This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/A1TiuU0M75jp0mWYlWQ0dXCZftM.roa File: A1TiuU0M75jp0mWYlWQ0dXCZftM.roa (raw, json) Hash identifier: EhrXpdBCcTrMdsFgZCr+ZQCKKCBrE/k1CPAoaKHDuRg= Subject key identifier: 03:54:E2:B9:4D:0C:EF:98:E9:D2:65:98:95:64:34:75:70:99:7E:D3 Certificate issuer: /CN=e0574c2878d6b536139b895f08c9c6db18e12a9b Certificate serial: 019B7DCABDC35A77835D11D16ADD504EF2F2 Authority key identifier: E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/A1TiuU0M75jp0mWYlWQ0dXCZftM.roa Signing time: Fri 02 Jan 2026 08:19:57 +0000 ROA not before: Fri 02 Jan 2026 08:19:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60918 IP address blocks: 81.17.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:bd:c3:5a:77:83:5d:11:d1:6a:dd:50:4e:f2:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0574c2878d6b536139b895f08c9c6db18e12a9b Validity Not Before: Jan 2 08:19:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0354e2b94d0cef98e9d265989564347570997ed3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:57:75:d0:1a:c6:f5:cc:f7:21:ad:5f:34:c2: 19:5e:04:79:43:77:f2:90:39:84:d5:c1:f2:76:9e: 72:6a:2d:7c:c5:fb:e9:38:1f:de:89:6f:9e:ff:42: c4:a3:89:63:1b:41:0c:c3:3e:01:a4:56:d2:bf:16: 9b:40:1f:a2:8f:74:cb:15:22:c1:f7:07:57:d0:28: 30:48:1a:7b:62:af:40:1a:13:02:1a:d1:2e:79:14: a8:23:a3:77:75:1b:67:c8:b7:c0:8d:27:0d:ec:1f: bb:8b:4c:ab:2a:3f:53:ac:35:5f:09:c1:92:ae:3c: 09:b8:46:d1:10:2a:cb:67:ec:88:ae:80:f1:ca:50: 35:be:4f:2c:bf:b3:83:f1:c7:f5:35:57:11:d3:1d: f7:16:57:df:72:90:fc:5f:bf:44:b6:33:1d:a0:9c: b1:fc:58:36:78:62:1a:5e:60:d5:a3:7c:d8:22:84: 10:50:36:db:6f:a3:0f:f7:3b:d8:80:b9:40:61:8c: 8e:2c:8c:22:c7:bf:0e:8a:38:dd:49:14:aa:26:dd: 06:01:3c:5e:d1:fb:58:3e:44:25:07:e1:18:ed:9f: ef:8a:34:1d:61:f0:39:95:f4:32:8f:21:cf:62:3c: cf:3a:79:1a:33:73:43:7a:ae:1a:41:9a:7c:e5:fb: 3c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:54:E2:B9:4D:0C:EF:98:E9:D2:65:98:95:64:34:75:70:99:7E:D3 X509v3 Authority Key Identifier: keyid:E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/A1TiuU0M75jp0mWYlWQ0dXCZftM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.17.141.0/24 Signature Algorithm: sha256WithRSAEncryption 64:ba:61:2a:30:c1:a5:20:f6:79:d5:22:d3:ac:7c:8b:4f:02: f3:f7:42:da:2e:ca:ff:30:d9:cd:19:f5:d4:ba:d4:ae:d4:35: f3:be:5b:59:61:4a:fd:47:82:15:92:89:bf:7a:5f:84:c9:c7: f6:b8:ca:af:14:16:32:03:b6:29:5a:84:d2:af:f4:b3:ba:01: 9a:8e:5c:80:10:cf:6f:1e:df:a1:23:52:c3:a4:46:f2:2d:fc: d3:be:d3:3e:9d:8e:83:e8:cd:46:c1:9f:02:a5:8c:5c:24:e7: 7c:51:a3:a2:1b:02:64:6e:b0:f5:5d:3d:44:7a:c9:f9:19:fc: d8:40:55:18:b3:93:e2:ee:71:11:de:35:4c:b9:2c:ea:7b:3f: e1:80:16:7c:ce:89:fc:9d:46:23:e1:63:63:07:17:ea:c5:f8: 78:16:49:7f:59:5e:bf:76:ee:16:43:8b:73:5a:ca:9b:6c:d7: 60:ef:c0:75:3c:4e:75:81:74:b0:c6:63:03:79:6f:73:cd:00: 7f:ad:72:4f:69:f7:1c:50:40:ff:d1:52:53:a6:a0:97:d2:32: f4:d2:d1:64:ac:94:46:ad:ef:04:cb:6a:fe:bd:ee:fe:4c:76: 78:76:99:7e:5d:69:b4:a8:3d:cb:2b:8a:80:f6:e5:87:fe:c2: 11:eb:4f:d2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yr3DWneDXRHRat1QTvLyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwNTc0YzI4NzhkNmI1MzYxMzliODk1ZjA4YzljNmRiMThl MTJhOWIwHhcNMjYwMTAyMDgxOTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzU0ZTJiOTRkMGNlZjk4ZTlkMjY1OTg5NTY0MzQ3NTcwOTk3ZWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFd10BrG9cz3Ia1fNMIZXgR5Q3fy kDmE1cHydp5yai18xfvpOB/eiW+e/0LEo4ljG0EMwz4BpFbSvxabQB+ij3TLFSLB 9wdX0CgwSBp7Yq9AGhMCGtEueRSoI6N3dRtnyLfAjScN7B+7i0yrKj9TrDVfCcGS rjwJuEbRECrLZ+yIroDxylA1vk8sv7OD8cf1NVcR0x33FlffcpD8X79EtjMdoJyx /Fg2eGIaXmDVo3zYIoQQUDbbb6MP9zvYgLlAYYyOLIwix78OijjdSRSqJt0GATxe 0ftYPkQlB+EY7Z/vijQdYfA5lfQyjyHPYjzPOnkaM3NDeq4aQZp85fs87QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFANU4rlNDO+Y6dJlmJVkNHVwmX7TMB8GA1UdIwQY MBaAFOBXTCh41rU2E5uJXwjJxtsY4SqbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEZkTUtIald0VFlUbTRsZkNNbkcyeGpoS3BzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8yOGQ2MDAtYTg2OS00YWIxLTliMmUt NDQ2MDE5OTY2YTE5LzEvQTFUaXVVME03NWpwMG1XWWxXUTBkWENaZnRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8yOGQ2MDAtYTg2OS00YWIxLTliMmUtNDQ2MDE5OTY2YTE5 LzEvNEZkTUtIald0VFlUbTRsZkNNbkcyeGpoS3BzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAURGNMA0G CSqGSIb3DQEBCwUAA4IBAQBkumEqMMGlIPZ51SLTrHyLTwLz90LaLsr/MNnNGfXU utSu1DXzvltZYUr9R4IVkom/el+Eycf2uMqvFBYyA7YpWoTSr/SzugGajlyAEM9v Ht+hI1LDpEbyLfzTvtM+nY6D6M1GwZ8CpYxcJOd8UaOiGwJkbrD1XT1Eesn5GfzY QFUYs5Pi7nER3jVMuSzqez/hgBZ8zon8nUYj4WNjBxfqxfh4Fkl/WV6/du4WQ4tz WsqbbNdg78B1PE51gXSwxmMDeW9zzQB/rXJPafccUED/0VJTpqCX0jL00tFkrJRG re8Ey2r+ve7+THZ4dpl+XWm0qD3LK4qA9uWH/sIR60/S -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:58 2026 by rpki-client