This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/arPUcXSO6F2hXmotLmbEkPslkyo.roa File: arPUcXSO6F2hXmotLmbEkPslkyo.roa (raw, json) Hash identifier: +PNrD3DQwa3lDAFBlDnjQZ5Mt4rCaOW5cH8zFw/pSq0= Subject key identifier: 6A:B3:D4:71:74:8E:E8:5D:A1:5E:6A:2D:2E:66:C4:90:FB:25:93:2A Certificate issuer: /CN=9521a262f5075e24b2b3c9b69c8af40e2988a1e4 Certificate serial: 019B7911419589930F2E3AB9BFD6D73A2458 Authority key identifier: 95:21:A2:62:F5:07:5E:24:B2:B3:C9:B6:9C:8A:F4:0E:29:88:A1:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSGiYvUHXiSys8m2nIr0DimIoeQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/arPUcXSO6F2hXmotLmbEkPslkyo.roa Signing time: Thu 01 Jan 2026 10:18:52 +0000 ROA not before: Thu 01 Jan 2026 10:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216292 IP address blocks: 83.101.164.0/22 maxlen: 22 83.101.164.0/24 maxlen: 24 83.101.165.0/24 maxlen: 24 83.101.166.0/24 maxlen: 24 83.101.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.crl rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft rsync://rpki.ripe.net/repository/DEFAULT/lSGiYvUHXiSys8m2nIr0DimIoeQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 04:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:41:95:89:93:0f:2e:3a:b9:bf:d6:d7:3a:24:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9521a262f5075e24b2b3c9b69c8af40e2988a1e4 Validity Not Before: Jan 1 10:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ab3d471748ee85da15e6a2d2e66c490fb25932a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:44:60:f2:a9:78:4a:ff:a0:a2:41:1b:c4:f2: de:67:4f:b2:f7:f2:e1:ba:c8:99:94:87:db:de:94: 88:eb:9a:e9:85:25:23:63:25:a4:c7:fc:3e:46:61: a0:09:bb:4f:d0:89:c7:c7:34:13:e1:6f:c0:4c:cd: fa:da:cb:10:d7:44:d7:3a:cb:cf:7f:3f:7e:05:f5: 6e:80:40:4c:7d:1d:ba:9b:fb:18:8d:8b:50:7b:18: c3:0a:d3:07:14:f6:24:ba:d1:cc:9f:66:63:96:17: 18:93:47:b4:57:ba:e0:02:56:14:82:05:11:ca:49: e1:37:8a:36:da:54:d6:2a:11:bb:98:99:88:d1:9f: 5c:a1:da:e3:a4:70:2e:38:e3:08:26:f5:be:3e:be: 44:82:40:f0:87:77:9e:2e:2d:69:c5:9e:71:f3:ea: bd:8e:56:e1:41:ff:33:cb:b0:2a:02:89:ff:7c:eb: 47:32:59:bd:30:99:ed:00:09:ad:f1:1a:a6:2e:a1: 77:4a:cc:82:77:5a:d6:97:c7:19:11:ed:7d:53:9c: 89:5e:43:7b:da:40:b8:b7:99:35:c8:cb:2c:cc:f5: 52:e6:66:bb:21:3b:b4:36:f5:3f:cc:df:39:6b:a7: 88:2c:69:26:58:3b:bf:92:ce:31:0e:be:ca:64:23: 00:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:B3:D4:71:74:8E:E8:5D:A1:5E:6A:2D:2E:66:C4:90:FB:25:93:2A X509v3 Authority Key Identifier: keyid:95:21:A2:62:F5:07:5E:24:B2:B3:C9:B6:9C:8A:F4:0E:29:88:A1:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSGiYvUHXiSys8m2nIr0DimIoeQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/arPUcXSO6F2hXmotLmbEkPslkyo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.101.164.0/22 