This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/RQbysAt1GgspnWOfwyBwad4EPWw.roa File: RQbysAt1GgspnWOfwyBwad4EPWw.roa (raw, json) Hash identifier: vfkA0hp4PretiDOgOmfw6YA3bRwSiVq26snYswjOLco= Subject key identifier: 45:06:F2:B0:0B:75:1A:0B:29:9D:63:9F:C3:20:70:69:DE:04:3D:6C Certificate issuer: /CN=9812e491aaa655b6324dbcc0cff00a8d63191076 Certificate serial: 019B7DCB17803EBB7F74E893A09AE43E0A7B Authority key identifier: 98:12:E4:91:AA:A6:55:B6:32:4D:BC:C0:CF:F0:0A:8D:63:19:10:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mBLkkaqmVbYyTbzAz_AKjWMZEHY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/RQbysAt1GgspnWOfwyBwad4EPWw.roa Signing time: Fri 02 Jan 2026 08:20:20 +0000 ROA not before: Fri 02 Jan 2026 08:20:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7155 IP address blocks: 81.20.208.0/21 maxlen: 21 81.20.216.0/21 maxlen: 21 213.151.176.0/22 maxlen: 22 213.151.180.0/22 maxlen: 22 213.151.184.0/23 maxlen: 23 213.151.186.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.crl rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.mft rsync://rpki.ripe.net/repository/DEFAULT/mBLkkaqmVbYyTbzAz_AKjWMZEHY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:17:80:3e:bb:7f:74:e8:93:a0:9a:e4:3e:0a:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9812e491aaa655b6324dbcc0cff00a8d63191076 Validity Not Before: Jan 2 08:20:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4506f2b00b751a0b299d639fc3207069de043d6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:05:5c:81:0f:6a:0f:1f:e5:2c:6e:aa:5f:63: bb:70:b8:e4:b9:83:1e:d0:52:e2:7c:71:6d:d8:ff: 2e:28:7f:2e:1c:4c:c4:9e:cc:4b:c8:9f:42:89:54: b2:de:a4:1a:e8:a4:98:72:00:94:44:bb:e2:be:ba: a8:be:30:0f:b6:8e:85:cb:7c:5a:63:fb:43:77:f0: 48:e4:54:e7:74:92:02:77:6a:d3:92:0c:db:7d:09: eb:7f:78:3d:d7:17:0b:79:00:25:4a:a0:d0:4d:5c: 80:0e:4c:49:8d:6a:80:cc:85:f0:cd:ca:f0:50:57: 03:9d:36:db:16:65:ad:4a:5d:a7:fb:30:ea:a5:84: 51:af:bb:88:19:6a:4f:3c:86:6e:cb:25:38:15:23: 28:d0:58:e0:3e:c8:0f:12:99:6e:d2:4f:92:36:6c: 35:91:30:0b:21:79:65:ec:05:1c:3c:c6:67:57:c8: 12:21:1f:38:8a:b1:34:a5:8b:03:f5:e0:06:fe:6f: fc:43:0e:33:bb:02:e4:c6:ec:8b:6a:ba:65:68:15: 53:f1:c0:e4:bf:c5:cd:1f:4e:62:00:93:a2:17:e0: ff:e9:33:ab:b3:69:ff:4c:4d:d8:77:8b:9c:42:01: bc:84:db:45:2e:2e:76:7f:be:3a:fd:b6:1e:1a:7f: 39:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:06:F2:B0:0B:75:1A:0B:29:9D:63:9F:C3:20:70:69:DE:04:3D:6C X509v3 Authority Key Identifier: keyid:98:12:E4:91:AA:A6:55:B6:32:4D:BC:C0:CF:F0:0A:8D:63:19:10:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBLkkaqmVbYyTbzAz_AKjWMZEHY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/RQbysAt1GgspnWOfwyBwad4EPWw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.20.208.0/20 