This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/6b544c-50e7-4f96-8c8d-8dee1da10741/1/RekGs4q2kSG8UfpxTWCevGhqZz4.roa File: RekGs4q2kSG8UfpxTWCevGhqZz4.roa (raw, json) Hash identifier: ILH2HzNROZxqP8GUSsLUmNGqOfm/LyrffvYqEpNZNPk= Subject key identifier: 45:E9:06:B3:8A:B6:91:21:BC:51:FA:71:4D:60:9E:BC:68:6A:67:3E Certificate issuer: /CN=ec7469c5428eef9ab768d9ed6c2c89443a6bb4be Certificate serial: 019B7EA583C18F208E2B94EF24AE64405C64 Authority key identifier: EC:74:69:C5:42:8E:EF:9A:B7:68:D9:ED:6C:2C:89:44:3A:6B:B4:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HRpxUKO75q3aNntbCyJRDprtL4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/6b544c-50e7-4f96-8c8d-8dee1da10741/1/RekGs4q2kSG8UfpxTWCevGhqZz4.roa Signing time: Fri 02 Jan 2026 12:18:54 +0000 ROA not before: Fri 02 Jan 2026 12:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58192 IP address blocks: 81.30.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/6b544c-50e7-4f96-8c8d-8dee1da10741/1/7HRpxUKO75q3aNntbCyJRDprtL4.crl rsync://rpki.ripe.net/repository/DEFAULT/87/6b544c-50e7-4f96-8c8d-8dee1da10741/1/7HRpxUKO75q3aNntbCyJRDprtL4.mft rsync://rpki.ripe.net/repository/DEFAULT/7HRpxUKO75q3aNntbCyJRDprtL4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:83:c1:8f:20:8e:2b:94:ef:24:ae:64:40:5c:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec7469c5428eef9ab768d9ed6c2c89443a6bb4be Validity Not Before: Jan 2 12:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=45e906b38ab69121bc51fa714d609ebc686a673e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:2b:ac:bc:73:51:eb:99:26:61:4c:62:47:c8: 2d:17:c6:75:04:db:06:43:a2:f6:6f:db:29:72:98: f7:d4:5a:ce:5d:d0:0e:60:6a:ff:a0:be:f6:9a:ee: 39:ea:35:6d:f9:76:fd:5c:85:1a:e4:9f:3a:33:53: 1b:13:e8:9c:39:12:22:89:d5:ea:21:55:32:fd:e2: 94:32:12:7f:d8:28:8e:45:5c:86:4c:4e:85:ef:16: f5:52:ab:59:d8:f8:1b:1a:6c:2d:ce:f9:a9:a7:58: 21:9b:96:06:5e:65:e9:9d:76:f1:4d:e5:e2:f5:c0: 1a:5b:db:3f:b2:2c:c8:32:68:7a:48:86:3d:2d:39: 99:2d:7c:f4:22:63:26:92:c1:7d:fd:c3:dc:00:4f: 75:ca:b8:07:20:70:e1:85:d9:b5:1e:fe:54:b5:bd: ae:1b:b1:7d:95:a2:59:cc:fa:75:44:82:df:10:a4: 94:88:de:0e:f7:1a:b5:49:dc:67:b0:3f:78:b8:14: 1b:5f:3c:e3:cf:d5:8c:06:d2:54:4a:06:5a:46:4a: 25:56:85:20:b6:f0:dc:dd:d9:04:dd:7e:db:75:df: 3a:9e:71:50:0b:ed:aa:7a:a9:df:c3:b2:50:7f:cd: 2f:b0:47:28:04:6c:74:96:ef:db:11:72:24:78:9c: e4:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:E9:06:B3:8A:B6:91:21:BC:51:FA:71:4D:60:9E:BC:68:6A:67:3E X509v3 Authority Key Identifier: keyid:EC:74:69:C5:42:8E:EF:9A:B7:68:D9:ED:6C:2C:89:44:3A:6B:B4:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HRpxUKO75q3aNntbCyJRDprtL4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6b544c-50e7-4f96-8c8d-8dee1da10741/1/RekGs4q2kSG8UfpxTWCevGhqZz4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6b544c-50e7-4f96-8c8d-8dee1da10741/1/7HRpxUKO75q3aNntbCyJRDprtL4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.30.107.