This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/1cfc8a-27a0-4d79-814f-fd8421bf2ba9/1/9lU8W6GsbjOikxoEyiZGZ32gMu8.roa File: 9lU8W6GsbjOikxoEyiZGZ32gMu8.roa (raw, json) Hash identifier: 6hhQ4bRIwowHm8SVibrWEZqFmNLkjdhuBAUnwS85Eso= Subject key identifier: F6:55:3C:5B:A1:AC:6E:33:A2:93:1A:04:CA:26:46:67:7D:A0:32:EF Certificate issuer: /CN=06cc2a26b31ac24bc5295d24a8e13071f2ff0d61 Certificate serial: 019B7758BB9C8CF3489C59F861EFDFDB2EC3 Authority key identifier: 06:CC:2A:26:B3:1A:C2:4B:C5:29:5D:24:A8:E1:30:71:F2:FF:0D:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BswqJrMawkvFKV0kqOEwcfL_DWE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/1cfc8a-27a0-4d79-814f-fd8421bf2ba9/1/9lU8W6GsbjOikxoEyiZGZ32gMu8.roa Signing time: Thu 01 Jan 2026 02:17:42 +0000 ROA not before: Thu 01 Jan 2026 02:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 81.30.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/1cfc8a-27a0-4d79-814f-fd8421bf2ba9/1/BswqJrMawkvFKV0kqOEwcfL_DWE.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/1cfc8a-27a0-4d79-814f-fd8421bf2ba9/1/BswqJrMawkvFKV0kqOEwcfL_DWE.mft rsync://rpki.ripe.net/repository/DEFAULT/BswqJrMawkvFKV0kqOEwcfL_DWE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:bb:9c:8c:f3:48:9c:59:f8:61:ef:df:db:2e:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06cc2a26b31ac24bc5295d24a8e13071f2ff0d61 Validity Not Before: Jan 1 02:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f6553c5ba1ac6e33a2931a04ca2646677da032ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d1:26:53:db:3f:a3:ad:ca:ac:ec:df:3e:15: d3:d5:b6:ed:29:65:a1:d3:33:5e:12:d9:0e:fb:50: 78:81:7a:bb:50:74:a5:b2:2d:12:33:8a:2d:90:e2: 43:54:87:0f:66:85:79:e2:7a:3a:39:ae:c0:30:bb: 91:a1:82:5e:f4:66:82:8a:0e:b2:aa:68:8b:69:81: e4:b4:ef:ce:8b:38:3e:3e:de:3e:d0:d7:99:ed:b4: e4:74:c9:45:1c:5c:c8:c8:31:c7:f8:29:6b:f7:a7: e7:a9:cd:2e:52:40:4d:fb:5f:f6:32:42:bc:46:0d: c7:f5:df:4f:7e:84:e7:16:7d:d0:e5:79:a9:11:2e: eb:ae:7f:b4:5d:a3:76:3a:f3:00:32:a6:5f:c7:4e: 0f:42:a5:2a:78:11:2a:22:fd:71:f3:20:7c:01:06: 60:6b:e6:1f:b9:b8:20:14:6a:07:4a:fb:c4:88:b1: 61:90:7a:c5:ac:81:47:2a:5a:1f:6c:1f:2d:96:e0: e9:d5:e6:67:df:e8:19:03:ee:0d:16:ce:94:3e:7e: d9:49:dc:55:2a:38:bb:fa:0d:14:6a:18:46:61:98: 5f:03:31:0f:6e:3a:11:fd:1f:46:de:25:cd:10:50: c1:c7:59:dc:d0:a7:14:65:32:ab:ad:3b:e9:09:0f: d8:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:55:3C:5B:A1:AC:6E:33:A2:93:1A:04:CA:26:46:67:7D:A0:32:EF X509v3 Authority Key Identifier: keyid:06:CC:2A:26:B3:1A:C2:4B:C5:29:5D:24:A8:E1:30:71:F2:FF:0D:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BswqJrMawkvFKV0kqOEwcfL_DWE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/1cfc8a-27a0-4d79-814f-fd8421bf2ba9/1/9lU8W6GsbjOikxoEyiZGZ32gMu8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/1cfc8a-27a0-4d79-814f-fd8421bf2ba9/1/BswqJrMawkvFKV0kqOEwcfL_DWE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.30.102.0/24 