This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/lJTlNN8F5wIpjtN-5G7f-bT4fsg.roa File: lJTlNN8F5wIpjtN-5G7f-bT4fsg.roa (raw, json) Hash identifier: SL/tp/ZCC7/XRRpHFK6GaY8SiSckHJWdQl9TAUZ/MuM= Subject key identifier: 94:94:E5:34:DF:05:E7:02:29:8E:D3:7E:E4:6E:DF:F9:B4:F8:7E:C8 Certificate issuer: /CN=172537601a31697404922d957e74450f5a9cbe73 Certificate serial: 019BD4CA311426994E0224B77FC7B5D028D5 Authority key identifier: 17:25:37:60:1A:31:69:74:04:92:2D:95:7E:74:45:0F:5A:9C:BE:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/lJTlNN8F5wIpjtN-5G7f-bT4fsg.roa Signing time: Mon 19 Jan 2026 05:46:19 +0000 ROA not before: Mon 19 Jan 2026 05:46:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9304 IP address blocks: 81.17.160.0/21 maxlen: 24 81.17.168.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.crl rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.mft rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d4:ca:31:14:26:99:4e:02:24:b7:7f:c7:b5:d0:28:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=172537601a31697404922d957e74450f5a9cbe73 Validity Not Before: Jan 19 05:46:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9494e534df05e702298ed37ee46edff9b4f87ec8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:65:15:3c:ac:4d:f7:9c:74:76:bf:36:1a:54: 04:15:e6:17:4c:21:57:32:d3:94:14:dd:c6:9b:e1: 39:61:05:b8:c4:91:6b:0a:65:7a:ec:b2:74:d0:51: 2e:b5:3e:3a:11:d6:93:bc:44:24:d0:bd:e6:5d:bd: 74:ac:15:72:a3:d0:bf:81:08:f3:db:a0:2e:81:da: eb:72:34:1d:48:88:e0:73:1a:79:8d:c6:4e:f4:11: 5d:af:cd:b5:d3:e1:5b:f6:4f:6b:98:5b:26:b4:01: b1:7e:4d:4e:2f:f4:7b:1c:2c:a1:8f:7e:43:42:15: 63:b3:07:f4:17:09:6b:1c:60:0c:29:11:9e:18:7f: eb:6d:03:39:6f:29:17:5a:e3:06:1c:58:e3:bf:dd: 50:6b:44:bc:97:f7:a1:fe:60:6a:a5:8c:fd:5d:e4: fa:38:ff:33:8c:f5:65:b4:b5:11:93:1d:5f:7a:6e: bd:4a:08:ea:fc:0e:ca:68:ed:17:a0:74:55:e5:ef: df:e8:00:0b:1a:c7:2d:ea:f8:82:8c:69:dd:5d:a6: 98:6a:d8:3e:c0:d3:d5:0d:ea:ec:51:60:5b:88:4c: 6e:28:f3:01:53:99:c1:4f:59:6a:9f:0b:30:bf:b6: fd:ac:59:95:9d:55:8e:7f:db:a2:be:b0:f6:02:44: 47:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:94:E5:34:DF:05:E7:02:29:8E:D3:7E:E4:6E:DF:F9:B4:F8:7E:C8 X509v3 Authority Key Identifier: keyid:17:25:37:60:1A:31:69:74:04:92:2D:95:7E:74:45:0F:5A:9C:BE:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/lJTlNN8F5wIpjtN-5G7f-bT4fsg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.17.160.0/20 Signature Algorithm: sha256WithRSAEncryption 