This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/e21IYZkxD-LqfptfaDaQavDQrPs.roa File: e21IYZkxD-LqfptfaDaQavDQrPs.roa (raw, json) Hash identifier: D94mNP8VUbijUpDLZg4LGXG4XvzPkl5vC30s+ClAqag= Subject key identifier: 7B:6D:48:61:99:31:0F:E2:EA:7E:9B:5F:68:36:90:6A:F0:D0:AC:FB Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47 Certificate serial: 019B7CEE02C36D04D92BBDC3F04AE6499AC3 Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/e21IYZkxD-LqfptfaDaQavDQrPs.roa Signing time: Fri 02 Jan 2026 04:18:51 +0000 ROA not before: Fri 02 Jan 2026 04:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57043 IP address blocks: 81.29.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:02:c3:6d:04:d9:2b:bd:c3:f0:4a:e6:49:9a:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47 Validity Not Before: Jan 2 04:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7b6d486199310fe2ea7e9b5f6836906af0d0acfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:58:c4:8d:c4:66:99:d6:4c:08:77:26:7d:61: d5:67:46:76:43:78:cb:81:c3:3f:26:1d:2e:19:8c: 50:74:13:8b:18:b2:3c:0e:1a:61:b4:df:42:a3:7d: e4:b9:05:e3:f9:f3:3d:44:c0:28:33:0a:a7:f1:d1: ee:20:05:4a:87:22:40:f6:71:17:b9:a1:37:b4:89: 40:94:3e:65:56:78:58:84:9e:43:c8:c8:2f:25:8f: b1:cf:74:d5:3d:47:73:45:df:6e:96:0b:ae:d0:70: 89:c2:82:04:31:1c:54:65:c2:c9:fe:7e:6a:72:16: 9e:d8:53:e0:5a:3a:be:40:8e:2f:cd:ba:6a:80:da: 75:06:79:f1:c8:d5:75:f5:99:23:72:a4:b2:95:c3: c9:51:56:4b:27:34:7b:01:a1:b3:f0:9c:8c:0f:af: 8c:b6:83:b6:bd:3b:83:d0:72:e0:3a:a8:19:96:da: fe:5f:2f:e2:1a:ef:48:8d:f4:92:fe:97:20:c7:c7: 54:1e:b0:5f:65:52:e8:75:63:8f:af:de:1a:0d:3c: 2f:9d:91:bd:22:46:75:36:d1:69:6d:f4:aa:d4:cf: dc:25:c8:36:5f:8b:6d:52:56:b3:0e:85:83:ed:e4: 37:63:47:46:66:86:e1:8d:91:65:04:3f:81:35:73: ee:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:6D:48:61:99:31:0F:E2:EA:7E:9B:5F:68:36:90:6A:F0:D0:AC:FB X509v3 Authority Key Identifier: keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/e21IYZkxD-LqfptfaDaQavDQrPs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.29.146.0/24 Signature Algorithm: sha256WithRSAEncryption 07:c8:83:91:80:ee:66:3d:ea:10:5c:8a:74:e2:71:14:28:2f: 28:e7:af:61:30:f8:09:05:fb:c5:0f:c3:d0:b5:dc:f6:b1:41: 59:5a:3c:cd:a4:b5:1c:a3:2d:e9:1b:dd:67:3a:d2:50:48:5c: 48:c6:50:29:2d:82:8b:9a:fa:21:81:58:1f:1e:64:37:68:83: 2e:3e:06:09:4b:b7:e3:87:7b:8c:df:ac:24:9e:15:4f:8e:5b: 20:1b:b4:87:8e:65:8d:d0:41:93:0a:cb:c5:ed:a4:22:fe:31: a9:79:00:da:ad:32:10:ca:34:24:57:00:fb:57:ac:67:e9:23: c6:22:f9:d5:4b:84:77:cc:49:0d:b6:d5:e6:a2:12:d1:89:f1: d8:fc:58:c0:78:bb:d5:84:b7:19:b0:ab:4f:c0:fb:84:7c:d6: 0c:89:01:aa:97:1a:c8:fb:e1:e7:17:fc:64:45:96:e5:1f:40: 66:1a:bb:e6:92:69:f6:a6:15:bb:95:d6:ec:37:25:4c:a0:37: 98:9f:02:f3:b8:3b:99:80:f7:7a:45:ec:f2:c3:07:da:91:2f: e2:97:4a:93:3e:e5:e9:86:9c:96:d3:31:cb:c1:ee:04:91:05: d8:52:67:53:5c:7e:a7:22:e1:68:71:d1:f7:a3:42:28:df:91: 30:83:30:8a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87gLDbQTZK73D8ErmSZrDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZTUxNjk0YzRkNDZiNGZjYzAyZmFlNzFlNWRiOTQyYTcx MDhlNDcwHhcNMjYwMTAyMDQxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YjZkNDg2MTk5MzEwZmUyZWE3ZTliNWY2ODM2OTA2YWYwZDBhY2ZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ljEjcRmmdZMCHcmfWHVZ0Z2Q3jL gcM/Jh0uGYxQdBOLGLI8DhphtN9Co33kuQXj+fM9RMAoMwqn8dHuIAVKhyJA9nEX uaE3tIlAlD5lVnhYhJ5DyMgvJY+xz3TVPUdzRd9ulguu0HCJwoIEMRxUZcLJ/n5q chae2FPgWjq+QI4vzbpqgNp1BnnxyNV19ZkjcqSylcPJUVZLJzR7AaGz8JyMD6+M toO2vTuD0HLgOqgZltr+Xy/iGu9IjfSS/pcgx8dUHrBfZVLodWOPr94aDTwvnZG9 IkZ1NtFpbfSq1M/cJcg2X4ttUlazDoWD7eQ3Y0dGZobhjZFlBD+BNXPu1QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHttSGGZMQ/i6n6bX2g2kGrw0Kz7MB8GA1UdIwQY MBaAFEnlFpTE1GtPzAL65x5duUKnEI5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQt MTkxODliM2M5YzdkLzEvZTIxSVlaa3hELUxxZnB0ZmFEYVFhdkRRclBzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQtMTkxODliM2M5Yzdk LzEvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUR2SMA0G CSqGSIb3DQEBCwUAA4IBAQAHyIORgO5mPeoQXIp04nEUKC8o569hMPgJBfvFD8PQ tdz2sUFZWjzNpLUcoy3pG91nOtJQSFxIxlApLYKLmvohgVgfHmQ3aIMuPgYJS7fj h3uM36wknhVPjlsgG7SHjmWN0EGTCsvF7aQi/jGpeQDarTIQyjQkVwD7V6xn6SPG IvnVS4R3zEkNttXmohLRifHY/FjAeLvVhLcZsKtPwPuEfNYMiQGqlxrI++HnF/xk RZblH0BmGrvmkmn2phW7ldbsNyVMoDeYnwLzuDuZgPd6RezywwfakS/il0qTPuXp hpyW0zHLwe4EkQXYUmdTXH6nIuFocdH3o0Io35EwgzCK -----END CERTIFICATE-----Generated at Sun Jan 25 16:53:52 2026 by rpki-client