Signature Algorithm: sha256WithRSAEncryption ad:d3:ba:a5:af:fa:fc:ef:3f:71:7c:d9:63:02:35:3b:f5:e3: d6:47:d4:ea:d8:83:54:39:c4:be:8e:1b:5e:48:f2:92:3b:41: 69:d9:f3:bc:28:15:d5:a2:d0:f6:68:72:53:e3:67:14:5e:4a: c1:48:5a:a0:73:bb:28:3f:81:26:28:ab:83:ae:8f:76:1b:59: 4e:9e:b7:57:66:26:3f:a5:9f:e6:f2:9a:4e:82:8e:ee:fb:f2: dd:9f:59:1c:d7:f1:42:86:10:59:be:fd:c3:7c:93:8b:92:35: 21:cc:9b:8f:a6:08:a9:15:4f:c4:34:23:3c:d7:5d:43:12:be: 1f:3d:19:96:f5:21:78:da:b3:d5:90:48:6a:44:41:a1:d5:16: e0:c0:58:e7:18:61:82:fe:e9:88:9f:d1:ce:4a:da:e4:93:12: 20:c2:f0:71:87:9f:98:53:ec:27:d4:24:f8:0f:2f:17:2c:e0: b2:d1:a5:0e:39:02:2e:8e:6a:b6:22:b0:30:08:ad:f0:7d:e7: 51:27:1f:cb:5d:06:02:e7:e0:08:6c:b2:00:45:3f:e6:22:44: eb:0d:87:8c:16:32:f4:d4:65:ed:c3:51:aa:1c:92:05:9c:62: 2f:9a:88:df:cb:aa:72:b5:6a:8a:15:03:50:d7:9a:9b:92:53: 0f:e2:e7:32 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EUGViZMPLjq5v9bXOiRYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MjFhMjYyZjUwNzVlMjRiMmIzYzliNjljOGFmNDBlMjk4 OGExZTQwHhcNMjYwMTAxMTAxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YWIzZDQ3MTc0OGVlODVkYTE1ZTZhMmQyZTY2YzQ5MGZiMjU5MzJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuERg8ql4Sv+gokEbxPLeZ0+y9/Lh usiZlIfb3pSI65rphSUjYyWkx/w+RmGgCbtP0InHxzQT4W/ATM362ssQ10TXOsvP fz9+BfVugEBMfR26m/sYjYtQexjDCtMHFPYkutHMn2ZjlhcYk0e0V7rgAlYUggUR yknhN4o22lTWKhG7mJmI0Z9codrjpHAuOOMIJvW+Pr5EgkDwh3eeLi1pxZ5x8+q9 jlbhQf8zy7AqAon/fOtHMlm9MJntAAmt8RqmLqF3SsyCd1rWl8cZEe19U5yJXkN7 2kC4t5k1yMsszPVS5ma7ITu0NvU/zN85a6eILGkmWDu/ks4xDr7KZCMAPwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGqz1HF0juhdoV5qLS5mxJD7JZMqMB8GA1UdIwQY MBaAFJUhomL1B14ksrPJtpyK9A4piKHkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFNHaVl2VUhYaVN5czhtMm5JcjBEaW1Jb2VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9jMWYyMGUtZDk0Zi00M2M1LWJiOGQt YWQzNjI5YjIwMmMwLzEvYXJQVWNYU082RjJoWG1vdExtYkVrUHNsa3lvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9jMWYyMGUtZDk0Zi00M2M1LWJiOGQtYWQzNjI5YjIwMmMw LzEvbFNHaVl2VUhYaVN5czhtMm5JcjBEaW1Jb2VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCU2WkMA0G CSqGSIb3DQEBCwUAA4IBAQCt07qlr/r87z9xfNljAjU79ePWR9Tq2INUOcS+jhte SPKSO0Fp2fO8KBXVotD2aHJT42cUXkrBSFqgc7soP4EmKKuDro92G1lOnrdXZiY/ pZ/m8ppOgo7u+/Ldn1kc1/FChhBZvv3DfJOLkjUhzJuPpgipFU/ENCM8111DEr4f PRmW9SF42rPVkEhqREGh1RbgwFjnGGGC/umIn9HOStrkkxIgwvBxh5+YU+wn1CT4 Dy8XLOCy0aUOOQIujmq2IrAwCK3wfedRJx/LXQYC5+AIbLIART/mIkTrDYeMFjL0 1GXtw1GqHJIFnGIvmojfy6pytWqKFQNQ15qbklMP4ucy -----END CERTIFICATE-----Generated at Mon Jan 26 13:44:44 2026 by rpki-client