This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/fb4r4sYbkD7wTC4O4Za0r0jaCkg.roa File: fb4r4sYbkD7wTC4O4Za0r0jaCkg.roa (raw, json) Hash identifier: jpoPaAYyEZL4Wy2tKQ1ADsHsFYkQWRVYKHFCvJk4oKI= Subject key identifier: 7D:BE:2B:E2:C6:1B:90:3E:F0:4C:2E:0E:E1:96:B4:AF:48:DA:0A:48 Certificate issuer: /CN=991e4b179e0953b9ecc585ad9859a00be3568001 Certificate serial: 019B76EB8FB00814845B6110287965B98CBE Authority key identifier: 99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/fb4r4sYbkD7wTC4O4Za0r0jaCkg.roa Signing time: Thu 01 Jan 2026 00:18:27 +0000 ROA not before: Thu 01 Jan 2026 00:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8726 IP address blocks: 81.21.192.0/21 maxlen: 21 81.21.200.0/22 maxlen: 22 81.21.204.0/23 maxlen: 23 81.21.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:8f:b0:08:14:84:5b:61:10:28:79:65:b9:8c:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=991e4b179e0953b9ecc585ad9859a00be3568001 Validity Not Before: Jan 1 00:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7dbe2be2c61b903ef04c2e0ee196b4af48da0a48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:90:3d:4b:58:97:87:57:bf:06:35:a3:f9:3d: 3e:3c:ed:de:82:d9:3f:fb:40:c7:72:b3:72:81:d1: f4:f4:a4:14:f9:f1:cf:dc:d6:c7:4b:92:e1:2e:e4: 00:9a:50:66:cc:e6:7a:b4:8b:e6:76:de:30:a2:70: 50:4c:5f:3b:7e:7c:48:e8:96:64:09:46:09:ce:36: 16:23:95:0c:13:23:f0:66:bc:bd:fa:0e:c8:33:b5: 54:44:df:86:50:5e:0e:3d:ec:4d:04:72:52:4f:62: 29:b3:ec:05:62:ad:91:95:6c:63:71:71:a9:2b:88: 0d:22:79:62:1d:df:2f:00:c0:d4:cc:c8:8a:cf:d5: 9d:0d:78:76:35:14:2a:ea:5d:42:1c:f3:a5:95:4d: e2:c7:a2:6e:71:40:59:a5:e4:ee:6d:18:7f:ea:92: 21:81:4c:00:c6:9b:a2:95:11:12:4e:1c:4b:58:cf: d8:d4:25:a6:8e:0f:1a:2b:9b:5c:d8:ac:a3:1b:d4: f3:29:59:06:52:84:05:23:a2:87:ff:43:e0:fe:9a: be:63:93:f4:82:60:19:05:2c:81:eb:36:8a:7e:16: 6c:d9:d8:fd:a7:bc:e0:ab:77:b8:c7:0a:1c:81:ce: 38:73:3b:e9:9c:a5:25:b2:1c:43:a1:bb:ca:6b:54: df:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:BE:2B:E2:C6:1B:90:3E:F0:4C:2E:0E:E1:96:B4:AF:48:DA:0A:48 X509v3 Authority Key Identifier: keyid:99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/fb4r4sYbkD7wTC4O4Za0r0jaCkg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.21.192.0-81.21.205.255 81.21.207.