This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/aSrPhVIkmO2W_0NsV2-sCxa7gho.roa File: aSrPhVIkmO2W_0NsV2-sCxa7gho.roa (raw, json) Hash identifier: ZnDqOz1RannicJHNANdjT9EXcKobG4hQzRe6TtjGkU8= Subject key identifier: 69:2A:CF:85:52:24:98:ED:96:FF:43:6C:57:6F:AC:0B:16:BB:82:1A Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Certificate serial: 019B77C79771B7F26CD6209CFAF32B015FB0 Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/aSrPhVIkmO2W_0NsV2-sCxa7gho.roa Signing time: Thu 01 Jan 2026 04:18:47 +0000 ROA not before: Thu 01 Jan 2026 04:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212987 IP address blocks: 81.15.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:97:71:b7:f2:6c:d6:20:9c:fa:f3:2b:01:5f:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Validity Not Before: Jan 1 04:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=692acf85522498ed96ff436c576fac0b16bb821a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9e:21:db:ba:47:29:56:e6:ef:31:b3:8b:8d: 4d:e3:d3:43:44:25:48:4c:ea:19:7f:87:72:4e:27: 10:6b:16:1f:9d:ca:cb:64:fa:82:94:0c:fa:a0:ec: 39:4d:97:d5:3e:fd:84:09:82:7d:97:cf:ff:fc:90: d2:42:36:aa:d4:c0:66:cc:9f:5c:77:44:ee:a9:a1: 89:1d:b3:83:98:c5:35:c9:60:9e:f9:3a:f5:d6:ab: 74:75:57:7b:84:6d:f6:61:0b:ef:a0:6d:2d:57:9e: 69:4f:37:88:9d:3d:53:78:9e:8d:29:a7:4e:65:b0: 0a:36:45:8e:98:3c:1a:1a:43:ec:f0:34:50:92:36: fb:1a:b3:76:b7:80:75:6f:42:19:21:a0:43:d4:5c: 02:be:1f:76:4f:58:38:1b:75:e2:e9:99:92:21:81: 59:c1:ec:8b:50:72:45:61:66:b3:35:ff:7c:81:21: 50:3d:7d:f7:72:3f:0c:39:b4:cf:3b:42:b4:f9:c5: ac:9d:15:53:db:2c:3d:0d:d2:4b:69:ad:82:b5:c5: 12:79:8b:5b:83:d4:f7:6a:33:c5:6a:8a:67:02:3a: f8:69:52:78:ca:c4:dd:0b:16:30:78:2b:31:26:4a: 42:dc:b2:f4:c6:2f:d5:b7:72:96:0a:aa:b2:fd:2f: 0f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:2A:CF:85:52:24:98:ED:96:FF:43:6C:57:6F:AC:0B:16:BB:82:1A X509v3 Authority Key Identifier: keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/aSrPhVIkmO2W_0NsV2-sCxa7gho.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.15.196.0/24 Signature Algorithm: sha256WithRSAEncryption af:e4:fe:0d:ac:68:06:37:97:23:32:aa:ef:5a:0a:eb:da:7f: f9:c3:d1:e5:e8:44:e6:c5:b5:ce:58:1e:44:e9:e0:24:c6:72: 7f:4f:fd:29:de:cd:3d:26:32:02:d8:9d:65:77:f0:7f:4f:04: 16:79:30:6e:cb:56:2d:9d:fd:fd:03:80:33:b4:b0:a9:90:55: 38:ac:19:fd:d5:6f:9c:46:c8:58:f1:cf:03:e2:a9:3d:63:88: 6e:75:b5:35:3b:51:7e:b0:57:12:2c:f1:5c:d9:c1:79:c9:df: 61:91:cd:57:bc:06:2f:08:c8:ba:5d:f9:c9:54:cd:f5:fc:04: d5:7a:b0:50:84:86:d1:33:41:1d:d0:d8:07:c1:f9:b6:bc:0f: 36:97:1e:b0:73:8d:c1:39:82:13:3f:9d:f1:2a:e7:2d:0c:fe: 08:5f:82:50:41:5d:9b:a0:6e:f1:cf:11:72:13:bf:25:bf:ca: 8c:b7:80:6d:34:0b:a9:e4:5d:95:bf:eb:15:a8:2b:ac:ae:bb: e6:2f:5a:ee:42:e0:80:7a:e9:c4:9d:c0:a7:7a:9a:bb:2c:94: 28:d8:17:55:b3:ec:7d:0b:5a:47:77:81:68:9c:ed:9b:41:4a: d9:b7:52:54:37:0e:0d:80:b7:f5:77:f1:63:97:19:80:1a:d2: 3b:e7:18:19 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x5dxt/Js1iCc+vMrAV+wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NjgzNGU2ODg5MGYzOTg2YTFiMDQ1N2NlMGY1NGFlMDNj MmQ3NmIwHhcNMjYwMTAxMDQxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTJhY2Y4NTUyMjQ5OGVkOTZmZjQzNmM1NzZmYWMwYjE2YmI4MjFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp54h27pHKVbm7zGzi41N49NDRCVI TOoZf4dyTicQaxYfncrLZPqClAz6oOw5TZfVPv2ECYJ9l8///JDSQjaq1MBmzJ9c d0TuqaGJHbODmMU1yWCe+Tr11qt0dVd7hG32YQvvoG0tV55pTzeInT1TeJ6NKadO ZbAKNkWOmDwaGkPs8DRQkjb7GrN2t4B1b0IZIaBD1FwCvh92T1g4G3Xi6ZmSIYFZ weyLUHJFYWazNf98gSFQPX33cj8MObTPO0K0+cWsnRVT2yw9DdJLaa2CtcUSeYtb g9T3ajPFaopnAjr4aVJ4ysTdCxYweCsxJkpC3LL0xi/Vt3KWCqqy/S8PsQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGkqz4VSJJjtlv9DbFdvrAsWu4IaMB8GA1UdIwQY MBaAFFRoNOaIkPOYahsEV84PVK4DwtdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQt NTI3NjZiMjRiYWE0LzEvYVNyUGhWSWttTzJXXzBOc1YyLXNDeGE3Z2hvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQtNTI3NjZiMjRiYWE0 LzEvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUQ/EMA0G CSqGSIb3DQEBCwUAA4IBAQCv5P4NrGgGN5cjMqrvWgrr2n/5w9Hl6ETmxbXOWB5E 6eAkxnJ/T/0p3s09JjIC2J1ld/B/TwQWeTBuy1Ytnf39A4AztLCpkFU4rBn91W+c RshY8c8D4qk9Y4hudbU1O1F+sFcSLPFc2cF5yd9hkc1XvAYvCMi6XfnJVM31/ATV erBQhIbRM0Ed0NgHwfm2vA82lx6wc43BOYITP53xKuctDP4IX4JQQV2boG7xzxFy E78lv8qMt4BtNAup5F2Vv+sVqCusrrvmL1ruQuCAeunEncCnepq7LJQo2BdVs+x9 C1pHd4FonO2bQUrZt1JUNw4NgLf1d/FjlxmAGtI75xgZ -----END CERTIFICATE-----Generated at Mon Jan 26 03:57:08 2026 by rpki-client