Signature Algorithm: sha256WithRSAEncryption 89:54:56:98:84:8c:f8:f1:47:2a:0f:b8:2f:1e:c1:ec:cd:41: b0:cf:29:fc:a2:1b:ed:13:f8:5f:e5:f7:ec:00:7a:d8:66:13: 4d:ee:3f:86:33:62:c7:16:1e:64:c4:1e:17:bd:08:a5:24:9c: 84:33:41:ad:cb:a7:27:5d:f9:32:cd:78:b2:22:a4:d6:51:5e: a1:37:bd:52:a7:bf:79:c8:e1:97:39:75:ea:99:55:c4:94:c3: 48:dc:b0:2b:45:4c:2d:2b:d8:eb:63:0a:c5:d5:3c:c0:6f:8b: ac:0c:56:64:15:6c:e0:c5:e0:25:b8:60:aa:93:93:79:05:a0: 1b:12:60:45:58:fc:85:dc:fb:8c:55:79:cf:40:64:73:c8:cd: 67:76:c5:8b:12:67:7f:82:cb:64:a3:07:47:44:86:05:d1:e1: 34:8a:7b:93:82:4b:56:c2:4f:4e:f1:40:5d:6a:fb:94:af:ae: 2c:f7:52:3c:91:49:1e:39:8e:e6:e0:1a:51:7b:a9:d5:a3:ce: f3:e4:26:87:09:f4:e2:2d:9a:00:b6:d2:88:c7:c9:8f:36:8e: ba:83:54:23:96:22:dc:2f:7b:56:a9:87:a4:b6:38:a3:8a:ed: af:fa:b0:de:19:8d:02:45:d7:a4:8f:78:e9:9f:ce:04:0e:f0: 15:1c:37:82 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WLucjPNInFn4Ye/f2y7DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2Y2MyYTI2YjMxYWMyNGJjNTI5NWQyNGE4ZTEzMDcxZjJm ZjBkNjEwHhcNMjYwMTAxMDIxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjU1M2M1YmExYWM2ZTMzYTI5MzFhMDRjYTI2NDY2NzdkYTAzMmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9EmU9s/o63KrOzfPhXT1bbtKWWh 0zNeEtkO+1B4gXq7UHSlsi0SM4otkOJDVIcPZoV54no6Oa7AMLuRoYJe9GaCig6y qmiLaYHktO/Oizg+Pt4+0NeZ7bTkdMlFHFzIyDHH+Clr96fnqc0uUkBN+1/2MkK8 Rg3H9d9PfoTnFn3Q5XmpES7rrn+0XaN2OvMAMqZfx04PQqUqeBEqIv1x8yB8AQZg a+YfubggFGoHSvvEiLFhkHrFrIFHKlofbB8tluDp1eZn3+gZA+4NFs6UPn7ZSdxV Kji7+g0UahhGYZhfAzEPbjoR/R9G3iXNEFDBx1nc0KcUZTKrrTvpCQ/Y9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPZVPFuhrG4zopMaBMomRmd9oDLvMB8GA1UdIwQY MBaAFAbMKiazGsJLxSldJKjhMHHy/w1hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnN3cUpyTWF3a3ZGS1Ywa3FPRXdjZkxfRFdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8xY2ZjOGEtMjdhMC00ZDc5LTgxNGYt ZmQ4NDIxYmYyYmE5LzEvOWxVOFc2R3Niak9pa3hvRXlpWkdaMzJnTXU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC8xY2ZjOGEtMjdhMC00ZDc5LTgxNGYtZmQ4NDIxYmYyYmE5 LzEvQnN3cUpyTWF3a3ZGS1Ywa3FPRXdjZkxfRFdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUR5mMA0G CSqGSIb3DQEBCwUAA4IBAQCJVFaYhIz48UcqD7gvHsHszUGwzyn8ohvtE/hf5ffs AHrYZhNN7j+GM2LHFh5kxB4XvQilJJyEM0Gty6cnXfkyzXiyIqTWUV6hN71Sp795 yOGXOXXqmVXElMNI3LArRUwtK9jrYwrF1TzAb4usDFZkFWzgxeAluGCqk5N5BaAb EmBFWPyF3PuMVXnPQGRzyM1ndsWLEmd/gstkowdHRIYF0eE0inuTgktWwk9O8UBd avuUr64s91I8kUkeOY7m4BpRe6nVo87z5CaHCfTiLZoAttKIx8mPNo66g1QjliLc L3tWqYektjijiu2v+rDeGY0CRdekj3jpn84EDvAVHDeC -----END CERTIFICATE-----Generated at Fri Jan 2 11:03:59 2026 by rpki-client