This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/HuSnhil6lfXTqaq7JgeQk-Ofamg.roa File: HuSnhil6lfXTqaq7JgeQk-Ofamg.roa (raw, json) Hash identifier: gk7WHH1Fk2fGMGJjH6DsGNArwgZbzQBBGEMIBb7kSmE= Subject key identifier: 1E:E4:A7:86:29:7A:95:F5:D3:A9:AA:BB:26:07:90:93:E3:9F:6A:68 Certificate issuer: /CN=36c7095e045986053b9b3e8789036726837dd1f5 Certificate serial: 019B783526F0009098302C61CAE1991B43A8 Authority key identifier: 36:C7:09:5E:04:59:86:05:3B:9B:3E:87:89:03:67:26:83:7D:D1:F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NscJXgRZhgU7mz6HiQNnJoN90fU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/HuSnhil6lfXTqaq7JgeQk-Ofamg.roa Signing time: Thu 01 Jan 2026 06:18:27 +0000 ROA not before: Thu 01 Jan 2026 06:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39214 IP address blocks: 81.20.16.0/20 maxlen: 20 81.20.16.0/24 maxlen: 24 81.20.17.0/24 maxlen: 24 81.20.20.0/23 maxlen: 23 81.20.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.mft rsync://rpki.ripe.net/repository/DEFAULT/NscJXgRZhgU7mz6HiQNnJoN90fU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:26:f0:00:90:98:30:2c:61:ca:e1:99:1b:43:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36c7095e045986053b9b3e8789036726837dd1f5 Validity Not Before: Jan 1 06:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1ee4a786297a95f5d3a9aabb26079093e39f6a68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:51:f9:7b:cc:60:2d:92:35:0d:ae:b7:57:7c: 84:87:0f:f3:f9:0e:cd:1f:02:9b:f4:b9:9e:9d:29: e8:25:8b:22:10:93:9e:38:71:c7:3f:b7:90:b2:ae: b8:58:4f:ff:04:a8:1a:e2:a2:bb:8f:ff:21:71:47: f2:c3:cd:c3:3b:0e:cc:7a:4d:1f:82:2d:b2:1d:15: 19:1d:eb:84:f5:ad:71:a0:80:d8:b2:fa:51:b4:d5: 4c:7a:f5:a1:be:5f:94:88:2f:80:1f:84:7f:42:0d: 60:60:d6:40:b2:f9:e5:af:96:35:d8:1f:7c:14:48: 16:15:e4:22:6d:40:bf:0d:f3:b5:e6:44:9f:f6:97: 60:bc:5e:a5:17:d8:77:d8:cb:5e:a2:55:10:dd:80: 60:70:c3:3e:8a:40:9d:76:f2:e4:98:24:10:32:31: 72:03:29:4e:e5:bc:a1:cd:27:2c:64:a1:33:d4:e3: f6:19:35:1c:18:e2:a6:96:90:0d:2b:1e:c5:62:7c: b2:fb:ed:16:5b:70:65:50:0b:71:99:55:4c:65:5f: 9b:f0:78:dd:f7:1c:0a:3b:c5:e7:6e:d3:7a:1d:ad: 6e:f0:0f:42:56:9e:09:1a:a4:b4:a9:9d:74:af:b3: 9d:36:d1:dd:e8:a8:84:60:1a:35:52:16:06:0f:eb: 38:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:E4:A7:86:29:7A:95:F5:D3:A9:AA:BB:26:07:90:93:E3:9F:6A:68 X509v3 Authority Key Identifier: keyid:36:C7:09:5E:04:59:86:05:3B:9B:3E:87:89:03:67:26:83:7D:D1:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NscJXgRZhgU7mz6HiQNnJoN90fU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/HuSnhil6lfXTqaq7JgeQk-Ofamg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.20.16.0/20 