This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/t20IKoUV8idtpCE6ygNMZGStJOA.roa File: t20IKoUV8idtpCE6ygNMZGStJOA.roa (raw, json) Hash identifier: eQjGSUu221l3J4NCuaCZ9GFUuzoFvNOoLBpODCNQ5eI= Subject key identifier: B7:6D:08:2A:85:15:F2:27:6D:A4:21:3A:CA:03:4C:64:64:AD:24:E0 Certificate issuer: /CN=e0574c2878d6b536139b895f08c9c6db18e12a9b Certificate serial: 019B7DCABD233412A6D3F9247B460E057793 Authority key identifier: E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/t20IKoUV8idtpCE6ygNMZGStJOA.roa Signing time: Fri 02 Jan 2026 08:19:57 +0000 ROA not before: Fri 02 Jan 2026 08:19:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24618 IP address blocks: 81.17.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:bd:23:34:12:a6:d3:f9:24:7b:46:0e:05:77:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0574c2878d6b536139b895f08c9c6db18e12a9b Validity Not Before: Jan 2 08:19:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b76d082a8515f2276da4213aca034c6464ad24e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:13:96:4a:56:93:7c:c0:8e:57:3e:f2:ab:3e: 94:24:b2:41:93:bb:6f:8f:96:0d:cb:ba:e7:27:23: 3d:a9:85:1b:83:ba:3e:a3:4b:a3:17:a7:47:94:2e: 9f:d4:b2:e0:b8:b3:61:3e:cf:98:e3:7a:54:17:e0: d0:95:f7:44:6b:08:39:1b:c2:29:b1:f9:58:36:ec: 73:43:42:fa:cc:6a:03:08:da:8e:8e:85:fc:76:80: 86:5f:22:bd:c4:e2:20:ec:ff:a0:d4:34:fe:2d:6c: ec:89:bf:12:85:ad:56:86:61:9e:04:87:13:74:a3: ac:26:ea:dd:e2:73:7e:79:e4:8c:6c:ef:3a:3f:78: cc:a4:b1:58:0f:0b:f3:ea:ac:40:79:70:6c:9d:64: 8c:06:9e:cb:e1:b3:25:70:32:71:6e:70:7f:b5:64: 7e:03:e6:b7:70:53:af:ce:a5:7b:a2:90:a6:a7:95: 24:9d:22:6e:30:29:53:c3:ba:4c:5a:f8:88:97:0b: f3:ec:4a:bc:34:c7:f8:96:e7:e6:21:bd:2a:ad:32: 11:97:b3:f7:d5:af:48:bd:26:a7:96:ff:cc:9f:b3: f4:bd:68:e4:ba:bf:05:97:c0:ee:94:73:8b:ae:bd: ff:86:ff:2c:98:c6:22:a3:9d:b5:a8:8b:f1:52:35: ab:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:6D:08:2A:85:15:F2:27:6D:A4:21:3A:CA:03:4C:64:64:AD:24:E0 X509v3 Authority Key Identifier: keyid:E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/t20IKoUV8idtpCE6ygNMZGStJOA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.17.129.0/24 Signature Algorithm: sha256WithRSAEncryption 36:fc:e9:d1:c9:ee:31:14:06:5e:0d:8d:e9:6e:9f:b7:1f:15: 56:52:7b:22:19:42:09:1b:0e:da:2b:f1:ac:9f:8b:73:74:6f: 85:3d:14:eb:0b:da:7c:ff:ff:d3:f9:4f:c4:a2:09:4e:5a:9f: c5:f6:db:a4:17:70:34:1a:b4:47:dc:11:cd:1a:ba:bb:26:81: 80:1d:50:d6:3e:24:24:61:63:15:1f:0a:97:25:78:8f:00:36: 28:a8:80:ce:08:ed:90:f8:a6:ad:59:f9:de:4b:38:1f:16:cb: 8d:a5:ac:88:3a:54:90:69:ac:61:f0:21:5c:03:1c:c7:17:9c: 07:59:03:7a:07:7f:e9:b3:6c:2f:10:10:79:0b:73:93:7d:8d: 43:ee:37:41:f3:d2:f6:10:b1:45:69:74:c8:f6:77:30:41:50: ed:2a:24:74:56:27:b6:c9:b0:c1:44:b0:e5:7e:10:39:97:17: 18:ba:e2:66:c9:6f:81:76:57:47:a9:f6:3e:ed:d3:3e:2d:15: 4e:4e:f5:08:81:05:f8:e5:75:c1:81:33:fe:da:bf:4e:3c:89: 47:ed:92:56:85:58:d5:6c:9a:4c:b3:78:f2:6b:3d:fa:5d:1b: 16:8e:1d:40:16:7e:52:e4:a1:19:d9:71:2b:9b:43:b0:6b:73: ff:26:a2:07 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yr0jNBKm0/kke0YOBXeTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwNTc0YzI4NzhkNmI1MzYxMzliODk1ZjA4YzljNmRiMThl MTJhOWIwHhcNMjYwMTAyMDgxOTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzZkMDgyYTg1MTVmMjI3NmRhNDIxM2FjYTAzNGM2NDY0YWQyNGUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxOWSlaTfMCOVz7yqz6UJLJBk7tv j5YNy7rnJyM9qYUbg7o+o0ujF6dHlC6f1LLguLNhPs+Y43pUF+DQlfdEawg5G8Ip sflYNuxzQ0L6zGoDCNqOjoX8doCGXyK9xOIg7P+g1DT+LWzsib8Sha1WhmGeBIcT dKOsJurd4nN+eeSMbO86P3jMpLFYDwvz6qxAeXBsnWSMBp7L4bMlcDJxbnB/tWR+ A+a3cFOvzqV7opCmp5UknSJuMClTw7pMWviIlwvz7Eq8NMf4lufmIb0qrTIRl7P3 1a9IvSanlv/Mn7P0vWjkur8Fl8DulHOLrr3/hv8smMYio521qIvxUjWryQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLdtCCqFFfInbaQhOsoDTGRkrSTgMB8GA1UdIwQY MBaAFOBXTCh41rU2E5uJXwjJxtsY4SqbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEZkTUtIald0VFlUbTRsZkNNbkcyeGpoS3BzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8yOGQ2MDAtYTg2OS00YWIxLTliMmUt NDQ2MDE5OTY2YTE5LzEvdDIwSUtvVVY4aWR0cENFNnlnTk1aR1N0Sk9BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8yOGQ2MDAtYTg2OS00YWIxLTliMmUtNDQ2MDE5OTY2YTE5 LzEvNEZkTUtIald0VFlUbTRsZkNNbkcyeGpoS3BzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAURGBMA0G CSqGSIb3DQEBCwUAA4IBAQA2/OnRye4xFAZeDY3pbp+3HxVWUnsiGUIJGw7aK/Gs n4tzdG+FPRTrC9p8///T+U/EoglOWp/F9tukF3A0GrRH3BHNGrq7JoGAHVDWPiQk YWMVHwqXJXiPADYoqIDOCO2Q+KatWfneSzgfFsuNpayIOlSQaaxh8CFcAxzHF5wH WQN6B3/ps2wvEBB5C3OTfY1D7jdB89L2ELFFaXTI9ncwQVDtKiR0Vie2ybDBRLDl fhA5lxcYuuJmyW+BdldHqfY+7dM+LRVOTvUIgQX45XXBgTP+2r9OPIlH7ZJWhVjV bJpMs3jyaz36XRsWjh1AFn5S5KEZ2XErm0Owa3P/JqIH -----END CERTIFICATE-----Generated at Mon Feb 9 22:27:20 2026 by rpki-client