This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/d7FK4XMhA9unt7STTmgTuHjh5PA.roa File: d7FK4XMhA9unt7STTmgTuHjh5PA.roa (raw, json) Hash identifier: fPQg0xYbflv91A2PXshrXCNnoYkdjT+pvwuZI08OKXs= Subject key identifier: 77:B1:4A:E1:73:21:03:DB:A7:B7:B4:93:4E:68:13:B8:78:E1:E4:F0 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5AD3BBD1C89C583FD2DE198D8DB58C Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/d7FK4XMhA9unt7STTmgTuHjh5PA.roa Signing time: Thu 01 Jan 2026 16:18:51 +0000 ROA not before: Thu 01 Jan 2026 16:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213918 IP address blocks: 81.168.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:d3:bb:d1:c8:9c:58:3f:d2:de:19:8d:8d:b5:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=77b14ae1732103dba7b7b4934e6813b878e1e4f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:09:62:eb:f9:56:9c:4f:cb:e7:6e:67:44:ef: 0d:e4:be:07:52:97:49:c0:9d:09:3e:89:56:c9:92: 53:63:40:1a:b1:9e:04:c6:27:0f:de:a3:9e:68:50: 9d:4d:4f:f7:d2:fc:69:b0:60:ba:40:48:4a:5e:84: a2:72:f8:22:f4:7f:ef:0e:b2:47:ae:61:f7:9e:01: 22:f9:72:35:29:7e:2e:a6:bf:b1:86:92:fb:19:51: 6b:08:48:ea:c6:0b:4e:c8:18:d1:97:6c:35:5b:21: e0:69:0d:df:ec:ee:39:45:4c:b5:c5:3e:97:31:51: 4b:7d:a7:11:67:9b:ce:5b:95:e8:78:ca:7a:57:90: 94:1a:7f:bc:be:05:e6:e6:de:17:9d:e2:26:8c:e3: ab:9b:23:53:25:5f:91:a5:33:78:03:20:c8:1c:b9: 91:c8:59:dd:61:c1:58:a0:98:d9:9e:e3:82:22:1e: f6:ec:bb:f0:b7:ac:00:35:14:32:03:9f:9e:01:8f: a8:1e:0e:2a:59:97:a2:e3:4e:dc:3c:74:0c:f1:e4: 9b:dc:ea:ef:bb:6f:9b:84:30:c5:73:5e:e1:d8:c1: aa:72:2f:bc:03:ac:fb:1d:dc:33:f0:e4:fb:e5:a9: f4:1a:74:c4:e6:71:85:5e:cd:36:b9:3c:01:cd:4d: de:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:B1:4A:E1:73:21:03:DB:A7:B7:B4:93:4E:68:13:B8:78:E1:E4:F0 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/d7FK4XMhA9unt7STTmgTuHjh5PA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.168.116.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:6a:17:5d:c8:6b:81:8e:82:9a:05:3d:61:10:96:f9:ca:96: da:a6:b3:1d:8a:e4:90:9c:85:f1:ab:f7:6a:1d:27:54:9e:50: 25:0f:70:91:b1:51:c5:bc:23:1e:f0:b0:4b:65:20:62:e2:0d: c6:ad:28:48:13:fe:71:c6:3f:ca:ff:30:3b:8e:88:eb:35:8c: 3a:21:e1:51:c5:36:ad:0e:5b:94:c6:63:5a:53:1e:cf:e3:2e: 8f:7c:a7:99:63:2b:cb:88:52:8d:dc:0e:85:6f:58:13:af:17: 28:a9:f4:8a:2e:5c:f3:f2:0a:4e:e9:a4:ca:4c:66:98:84:e0: 6c:2b:7c:01:42:47:07:d8:38:75:bf:14:28:e2:2a:c0:44:cb: b9:eb:25:b4:d9:60:2b:4c:94:66:d5:f8:34:31:13:1b:4f:d8: af:36:c0:e1:ce:50:27:3b:d2:f1:9a:97:bf:8a:b0:ac:b2:eb: c3:da:75:0a:dc:28:9b:2d:19:8c:c2:c8:fd:57:e3:88:3a:dc: 96:31:ce:22:43:8e:d6:9d:47:78:c1:23:1e:11:22:f4:a8:3a: e9:2d:8d:45:70:20:a8:76:ad:ab:c2:dc:55:e0:33:87:9b:06: 4c:0a:65:6f:b3:2b:c5:80:b4:6c:82:2c:9b:9a:43:db:fa:be: d2:b3:e7:d4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WtO70cicWD/S3hmNjbWMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3N2IxNGFlMTczMjEwM2RiYTdiN2I0OTM0ZTY4MTNiODc4ZTFlNGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwli6/lWnE/L525nRO8N5L4HUpdJ wJ0JPolWyZJTY0AasZ4ExicP3qOeaFCdTU/30vxpsGC6QEhKXoSicvgi9H/vDrJH rmH3ngEi+XI1KX4upr+xhpL7GVFrCEjqxgtOyBjRl2w1WyHgaQ3f7O45RUy1xT6X MVFLfacRZ5vOW5XoeMp6V5CUGn+8vgXm5t4XneImjOOrmyNTJV+RpTN4AyDIHLmR yFndYcFYoJjZnuOCIh727Lvwt6wANRQyA5+eAY+oHg4qWZei407cPHQM8eSb3Orv u2+bhDDFc17h2MGqci+8A6z7Hdwz8OT75an0GnTE5nGFXs02uTwBzU3eiwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHexSuFzIQPbp7e0k05oE7h44eTwMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvZDdGSzRYTWhBOXVudDdTVFRtZ1R1SGpoNVBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUah0MA0G CSqGSIb3DQEBCwUAA4IBAQB/ahddyGuBjoKaBT1hEJb5ypbaprMdiuSQnIXxq/dq HSdUnlAlD3CRsVHFvCMe8LBLZSBi4g3GrShIE/5xxj/K/zA7jojrNYw6IeFRxTat DluUxmNaUx7P4y6PfKeZYyvLiFKN3A6Fb1gTrxcoqfSKLlzz8gpO6aTKTGaYhOBs K3wBQkcH2Dh1vxQo4irARMu56yW02WArTJRm1fg0MRMbT9ivNsDhzlAnO9Lxmpe/ irCssuvD2nUK3CibLRmMwsj9V+OIOtyWMc4iQ47WnUd4wSMeESL0qDrpLY1FcCCo dq2rwtxV4DOHmwZMCmVvsyvFgLRsgiybmkPb+r7Ss+fU -----END CERTIFICATE-----Generated at Sun Jan 25 08:49:11 2026 by rpki-client