This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/aGZr4wPYNJ6GCVvXrPBVVtalnZs.roa File: aGZr4wPYNJ6GCVvXrPBVVtalnZs.roa (raw, json) Hash identifier: HR+6hF6C7zyPdJci+gTa+wdqzGllr0dCtu8rPBplNRc= Subject key identifier: 68:66:6B:E3:03:D8:34:9E:86:09:5B:D7:AC:F0:55:56:D6:A5:9D:9B Certificate issuer: /CN=e7f881401abacc88c941fdf740f1ab1536f05dba Certificate serial: 019B7EA660CEB82B5D65C718027CBCD585E0 Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/aGZr4wPYNJ6GCVvXrPBVVtalnZs.roa Signing time: Fri 02 Jan 2026 12:19:51 +0000 ROA not before: Fri 02 Jan 2026 12:19:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24727 IP address blocks: 212.81.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.mft rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:60:ce:b8:2b:5d:65:c7:18:02:7c:bc:d5:85:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba Validity Not Before: Jan 2 12:19:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=68666be303d8349e86095bd7acf05556d6a59d9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:4e:94:1b:ac:be:6a:ef:01:50:30:54:1e:30: 45:36:c4:58:41:75:db:e8:bc:77:82:78:a1:96:27: cb:4f:2a:57:d0:3b:42:99:8e:3d:ed:81:53:b3:dc: 26:6b:85:95:9b:55:68:e6:96:9c:6a:b2:3b:0e:71: b3:4c:5e:e9:ab:f1:50:e1:b1:80:4d:67:4e:31:9a: 92:04:6a:bb:10:83:3a:78:3a:d9:f8:fb:9e:92:38: 22:c8:91:f9:b0:2a:0f:50:39:7d:62:24:f9:19:cf: a5:10:33:c2:54:41:29:3a:83:85:ee:2e:e9:2e:86: 5f:06:59:bf:06:2e:e7:58:81:7c:0f:ea:35:48:0f: 3f:a7:9b:09:0f:ad:67:aa:ca:24:12:58:c8:61:37: ec:f5:ea:63:27:65:88:6c:3f:94:3a:99:c8:63:e4: 4a:aa:ca:34:42:62:0a:37:70:73:db:95:69:b4:d9: fe:c2:d0:e8:07:16:35:f3:11:ca:37:1e:0c:c5:be: a1:59:13:36:39:bc:70:f2:5e:d4:a7:04:11:ba:d1: 99:c9:03:f8:06:bd:f2:46:5e:ac:81:f2:91:e9:63: 03:a7:89:d5:66:b4:90:8a:af:1c:4f:30:48:23:de: 60:39:e0:03:d6:7c:97:2d:18:21:87:72:bf:fa:a9: 59:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:66:6B:E3:03:D8:34:9E:86:09:5B:D7:AC:F0:55:56:D6:A5:9D:9B X509v3 Authority Key Identifier: keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/aGZr4wPYNJ6GCVvXrPBVVtalnZs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.81.16.0/24 Signature Algorithm: sha256WithRSAEncryption b7:68:17:1c:dd:9e:1b:cf:e8:d5:bf:d9:a5:46:45:c2:e9:4e: 12:63:11:8b:4a:63:fb:fb:19:c4:d6:10:17:10:ff:52:6f:15: 74:48:d6:48:b6:1e:3f:cc:ef:ed:74:cb:c8:32:01:48:4a:b3: 9a:49:2b:4e:da:16:0c:2d:4f:bb:9d:00:70:19:ee:9e:2f:d3: 33:c5:e6:1f:cc:ff:7d:35:97:32:c8:b4:a4:47:0a:63:65:69: 3f:b1:a8:e3:79:88:de:4b:88:a6:43:03:43:52:f1:a9:a9:bb: e3:92:02:df:23:bd:81:3f:fc:02:5b:a7:70:a7:8b:1e:60:af: 2e:3b:01:50:d0:d2:9d:72:fd:93:21:b9:53:dc:92:c4:bd:df: 51:ed:21:f1:f4:c4:a9:8f:09:88:56:59:57:af:bc:fe:66:ca: 26:ad:08:e9:88:c9:81:46:f1:c1:f1:ea:bf:4c:8f:17:80:1f: bf:3e:52:92:84:b0:ca:42:a7:26:e7:88:b8:f7:ee:d8:9c:24: 1c:8a:21:73:f8:b0:a0:ea:4b:a9:dc:2e:15:34:b6:3f:d0:ed: a8:a3:77:a4:55:ff:4d:6f:52:5b:31:81:5c:f6:49:44:9d:1f: bc:dc:a1:63:43:4f:02:42:e9:03:2c:08:1f:98:46:2d:ef:97: bd:12:be:6e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pmDOuCtdZccYAny81YXgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3Zjg4MTQwMWFiYWNjODhjOTQxZmRmNzQwZjFhYjE1MzZm MDVkYmEwHhcNMjYwMTAyMTIxOTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODY2NmJlMzAzZDgzNDllODYwOTViZDdhY2YwNTU1NmQ2YTU5ZDliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApk6UG6y+au8BUDBUHjBFNsRYQXXb 6Lx3gnihlifLTypX0DtCmY497YFTs9wma4WVm1Vo5pacarI7DnGzTF7pq/FQ4bGA TWdOMZqSBGq7EIM6eDrZ+PuekjgiyJH5sCoPUDl9YiT5Gc+lEDPCVEEpOoOF7i7p LoZfBlm/Bi7nWIF8D+o1SA8/p5sJD61nqsokEljIYTfs9epjJ2WIbD+UOpnIY+RK qso0QmIKN3Bz25VptNn+wtDoBxY18xHKNx4Mxb6hWRM2Obxw8l7UpwQRutGZyQP4 Br3yRl6sgfKR6WMDp4nVZrSQiq8cTzBII95gOeAD1nyXLRghh3K/+qlZKwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGhma+MD2DSehglb16zwVVbWpZ2bMB8GA1UdIwQY MBaAFOf4gUAausyIyUH990DxqxU28F26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNV9pQlFCcTZ6SWpKUWYzM1FQR3JGVGJ3WGJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9mNTUzNGEtYTYxMy00N2JlLWI0MmIt ZTJmYmMzYTY4ODAwLzEvYUdacjR3UFlOSjZHQ1Z2WHJQQlZWdGFsblpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9mNTUzNGEtYTYxMy00N2JlLWI0MmItZTJmYmMzYTY4ODAw LzEvNV9pQlFCcTZ6SWpKUWYzM1FQR3JGVGJ3WGJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1FEQMA0G CSqGSIb3DQEBCwUAA4IBAQC3aBcc3Z4bz+jVv9mlRkXC6U4SYxGLSmP7+xnE1hAX EP9SbxV0SNZIth4/zO/tdMvIMgFISrOaSStO2hYMLU+7nQBwGe6eL9MzxeYfzP99 NZcyyLSkRwpjZWk/sajjeYjeS4imQwNDUvGpqbvjkgLfI72BP/wCW6dwp4seYK8u OwFQ0NKdcv2TIblT3JLEvd9R7SHx9MSpjwmIVllXr7z+ZsomrQjpiMmBRvHB8eq/ TI8XgB+/PlKShLDKQqcm54i49+7YnCQciiFz+LCg6kup3C4VNLY/0O2oo3ekVf9N b1JbMYFc9klEnR+83KFjQ08CQukDLAgfmEYt75e9Er5u -----END CERTIFICATE-----Generated at Mon Jan 26 12:17:05 2026 by rpki-client