This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/1cfc8a-27a0-4d79-814f-fd8421bf2ba9/1/pJ3ORYu20jUimM_yTFjEk51Oq9o.roa File: pJ3ORYu20jUimM_yTFjEk51Oq9o.roa (raw, json) Hash identifier: PCTJatpDnAOhayMUHNJZY/fD1I6Bq7AxOUaU54uRZNo= Subject key identifier: A4:9D:CE:45:8B:B6:D2:35:22:98:CF:F2:4C:58:C4:93:9D:4E:AB:DA Certificate issuer: /CN=06cc2a26b31ac24bc5295d24a8e13071f2ff0d61 Certificate serial: 019B7758BB13A63D8A71099FA5A9C755458B Authority key identifier: 06:CC:2A:26:B3:1A:C2:4B:C5:29:5D:24:A8:E1:30:71:F2:FF:0D:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BswqJrMawkvFKV0kqOEwcfL_DWE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/1cfc8a-27a0-4d79-814f-fd8421bf2ba9/1/pJ3ORYu20jUimM_yTFjEk51Oq9o.roa Signing time: Thu 01 Jan 2026 02:17:42 +0000 ROA not before: Thu 01 Jan 2026 02:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 81.30.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/1cfc8a-27a0-4d79-814f-fd8421bf2ba9/1/BswqJrMawkvFKV0kqOEwcfL_DWE.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/1cfc8a-27a0-4d79-814f-fd8421bf2ba9/1/BswqJrMawkvFKV0kqOEwcfL_DWE.mft rsync://rpki.ripe.net/repository/DEFAULT/BswqJrMawkvFKV0kqOEwcfL_DWE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 05:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:bb:13:a6:3d:8a:71:09:9f:a5:a9:c7:55:45:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06cc2a26b31ac24bc5295d24a8e13071f2ff0d61 Validity Not Before: Jan 1 02:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a49dce458bb6d2352298cff24c58c4939d4eabda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c4:b3:c5:e6:69:23:c4:aa:f4:6e:52:09:81: a0:8d:86:57:67:48:9d:91:0f:e8:8e:16:bd:99:09: 48:37:94:fd:cd:b9:60:d3:bb:26:68:07:88:61:e6: a8:27:54:8b:b4:58:3a:dc:1f:b5:29:dc:1d:6b:b0: 5f:2a:bc:75:48:53:37:73:3a:3a:2f:79:a1:41:52: 73:ba:67:88:e5:39:c4:be:6e:7a:80:20:31:b9:1e: 3a:4e:aa:b1:35:8f:06:be:89:33:fc:4a:d9:42:f5: 42:a0:16:cb:83:c0:06:e6:f0:41:b6:3c:26:1e:ee: 10:84:4d:8f:c9:8c:8d:57:e5:d9:1c:8a:64:e1:a6: 27:eb:1b:26:c6:12:4c:da:14:50:db:25:30:0a:4c: 22:33:40:c0:1a:12:6b:2f:f9:95:ed:78:f9:1c:03: 0b:b5:3e:cd:72:00:23:1e:39:9d:b6:ad:c6:62:9e: 9a:98:40:b8:43:b1:9e:ce:95:ae:4c:41:a5:bc:78: 7a:85:e1:d3:0a:4b:14:80:32:1b:90:45:8c:79:a2: ab:7e:64:75:81:7c:51:51:7a:5b:3a:65:4c:55:f5: ab:f9:b0:b7:ee:bf:23:df:45:60:98:cf:0c:dc:65: 01:55:39:94:98:ef:66:4b:b5:a6:99:b0:1c:b1:83: a3:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:9D:CE:45:8B:B6:D2:35:22:98:CF:F2:4C:58:C4:93:9D:4E:AB:DA X509v3 Authority Key Identifier: