This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/_cdc7mtrN2pcb5OE7ig1oz33LKU.roa File: _cdc7mtrN2pcb5OE7ig1oz33LKU.roa (raw, json) Hash identifier: Zmdncbz3cfd7dp+nPBAwlH29jlm6I7HTw5i+rzzfBRI= Subject key identifier: FD:C7:5C:EE:6B:6B:37:6A:5C:6F:93:84:EE:28:35:A3:3D:F7:2C:A5 Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Certificate serial: 019B78A2C97ACD74A357758EA62F299FC138 Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/_cdc7mtrN2pcb5OE7ig1oz33LKU.roa Signing time: Thu 01 Jan 2026 08:18:12 +0000 ROA not before: Thu 01 Jan 2026 08:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49981 IP address blocks: 81.22.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:c9:7a:cd:74:a3:57:75:8e:a6:2f:29:9f:c1:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Validity Not Before: Jan 1 08:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fdc75cee6b6b376a5c6f9384ee2835a33df72ca5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c3:21:c9:ce:75:f9:c4:5e:9d:07:fd:9a:92: 46:76:ae:43:4b:cf:8b:2e:86:10:32:e0:31:3c:b9: 9e:c8:4b:45:59:1c:00:dc:30:77:1c:a7:ec:d4:b7: 9d:67:03:8d:d6:08:02:6e:e0:f5:05:0c:07:c2:fd: 4d:8b:de:80:18:52:2b:fb:b4:dd:69:5c:0a:be:bc: 44:a9:90:b7:39:b9:1e:8c:94:a6:71:3a:f0:d2:51: 12:1c:b6:0e:a3:60:56:a8:ce:48:09:8d:42:15:0c: 43:8c:e7:50:ff:34:88:59:84:17:40:21:37:bf:82: f2:fb:b6:9f:7c:33:2b:f0:b2:14:b1:a8:46:ee:de: 19:9f:fc:13:49:31:52:1c:3a:38:36:b6:b9:8f:f4: a8:f7:8e:6f:0e:9b:e5:d3:55:9e:b9:be:c5:3c:7b: 0a:a1:6a:58:e9:d1:5c:fc:8a:56:a2:ba:86:28:b6: 57:ab:97:6a:03:23:67:6b:7d:06:84:d6:fb:26:70: ac:d4:c8:84:45:44:08:7e:5f:29:83:ff:e0:9f:32: c1:04:91:53:7a:58:48:a9:7b:97:d6:e2:d4:93:2f: 25:49:d3:6a:9b:3f:58:1f:6d:64:bd:42:8b:61:64: aa:4a:7c:34:e9:c1:42:d0:5d:c5:94:25:f2:50:5b: c2:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:C7:5C:EE:6B:6B:37:6A:5C:6F:93:84:EE:28:35:A3:3D:F7:2C:A5 X509v3 Authority Key Identifier: keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/_cdc7mtrN2pcb5OE7ig1oz33LKU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.22.134.0/24 Signature Algorithm: sha256WithRSAEncryption 00:b4:7d:aa:2c:b4:0a:76:76:cf:84:ce:d3:17:93:92:5b:f9: 00:a9:11:16:b3:17:88:17:2c:b5:62:80:a7:c5:8d:c6:22:44: 50:c0:0d:0d:6d:a3:55:e6:2f:20:da:fa:6d:a7:98:de:00:07: 1e:4f:ce:8a:3b:b2:ff:6d:d5:d1:df:ba:6b:fe:3e:f1:e0:e6: b4:76:3d:5d:ca:28:89:05:0e:14:eb:34:7d:3c:8a:2d:5a:43: 85:9e:bd:f3:5b:a3:93:35:f9:76:0a:e8:b3:fa:e7:35:e5:1e: eb:46:e5:35:af:6c:d6:39:45:28:c8:c1:9d:b4:d9:8c:24:5a: 60:b8:f4:ed:ac:01:79:7d:bc:51:1a:2c:86:37:30:de:72:4d: dc:59:50:92:c7:84:a6:53:c2:c9:43:ab:a4:f4:f1:f9:36:50: 69:ea:72:22:f6:9b:30:3b:43:bc:55:04:bf:23:5b:a1:68:84: 03:f2:35:ba:8b:33:56:0b:19:7b:90:36:11:94:44:ad:23:21: 2b:cf:a6:45:95:5e:a8:93:fd:00:db:d5:fd:1b:44:13:15:bc: 72:48:c9:f4:cb:f5:f7:3f:f1:9a:2a:5a:05:29:d9:55:a8:ff: ca:c4:d2:f6:08:39:48:e5:31:68:4a:f2:80:00:42:d9:a5:39: ba:2d:09:28 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4osl6zXSjV3WOpi8pn8E4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk OGRhYmUwHhcNMjYwMTAxMDgxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZGM3NWNlZTZiNmIzNzZhNWM2ZjkzODRlZTI4MzVhMzNkZjcyY2E1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMMhyc51+cRenQf9mpJGdq5DS8+L LoYQMuAxPLmeyEtFWRwA3DB3HKfs1LedZwON1ggCbuD1BQwHwv1Ni96AGFIr+7Td aVwKvrxEqZC3ObkejJSmcTrw0lESHLYOo2BWqM5ICY1CFQxDjOdQ/zSIWYQXQCE3 v4Ly+7affDMr8LIUsahG7t4Zn/wTSTFSHDo4Nra5j/So945vDpvl01Weub7FPHsK oWpY6dFc/IpWorqGKLZXq5dqAyNna30GhNb7JnCs1MiERUQIfl8pg//gnzLBBJFT elhIqXuX1uLUky8lSdNqmz9YH21kvUKLYWSqSnw06cFC0F3FlCXyUFvCQQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP3HXO5razdqXG+ThO4oNaM99yylMB8GA1UdIwQY MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt ODJhZDE0NTU1ZWFhLzEvX2NkYzdtdHJOMnBjYjVPRTdpZzFvejMzTEtVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEtODJhZDE0NTU1ZWFh LzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAURaGMA0G CSqGSIb3DQEBCwUAA4IBAQAAtH2qLLQKdnbPhM7TF5OSW/kAqREWsxeIFyy1YoCn xY3GIkRQwA0NbaNV5i8g2vptp5jeAAceT86KO7L/bdXR37pr/j7x4Oa0dj1dyiiJ BQ4U6zR9PIotWkOFnr3zW6OTNfl2Cuiz+uc15R7rRuU1r2zWOUUoyMGdtNmMJFpg uPTtrAF5fbxRGiyGNzDeck3cWVCSx4SmU8LJQ6uk9PH5NlBp6nIi9pswO0O8VQS/ I1uhaIQD8jW6izNWCxl7kDYRlEStIyErz6ZFlV6ok/0A29X9G0QTFbxySMn0y/X3 P/GaKloFKdlVqP/KxNL2CDlI5TFoSvKAAELZpTm6LQko -----END CERTIFICATE-----Generated at Mon Jan 19 17:29:58 2026 by rpki-client