This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/0inTqtkV7aRdA0poVknUSc5weqM.roa File: 0inTqtkV7aRdA0poVknUSc5weqM.roa (raw, json) Hash identifier: tQvVVhfk99FYUlPYyVFhzpH6v9igywPSJePiCAXt2L8= Subject key identifier: D2:29:D3:AA:D9:15:ED:A4:5D:03:4A:68:56:49:D4:49:CE:70:7A:A3 Certificate issuer: /CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b Certificate serial: 019B7AC7E6A83044C076BFAEA0D9FFF870D3 Authority key identifier: A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/0inTqtkV7aRdA0poVknUSc5weqM.roa Signing time: Thu 01 Jan 2026 18:17:59 +0000 ROA not before: Thu 01 Jan 2026 18:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34665 IP address blocks: 81.19.133.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:e6:a8:30:44:c0:76:bf:ae:a0:d9:ff:f8:70:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b Validity Not Before: Jan 1 18:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d229d3aad915eda45d034a685649d449ce707aa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:85:6f:56:44:d7:34:93:02:80:96:56:ac:7b: 49:d9:d2:a3:0b:47:2f:90:3e:38:7c:00:42:70:23: a9:f5:11:38:80:34:bc:b8:e2:3f:2c:d5:40:12:33: 46:2b:86:d6:df:a9:2a:35:1c:44:75:f1:23:00:73: 1e:61:5b:22:07:4c:e2:53:3d:52:fe:85:89:10:5d: 7c:1f:f9:1e:27:58:60:a1:6c:c4:be:24:c4:a2:3f: 43:61:f6:33:5d:82:72:7a:ff:6d:01:26:7e:dc:f4: dc:4d:4c:16:d3:60:52:1b:20:3c:ba:14:69:92:d4: 72:76:c8:f8:1e:2a:2c:c5:b3:e9:53:ea:45:3f:c6: bd:0d:7f:bf:97:2d:16:a0:8c:b1:29:59:84:da:ad: 4e:c4:03:6d:d6:2d:a4:7a:ad:95:69:36:66:84:68: c6:3e:8b:69:4a:ed:72:be:9b:7b:b2:d3:e8:2d:ab: 4f:87:a1:11:9a:95:c4:de:66:a3:28:ef:dc:11:12: 05:4f:ce:b1:8a:be:e3:de:30:20:78:84:cc:6a:2f: 61:8f:f4:0b:ef:44:32:dc:8f:05:c1:11:16:6a:bc: 2c:23:29:99:bf:0c:f3:e8:95:26:7e:bb:94:0e:ab: 7b:ab:54:86:cb:cd:dd:7a:fe:5b:93:98:9a:e9:0c: a4:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:29:D3:AA:D9:15:ED:A4:5D:03:4A:68:56:49:D4:49:CE:70:7A:A3 X509v3 Authority Key Identifier: keyid:A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/0inTqtkV7aRdA0poVknUSc5weqM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.133.0/24 Signature Algorithm: sha256WithRSAEncryption 65:72:88:6a:2a:9e:d7:2b:ae:55:9e:7f:2b:71:96:43:83:e6: 20:a4:67:f9:18:13:b6:62:12:93:a9:5e:b6:95:76:ec:d5:d0: 35:02:52:a7:ab:f6:b2:48:21:93:f7:bb:2b:e2:bb:f8:15:fc: 75:b6:46:7b:9b:bc:b6:80:0b:ff:1f:34:a4:ce:87:c2:f6:24: 29:00:36:2f:03:a9:46:5c:a9:02:72:15:68:39:15:52:49:ad: 24:bc:6b:3c:f8:91:2b:10:a4:e3:65:28:fb:6e:05:1a:78:e0: 4b:ca:a1:b6:6b:64:81:ea:e8:62:f4:6c:99:c7:4a:3d:03:70: e4:f5:0e:8f:c0:04:59:6d:e4:42:21:95:81:d6:b9:01:f8:f1: 8e:8e:08:24:88:88:f2:51:38:a0:8f:9c:31:f4:b5:2f:9f:85: 7a:60:d9:c8:3a:18:b5:6c:33:43:fa:11:65:0c:77:ba:97:98: 95:18:89:4b:47:14:59:1d:73:e1:9d:29:e4:1e:66:f9:bb:ad: 6f:03:c0:0c:61:93:11:70:a0:e7:7d:fe:35:ca:43:67:5a:50: af:74:b1:4b:bd:98:8c:ca:7f:9c:61:09:1a:c6:fa:39:6d:a5: 85:30:c7:4c:b5:96:6a:ac:05:83:bb:78:01:2d:1d:89:1e:da: dc:5b:85:38 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x+aoMETAdr+uoNn/+HDTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0Y2U5NjQwYTNlZjJmZWExOTM3NGFkOGY5OWY0MjNkN2Fh N2M3NmIwHhcNMjYwMTAxMTgxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMjI5ZDNhYWQ5MTVlZGE0NWQwMzRhNjg1NjQ5ZDQ0OWNlNzA3YWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4VvVkTXNJMCgJZWrHtJ2dKjC0cv kD44fABCcCOp9RE4gDS8uOI/LNVAEjNGK4bW36kqNRxEdfEjAHMeYVsiB0ziUz1S /oWJEF18H/keJ1hgoWzEviTEoj9DYfYzXYJyev9tASZ+3PTcTUwW02BSGyA8uhRp ktRydsj4HiosxbPpU+pFP8a9DX+/ly0WoIyxKVmE2q1OxANt1i2keq2VaTZmhGjG PotpSu1yvpt7stPoLatPh6ERmpXE3majKO/cERIFT86xir7j3jAgeITMai9hj/QL 70Qy3I8FwREWarwsIymZvwzz6JUmfruUDqt7q1SGy83dev5bk5ia6QykQwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNIp06rZFe2kXQNKaFZJ1EnOcHqjMB8GA1UdIwQY MBaAFKTOlkCj7y/qGTdK2PmfQj16p8drMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQt MjgzZmU1NGE2ZjJmLzEvMGluVHF0a1Y3YVJkQTBwb1ZrblVTYzV3ZXFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQtMjgzZmU1NGE2ZjJm LzEvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUROFMA0G CSqGSIb3DQEBCwUAA4IBAQBlcohqKp7XK65Vnn8rcZZDg+YgpGf5GBO2YhKTqV62 lXbs1dA1AlKnq/aySCGT97sr4rv4Ffx1tkZ7m7y2gAv/HzSkzofC9iQpADYvA6lG XKkCchVoORVSSa0kvGs8+JErEKTjZSj7bgUaeOBLyqG2a2SB6uhi9GyZx0o9A3Dk 9Q6PwARZbeRCIZWB1rkB+PGOjggkiIjyUTigj5wx9LUvn4V6YNnIOhi1bDND+hFl DHe6l5iVGIlLRxRZHXPhnSnkHmb5u61vA8AMYZMRcKDnff41ykNnWlCvdLFLvZiM yn+cYQkaxvo5baWFMMdMtZZqrAWDu3gBLR2JHtrcW4U4 -----END CERTIFICATE-----Generated at Sun Jan 25 17:39:32 2026 by rpki-client