This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/xU0xwowQ67JfNTvuWhmN_LJ0Qlk.roa File: xU0xwowQ67JfNTvuWhmN_LJ0Qlk.roa (raw, json) Hash identifier: o83T2tUfMjMlJo9FDPNeNut66cluT51kf+W4125fZLI= Subject key identifier: C5:4D:31:C2:8C:10:EB:B2:5F:35:3B:EE:5A:19:8D:FC:B2:74:42:59 Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Certificate serial: 019B78A2C5DD80EA1E89D76944B888A4AE29 Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/xU0xwowQ67JfNTvuWhmN_LJ0Qlk.roa Signing time: Thu 01 Jan 2026 08:18:11 +0000 ROA not before: Thu 01 Jan 2026 08:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5511 IP address blocks: 81.22.139.0/24 maxlen: 24 81.22.142.0/24 maxlen: 24 81.22.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 01:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:c5:dd:80:ea:1e:89:d7:69:44:b8:88:a4:ae:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Validity Not Before: Jan 1 08:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c54d31c28c10ebb25f353bee5a198dfcb2744259 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:06:40:9d:b3:9e:ab:08:4a:31:66:db:fb:b6: c2:bb:f6:c4:3a:f3:f1:bf:4d:2d:45:17:0b:9f:53: e7:e1:2b:fc:39:5d:db:e2:a6:33:bf:51:7b:b8:08: 71:91:c4:a2:8b:18:83:a8:32:eb:1b:e2:58:be:36: 47:5e:e5:0e:ec:e9:3c:1c:7e:94:66:9e:01:42:a1: 30:7d:87:b8:75:0e:c1:20:f3:31:de:7d:ee:1e:d3: b7:53:ab:5c:b2:7c:5d:b8:9a:b6:22:23:0b:ae:44: 40:06:f1:e6:db:95:fa:65:57:bd:9d:09:a6:f5:78: 4c:97:46:c4:f1:7a:44:2f:2f:da:78:c5:0f:ff:a4: a1:2a:b3:5c:90:35:94:8b:9a:fc:49:da:ee:c1:0a: 2a:77:31:1b:50:4c:c5:2a:d1:28:3e:6a:b9:62:b2: df:44:f3:37:0c:64:bd:d3:d8:eb:c8:61:ed:ca:29: 17:ff:5a:c3:e2:60:9c:70:62:26:ff:c9:3a:be:29: 32:ca:4b:a2:5f:94:1d:fa:75:5a:cc:e6:49:e8:ce: ca:ac:38:b7:82:a4:24:a7:18:33:02:59:ff:5f:4e: 04:9a:68:5b:62:cb:71:7d:03:14:1d:fc:bc:a7:a1: 4a:9c:3b:0f:bf:f8:5f:9f:f9:1f:3d:81:49:33:d7: d1:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:4D:31:C2:8C:10:EB:B2:5F:35:3B:EE:5A:19:8D:FC:B2:74:42:59 X509v3 Authority Key Identifier: keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/xU0xwowQ67JfNTvuWhmN_LJ0Qlk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.22.139.0/24 81.22.142.0/23 Signature Algorithm: sha256WithRSAEncryption 4c:bc:83:37:5c:a2:dc:c8:8b:5a:7a:70:80:e8:11:8e:fb:93: 86:10:e4:fc:8b:bb:c6:22:ef:90:81:00:9a:82:92:df:f6:c7: c7:8a:d0:74:0d:c4:c6:69:d5:09:c2:2d:62:58:a7:9c:00:36: 4d:f8:ca:83:5e:04:bd:a9:36:fd:d4:e1:72:30:57:19:57:9d: c7:4b:ff:79:73:95:e6:fb:fa:f8:56:ca:25:95:3d:a7:6f:97: ea:19:e8:1d:d5:f5:78:08:d4:2a:78:47:0e:c1:0e:a0:28:07: 2c:8d:ce:a1:68:8c:d9:c1:eb:8f:17:28:fc:65:2c:a2:7f:d9: ec:c6:62:aa:a8:e3:41:81:8b:d6:71:06:48:8c:f9:64:38:a1: 6f:dd:2b:91:86:dc:56:5a:e0:dd:bd:a5:b4:1f:26:cc:be:bb: cb:f1:f3:d1:81:4e:70:7d:28:c6:b7:5b:f2:ef:32:01:40:cb: d9:3f:d2:d1:ea:af:3a:9c:9a:13:0f:af:89:82:08:d9:a5:6e: 3a:f3:17:2a:40:92:d5:1c:ec:6d:2d:e8:7e:8d:c0:18:4b:0b: 05:f9:f6:dc:d7:0c:72:b9:31:3a:95:70:c4:a1:8e:46:77:2b: 40:cb:c0:f1:ce:fd:62:2d:73:a4:c3:3b:e6:cd:78:1a:ce:57: 41:b1:be:09 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4osXdgOoeiddpRLiIpK4pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk OGRhYmUwHhcNMjYwMTAxMDgxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTRkMzFjMjhjMTBlYmIyNWYzNTNiZWU1YTE5OGRmY2IyNzQ0MjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgZAnbOeqwhKMWbb+7bCu/bEOvPx v00tRRcLn1Pn4Sv8OV3b4qYzv1F7uAhxkcSiixiDqDLrG+JYvjZHXuUO7Ok8HH6U Zp4BQqEwfYe4dQ7BIPMx3n3uHtO3U6tcsnxduJq2IiMLrkRABvHm25X6ZVe9nQmm 9XhMl0bE8XpELy/aeMUP/6ShKrNckDWUi5r8SdruwQoqdzEbUEzFKtEoPmq5YrLf RPM3DGS909jryGHtyikX/1rD4mCccGIm/8k6vikyykuiX5Qd+nVazOZJ6M7KrDi3 gqQkpxgzAln/X04EmmhbYstxfQMUHfy8p6FKnDsPv/hfn/kfPYFJM9fRPQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMVNMcKMEOuyXzU77loZjfyydEJZMB8GA1UdIwQY MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt ODJhZDE0NTU1ZWFhLzEveFUweHdvd1E2N0pmTlR2dVdobU5fTEowUWxrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEtODJhZDE0NTU1ZWFh LzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAURaLAwQB URaOMA0GCSqGSIb3DQEBCwUAA4IBAQBMvIM3XKLcyItaenCA6BGO+5OGEOT8i7vG Iu+QgQCagpLf9sfHitB0DcTGadUJwi1iWKecADZN+MqDXgS9qTb91OFyMFcZV53H S/95c5Xm+/r4VsollT2nb5fqGegd1fV4CNQqeEcOwQ6gKAcsjc6haIzZweuPFyj8 ZSyif9nsxmKqqONBgYvWcQZIjPlkOKFv3SuRhtxWWuDdvaW0HybMvrvL8fPRgU5w fSjGt1vy7zIBQMvZP9LR6q86nJoTD6+JggjZpW468xcqQJLVHOxtLeh+jcAYSwsF +fbc1wxyuTE6lXDEoY5GdytAy8Dxzv1iLXOkwzvmzXgazldBsb4J -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:22 2026 by rpki-client