This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/1UnycsVa6GQ4UVi6wGi9RqcQMIA.roa File: 1UnycsVa6GQ4UVi6wGi9RqcQMIA.roa (raw, json) Hash identifier: M4FAHY2ohA57DjcYF38C6Ouqb+gh+WIb6rDrETiW3k8= Subject key identifier: D5:49:F2:72:C5:5A:E8:64:38:51:58:BA:C0:68:BD:46:A7:10:30:80 Certificate issuer: /CN=e0574c2878d6b536139b895f08c9c6db18e12a9b Certificate serial: 019B7DCABC4407A69E071CA2891D39718296 Authority key identifier: E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/1UnycsVa6GQ4UVi6wGi9RqcQMIA.roa Signing time: Fri 02 Jan 2026 08:19:56 +0000 ROA not before: Fri 02 Jan 2026 08:19:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21437 IP address blocks: 81.17.128.0/24 maxlen: 24 81.17.131.0/24 maxlen: 24 81.17.132.0/24 maxlen: 24 81.17.133.0/24 maxlen: 24 81.17.134.0/24 maxlen: 24 81.17.135.0/24 maxlen: 24 81.17.136.0/24 maxlen: 24 81.17.138.0/24 maxlen: 24 81.17.139.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:bc:44:07:a6:9e:07:1c:a2:89:1d:39:71:82:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0574c2878d6b536139b895f08c9c6db18e12a9b Validity Not Before: Jan 2 08:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d549f272c55ae864385158bac068bd46a7103080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:03:9e:2a:0e:ec:49:5d:f6:79:73:92:09:a4: 13:da:df:75:cc:bb:b0:fa:f1:53:e4:7c:cf:42:b6: d9:0d:b7:a8:f8:cb:0b:fb:5d:68:43:c7:72:c4:85: 4d:60:85:12:f3:ca:3c:56:d7:c5:26:77:12:8c:32: 10:ce:b3:b9:19:05:35:8e:9b:1c:b6:8e:0d:4c:e6: 99:0e:59:e6:f1:fa:61:05:a2:a8:2a:f4:51:7f:70: f1:6f:02:45:06:62:fd:f4:b0:35:02:72:e8:3e:41: 22:6c:50:7b:23:b3:37:89:cf:9e:51:ce:04:4a:7a: 1c:33:b8:3a:97:19:3c:bd:e5:ed:89:1d:28:d4:a3: 90:1b:8a:c5:a6:c4:20:59:38:8d:f2:46:4d:43:79: cc:6c:5e:91:53:91:03:bf:94:5a:4b:83:fe:c8:7c: 0c:c1:c1:2b:d8:0b:e5:b3:e7:c2:7d:0a:a7:bf:85: 66:b9:79:dd:64:9f:67:f9:ec:16:ab:82:f6:b0:2c: 13:e1:08:74:95:be:81:ec:ca:37:55:04:98:90:ce: 2b:c8:f8:4a:b2:69:bd:53:7f:be:e8:be:09:85:76: 7b:af:09:32:d4:8d:e3:7c:e8:41:70:e5:6d:9b:08: 50:46:ca:ff:02:b2:0c:e2:18:fa:87:69:49:90:56: 7e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:49:F2:72:C5:5A:E8:64:38:51:58:BA:C0:68:BD:46:A7:10:30:80 X509v3 Authority Key Identifier: keyid:E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/1UnycsVa6GQ4UVi6wGi9RqcQMIA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.17.128.0/24 81.17.131.0-81.17.136.255 81.17.138.0/23 Signature Algorithm: sha256WithRSAEncryption 28:bc:24:9b:e1:a0:a5:c0:dc:26:5a:ba:6b:4f:ef:01:c1:98: