This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/awoG0vqbuXcZ0fW3Pyzb8qRWzRU.roa File: awoG0vqbuXcZ0fW3Pyzb8qRWzRU.roa (raw, json) Hash identifier: LBPWSggxFCfyXwT2FtM03BRPgZtweIKDgXvWge4aP/g= Subject key identifier: 6B:0A:06:D2:FA:9B:B9:77:19:D1:F5:B7:3F:2C:DB:F2:A4:56:CD:15 Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Certificate serial: 019B78A2C673B1416CA58195E0E2A29349BA Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/awoG0vqbuXcZ0fW3Pyzb8qRWzRU.roa Signing time: Thu 01 Jan 2026 08:18:12 +0000 ROA not before: Thu 01 Jan 2026 08:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6079 IP address blocks: 81.22.138.0/24 maxlen: 24 89.185.0.0/24 maxlen: 24 109.72.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:c6:73:b1:41:6c:a5:81:95:e0:e2:a2:93:49:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Validity Not Before: Jan 1 08:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b0a06d2fa9bb97719d1f5b73f2cdbf2a456cd15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:72:ea:7c:29:88:a8:bb:56:1f:e2:02:89:bb: 72:01:37:85:bd:87:1a:86:7a:0f:72:e3:e3:e2:57: ff:28:93:47:11:90:6b:09:80:1b:41:87:93:4b:cb: 22:f3:e1:66:cb:31:e1:85:fb:bb:78:c9:68:bc:e6: d8:1b:58:78:b7:2e:a5:a7:8d:20:fb:96:94:2c:ce: 3f:c7:2c:83:c3:93:df:1b:30:49:be:c7:01:78:e2: 32:df:f1:3a:ab:20:66:38:a7:98:a8:3b:d9:44:62: a7:2e:dd:f2:f0:4e:d1:71:be:bf:2a:2c:f7:57:4b: dc:8a:93:30:7b:eb:85:c7:dd:4d:dd:dc:e0:3a:4d: fd:a9:c2:68:f4:54:74:4a:d9:89:65:b3:f8:2f:bf: bd:cd:f5:5b:c3:4b:de:d0:6d:b7:89:ea:f6:64:5d: f0:42:60:3a:74:68:c8:0d:10:80:25:e8:ba:b7:18: b6:68:49:da:f7:d7:d3:a5:42:2a:cc:a6:d4:81:26: 36:5a:a1:a9:6d:1a:07:63:f6:66:22:aa:4c:f3:91: 9b:a8:c5:c4:db:c7:e2:70:58:1d:54:29:d0:08:16: 14:d3:f9:f2:33:eb:9e:ce:17:1a:60:66:da:25:13: 90:04:09:eb:4e:6b:d6:ea:cb:f0:1e:fe:79:1d:9f: a8:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:0A:06:D2:FA:9B:B9:77:19:D1:F5:B7:3F:2C:DB:F2:A4:56:CD:15 X509v3 Authority Key Identifier: keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/awoG0vqbuXcZ0fW3Pyzb8qRWzRU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.22.138.0/24 89.185.0.0/24 109.72.123.0/24 Signature Algorithm: sha256WithRSAEncryption 13:bf:e6:14:c9:a9:06:13:98:53:05:ff:3f:ff:4f:12:2b:7c: 4f:5b:67:d5:5f:b8:97:36:a4:69:d6:62:a5:ec:9a:87:2f:20: 9b:7d:42:a2:3c:24:e3:0b:24:3b:85:a3:03:70:3d:f2:de:8b: 88:11:e6:13:7e:16:5c:2e:fa:1f:b1:12:ba:0b:cc:8e:e2:61: ef:32:69:bd:10:e2:63:f5:a2:6d:94:37:68:34:d5:c3:a2:7c: 28:9e:9c:bc:d8:eb:30:a7:d1:46:c7:ed:5a:e0:3e:59:e8:b3: 80:c0:b9:18:31:97:5c:3b:17:2e:dd:9a:51:e3:ef:9a:df:06: 8c:56:08:fb:d9:29:d0:a8:d5:8c:1e:b7:61:9f:87:f5:92:63: 79:4c:fe:69:0d:7c:32:f7:72:cf:39:a4:b4:a2:3f:64:a4:76: 04:7b:6b:2a:3b:2c:72:77:0b:be:f0:84:d3:8d:3c:3e:76:a6: ee:ea:7d:be:12:e7:5f:99:d2:5e:3b:bc:9b:98:95:18:24:fb: 7f:8b:03:f5:bf:f5:0a:d8:66:06:b8:1c:e8:7a:2e:5e:48:fa: 68:12:3a:19:3e:74:12:6c:e9:6f:7f:88:be:5b:f1:52:69:a2: f6:68:55:ea:54:0a:89:38:a6:11:ba:5e:da:66:eb:49:7c:02: d8:6b:c1:03 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt4osZzsUFspYGV4OKik0m6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk OGRhYmUwHhcNMjYwMTAxMDgxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjBhMDZkMmZhOWJiOTc3MTlkMWY1YjczZjJjZGJmMmE0NTZjZDE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXLqfCmIqLtWH+ICibtyATeFvYca hnoPcuPj4lf/KJNHEZBrCYAbQYeTS8si8+FmyzHhhfu7eMlovObYG1h4ty6lp40g +5aULM4/xyyDw5PfGzBJvscBeOIy3/E6qyBmOKeYqDvZRGKnLt3y8E7Rcb6/Kiz3 V0vcipMwe+uFx91N3dzgOk39qcJo9FR0StmJZbP4L7+9zfVbw0ve0G23ier2ZF3w QmA6dGjIDRCAJei6txi2aEna99fTpUIqzKbUgSY2WqGpbRoHY/ZmIqpM85GbqMXE 28ficFgdVCnQCBYU0/nyM+uezhcaYGbaJROQBAnrTmvW6svwHv55HZ+otwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFGsKBtL6m7l3GdH1tz8s2/KkVs0VMB8GA1UdIwQY MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt ODJhZDE0NTU1ZWFhLzEvYXdvRzB2cWJ1WGNaMGZXM1B5emI4cVJXelJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEtODJhZDE0NTU1ZWFh LzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAURaKAwQA WbkAAwQAbUh7MA0GCSqGSIb3DQEBCwUAA4IBAQATv+YUyakGE5hTBf8//08SK3xP W2fVX7iXNqRp1mKl7JqHLyCbfUKiPCTjCyQ7haMDcD3y3ouIEeYTfhZcLvofsRK6 C8yO4mHvMmm9EOJj9aJtlDdoNNXDonwonpy82Oswp9FGx+1a4D5Z6LOAwLkYMZdc Oxcu3ZpR4++a3waMVgj72SnQqNWMHrdhn4f1kmN5TP5pDXwy93LPOaS0oj9kpHYE e2sqOyxydwu+8ITTjTw+dqbu6n2+EudfmdJeO7ybmJUYJPt/iwP1v/UK2GYGuBzo ei5eSPpoEjoZPnQSbOlvf4i+W/FSaaL2aFXqVAqJOKYRul7aZutJfALYa8ED -----END CERTIFICATE-----Generated at Mon Jan 19 16:54:24 2026 by rpki-client