This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/7g4r1oWjvlSPhlhcBPNRGCxJbuM.roa File: 7g4r1oWjvlSPhlhcBPNRGCxJbuM.roa (raw, json) Hash identifier: f3W/aXX2oWLOcz8n9AblRDokKEiMNGrTfCRmoGI/Lgg= Subject key identifier: EE:0E:2B:D6:85:A3:BE:54:8F:86:58:5C:04:F3:51:18:2C:49:6E:E3 Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb Certificate serial: 019B76EB8DDE66E03E218EA6D856F183DC79 Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/7g4r1oWjvlSPhlhcBPNRGCxJbuM.roa Signing time: Thu 01 Jan 2026 00:18:27 +0000 ROA not before: Thu 01 Jan 2026 00:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61102 IP address blocks: 81.218.109.0/24 maxlen: 24 81.218.219.0/24 maxlen: 24 81.218.235.0/24 maxlen: 24 81.218.238.0/24 maxlen: 24 82.80.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:8d:de:66:e0:3e:21:8e:a6:d8:56:f1:83:dc:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb Validity Not Before: Jan 1 00:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee0e2bd685a3be548f86585c04f351182c496ee3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7b:89:de:8c:71:37:52:50:43:80:cf:75:48: 27:ee:da:17:6b:c2:1b:8d:11:25:7d:d2:a6:39:9c: 58:bd:77:a5:ba:61:21:01:93:a3:ae:e0:b0:19:e1: 50:65:20:f9:14:fd:0e:ec:ee:3e:71:37:ac:d9:b2: 0c:c8:28:1a:e4:df:ce:92:35:ac:e5:39:79:12:7d: 32:c8:5d:d6:6a:dc:52:29:7e:e9:79:0a:b0:fe:9e: 3e:af:8e:03:e9:9a:96:46:d0:d2:cb:ec:fd:a9:e6: dd:5c:1e:60:e7:fc:f2:d1:29:7d:4a:a9:9a:63:ef: 92:af:ac:7c:9d:8d:f3:b6:75:e2:be:f0:28:a3:fc: 94:7f:70:84:60:c9:e0:6c:84:4d:15:60:21:36:f3: 48:d7:24:25:11:67:fa:01:e4:39:53:ff:92:a5:34: 28:23:08:6c:c3:38:7b:b1:09:f4:e7:88:51:d6:da: 75:b5:bb:0c:26:f3:ef:e8:57:63:ec:18:56:69:1a: 86:46:3f:a6:7a:b9:84:62:62:9a:c9:1f:63:fe:a6: e3:d7:e7:0c:1d:c0:1c:a4:73:c9:40:35:3a:64:37: b3:32:4e:69:0f:1f:db:5e:ae:32:de:f3:02:80:45: 73:c9:76:3f:ff:de:ba:51:5b:8c:d7:12:c3:3a:d2: 9c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:0E:2B:D6:85:A3:BE:54:8F:86:58:5C:04:F3:51:18:2C:49:6E:E3 X509v3 Authority Key Identifier: keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/7g4r1oWjvlSPhlhcBPNRGCxJbuM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.218.109.0/24 81.218.219.0/24 81.218.235.0/24 81.218.238.0/24 82.80.245.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:34:0c:d3:6b:ac:11:30:40:60:aa:da:ef:e8:50:fe:bc:13: 93:35:32:ef:4b:3d:df:2e:31:37:eb:fd:07:19:51:4c:46:5a: ef:e3:4c:4e:a3:b1:9c:d0:1d:cc:17:f3:66:49:01:c4:19:77: b9:65:06:8f:19:87:b7:40:b0:ba:03:01:d5:95:cd:22:99:b0: dc:37:1a:4e:2c:f2:cc:10:13:f8:11:4a:84:0d:99:0c:76:ea: 75:8c:23:6b:a3:15:6a:b6:19:8d:fb:37:c0:56:1b:31:59:0b: b9:09:88:05:47:71:ef:cd:1c:ba:20:d4:f6:58:75:94:e8:8f: 99:4a:69:60:1a:b1:cc:fb:c1:5a:29:0f:9c:c9:5d:60:52:8f: 22:19:6a:d8:d0:73:81:0c:f6:d2:a3:e5:64:70:ac:95:8f:98: d8:cd:10:e5:01:dd:91:c9:01:07:34:cb:db:6d:a2:19:7b:b7: 6e:a0:84:49:4a:47:59:2e:68:ed:36:39:f2:04:db:41:28:f0: a9:fe:7a:b6:76:24:1f:6c:61:f9:93:f6:ee:ff:ce:39:34:d7: 1d:8e:07:9a:95:f9:f6:65:48:29:a0:93:5b:74:d2:69:23:da: 74:03:c7:37:2b:35:7c:dc:a8:71:9a:78:d2:ed:41:9e:01:ee: 3b:0c:a7:a5 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt2643eZuA+IY6m2Fbxg9x5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZWRkODVjMWVjY2I1ZmY0YmE5MzAxMTdhNzMyOTA5OWMw ZmYyZWIwHhcNMjYwMTAxMDAxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTBlMmJkNjg1YTNiZTU0OGY4NjU4NWMwNGYzNTExODJjNDk2ZWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHuJ3oxxN1JQQ4DPdUgn7toXa8Ib jRElfdKmOZxYvXelumEhAZOjruCwGeFQZSD5FP0O7O4+cTes2bIMyCga5N/OkjWs 5Tl5En0yyF3WatxSKX7peQqw/p4+r44D6ZqWRtDSy+z9qebdXB5g5/zy0Sl9Sqma Y++Sr6x8nY3ztnXivvAoo/yUf3CEYMngbIRNFWAhNvNI1yQlEWf6AeQ5U/+SpTQo Iwhswzh7sQn054hR1tp1tbsMJvPv6Fdj7BhWaRqGRj+mermEYmKayR9j/qbj1+cM HcAcpHPJQDU6ZDezMk5pDx/bXq4y3vMCgEVzyXY//966UVuM1xLDOtKcZQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFO4OK9aFo75Uj4ZYXATzURgsSW7jMB8GA1UdIwQY MBaAFD/t2FwezLX/S6kwEXpzKQmcD/LrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQt ZTJiNTI3NzI4ZTk2LzEvN2c0cjFvV2p2bFNQaGxoY0JQTlJHQ3hKYnVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQtZTJiNTI3NzI4ZTk2 LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAUdptAwQA UdrbAwQAUdrrAwQAUdruAwQAUlD1MA0GCSqGSIb3DQEBCwUAA4IBAQB/NAzTa6wR MEBgqtrv6FD+vBOTNTLvSz3fLjE36/0HGVFMRlrv40xOo7Gc0B3MF/NmSQHEGXe5 ZQaPGYe3QLC6AwHVlc0imbDcNxpOLPLMEBP4EUqEDZkMdup1jCNroxVqthmN+zfA VhsxWQu5CYgFR3HvzRy6INT2WHWU6I+ZSmlgGrHM+8FaKQ+cyV1gUo8iGWrY0HOB DPbSo+VkcKyVj5jYzRDlAd2RyQEHNMvbbaIZe7duoIRJSkdZLmjtNjnyBNtBKPCp /nq2diQfbGH5k/bu/845NNcdjgealfn2ZUgpoJNbdNJpI9p0A8c3KzV83KhxmnjS 7UGeAe47DKel -----END CERTIFICATE-----Generated at Sun Jan 25 13:00:52 2026 by rpki-client