keyid:06:CC:2A:26:B3:1A:C2:4B:C5:29:5D:24:A8:E1:30:71:F2:FF:0D:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BswqJrMawkvFKV0kqOEwcfL_DWE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/1cfc8a-27a0-4d79-814f-fd8421bf2ba9/1/pJ3ORYu20jUimM_yTFjEk51Oq9o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/1cfc8a-27a0-4d79-814f-fd8421bf2ba9/1/BswqJrMawkvFKV0kqOEwcfL_DWE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.30.102.0/24 Signature Algorithm: sha256WithRSAEncryption e0:c3:1a:6a:d1:a8:c1:0c:10:20:7a:e3:57:64:8a:bf:ea:e1: 85:31:95:1a:17:1d:7b:63:e3:45:52:70:e1:0d:48:3b:0e:f5: 1b:33:8f:83:9a:56:b1:28:a2:e7:9c:97:18:60:c9:5b:c8:f1: ff:ac:ec:37:8d:03:e5:eb:50:46:13:7f:97:4f:42:58:8e:6b: b0:82:5e:38:68:02:f0:ce:a7:21:4d:89:e2:2c:2b:0d:5d:5e: 29:57:16:df:4e:23:8c:0f:18:7e:df:79:0b:a0:20:57:3a:a3: 7c:a7:d9:79:69:93:d5:b5:6b:5f:84:7f:f5:9b:61:03:83:0b: f2:95:cc:f4:47:ad:e7:cc:27:f5:8c:be:16:33:8c:7b:48:46: a5:21:66:66:57:35:87:2e:5b:45:58:93:96:d7:b4:f0:55:9b: 6b:7b:0c:02:85:a6:1d:d0:f7:b5:ca:58:5f:b2:19:fd:62:ce: 01:70:34:a3:1c:50:d9:43:2e:e4:35:0d:10:a5:58:15:3a:cd: 9e:ab:7a:9c:4b:f0:03:c2:d8:75:14:6c:84:b1:32:f5:7b:94: d1:bf:a3:ef:fa:3b:83:9e:66:c4:ba:06:ee:a6:b7:15:54:2d: ac:dc:d4:06:54:b1:f6:89:16:0f:43:bd:e8:57:57:5b:98:3b: 7a:80:6c:31 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WLsTpj2KcQmfpanHVUWLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2Y2MyYTI2YjMxYWMyNGJjNTI5NWQyNGE4ZTEzMDcxZjJm ZjBkNjEwHhcNMjYwMTAxMDIxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDlkY2U0NThiYjZkMjM1MjI5OGNmZjI0YzU4YzQ5MzlkNGVhYmRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8SzxeZpI8Sq9G5SCYGgjYZXZ0id kQ/ojha9mQlIN5T9zblg07smaAeIYeaoJ1SLtFg63B+1Kdwda7BfKrx1SFM3czo6 L3mhQVJzumeI5TnEvm56gCAxuR46TqqxNY8Gvokz/ErZQvVCoBbLg8AG5vBBtjwm Hu4QhE2PyYyNV+XZHIpk4aYn6xsmxhJM2hRQ2yUwCkwiM0DAGhJrL/mV7Xj5HAML tT7NcgAjHjmdtq3GYp6amEC4Q7GezpWuTEGlvHh6heHTCksUgDIbkEWMeaKrfmR1 gXxRUXpbOmVMVfWr+bC37r8j30VgmM8M3GUBVTmUmO9mS7WmmbAcsYOjZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKSdzkWLttI1IpjP8kxYxJOdTqvaMB8GA1UdIwQY MBaAFAbMKiazGsJLxSldJKjhMHHy/w1hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnN3cUpyTWF3a3ZGS1Ywa3FPRXdjZkxfRFdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8xY2ZjOGEtMjdhMC00ZDc5LTgxNGYt ZmQ4NDIxYmYyYmE5LzEvcEozT1JZdTIwalVpbU1feVRGakVrNTFPcTlvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC8xY2ZjOGEtMjdhMC00ZDc5LTgxNGYtZmQ4NDIxYmYyYmE5 LzEvQnN3cUpyTWF3a3ZGS1Ywa3FPRXdjZkxfRFdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUR5mMA0G CSqGSIb3DQEBCwUAA4IBAQDgwxpq0ajBDBAgeuNXZIq/6uGFMZUaFx17Y+NFUnDh DUg7DvUbM4+DmlaxKKLnnJcYYMlbyPH/rOw3jQPl61BGE3+XT0JYjmuwgl44aALw zqchTYniLCsNXV4pVxbfTiOMDxh+33kLoCBXOqN8p9l5aZPVtWtfhH/1m2EDgwvy lcz0R63nzCf1jL4WM4x7SEalIWZmVzWHLltFWJOW17TwVZtrewwChaYd0Pe1ylhf shn9Ys4BcDSjHFDZQy7kNQ0QpVgVOs2eq3qcS/ADwth1FGyEsTL1e5TRv6Pv+juD nmbEugbuprcVVC2s3NQGVLH2iRYPQ73oV1dbmDt6gGwx -----END CERTIFICATE-----Generated at Fri Jan 2 14:22:15 2026 by rpki-client