This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/0CG97j_AzAe5K3GHp3bJaJPMXKU.roa File: 0CG97j_AzAe5K3GHp3bJaJPMXKU.roa (raw, json) Hash identifier: tld3TRv2rCWn11E6jD+ykRtqUmKbxB1k4Dbk8bPFowE= Subject key identifier: D0:21:BD:EE:3F:C0:CC:07:B9:2B:71:87:A7:76:C9:68:93:CC:5C:A5 Certificate issuer: /CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7 Certificate serial: 019B797EBC88FB0291DAB758E28777580587 Authority key identifier: 50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/0CG97j_AzAe5K3GHp3bJaJPMXKU.roa Signing time: Thu 01 Jan 2026 12:18:27 +0000 ROA not before: Thu 01 Jan 2026 12:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 22351 IP address blocks: 81.199.169.0/24 maxlen: 24 81.199.170.0/24 maxlen: 24 81.199.171.0/24 maxlen: 24 81.199.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.mft rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:bc:88:fb:02:91:da:b7:58:e2:87:77:58:05:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7 Validity Not Before: Jan 1 12:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d021bdee3fc0cc07b92b7187a776c96893cc5ca5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1e:a0:5a:f6:f1:ac:45:5f:cb:18:99:47:c7: a7:2a:74:51:08:a6:61:8c:62:3f:36:4b:dd:18:c2: bd:f6:a5:dd:f6:1e:57:6d:1b:00:fe:01:9e:6e:b2: 6b:16:b3:a6:5e:a1:78:9f:35:e5:0d:76:a6:ab:3a: 17:fa:71:3e:ff:45:15:d5:65:a5:5e:15:8b:d1:9a: 89:f0:23:56:77:91:55:cc:d1:ec:24:3a:bd:c9:c7: ca:45:44:06:81:4f:6c:57:84:f1:44:bd:38:5f:e0: a1:d5:cf:90:d3:bb:41:75:cd:7f:27:9d:d1:be:39: 9d:ec:2b:24:b9:18:04:fd:2e:c1:89:7d:f9:33:3c: ae:17:c0:f6:61:07:31:41:2b:5b:8f:bb:f1:32:dd: 3e:90:62:b7:0a:b0:0d:c6:4d:5c:f3:d2:5e:06:ce: 10:58:a6:77:d0:8b:8d:a1:e7:c3:7e:88:1d:8b:1f: 06:6a:a7:0a:0c:5b:73:8b:c5:cb:da:a4:be:12:99: 87:75:c6:e4:de:a6:ea:5d:da:bb:f7:6b:71:9c:f6: ce:d9:c1:a6:5f:a2:a4:3b:30:ea:30:1e:41:a8:8f: 37:2c:64:74:74:c3:22:44:e8:15:7b:3b:b2:53:07: 6a:54:9e:f0:65:be:e0:37:96:14:dc:88:a7:c6:3f: 12:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:21:BD:EE:3F:C0:CC:07:B9:2B:71:87:A7:76:C9:68:93:CC:5C:A5 X509v3 Authority Key Identifier: keyid:50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/0CG97j_AzAe5K3GHp3bJaJPMXKU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.199.169.0-81.199.171.255 81.199.218.0/24 Signature Algorithm: sha256WithRSAEncryption 80:78:ad:0d:65:8a:07:fe:c1:ca:5c:99:6e:48:d9:a1:35:25: 93:4a:d1:dc:2e:b5:06:87:5a:73:a9:54:6d:93:e3:6c:42:0e: ae:09:ae:9a:fc:a9:7e:5a:9e:0b:a6:47:8a:53:89:ce:4c:2a: bc:37:d4:53:c0:9e:6c:45:66:5a:bb:69:f6:dd:bb:02:20:69: d1:76:56:a9:27:7c:bc:00:65:cb:6d:7d:87:f7:19:78:65:da: 76:8b:f3:8c:fa:8d:1b:af:3b:c0:5d:5a:60:a7:81:f3:95:11: 34:e6:0f:58:ce:df:a3:f5:0c:25:f2:43:97:ef:2a:f5:57:1d: 2f:4f:a2:4f:a3:b5:f1:b0:b8:d4:31:ce:6b:76:16:b5:9b:9c: 20:b8:a6:5c:c3:a3:8a:ab:f8:c8:71:1c:1d:1f:17:8c:f0:66: 2b:85:04:78:4f:4b:49:4b:36:a9:09:fb:ff:bb:e9:93:ea:e4: df:e5:76:62:c5:0c:37:56:eb:7a:86:dc:39:26:a3:c9:c7:af: c7:b3:62:85:59:02:48:c8:fe:94:8e:26:cd:c7:aa:cc:21:a0: 76:fb:51:6b:1b:e3:e6:db:f1:4b:8e:c7:89:c1:30:c8:e6:4e: 36:93:0d:44:04:ba:6e:0b:de:be:de:86:17:89:33:d5:76:5e: b2:91:d0:e7 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt5fryI+wKR2rdY4od3WAWHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwMTgyYmVlOWFhMDEwYzFmZmQyZDgwNGY2YWE3YjE0YmRk YjkxZjcwHhcNMjYwMTAxMTIxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMDIxYmRlZTNmYzBjYzA3YjkyYjcxODdhNzc2Yzk2ODkzY2M1Y2E1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwB6gWvbxrEVfyxiZR8enKnRRCKZh jGI/NkvdGMK99qXd9h5XbRsA/gGebrJrFrOmXqF4nzXlDXamqzoX+nE+/0UV1WWl XhWL0ZqJ8CNWd5FVzNHsJDq9ycfKRUQGgU9sV4TxRL04X+Ch1c+Q07tBdc1/J53R vjmd7CskuRgE/S7BiX35MzyuF8D2YQcxQStbj7vxMt0+kGK3CrANxk1c89JeBs4Q WKZ30IuNoefDfogdix8GaqcKDFtzi8XL2qS+EpmHdcbk3qbqXdq792txnPbO2cGm X6KkOzDqMB5BqI83LGR0dMMiROgVezuyUwdqVJ7wZb7gN5YU3Iinxj8SNwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFNAhve4/wMwHuStxh6d2yWiTzFylMB8GA1UdIwQY MBaAFFAYK+6aoBDB/9LYBPaqexS925H3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUJncjdwcWdFTUhfMHRnRTlxcDdGTDNia2ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9iZDQ1NjYtYWMyNy00NmY4LTk0Zjkt MTlkMWJiNjFkOWE3LzEvMENHOTdqX0F6QWU1SzNHSHAzYkphSlBNWEtVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC9iZDQ1NjYtYWMyNy00NmY4LTk0ZjktMTlkMWJiNjFkOWE3 LzEvVUJncjdwcWdFTUhfMHRnRTlxcDdGTDNia2ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBABRx6kD BAJRx6gDBABRx9owDQYJKoZIhvcNAQELBQADggEBAIB4rQ1ligf+wcpcmW5I2aE1 JZNK0dwutQaHWnOpVG2T42xCDq4Jrpr8qX5angumR4pTic5MKrw31FPAnmxFZlq7 afbduwIgadF2VqknfLwAZcttfYf3GXhl2naL84z6jRuvO8BdWmCngfOVETTmD1jO 36P1DCXyQ5fvKvVXHS9Pok+jtfGwuNQxzmt2FrWbnCC4plzDo4qr+MhxHB0fF4zw ZiuFBHhPS0lLNqkJ+/+76ZPq5N/ldmLFDDdW63qG3Dkmo8nHr8ezYoVZAkjI/pSO Js3HqswhoHb7UWsb4+bb8UuOx4nBMMjmTjaTDUQEum4L3r7ehheJM9V2XrKR0Oc= -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:11 2026 by rpki-client