c3:6e:4a:d8:0c:6e:64:c9:b3:c6:0c:c8:94:c5:44:2e:38:cf: 7d:c3:53:5b:52:79:2e:bf:74:ed:42:f3:1e:5f:3b:51:b7:41: bf:4e:f6:b3:bd:0b:74:e0:bd:b4:c1:b0:08:7a:9e:3a:69:b4: e4:ea:bc:a5:c6:48:d6:22:99:22:bc:c5:2f:59:3d:8b:14:be: 12:66:5e:67:c1:67:ef:c1:0f:d4:ef:73:94:54:66:bc:18:0d: 26:da:41:bc:65:9a:76:69:11:77:15:80:fb:ca:99:23:68:21: 1b:e4:61:61:ff:0c:b1:f5:cc:47:92:41:ff:3c:ff:a7:3a:22: 8f:3c:3e:1e:09:3d:ab:08:23:f3:5a:71:a5:79:c3:b5:0d:89: 16:15:94:60:06:60:6b:3e:94:b6:2b:c3:48:5d:e6:25:cb:d1: a4:c0:f4:c2:00:42:f7:f6:6a:e0:a7:ef:1e:09:d1:0d:99:fb: d8:b0:2c:2a:82:9c:fd:fe:05:2c:7c:a2:00:f8:20:86:2f:2a: 4a:c1:1b:d5:4a:1d:8e:3c:e9:5f:df:a3:4d:2a:09:ca:eb:89: 95:41:91:d9:71:bf:b1:97:5c:b4:78:70:ab:37:fc:75:0b:3c: 69:92:0b:bd -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt9yrxEB6aeBxyiiR05cYKWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwNTc0YzI4NzhkNmI1MzYxMzliODk1ZjA4YzljNmRiMThl MTJhOWIwHhcNMjYwMTAyMDgxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTQ5ZjI3MmM1NWFlODY0Mzg1MTU4YmFjMDY4YmQ0NmE3MTAzMDgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3QOeKg7sSV32eXOSCaQT2t91zLuw +vFT5HzPQrbZDbeo+MsL+11oQ8dyxIVNYIUS88o8VtfFJncSjDIQzrO5GQU1jpsc to4NTOaZDlnm8fphBaKoKvRRf3DxbwJFBmL99LA1AnLoPkEibFB7I7M3ic+eUc4E SnocM7g6lxk8veXtiR0o1KOQG4rFpsQgWTiN8kZNQ3nMbF6RU5EDv5RaS4P+yHwM wcEr2Avls+fCfQqnv4VmuXndZJ9n+ewWq4L2sCwT4Qh0lb6B7Mo3VQSYkM4ryPhK smm9U3++6L4JhXZ7rwky1I3jfOhBcOVtmwhQRsr/ArIM4hj6h2lJkFZ+nQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFNVJ8nLFWuhkOFFYusBovUanEDCAMB8GA1UdIwQY MBaAFOBXTCh41rU2E5uJXwjJxtsY4SqbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEZkTUtIald0VFlUbTRsZkNNbkcyeGpoS3BzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8yOGQ2MDAtYTg2OS00YWIxLTliMmUt NDQ2MDE5OTY2YTE5LzEvMVVueWNzVmE2R1E0VVZpNndHaTlScWNRTUlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8yOGQ2MDAtYTg2OS00YWIxLTliMmUtNDQ2MDE5OTY2YTE5 LzEvNEZkTUtIald0VFlUbTRsZkNNbkcyeGpoS3BzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAURGAMAwD BABREYMDBABREYgDBAFREYowDQYJKoZIhvcNAQELBQADggEBACi8JJvhoKXA3CZa umtP7wHBmMNuStgMbmTJs8YMyJTFRC44z33DU1tSeS6/dO1C8x5fO1G3Qb9O9rO9 C3TgvbTBsAh6njpptOTqvKXGSNYimSK8xS9ZPYsUvhJmXmfBZ+/BD9Tvc5RUZrwY DSbaQbxlmnZpEXcVgPvKmSNoIRvkYWH/DLH1zEeSQf88/6c6Io88Ph4JPasII/Na caV5w7UNiRYVlGAGYGs+lLYrw0hd5iXL0aTA9MIAQvf2auCn7x4J0Q2Z+9iwLCqC nP3+BSx8ogD4IIYvKkrBG9VKHY486V/fo00qCcrriZVBkdlxv7GXXLR4cKs3/HUL PGmSC70= -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:42 2026 by rpki-client