This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/Cj1iRWtZaWr3CQT35mnwIkfqqYs.roa File: Cj1iRWtZaWr3CQT35mnwIkfqqYs.roa (raw, json) Hash identifier: 9ZVHBVyd/Pk4UvvVMqUwxdLUlrLbgZ/V2ltofM5wDow= Subject key identifier: 0A:3D:62:45:6B:59:69:6A:F7:09:04:F7:E6:69:F0:22:47:EA:A9:8B Certificate issuer: /CN=49216f5c165b827a7fd73d8107aebd2f63c63e24 Certificate serial: 019B07D2BBA60F86C7878850309269C0F01E Authority key identifier: 49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/Cj1iRWtZaWr3CQT35mnwIkfqqYs.roa Signing time: Wed 10 Dec 2025 10:33:29 +0000 ROA not before: Wed 10 Dec 2025 10:33:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 201664 IP address blocks: 81.90.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:d2:bb:a6:0f:86:c7:87:88:50:30:92:69:c0:f0:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49216f5c165b827a7fd73d8107aebd2f63c63e24 Validity Not Before: Dec 10 10:33:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0a3d62456b59696af70904f7e669f02247eaa98b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ee:66:2e:a0:ca:9a:b5:6b:17:2a:fa:f9:25: 9b:b7:df:ea:67:22:87:e6:50:5c:23:31:d4:04:01: 83:c8:10:41:6c:a9:f9:38:ee:62:81:9d:07:c4:b9: 01:fc:d5:65:59:3d:c1:0f:0e:a9:4d:fa:b7:92:40: 1e:f7:3d:7b:c8:dc:08:02:36:76:9b:34:12:c0:aa: d8:24:41:29:70:2e:19:8f:6c:93:e1:e9:0e:79:8c: fd:7d:9a:66:de:9b:4a:d4:51:9c:fc:44:8a:f7:03: 88:e3:34:af:34:f3:e1:9f:e7:6a:f0:11:4b:10:b2: a9:ce:5f:6d:59:80:bf:b7:8c:cd:1a:31:59:99:77: c8:29:06:00:20:2e:ea:d5:4f:0c:5e:55:7b:12:00: 1b:db:53:83:e0:8e:23:36:7c:ec:f9:f1:9f:c4:a1: fe:17:5d:4e:ad:e5:f1:f7:9c:cc:a6:ce:60:17:c8: 76:14:df:1a:7b:b7:3a:b0:10:bf:9c:04:8b:73:1b: 33:2f:16:ec:97:71:2a:ef:24:a6:df:0b:2c:30:27: 6d:5d:68:56:5b:5f:d0:73:8b:6b:2b:a0:66:e6:35: 29:c9:27:28:b5:71:d9:ab:30:50:90:3f:b4:9c:65: 8b:25:27:8c:cc:c5:10:63:1b:50:f2:35:03:bf:a0: ff:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:3D:62:45:6B:59:69:6A:F7:09:04:F7:E6:69:F0:22:47:EA:A9:8B X509v3 Authority Key Identifier: keyid:49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/Cj1iRWtZaWr3CQT35mnwIkfqqYs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.90.30.0/24 Signature Algorithm: sha256WithRSAEncryption 27:2d:01:c9:25:d9:a7:56:f9:27:3c:be:d6:a4:ec:7d:e1:28: 58:c3:bc:27:15:14:4c:70:ba:c2:30:45:c8:c6:b4:87:57:02: 0e:be:fa:16:24:e8:d3:2d:0f:80:65:df:4e:19:aa:72:89:c5: 75:7f:c9:31:5f:fc:8c:8d:12:7d:a6:e2:13:1b:61:4e:5e:ee: 52:43:cd:98:38:6d:b5:c9:0f:75:c5:b7:40:98:57:61:32:9d: ff:82:fd:ff:0a:83:de:c1:3c:53:27:ce:3a:14:dd:2a:74:63: 8c:67:75:fd:85:e4:b6:4a:04:4e:9d:d6:96:02:3e:06:c1:c3: 4b:92:97:4c:69:9a:2b:f7:1b:bd:e5:8d:6a:df:29:3c:3d:01: ef:d5:f2:6c:db:cd:31:aa:d1:40:4b:39:ae:1b:28:c7:c8:65: 6a:5c:5f:60:d6:aa:84:f3:16:6b:51:36:7e:8b:fc:00:2f:25: ed:50:94:7f:70:9a:c8:9f:85:d2:51:73:ab:70:f1:ae:39:54: 72:2a:dd:be:4b:43:fd:47:ed:9d:3e:9f:cd:b0:78:35:f3:bc: 39:41:54:d4:12:82:a5:51:af:42:cd:e9:79:fc:32:5c:37:b3: bb:63:d1:ea:a6:bf:b0:56:e8:32:51:c0:ac:4a:e6:d6:3b:3b: 39:de:e5:3d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsH0rumD4bHh4hQMJJpwPAeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5MjE2ZjVjMTY1YjgyN2E3ZmQ3M2Q4MTA3YWViZDJmNjNj NjNlMjQwHhcNMjUxMjEwMTAzMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYTNkNjI0NTZiNTk2OTZhZjcwOTA0ZjdlNjY5ZjAyMjQ3ZWFhOThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtu5mLqDKmrVrFyr6+SWbt9/qZyKH 5lBcIzHUBAGDyBBBbKn5OO5igZ0HxLkB/NVlWT3BDw6pTfq3kkAe9z17yNwIAjZ2 mzQSwKrYJEEpcC4Zj2yT4ekOeYz9fZpm3ptK1FGc/ESK9wOI4zSvNPPhn+dq8BFL ELKpzl9tWYC/t4zNGjFZmXfIKQYAIC7q1U8MXlV7EgAb21OD4I4jNnzs+fGfxKH+ F11OreXx95zMps5gF8h2FN8ae7c6sBC/nASLcxszLxbsl3Eq7ySm3wssMCdtXWhW W1/Qc4trK6Bm5jUpyScotXHZqzBQkD+0nGWLJSeMzMUQYxtQ8jUDv6D/dQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAo9YkVrWWlq9wkE9+Zp8CJH6qmLMB8GA1UdIwQY MBaAFEkhb1wWW4J6f9c9gQeuvS9jxj4kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80ODQyYTktOWZjZC00YmI2LWJiMDQt MGRiYmMyNDllNjU3LzEvQ2oxaVJXdFphV3IzQ1FUMzVtbndJa2ZxcVlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi80ODQyYTktOWZjZC00YmI2LWJiMDQtMGRiYmMyNDllNjU3 LzEvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUVoeMA0G CSqGSIb3DQEBCwUAA4IBAQAnLQHJJdmnVvknPL7WpOx94ShYw7wnFRRMcLrCMEXI xrSHVwIOvvoWJOjTLQ+AZd9OGapyicV1f8kxX/yMjRJ9puITG2FOXu5SQ82YOG21 yQ91xbdAmFdhMp3/gv3/CoPewTxTJ846FN0qdGOMZ3X9heS2SgROndaWAj4GwcNL kpdMaZor9xu95Y1q3yk8PQHv1fJs280xqtFASzmuGyjHyGVqXF9g1qqE8xZrUTZ+ i/wALyXtUJR/cJrIn4XSUXOrcPGuOVRyKt2+S0P9R+2dPp/NsHg187w5QVTUEoKl Ua9Czel5/DJcN7O7Y9Hqpr+wVugyUcCsSubWOzs53uU9 -----END CERTIFICATE-----Generated at Mon Dec 15 15:19:43 2025 by rpki-client