This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/roVhJvLE3W-3AVNXrvbfZb_XPPo.roa File: roVhJvLE3W-3AVNXrvbfZb_XPPo.roa (raw, json) Hash identifier: 6LQ91r1uUm0MXEXzntSjw9cSGp9nmQGmFVNHFHmb1Zw= Subject key identifier: AE:85:61:26:F2:C4:DD:6F:B7:01:53:57:AE:F6:DF:65:BF:D7:3C:FA Certificate issuer: /CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b Certificate serial: 019B7AC7E955FAE7A04E3D248E48E696C8D5 Authority key identifier: A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/roVhJvLE3W-3AVNXrvbfZb_XPPo.roa Signing time: Thu 01 Jan 2026 18:18:00 +0000 ROA not before: Thu 01 Jan 2026 18:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60602 IP address blocks: 81.19.131.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:e9:55:fa:e7:a0:4e:3d:24:8e:48:e6:96:c8:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b Validity Not Before: Jan 1 18:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ae856126f2c4dd6fb7015357aef6df65bfd73cfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:cf:ff:59:00:a8:71:96:5f:c6:da:42:ea:69: 4c:fe:d9:a4:b8:60:10:d6:24:90:f8:32:1f:f4:6b: 08:d9:a6:78:b4:9e:a4:15:0f:3d:52:34:b5:3f:da: 7f:64:c2:3c:d7:03:04:14:a5:6e:83:62:29:12:8d: 5d:72:e5:e8:12:0b:aa:9b:66:4f:1e:ad:dc:6f:8d: 44:91:92:5a:59:30:51:a8:b6:cb:54:bc:6c:9b:7e: 06:dd:c0:65:d9:d5:42:2b:08:c1:eb:46:f0:2a:9e: b2:2e:dc:be:ee:07:66:6c:37:96:0b:72:16:af:4a: f6:f2:06:a0:63:ef:db:12:50:04:53:cd:72:8a:94: 58:2f:a8:da:50:43:8c:a8:97:f6:16:8a:ec:18:65: 3e:78:ba:73:f0:f4:87:71:21:81:63:8a:0c:57:99: 93:7f:40:a8:46:4b:c2:77:07:87:e5:35:9c:58:21: 52:0c:f4:b6:74:3a:5e:27:80:80:1f:20:36:d3:4e: d7:1c:28:87:cb:64:3a:d9:46:0e:d3:84:dd:de:b6: 83:07:ac:18:63:ea:29:7c:ab:09:e1:71:6a:e2:09: 08:1b:a9:af:13:8e:91:14:29:79:0e:02:4a:2a:b6: 8a:7f:45:c5:1b:41:a1:a3:5f:49:b4:06:d2:03:88: de:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:85:61:26:F2:C4:DD:6F:B7:01:53:57:AE:F6:DF:65:BF:D7:3C:FA X509v3 Authority Key Identifier: keyid:A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/roVhJvLE3W-3AVNXrvbfZb_XPPo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.131.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:70:7f:19:88:e3:5c:a7:8f:1a:ff:e3:a3:7e:9a:bb:f6:99: 0a:76:8f:b3:74:3a:5d:e9:7f:f2:10:24:6c:89:30:dd:e4:aa: 2b:36:cb:39:38:ab:00:3f:ff:3b:e7:bd:17:2e:c2:f2:b0:da: 05:74:07:88:b3:41:0d:d4:b7:81:07:ca:64:61:e6:dd:f0:54: e7:bc:0b:0a:dd:27:0d:9a:eb:fe:76:65:e6:c8:0b:75:93:34: 05:76:2b:57:14:92:36:6c:83:6a:ff:18:88:53:40:71:e0:d6: d3:13:08:3e:bf:17:b0:04:b8:90:da:0a:46:0b:3e:e7:50:83: 96:11:a7:3f:50:62:87:42:48:06:cf:26:97:a6:ee:a3:c5:2b: cd:02:05:77:ae:52:75:f1:20:7e:b7:d0:9a:da:19:73:9a:53: b1:e1:d2:97:7f:25:10:26:3a:de:7e:fc:56:39:fe:04:4c:53: ca:8f:ed:9f:c7:88:04:bb:28:ae:38:1a:11:48:80:71:04:52: 54:a6:f3:8a:03:51:df:70:ec:9c:ec:03:54:00:50:76:9d:4e: 10:d0:69:f5:6b:fd:5c:f5:cd:cf:e3:9e:9f:07:c8:e5:a2:68: 84:d4:17:b8:d3:f8:d2:02:af:2f:8d:93:97:c7:a4:af:f8:5d: ca:e7:34:ab -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x+lV+uegTj0kjkjmlsjVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0Y2U5NjQwYTNlZjJmZWExOTM3NGFkOGY5OWY0MjNkN2Fh N2M3NmIwHhcNMjYwMTAxMTgxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZTg1NjEyNmYyYzRkZDZmYjcwMTUzNTdhZWY2ZGY2NWJmZDczY2ZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAus//WQCocZZfxtpC6mlM/tmkuGAQ 1iSQ+DIf9GsI2aZ4tJ6kFQ89UjS1P9p/ZMI81wMEFKVug2IpEo1dcuXoEguqm2ZP Hq3cb41EkZJaWTBRqLbLVLxsm34G3cBl2dVCKwjB60bwKp6yLty+7gdmbDeWC3IW r0r28gagY+/bElAEU81yipRYL6jaUEOMqJf2ForsGGU+eLpz8PSHcSGBY4oMV5mT f0CoRkvCdweH5TWcWCFSDPS2dDpeJ4CAHyA2007XHCiHy2Q62UYO04Td3raDB6wY Y+opfKsJ4XFq4gkIG6mvE46RFCl5DgJKKraKf0XFG0Gho19JtAbSA4je3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK6FYSbyxN1vtwFTV67232W/1zz6MB8GA1UdIwQY MBaAFKTOlkCj7y/qGTdK2PmfQj16p8drMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQt MjgzZmU1NGE2ZjJmLzEvcm9WaEp2TEUzVy0zQVZOWHJ2YmZaYl9YUFBvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQtMjgzZmU1NGE2ZjJm LzEvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAURODMA0G CSqGSIb3DQEBCwUAA4IBAQAqcH8ZiONcp48a/+Ojfpq79pkKdo+zdDpd6X/yECRs iTDd5KorNss5OKsAP/87570XLsLysNoFdAeIs0EN1LeBB8pkYebd8FTnvAsK3ScN muv+dmXmyAt1kzQFditXFJI2bINq/xiIU0Bx4NbTEwg+vxewBLiQ2gpGCz7nUIOW Eac/UGKHQkgGzyaXpu6jxSvNAgV3rlJ18SB+t9Ca2hlzmlOx4dKXfyUQJjrefvxW Of4ETFPKj+2fx4gEuyiuOBoRSIBxBFJUpvOKA1HfcOyc7ANUAFB2nU4Q0Gn1a/1c 9c3P456fB8jlomiE1Be40/jSAq8vjZOXx6Sv+F3K5zSr -----END CERTIFICATE-----Generated at Sun Jan 25 17:33:46 2026 by rpki-client