6f:44:0b:2d:1e:7d:1f:5e:b9:cb:e4:92:0f:aa:a7:e3:41:bb: ff:64:01:da:a7:51:32:32:c2:15:0e:92:cc:05:4e:36:c4:e1: 64:fd:cf:41:3c:c9:8e:80:6e:04:f9:52:ff:02:a9:36:92:5d: dc:5b:35:60:07:67:f2:ff:1c:88:74:df:8b:ed:81:c3:f1:25: 80:b9:b9:61:b5:22:9b:61:94:08:58:3e:16:d3:27:d4:a4:05: 4d:8b:f0:00:4c:0a:f6:af:35:19:16:40:70:13:8b:a5:da:47: b0:57:de:7f:f4:f0:b8:40:5b:bf:d7:3e:55:d1:a1:7b:c1:73: f2:35:fc:9a:9f:f2:ad:37:b6:41:1d:fd:24:34:02:f9:ba:4a: 6c:07:1a:80:5a:97:77:bd:c0:59:92:90:c8:57:5a:ca:ec:1c: 23:ca:3d:ae:84:a4:ae:9a:f2:1d:2b:e5:23:33:64:d1:cc:a2: 6f:c8:12:9b:7c:ba:8e:98:24:d8:3b:fd:c5:d8:95:c7:f0:8f: b1:78:c1:02:30:6b:3a:81:cb:44:a4:b6:d4:db:e8:7e:cf:51: 4e:a3:39:e0:9e:44:90:e0:17:6b:4e:9e:c8:15:c1:d8:d9:0a: 93:ce:e2:28:85:84:8c:15:17:0c:c4:a4:ac:73:9d:28:0c:4c: 98:46:7e:bb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvUyjEUJplOAiS3f8e10CjVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MjUzNzYwMWEzMTY5NzQwNDkyMmQ5NTdlNzQ0NTBmNWE5 Y2JlNzMwHhcNMjYwMTE5MDU0NjE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDk0ZTUzNGRmMDVlNzAyMjk4ZWQzN2VlNDZlZGZmOWI0Zjg3ZWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmUVPKxN95x0dr82GlQEFeYXTCFX MtOUFN3Gm+E5YQW4xJFrCmV67LJ00FEutT46EdaTvEQk0L3mXb10rBVyo9C/gQjz 26AugdrrcjQdSIjgcxp5jcZO9BFdr8210+Fb9k9rmFsmtAGxfk1OL/R7HCyhj35D QhVjswf0FwlrHGAMKRGeGH/rbQM5bykXWuMGHFjjv91Qa0S8l/eh/mBqpYz9XeT6 OP8zjPVltLURkx1fem69Sgjq/A7KaO0XoHRV5e/f6AALGsct6viCjGndXaaYatg+ wNPVDersUWBbiExuKPMBU5nBT1lqnwswv7b9rFmVnVWOf9uivrD2AkRHywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJSU5TTfBecCKY7TfuRu3/m0+H7IMB8GA1UdIwQY MBaAFBclN2AaMWl0BJItlX50RQ9anL5zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnlVM1lCb3hhWFFFa2kyVmZuUkZEMXFjdm5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8yMTljYWUtMjY0ZC00NmE3LTllNjQt ZTYwNGI2MWJlMGVhLzEvbEpUbE5OOEY1d0lwanROLTVHN2YtYlQ0ZnNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny8yMTljYWUtMjY0ZC00NmE3LTllNjQtZTYwNGI2MWJlMGVh LzEvRnlVM1lCb3hhWFFFa2kyVmZuUkZEMXFjdm5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEURGgMA0G CSqGSIb3DQEBCwUAA4IBAQBvRAstHn0fXrnL5JIPqqfjQbv/ZAHap1EyMsIVDpLM BU42xOFk/c9BPMmOgG4E+VL/Aqk2kl3cWzVgB2fy/xyIdN+L7YHD8SWAublhtSKb YZQIWD4W0yfUpAVNi/AATAr2rzUZFkBwE4ul2kewV95/9PC4QFu/1z5V0aF7wXPy Nfyan/KtN7ZBHf0kNAL5ukpsBxqAWpd3vcBZkpDIV1rK7Bwjyj2uhKSumvIdK+Uj M2TRzKJvyBKbfLqOmCTYO/3F2JXH8I+xeMECMGs6gctEpLbU2+h+z1FOozngnkSQ 4BdrTp7IFcHY2QqTzuIohYSMFRcMxKSsc50oDEyYRn67 -----END CERTIFICATE-----Generated at Sun Jan 25 10:31:11 2026 by rpki-client