83:bc: f0:dd:f7:e4:78:fa:ab:20:18:78:b7:72:03:be:7f: bb:8a:96:16:17:e6:b4:12:13:24:9b:ee:3e:b8:d6: f2:99:a3:7b:24:2d:f9:9b:9e:4e:e9:8b:fc:e3:73: 24:75:e3:6c:6e:ab:40:29:34:29:54:61:1d:cf:72: 9d:ee:59:29:b6:98:a2:00:7d:aa:5b:4e:79:92:32: 4d:21:63:68:90:a8:ee:92:ce:76:f7:22:b8:f1:98: 78:23:d6:16:7d:12:e0:1f:ad:06:d2:f1:cb:45:48: 21:f5:5b:df:95:cf:c4:45:dc:09:fe:e1:d1:53:22: db:ad:87:0c:84:79:48:0a:c6:8c:1e:be:7c:b2:a0: 8f:88:89:ea:bd:5a:e2:68:58:62:83:d0:3c:db:61: 46:cf:f8:cd:28:01:85:df:9c:bb:ef:81:d2:a8:74: 08:89:a6:1e:ce:bf:bc:81:d0:78:56:af:99:22:12: d4:9a:cd:04:c8:f1:cd:60:91:7a:9f:b8:00:f7:9d: ee:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:C1:75:8E:2C:6A:2F:D8:4A:A8:C4:72:58:BE:57:68:6A:53:EC:F7 X509v3 Authority Key Identifier: keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/9sF1jixqL9hKqMRyWL5XaGpT7Pc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.22.133.0/24 Signature Algorithm: sha256WithRSAEncryption 62:93:72:e6:97:d5:c3:96:7a:7d:6f:d1:21:2c:74:f0:8d:ff: 55:bf:fc:9b:50:e5:42:0b:c6:8f:e7:4a:ff:e8:55:a2:84:e9: 0a:df:d6:43:4b:72:cb:38:10:e0:d5:03:f9:cd:07:64:c7:03: 3e:39:fe:aa:19:c7:00:e2:e4:8a:c0:f1:dc:21:03:4e:1c:4e: 25:68:1e:bd:61:88:80:ad:20:fa:57:f1:69:2b:3e:61:83:e3: f5:39:33:d9:18:3b:03:4f:a8:51:f5:a0:48:d0:bf:a2:ff:07: ff:a5:d9:54:a3:07:c1:e6:57:93:b6:92:23:53:95:75:69:07: 32:ab:d1:89:03:bb:78:58:86:ca:36:3e:dd:c8:f6:6c:cb:19: f6:8d:fd:9b:4b:b9:4b:13:c0:47:6e:11:25:75:84:17:89:ab: 94:80:b0:90:87:65:fd:33:48:f7:49:74:15:42:16:40:1c:a1: 79:f3:08:f6:be:34:dd:c3:ad:b3:15:6d:8e:c9:ae:b4:2f:5c: 55:be:be:e0:e7:48:c4:c4:31:f1:bf:f3:82:a6:24:f2:b1:e8: 37:e5:86:45:22:d9:54:33:ed:ce:12:1e:a9:ea:7c:47:ed:72: c0:54:d4:56:72:6a:e4:d7:1a:51:f3:ef:03:c7:2f:aa:49:2b: cd:e1:2c:45 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4os0cqWWog5Z8UlXSgkZcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk OGRhYmUwHhcNMjYwMTAxMDgxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNmMxNzU4ZTJjNmEyZmQ4NGFhOGM0NzI1OGJlNTc2ODZhNTNlY2Y3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklUaS9i4svKx6EYntqlLoXO/CrAg Tdo4Z18uUQl5yLMYnWzJWokNv5d9zlN0EJSTSGWFabQqLJFWg7zw3ffkePqrIBh4 t3IDvn+7ipYWF+a0EhMkm+4+uNbymaN7JC35m55O6Yv843MkdeNsbqtAKTQpVGEd z3Kd7lkptpiiAH2qW055kjJNIWNokKjuks529yK48Zh4I9YWfRLgH60G0vHLRUgh 9Vvflc/ERdwJ/uHRUyLbrYcMhHlICsaMHr58sqCPiInqvVriaFhig9A822FGz/jN KAGF35y774HSqHQIiaYezr+8gdB4Vq+ZIhLUms0EyPHNYJF6n7gA953uawIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPbBdY4sai/YSqjEcli+V2hqU+z3MB8GA1UdIwQY MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt ODJhZDE0NTU1ZWFhLzEvOXNGMWppeHFMOWhLcU1SeVdMNVhhR3BUN1BjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEtODJhZDE0NTU1ZWFh LzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAURaFMA0G CSqGSIb3DQEBCwUAA4IBAQBik3Lml9XDlnp9b9EhLHTwjf9Vv/ybUOVCC8aP50r/ 6FWihOkK39ZDS3LLOBDg1QP5zQdkxwM+Of6qGccA4uSKwPHcIQNOHE4laB69YYiA rSD6V/FpKz5hg+P1OTPZGDsDT6hR9aBI0L+i/wf/pdlUowfB5leTtpIjU5V1aQcy q9GJA7t4WIbKNj7dyPZsyxn2jf2bS7lLE8BHbhEldYQXiauUgLCQh2X9M0j3SXQV QhZAHKF58wj2vjTdw62zFW2Oya60L1xVvr7g50jExDHxv/OCpiTyseg35YZFItlU M+3OEh6p6nxH7XLAVNRWcmrk1xpR8+8Dxy+qSSvN4SxF -----END CERTIFICATE-----Generated at Mon Jan 19 23:22:14 2026 by rpki-client