This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/CmIJnjwGRsNcmhAutOTs4YMD2fE.roa File: CmIJnjwGRsNcmhAutOTs4YMD2fE.roa (raw, json) Hash identifier: Jua19yCeg1t/mfvLvJYnD0rI4VExJ2vBY7mPBdrmdaI= Subject key identifier: 0A:62:09:9E:3C:06:46:C3:5C:9A:10:2E:B4:E4:EC:E1:83:03:D9:F1 Certificate issuer: /CN=afb4e04a0ed344112c1853cab09f52e1cd9abaf2 Certificate serial: 019B7BA4D1FE7F602A89A29643C0FC7E91F7 Authority key identifier: AF:B4:E0:4A:0E:D3:44:11:2C:18:53:CA:B0:9F:52:E1:CD:9A:BA:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/CmIJnjwGRsNcmhAutOTs4YMD2fE.roa Signing time: Thu 01 Jan 2026 22:19:17 +0000 ROA not before: Thu 01 Jan 2026 22:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42905 IP address blocks: 81.163.216.0/21 maxlen: 21 81.163.216.0/22 maxlen: 22 81.163.216.0/24 maxlen: 24 81.163.217.0/24 maxlen: 24 81.163.218.0/24 maxlen: 24 81.163.219.0/24 maxlen: 24 81.163.220.0/24 maxlen: 24 81.163.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:d1:fe:7f:60:2a:89:a2:96:43:c0:fc:7e:91:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afb4e04a0ed344112c1853cab09f52e1cd9abaf2 Validity Not Before: Jan 1 22:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0a62099e3c0646c35c9a102eb4e4ece18303d9f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:83:a9:cc:c2:eb:97:0c:10:11:6c:8f:dc:5e: 72:c7:88:fd:43:0f:e8:49:8c:d0:79:0d:69:e1:0d: 8a:13:ae:e6:ab:a5:6f:48:69:db:51:85:a5:e0:67: 58:85:30:f4:77:e3:b3:d3:97:4c:f7:ad:94:fb:df: 8d:95:91:81:4e:d9:9b:07:4e:94:a8:06:73:1d:1f: 25:01:95:29:34:c1:b2:36:a9:b8:3f:7a:d4:e2:44: 9d:e2:cd:05:62:f7:54:6b:41:59:05:a4:89:11:a9: 58:d5:d9:2e:8a:1f:a5:7e:c9:1d:f1:f1:c4:d8:75: 39:d2:67:7b:d2:bf:55:d4:48:55:86:4f:18:4b:49: 2a:3e:60:43:84:98:1d:23:e9:8f:9c:aa:d5:14:45: 8e:f4:b8:dc:f0:66:5c:03:9f:30:67:27:b6:27:3f: 4b:77:38:73:4e:43:99:8c:a6:ba:94:3c:49:b1:f2: af:31:76:db:71:3a:4e:14:87:1c:3b:b3:af:a6:70: 03:fa:77:4b:b3:92:0b:c0:9f:e5:54:75:c8:ca:a5: 7d:5b:92:c2:c4:8e:55:d4:3d:0b:25:60:d5:81:f0: e8:03:a5:47:92:fa:ee:59:7c:36:5b:26:47:12:77: 9b:07:07:06:66:94:be:52:c7:78:d9:66:77:b9:8d: d3:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:62:09:9E:3C:06:46:C3:5C:9A:10:2E:B4:E4:EC:E1:83:03:D9:F1 X509v3 Authority Key Identifier: keyid:AF:B4:E0:4A:0E:D3:44:11:2C:18:53:CA:B0:9F:52:E1:CD:9A:BA:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/CmIJnjwGRsNcmhAutOTs4YMD2fE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.163.216.0/21 Signature Algorithm: sha256WithRSAEncryption 