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:9c:ba:50:ab:91:c9:ce:b3:22:de:a3:37:a2:df:4b:fd:48: 62:22:90:d5:32:6d:e4:46:cc:e4:fb:d5:e8:ef:79:1a:17:4e: 59:23:66:65:1e:d9:09:e7:f6:bb:d3:49:a2:59:e7:1d:93:e8: 9b:09:02:dd:cf:ce:76:1d:fe:62:59:c5:ac:77:b6:31:cf:66: 42:33:f7:56:76:06:8f:19:84:a4:5a:e9:19:67:fd:58:91:f2: 9e:74:f5:00:49:89:df:48:bb:e6:86:5a:e0:c8:34:a5:58:53: 60:bd:21:91:22:87:ce:4f:55:31:7e:6b:4c:b6:70:94:08:f9: 49:4f:51:cf:90:1e:4f:ef:ff:30:3b:87:42:bb:05:38:15:cd: 2c:52:b1:31:19:a7:4b:67:ef:a3:0a:c9:8e:c3:63:22:4d:46: 2a:88:fe:d9:fe:66:3d:30:0a:24:e8:cd:86:37:3d:97:b1:f1: eb:e1:18:22:39:62:6f:a6:a5:41:47:fa:83:d7:df:b3:8a:d6: 9f:72:65:01:c3:e1:06:6e:f3:05:6c:57:24:de:35:62:5f:e8: c3:6b:18:58:f4:26:1b:75:16:7f:df:57:0e:e0:72:be:92:d5: 3a:9c:a5:dd:db:05:eb:f7:4e:b0:0d:bc:65:31:89:ba:f7:6a: e0:93:d9:0e -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt264+wCBSEW2EQKHlluYy+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5MWU0YjE3OWUwOTUzYjllY2M1ODVhZDk4NTlhMDBiZTM1 NjgwMDEwHhcNMjYwMTAxMDAxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZGJlMmJlMmM2MWI5MDNlZjA0YzJlMGVlMTk2YjRhZjQ4ZGEwYTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpA9S1iXh1e/BjWj+T0+PO3egtk/ +0DHcrNygdH09KQU+fHP3NbHS5LhLuQAmlBmzOZ6tIvmdt4wonBQTF87fnxI6JZk CUYJzjYWI5UMEyPwZry9+g7IM7VURN+GUF4OPexNBHJST2Ips+wFYq2RlWxjcXGp K4gNInliHd8vAMDUzMiKz9WdDXh2NRQq6l1CHPOllU3ix6JucUBZpeTubRh/6pIh gUwAxpuilRESThxLWM/Y1CWmjg8aK5tc2KyjG9TzKVkGUoQFI6KH/0Pg/pq+Y5P0 gmAZBSyB6zaKfhZs2dj9p7zgq3e4xwocgc44czvpnKUlshxDobvKa1TfhQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFH2+K+LGG5A+8EwuDuGWtK9I2gpIMB8GA1UdIwQY MBaAFJkeSxeeCVO57MWFrZhZoAvjVoABMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVI1TEY1NEpVN25zeFlXdG1GbWdDLU5XZ0FFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9iZmRkYTktMjc0Mi00YjJmLTg1YjYt ZWY5Yzk1Mjc2OTMyLzEvZmI0cjRzWWJrRDd3VEM0TzRaYTByMGphQ2tnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9iZmRkYTktMjc0Mi00YjJmLTg1YjYtZWY5Yzk1Mjc2OTMy LzEvbVI1TEY1NEpVN25zeFlXdG1GbWdDLU5XZ0FFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAZRFcAD BAFRFcwDBABRFc8wDQYJKoZIhvcNAQELBQADggEBAGuculCrkcnOsyLeozei30v9 SGIikNUybeRGzOT71ejveRoXTlkjZmUe2Qnn9rvTSaJZ5x2T6JsJAt3PznYd/mJZ xax3tjHPZkIz91Z2Bo8ZhKRa6Rln/ViR8p509QBJid9Iu+aGWuDINKVYU2C9IZEi h85PVTF+a0y2cJQI+UlPUc+QHk/v/zA7h0K7BTgVzSxSsTEZp0tn76MKyY7DYyJN RiqI/tn+Zj0wCiTozYY3PZex8evhGCI5Ym+mpUFH+oPX37OK1p9yZQHD4QZu8wVs VyTeNWJf6MNrGFj0Jht1Fn/fVw7gcr6S1Tqcpd3bBev3TrANvGUxibr3auCT2Q4= -----END CERTIFICATE-----Generated at Tue Jan 27 08:47:10 2026 by rpki-client