Signature Algorithm: sha256WithRSAEncryption 7d:1d:d2:e4:ff:10:54:c2:28:55:8f:2e:54:a1:fa:46:38:b4: 7b:f7:6e:c5:38:1f:4f:e0:85:7a:8b:b0:69:61:77:79:a8:fe: e4:68:af:ac:73:28:38:a8:8b:7f:2a:b7:15:d2:a4:60:2b:75: f2:4a:71:50:35:06:6a:e6:5e:9c:4e:e0:74:86:31:4f:49:10: 05:ed:1b:70:12:0f:a5:b6:f3:cf:ee:1f:7e:b0:02:ca:5c:af: 24:64:46:c5:48:1d:cc:28:a9:57:20:39:9d:bc:84:ca:ce:ea: 15:55:e3:7a:1a:ae:0c:dc:d4:0e:c1:9a:8c:1b:6b:8f:54:bf: 20:46:a1:67:f3:a3:59:7d:7d:9f:97:dc:a9:62:7a:06:60:d0: ec:d5:cb:bd:f3:60:dc:1e:bd:3c:36:5d:73:07:e3:20:42:12: 84:69:c5:3c:07:61:19:17:07:49:3d:13:89:ea:70:9a:d0:bd: 5f:63:f0:46:c2:37:09:8a:cf:04:b3:1f:4d:2e:09:33:24:65: 39:b5:ca:c0:18:e9:ce:b6:e8:d6:4f:fa:4d:ec:d9:da:cf:75: be:dc:f2:f5:d7:79:e3:d0:aa:6e:27:cf:aa:e3:ed:0d:72:f5: bf:24:58:b9:68:e4:fe:a4:94:3a:c9:fd:22:e0:6b:36:66:b1: a2:44:bc:66 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NSbwAJCYMCxhyuGZG0OoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YzcwOTVlMDQ1OTg2MDUzYjliM2U4Nzg5MDM2NzI2ODM3 ZGQxZjUwHhcNMjYwMTAxMDYxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZWU0YTc4NjI5N2E5NWY1ZDNhOWFhYmIyNjA3OTA5M2UzOWY2YTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1H5e8xgLZI1Da63V3yEhw/z+Q7N HwKb9LmenSnoJYsiEJOeOHHHP7eQsq64WE//BKga4qK7j/8hcUfyw83DOw7Mek0f gi2yHRUZHeuE9a1xoIDYsvpRtNVMevWhvl+UiC+AH4R/Qg1gYNZAsvnlr5Y12B98 FEgWFeQibUC/DfO15kSf9pdgvF6lF9h32MteolUQ3YBgcMM+ikCddvLkmCQQMjFy AylO5byhzScsZKEz1OP2GTUcGOKmlpANKx7FYnyy++0WW3BlUAtxmVVMZV+b8Hjd 9xwKO8XnbtN6Ha1u8A9CVp4JGqS0qZ10r7OdNtHd6KiEYBo1UhYGD+s4pwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB7kp4YpepX106mquyYHkJPjn2poMB8GA1UdIwQY MBaAFDbHCV4EWYYFO5s+h4kDZyaDfdH1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnNjSlhnUlpoZ1U3bXo2SGlRTm5Kb045MGZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy80ZDU4ZjUtNWMzZi00YWNhLTk3Yjgt NmQ4YTY5YTBhZDQzLzEvSHVTbmhpbDZsZlhUcWFxN0pnZVFrLU9mYW1nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy80ZDU4ZjUtNWMzZi00YWNhLTk3YjgtNmQ4YTY5YTBhZDQz LzEvTnNjSlhnUlpoZ1U3bXo2SGlRTm5Kb045MGZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEURQQMA0G CSqGSIb3DQEBCwUAA4IBAQB9HdLk/xBUwihVjy5UofpGOLR7927FOB9P4IV6i7Bp YXd5qP7kaK+scyg4qIt/KrcV0qRgK3XySnFQNQZq5l6cTuB0hjFPSRAF7RtwEg+l tvPP7h9+sALKXK8kZEbFSB3MKKlXIDmdvITKzuoVVeN6Gq4M3NQOwZqMG2uPVL8g RqFn86NZfX2fl9ypYnoGYNDs1cu982DcHr08Nl1zB+MgQhKEacU8B2EZFwdJPROJ 6nCa0L1fY/BGwjcJis8Esx9NLgkzJGU5tcrAGOnOtujWT/pN7Nnaz3W+3PL113nj 0KpuJ8+q4+0NcvW/JFi5aOT+pJQ6yf0i4Gs2ZrGiRLxm -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:22 2026 by rpki-client