This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/FSp7lSgJfORHGyVIwbo6oqSmnr8.roa File: FSp7lSgJfORHGyVIwbo6oqSmnr8.roa (raw, json) Hash identifier: jRqSN5nnq2Rvc3iHBf6rA/Su9B2gTxHNLzFvQoyNsxE= Subject key identifier: 15:2A:7B:95:28:09:7C:E4:47:1B:25:48:C1:BA:3A:A2:A4:A6:9E:BF Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Certificate serial: 019B78A2D166F125871E4B65D29053EE49B7 Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/FSp7lSgJfORHGyVIwbo6oqSmnr8.roa Signing time: Thu 01 Jan 2026 08:18:14 +0000 ROA not before: Thu 01 Jan 2026 08:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215955 IP address blocks: 81.22.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 01:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:d1:66:f1:25:87:1e:4b:65:d2:90:53:ee:49:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Validity Not Before: Jan 1 08:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=152a7b9528097ce4471b2548c1ba3aa2a4a69ebf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:69:fa:b5:e4:c7:bf:f6:60:fa:d8:45:ab:76: 69:63:40:fa:8b:b0:20:3f:64:ad:8f:8c:61:9e:e2: 7e:ce:1f:85:80:e8:75:fd:c6:73:0a:61:c1:d2:aa: d7:b4:bb:3a:39:41:44:ab:78:f8:ed:a3:6b:f9:86: 71:e8:52:15:b8:21:1c:e1:8d:be:56:ae:1f:ab:2b: 1d:81:83:26:2e:25:29:ee:be:ae:93:91:3e:5f:ba: 9c:38:2c:8d:e9:d0:18:78:b3:be:b6:03:74:70:ff: a9:e4:f0:22:fa:74:7d:73:5b:72:eb:a5:59:2d:19: b4:8f:c0:d8:51:62:eb:95:b5:f2:94:df:13:d7:98: dd:a0:54:a7:a3:40:08:57:9d:b9:74:a9:9b:08:b0: 6e:20:d0:52:24:30:64:ee:ef:2c:8a:e2:a4:14:90: ce:46:ed:fb:c0:73:fb:b9:40:c2:35:b0:ea:9d:09: 64:47:fe:06:05:6f:f2:9b:db:9c:8d:40:bb:3e:94: a0:31:a0:5d:a1:b1:bc:5a:bb:fc:92:fc:dd:b0:6a: 23:82:9a:cf:36:be:28:34:a2:9e:71:1d:be:4a:2c: 50:3f:c2:39:33:5a:9a:cc:14:ec:4b:e0:c6:6f:d9: bb:20:56:9f:48:c0:13:35:02:20:79:8d:ad:09:f2: ff:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:2A:7B:95:28:09:7C:E4:47:1B:25:48:C1:BA:3A:A2:A4:A6:9E:BF X509v3 Authority Key Identifier: keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/FSp7lSgJfORHGyVIwbo6oqSmnr8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.22.136.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:4f:72:89:46:82:a5:14:67:52:3f:8b:ea:8a:91:32:7a:ff: eb:86:b8:42:70:e7:1d:79:eb:7a:e7:d3:d2:57:fc:bf:fb:29: ff:d0:35:87:f9:ab:0c:00:d0:ec:50:d0:68:91:e1:f7:8a:dd: 90:87:65:05:82:90:32:33:d3:61:3b:14:73:1c:9f:9a:af:ac: c6:33:3f:77:1e:bd:32:c6:ca:32:f3:9f:a1:52:fc:3a:a3:3a: 6c:3b:fe:25:9d:89:a7:53:3b:1d:49:21:3b:69:f8:6c:5c:f3: f1:19:f0:ba:f5:09:65:4e:bd:18:f0:ca:b5:92:41:4f:35:be: bd:7f:c0:2e:08:2d:73:5e:ea:d4:29:03:21:37:8c:4f:21:73: bc:09:77:16:28:ac:0b:2a:a6:02:fb:5e:e3:48:8a:0d:c6:f1: 26:32:9d:eb:c3:9a:3b:1e:fe:a3:fb:65:38:af:12:4a:9b:0a: db:fd:56:5c:51:3f:a0:0d:a5:0c:82:76:ad:09:3a:84:98:c2: ed:a0:fa:3c:e4:3e:ad:e1:8b:9c:75:7b:94:ae:d1:41:fe:54: 6b:04:ad:7d:27:11:00:0d:22:35:c1:17:f1:76:cb:d1:88:55: 11:33:27:d9:4b:53:73:53:94:52:fd:45:be:0f:83:54:54:8f: d6:19:30:35 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4otFm8SWHHktl0pBT7km3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk OGRhYmUwHhcNMjYwMTAxMDgxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTJhN2I5NTI4MDk3Y2U0NDcxYjI1NDhjMWJhM2FhMmE0YTY5ZWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4mn6teTHv/Zg+thFq3ZpY0D6i7Ag P2Stj4xhnuJ+zh+FgOh1/cZzCmHB0qrXtLs6OUFEq3j47aNr+YZx6FIVuCEc4Y2+ Vq4fqysdgYMmLiUp7r6uk5E+X7qcOCyN6dAYeLO+tgN0cP+p5PAi+nR9c1ty66VZ LRm0j8DYUWLrlbXylN8T15jdoFSno0AIV525dKmbCLBuINBSJDBk7u8siuKkFJDO Ru37wHP7uUDCNbDqnQlkR/4GBW/ym9ucjUC7PpSgMaBdobG8Wrv8kvzdsGojgprP Nr4oNKKecR2+SixQP8I5M1qazBTsS+DGb9m7IFafSMATNQIgeY2tCfL//QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBUqe5UoCXzkRxslSMG6OqKkpp6/MB8GA1UdIwQY MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt ODJhZDE0NTU1ZWFhLzEvRlNwN2xTZ0pmT1JIR3lWSXdibzZvcVNtbnI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEtODJhZDE0NTU1ZWFh LzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAURaIMA0G CSqGSIb3DQEBCwUAA4IBAQBKT3KJRoKlFGdSP4vqipEyev/rhrhCcOcdeet659PS V/y/+yn/0DWH+asMANDsUNBokeH3it2Qh2UFgpAyM9NhOxRzHJ+ar6zGMz93Hr0y xsoy85+hUvw6ozpsO/4lnYmnUzsdSSE7afhsXPPxGfC69QllTr0Y8Mq1kkFPNb69 f8AuCC1zXurUKQMhN4xPIXO8CXcWKKwLKqYC+17jSIoNxvEmMp3rw5o7Hv6j+2U4 rxJKmwrb/VZcUT+gDaUMgnatCTqEmMLtoPo85D6t4YucdXuUrtFB/lRrBK19JxEA DSI1wRfxdsvRiFURMyfZS1NzU5RS/UW+D4NUVI/WGTA1 -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:35 2026 by rpki-client