213.151.176.0-213.151.187.255 Signature Algorithm: sha256WithRSAEncryption b9:d1:e1:ea:ac:eb:25:2b:86:da:b9:3c:ac:fe:cf:13:be:a2: f0:c5:69:06:c0:04:d4:17:c2:7a:9b:a3:c1:59:a6:3f:3c:0d: e8:c0:a1:91:00:59:a2:88:58:6e:66:77:a1:bf:45:37:8c:00: 2e:93:ce:46:40:f2:ea:61:81:67:90:4f:db:80:85:7e:ef:cb: 9d:43:e2:b3:70:6e:45:55:d5:9d:a6:83:0d:c0:a0:0b:ab:ea: 81:fc:e3:ea:61:f1:f7:2d:44:ac:62:ba:dc:4e:e8:59:3e:63: 29:0e:ff:36:a9:ee:85:b7:c0:c7:2f:8e:f7:20:dc:53:0d:5e: 7f:b4:05:66:ec:a6:f1:cc:c6:c0:f2:a7:43:4e:30:56:1b:8b: d5:79:50:af:65:70:8d:9f:ec:67:ec:36:f8:5e:3f:1c:7e:5c: cf:4a:45:67:fb:5f:3c:cd:ce:85:d6:5f:fb:76:e0:09:66:74: 15:71:41:69:a4:d3:7e:61:ae:ad:2f:b9:c8:00:37:fb:79:66: 3c:07:d6:2c:9c:2b:aa:ce:f7:80:29:33:9f:09:1f:ab:df:d9: d9:65:62:a8:b9:33:22:d0:87:be:5c:ec:07:75:bb:0e:56:a7: a0:9d:6d:90:1f:f5:31:92:03:b0:8e:ce:5d:5a:ab:1b:48:27: 3d:c8:ee:74 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt9yxeAPrt/dOiToJrkPgp7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4MTJlNDkxYWFhNjU1YjYzMjRkYmNjMGNmZjAwYThkNjMx OTEwNzYwHhcNMjYwMTAyMDgyMDIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTA2ZjJiMDBiNzUxYTBiMjk5ZDYzOWZjMzIwNzA2OWRlMDQzZDZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwVcgQ9qDx/lLG6qX2O7cLjkuYMe 0FLifHFt2P8uKH8uHEzEnsxLyJ9CiVSy3qQa6KSYcgCURLvivrqovjAPto6Fy3xa Y/tDd/BI5FTndJICd2rTkgzbfQnrf3g91xcLeQAlSqDQTVyADkxJjWqAzIXwzcrw UFcDnTbbFmWtSl2n+zDqpYRRr7uIGWpPPIZuyyU4FSMo0FjgPsgPEplu0k+SNmw1 kTALIXll7AUcPMZnV8gSIR84irE0pYsD9eAG/m/8Qw4zuwLkxuyLarplaBVT8cDk v8XNH05iAJOiF+D/6TOrs2n/TE3Yd4ucQgG8hNtFLi52f746/bYeGn85nwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFEUG8rALdRoLKZ1jn8MgcGneBD1sMB8GA1UdIwQY MBaAFJgS5JGqplW2Mk28wM/wCo1jGRB2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUJMa2thcW1WYll5VGJ6QXpfQUtqV01aRUhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8wZTdlZDMtNDhjYi00YWZlLThkMTUt ZGZmZTE3ZjNkYjU0LzEvUlFieXNBdDFHZ3NwbldPZnd5QndhZDRFUFd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni8wZTdlZDMtNDhjYi00YWZlLThkMTUtZGZmZTE3ZjNkYjU0 LzEvbUJMa2thcW1WYll5VGJ6QXpfQUtqV01aRUhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQEURTQMAwD BATVl7ADBALVl7gwDQYJKoZIhvcNAQELBQADggEBALnR4eqs6yUrhtq5PKz+zxO+ ovDFaQbABNQXwnqbo8FZpj88DejAoZEAWaKIWG5md6G/RTeMAC6TzkZA8uphgWeQ T9uAhX7vy51D4rNwbkVV1Z2mgw3AoAur6oH84+ph8fctRKxiutxO6Fk+YykO/zap 7oW3wMcvjvcg3FMNXn+0BWbspvHMxsDyp0NOMFYbi9V5UK9lcI2f7GfsNvhePxx+ XM9KRWf7XzzNzoXWX/t24AlmdBVxQWmk035hrq0vucgAN/t5ZjwH1iycK6rO94Ap M58JH6vf2dllYqi5MyLQh75c7Ad1uw5Wp6CdbZAf9TGSA7COzl1aqxtIJz3I7nQ= -----END CERTIFICATE-----Generated at Sun Jan 25 21:58:31 2026 by rpki-client