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:4c:37:c3:7a:76:5f:03:6c:f3:09:61:6a:00:4d:7c:cc:eb: 5e:ec:20:ac:5d:e3:c1:50:cc:44:70:be:ed:4c:db:f6:93:b2: 5d:53:29:05:c6:53:5c:26:04:52:6e:83:3a:fe:6b:0c:d3:d4: cf:1c:3c:3c:37:c2:61:d6:a3:29:da:58:80:0a:d9:6a:fe:af: b4:85:a8:57:99:f4:ba:86:c3:3f:0d:2b:6b:99:e6:f9:9c:93: 33:66:2c:dd:75:75:f7:c0:7e:e1:8b:e4:b0:cf:26:d7:44:24: ce:c3:7c:85:e1:33:b8:60:18:b3:20:50:ea:a6:15:c9:bb:dc: 76:e1:05:c7:03:c2:36:8f:0b:c4:67:96:24:95:5a:d4:de:46: 5d:c3:06:e0:30:fd:39:7b:62:7b:6d:25:d8:de:07:e0:fb:bc: 69:0b:54:f9:b7:bf:c7:73:ab:75:7b:a2:56:cf:f4:09:45:fc: 9b:ef:d9:ab:e5:a0:d7:2f:c0:95:14:e6:12:05:c0:a2:b1:a8: 1a:2f:b2:a3:a9:23:84:c4:63:0c:11:36:c1:03:84:b9:18:ef: a3:0c:72:5b:4e:cb:c7:1f:ca:04:5e:b5:86:fe:4e:74:ec:7f: 86:d8:d7:68:e8:cc:b1:57:ea:ff:43:d9:67:11:43:68:7b:ca: ca:c6:c2:69 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pYPBjyCOK5TvJK5kQFxkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNzQ2OWM1NDI4ZWVmOWFiNzY4ZDllZDZjMmM4OTQ0M2E2 YmI0YmUwHhcNMjYwMTAyMTIxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NWU5MDZiMzhhYjY5MTIxYmM1MWZhNzE0ZDYwOWViYzY4NmE2NzNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4yusvHNR65kmYUxiR8gtF8Z1BNsG Q6L2b9spcpj31FrOXdAOYGr/oL72mu456jVt+Xb9XIUa5J86M1MbE+icORIiidXq IVUy/eKUMhJ/2CiORVyGTE6F7xb1UqtZ2PgbGmwtzvmpp1ghm5YGXmXpnXbxTeXi 9cAaW9s/sizIMmh6SIY9LTmZLXz0ImMmksF9/cPcAE91yrgHIHDhhdm1Hv5Utb2u G7F9laJZzPp1RILfEKSUiN4O9xq1SdxnsD94uBQbXzzjz9WMBtJUSgZaRkolVoUg tvDc3dkE3X7bdd86nnFQC+2qeqnfw7JQf80vsEcoBGx0lu/bEXIkeJzkowIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEXpBrOKtpEhvFH6cU1gnrxoamc+MB8GA1UdIwQY MBaAFOx0acVCju+at2jZ7WwsiUQ6a7S+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0hScHhVS083NXEzYU5udGJDeUpSRHBydEw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny82YjU0NGMtNTBlNy00Zjk2LThjOGQt OGRlZTFkYTEwNzQxLzEvUmVrR3M0cTJrU0c4VWZweFRXQ2V2R2hxWno0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny82YjU0NGMtNTBlNy00Zjk2LThjOGQtOGRlZTFkYTEwNzQx LzEvN0hScHhVS083NXEzYU5udGJDeUpSRHBydEw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUR5rMA0G CSqGSIb3DQEBCwUAA4IBAQA6TDfDenZfA2zzCWFqAE18zOte7CCsXePBUMxEcL7t TNv2k7JdUykFxlNcJgRSboM6/msM09TPHDw8N8Jh1qMp2liACtlq/q+0hahXmfS6 hsM/DStrmeb5nJMzZizddXX3wH7hi+SwzybXRCTOw3yF4TO4YBizIFDqphXJu9x2 4QXHA8I2jwvEZ5YklVrU3kZdwwbgMP05e2J7bSXY3gfg+7xpC1T5t7/Hc6t1e6JW z/QJRfyb79mr5aDXL8CVFOYSBcCisagaL7KjqSOExGMMETbBA4S5GO+jDHJbTsvH H8oEXrWG/k507H+G2Ndo6MyxV+r/Q9lnEUNoe8rKxsJp -----END CERTIFICATE-----Generated at Sun Jan 25 19:59:01 2026 by rpki-client