20:00:be:e0:e3:c0:92:92:40:5d:91:02:ae:51:5e:c3:5c:69: 7c:b4:37:62:72:23:97:2c:d0:f7:f3:82:08:9e:3a:de:96:7d: 93:bd:c2:b5:02:06:d8:8a:7a:8d:ac:28:09:96:dc:01:1c:05: b6:56:7e:18:af:e6:a9:bf:e4:66:d9:54:d6:2a:4e:ab:13:2e: b3:dc:f8:6e:c1:7e:e3:2a:c8:b6:b7:f3:b7:6a:73:1f:43:d7: 72:33:11:19:6a:c5:a0:ee:97:67:a1:17:f3:d9:69:1a:e9:fc: 68:df:86:8b:d3:1e:f5:e3:cc:c6:21:db:9f:62:9d:af:9a:eb: 2b:4c:e0:0a:53:61:7e:c9:60:43:3b:64:4f:28:d6:d9:e8:ad: f9:30:61:77:1b:bb:3d:b2:c6:27:fe:22:cc:91:27:c3:bf:64: ac:0e:22:66:48:55:2c:2d:e2:d2:83:86:90:7f:9b:f3:d4:5c: 68:bb:f3:c0:25:f0:e1:58:c3:1a:c2:5c:56:33:f9:1c:60:a8: 3a:d4:ef:a8:21:48:ec:4c:2c:b9:90:06:ed:10:44:a6:0d:ea: 41:9d:fa:c2:25:1b:5b:a3:e9:48:ae:8c:20:5c:bc:29:a4:3c: fd:b5:3e:8f:17:28:80:e3:24:b6:65:c8:ad:30:eb:07:91:f0: b2:ce:e5:95 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pNH+f2AqiaKWQ8D8fpH3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmYjRlMDRhMGVkMzQ0MTEyYzE4NTNjYWIwOWY1MmUxY2Q5 YWJhZjIwHhcNMjYwMTAxMjIxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYTYyMDk5ZTNjMDY0NmMzNWM5YTEwMmViNGU0ZWNlMTgzMDNkOWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4OpzMLrlwwQEWyP3F5yx4j9Qw/o SYzQeQ1p4Q2KE67mq6VvSGnbUYWl4GdYhTD0d+Oz05dM962U+9+NlZGBTtmbB06U qAZzHR8lAZUpNMGyNqm4P3rU4kSd4s0FYvdUa0FZBaSJEalY1dkuih+lfskd8fHE 2HU50md70r9V1EhVhk8YS0kqPmBDhJgdI+mPnKrVFEWO9Ljc8GZcA58wZye2Jz9L dzhzTkOZjKa6lDxJsfKvMXbbcTpOFIccO7OvpnAD+ndLs5ILwJ/lVHXIyqV9W5LC xI5V1D0LJWDVgfDoA6VHkvruWXw2WyZHEnebBwcGZpS+Usd42WZ3uY3TpQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFApiCZ48BkbDXJoQLrTk7OGDA9nxMB8GA1UdIwQY MBaAFK+04EoO00QRLBhTyrCfUuHNmrryMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjdUZ1NnN1RSQkVzR0ZQS3NKOVM0YzJhdXZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8xOWYyZTYtMWJmMy00ZjdhLTg4MTct ODA5NWYzMjk3MTc5LzEvQ21JSm5qd0dSc05jbWhBdXRPVHM0WU1EMmZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy8xOWYyZTYtMWJmMy00ZjdhLTg4MTctODA5NWYzMjk3MTc5 LzEvcjdUZ1NnN1RSQkVzR0ZQS3NKOVM0YzJhdXZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDUaPYMA0G CSqGSIb3DQEBCwUAA4IBAQAgAL7g48CSkkBdkQKuUV7DXGl8tDdiciOXLND384II njreln2TvcK1AgbYinqNrCgJltwBHAW2Vn4Yr+apv+Rm2VTWKk6rEy6z3PhuwX7j Ksi2t/O3anMfQ9dyMxEZasWg7pdnoRfz2Wka6fxo34aL0x7148zGIdufYp2vmusr TOAKU2F+yWBDO2RPKNbZ6K35MGF3G7s9ssYn/iLMkSfDv2SsDiJmSFUsLeLSg4aQ f5vz1Fxou/PAJfDhWMMawlxWM/kcYKg61O+oIUjsTCy5kAbtEESmDepBnfrCJRtb o+lIrowgXLwppDz9tT6PFyiA4yS2ZcitMOsHkfCyzuWV -----END CERTIFICATE-----Generated at Sun Jan 18 15:39:30 2026 by rpki-client