This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/PQiV9k5ZmpUkK_hQjS5oXv_CcDA.roa File: PQiV9k5ZmpUkK_hQjS5oXv_CcDA.roa (raw, json) Hash identifier: lSUNE4Fr66y8JXc+3fYqx9YAjtA+f99ByjEpd4kBkSc= Subject key identifier: 3D:08:95:F6:4E:59:9A:95:24:2B:F8:50:8D:2E:68:5E:FF:C2:70:30 Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Certificate serial: 019B78A2C79F8304FDBF2AB02E251FC7F416 Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/PQiV9k5ZmpUkK_hQjS5oXv_CcDA.roa Signing time: Thu 01 Jan 2026 08:18:12 +0000 ROA not before: Thu 01 Jan 2026 08:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 81.22.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:c7:9f:83:04:fd:bf:2a:b0:2e:25:1f:c7:f4:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Validity Not Before: Jan 1 08:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d0895f64e599a95242bf8508d2e685effc27030 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d6:cc:ad:8d:24:1f:61:20:4b:fd:62:29:9c: b5:13:3a:2c:fe:1e:23:0b:9c:eb:a4:04:1d:bb:01: 03:a9:8c:d8:5a:b4:c0:5b:87:e8:4d:0f:d8:39:b6: 33:84:3c:00:e3:09:c6:cb:8d:f8:80:d3:b1:21:cc: 5b:d3:8b:42:39:c3:00:1a:88:19:a4:8e:f6:cf:5c: 3d:13:82:49:fe:d6:58:33:53:13:2d:d5:e0:ce:3d: 2a:e4:11:6b:2e:44:04:b5:12:ef:7d:76:41:f8:60: 45:74:f7:52:04:38:33:e3:bf:0f:6c:c9:dd:e0:b1: b4:f8:11:01:24:87:2f:b1:a5:2e:fd:bb:9c:13:7c: 22:d8:63:19:33:f6:60:74:0f:88:4c:e3:ae:6d:c0: 75:d3:cb:0a:fc:56:d1:d9:b0:17:66:0e:d4:d5:98: 19:5b:9c:77:b9:81:d1:35:26:0d:f8:a9:d5:d5:7e: a6:7d:84:55:b0:cf:64:a7:74:87:47:5e:d8:fc:4d: a6:4e:72:c2:65:d4:f1:ec:c2:f5:ca:e6:a7:ba:ce: fe:ae:3c:af:d4:84:59:07:d3:27:6b:85:33:95:39: 93:d0:9c:85:81:22:36:e2:a2:d7:47:06:4f:05:2b: bc:e5:d2:74:ea:74:2e:65:0b:04:1f:21:4c:39:8e: c1:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:08:95:F6:4E:59:9A:95:24:2B:F8:50:8D:2E:68:5E:FF:C2:70:30 X509v3 Authority Key Identifier: keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/PQiV9k5ZmpUkK_hQjS5oXv_CcDA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.22.128.0/24 Signature Algorithm: sha256WithRSAEncryption 28:5d:66:0a:4d:31:94:37:d5:19:a3:26:52:91:02:94:79:5e: b6:c5:3a:fb:ed:ad:5e:5f:be:05:0a:4f:b8:67:ba:0e:e4:ef: 2b:bf:7d:09:6d:99:4b:8d:88:2d:4c:7a:d0:86:3a:a3:f4:77: f8:97:66:e5:23:35:aa:c7:c1:19:8d:54:77:3e:32:92:51:ee: 04:29:a3:91:df:8f:9d:12:38:98:8a:90:19:bb:a2:a8:0d:14: cf:f0:7d:2e:b4:f4:7d:9d:1e:d2:bc:fa:f4:b4:13:b5:fd:c9: bf:3b:e9:48:9f:61:85:44:c6:21:5a:c4:fb:cd:5d:78:e5:3f: a8:1b:ea:97:0e:a9:a2:8f:4f:af:d8:1d:5b:79:fe:da:2b:cd: 05:b2:ef:a4:a5:42:63:92:dd:dd:3a:b2:66:0f:33:8e:2c:d5: e9:07:76:e7:b6:78:29:71:4c:de:8e:7d:7a:53:a0:9d:83:bc: 8b:c2:1b:da:f9:4f:5d:18:b2:72:6a:fa:be:bf:6d:03:fe:82: e7:77:b4:82:c0:27:28:6b:52:3f:c7:3a:2c:c5:a7:75:3d:16: e7:9a:2e:7a:4c:d1:63:13:ec:63:6c:7c:db:88:c8:3a:da:8b: f3:b6:89:b8:75:5d:2b:a5:06:90:de:b7:bc:cf:34:72:fd:f4: 96:88:7a:8d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4osefgwT9vyqwLiUfx/QWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk OGRhYmUwHhcNMjYwMTAxMDgxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDA4OTVmNjRlNTk5YTk1MjQyYmY4NTA4ZDJlNjg1ZWZmYzI3MDMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtbMrY0kH2EgS/1iKZy1Ezos/h4j C5zrpAQduwEDqYzYWrTAW4foTQ/YObYzhDwA4wnGy434gNOxIcxb04tCOcMAGogZ pI72z1w9E4JJ/tZYM1MTLdXgzj0q5BFrLkQEtRLvfXZB+GBFdPdSBDgz478PbMnd 4LG0+BEBJIcvsaUu/bucE3wi2GMZM/ZgdA+ITOOubcB108sK/FbR2bAXZg7U1ZgZ W5x3uYHRNSYN+KnV1X6mfYRVsM9kp3SHR17Y/E2mTnLCZdTx7ML1yuanus7+rjyv 1IRZB9Mna4UzlTmT0JyFgSI24qLXRwZPBSu85dJ06nQuZQsEHyFMOY7B2QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD0IlfZOWZqVJCv4UI0uaF7/wnAwMB8GA1UdIwQY MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt ODJhZDE0NTU1ZWFhLzEvUFFpVjlrNVptcFVrS19oUWpTNW9Ydl9DY0RBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEtODJhZDE0NTU1ZWFh LzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAURaAMA0G CSqGSIb3DQEBCwUAA4IBAQAoXWYKTTGUN9UZoyZSkQKUeV62xTr77a1eX74FCk+4 Z7oO5O8rv30JbZlLjYgtTHrQhjqj9Hf4l2blIzWqx8EZjVR3PjKSUe4EKaOR34+d EjiYipAZu6KoDRTP8H0utPR9nR7SvPr0tBO1/cm/O+lIn2GFRMYhWsT7zV145T+o G+qXDqmij0+v2B1bef7aK80Fsu+kpUJjkt3dOrJmDzOOLNXpB3bntngpcUzejn16 U6Cdg7yLwhva+U9dGLJyavq+v20D/oLnd7SCwCcoa1I/xzosxad1PRbnmi56TNFj E+xjbHzbiMg62ovztom4dV0rpQaQ3re8zzRy/fSWiHqN -----END CERTIFICATE-----Generated at Sun Jan 18 15:29:29 2026 by rpki-client