This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/dB9swCFOSWNPmBMrvHldamJSjMo.roa File: dB9swCFOSWNPmBMrvHldamJSjMo.roa (raw, json) Hash identifier: 8ZwY2aDHtJ/fXAdeF79U4iahz8aOcQV9VBZBfwnviv8= Subject key identifier: 74:1F:6C:C0:21:4E:49:63:4F:98:13:2B:BC:79:5D:6A:62:52:8C:CA Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Certificate serial: 019B78A2C73D54B12153A123C5ACBA1B532A Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/dB9swCFOSWNPmBMrvHldamJSjMo.roa Signing time: Thu 01 Jan 2026 08:18:12 +0000 ROA not before: Thu 01 Jan 2026 08:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7029 IP address blocks: 81.22.131.0/24 maxlen: 24 81.22.135.0/24 maxlen: 24 81.22.138.0/24 maxlen: 24 81.22.141.0/24 maxlen: 24 89.185.0.0/24 maxlen: 24 109.72.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 01:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:c7:3d:54:b1:21:53:a1:23:c5:ac:ba:1b:53:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Validity Not Before: Jan 1 08:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=741f6cc0214e49634f98132bbc795d6a62528cca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:f3:3d:82:32:0e:de:1d:1e:45:bc:ed:21:07: 96:9c:95:5d:d2:8e:a0:32:ee:c9:64:75:c3:81:df: 8f:5f:0a:29:5f:3e:40:2f:a1:fe:64:a2:21:54:a4: bc:0d:90:02:2e:4f:9c:dd:a7:29:70:3d:17:52:3d: fd:53:6c:be:3c:da:1a:f5:f2:0f:a7:7e:a9:1e:24: c0:95:cb:5b:78:b8:51:7a:84:9c:e4:80:3f:dd:3e: e7:db:4d:0b:8b:ae:04:0e:b7:26:cb:6e:cc:14:24: d3:8b:c2:9b:4b:28:f9:1f:13:e9:a5:34:4e:16:bd: d5:48:ba:ab:98:3d:12:a4:c5:ca:d1:e1:36:d5:77: 75:8e:89:eb:a3:1e:18:16:ba:f3:c2:dd:cc:3f:67: 63:c6:39:f3:d5:15:4f:27:dd:73:f9:eb:d7:88:be: e5:e3:ac:0e:87:d4:c4:5a:b4:24:be:5a:8a:c3:38: fc:db:8e:fa:ba:f8:35:ed:c1:db:61:76:9f:3a:40: 8e:cb:1a:25:bd:da:10:2a:39:d5:2e:fd:20:c6:ce: 6e:1c:68:ca:e1:df:40:50:88:8a:7e:7c:e8:95:5e: 1a:25:3b:e7:a4:c1:ef:09:d8:f4:a9:18:57:d1:62: 91:04:19:22:b6:cb:c3:71:cd:d8:22:57:f0:25:72: 4d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:1F:6C:C0:21:4E:49:63:4F:98:13:2B:BC:79:5D:6A:62:52:8C:CA X509v3 Authority Key Identifier: keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/dB9swCFOSWNPmBMrvHldamJSjMo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.22.131.0/24 81.22.135.0/24 81.22.138.0/24 81.22.141.0/24 89.185.0.0/24 109.72.123.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:40:37:b6:35:10:7d:b5:a3:24:93:32:2e:1c:66:e2:92:98: e3:42:68:6b:8c:8e:56:c5:47:02:d2:e9:f4:19:e2:14:e8:2b: aa:79:83:38:59:3b:b5:84:5b:a0:ee:49:27:1c:12:2d:1a:94: c5:3c:2e:dc:14:4c:61:db:53:f2:24:8b:84:fd:6b:8d:39:12: 04:01:4e:e4:7e:eb:2f:05:44:1c:94:ca:98:8a:9a:d2:83:5a: 8d:be:da:12:a8:0c:43:42:a3:55:6b:0b:ed:06:7a:ec:44:51: 18:b6:65:c6:c7:ff:ba:f8:cf:60:cf:7c:0b:65:24:96:7b:cf: 8e:89:cb:51:14:d1:2a:48:72:58:fe:2c:46:be:40:52:72:a1: 95:d5:51:d5:fc:b8:80:d1:63:56:ae:3d:5b:eb:ee:5a:48:e2: ab:6d:d7:ad:a0:0a:ff:52:13:99:67:eb:48:0c:50:15:16:48: 01:3c:f2:63:1b:0d:c1:07:be:df:44:ec:6a:b3:f0:a2:ff:de: fd:79:18:50:b5:ef:a7:87:a8:3f:e9:01:0b:5d:fe:1b:48:47: ae:2e:9b:af:76:24:a6:af:8a:07:84:dd:b1:93:8c:57:1b:48: 25:89:8f:04:40:67:15:e1:c6:69:fc:3c:fd:8a:79:61:dd:d5: 4b:f7:0f:5b -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt4osc9VLEhU6Ejxay6G1MqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk OGRhYmUwHhcNMjYwMTAxMDgxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDFmNmNjMDIxNGU0OTYzNGY5ODEzMmJiYzc5NWQ2YTYyNTI4Y2NhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4fM9gjIO3h0eRbztIQeWnJVd0o6g Mu7JZHXDgd+PXwopXz5AL6H+ZKIhVKS8DZACLk+c3acpcD0XUj39U2y+PNoa9fIP p36pHiTAlctbeLhReoSc5IA/3T7n200Li64EDrcmy27MFCTTi8KbSyj5HxPppTRO Fr3VSLqrmD0SpMXK0eE21Xd1jonrox4YFrrzwt3MP2djxjnz1RVPJ91z+evXiL7l 46wOh9TEWrQkvlqKwzj82476uvg17cHbYXafOkCOyxolvdoQKjnVLv0gxs5uHGjK 4d9AUIiKfnzolV4aJTvnpMHvCdj0qRhX0WKRBBkitsvDcc3YIlfwJXJNwQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFHQfbMAhTkljT5gTK7x5XWpiUozKMB8GA1UdIwQY MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt ODJhZDE0NTU1ZWFhLzEvZEI5c3dDRk9TV05QbUJNcnZIbGRhbUpTak1vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEtODJhZDE0NTU1ZWFh LzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAURaDAwQA URaHAwQAURaKAwQAURaNAwQAWbkAAwQAbUh7MA0GCSqGSIb3DQEBCwUAA4IBAQAd QDe2NRB9taMkkzIuHGbikpjjQmhrjI5WxUcC0un0GeIU6CuqeYM4WTu1hFug7kkn HBItGpTFPC7cFExh21PyJIuE/WuNORIEAU7kfusvBUQclMqYiprSg1qNvtoSqAxD QqNVawvtBnrsRFEYtmXGx/+6+M9gz3wLZSSWe8+OictRFNEqSHJY/ixGvkBScqGV 1VHV/LiA0WNWrj1b6+5aSOKrbdetoAr/UhOZZ+tIDFAVFkgBPPJjGw3BB77fROxq s/Ci/979eRhQte+nh6g/6QELXf4bSEeuLpuvdiSmr4oHhN2xk4xXG0gliY8EQGcV 4cZp/Dz9inlh3dVL9w9b -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:10 2026 by rpki-client