This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/CqbKq0tlZFvJKdZBJUrUaltiSaE.roa File: CqbKq0tlZFvJKdZBJUrUaltiSaE.roa (raw, json) Hash identifier: O/JKVqq6uAbS2s7yKFPv2yPkdIAZZBe4tloDtML8Bg0= Subject key identifier: 0A:A6:CA:AB:4B:65:64:5B:C9:29:D6:41:25:4A:D4:6A:5B:62:49:A1 Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21 Certificate serial: 019B7F14F8C98B9F7F1128E18DF908A96A4A Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/CqbKq0tlZFvJKdZBJUrUaltiSaE.roa Signing time: Fri 02 Jan 2026 14:20:39 +0000 ROA not before: Fri 02 Jan 2026 14:20:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29577 IP address blocks: 81.12.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:f8:c9:8b:9f:7f:11:28:e1:8d:f9:08:a9:6a:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21 Validity Not Before: Jan 2 14:20:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0aa6caab4b65645bc929d641254ad46a5b6249a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ae:21:67:3b:1a:b7:ed:42:62:23:48:99:77: e2:7f:42:89:f7:2b:c6:5a:15:fe:f6:39:5f:31:bf: 7d:57:0e:16:7a:01:54:8a:6e:e5:af:de:04:11:57: 1b:eb:ec:33:5b:f1:5e:f3:ac:6b:4e:aa:e4:ff:9b: 54:26:71:8d:bc:ee:07:53:a8:60:20:b9:47:a8:64: 32:52:54:5f:3c:e2:bf:a8:ab:30:fe:ff:e4:f6:00: bb:2f:a1:b6:40:1d:11:07:83:54:43:20:86:15:16: c3:12:2f:bf:73:f9:78:68:4d:1b:fa:34:17:de:58: 67:f1:e5:1f:80:eb:c3:c0:b1:2f:11:33:7e:cf:aa: f8:df:f4:46:80:f2:a7:ba:63:2d:6c:23:9d:b0:54: 51:ef:35:ef:76:64:79:50:9b:36:3a:9d:0e:5d:58: a0:1b:7e:b1:99:cd:33:dd:7a:3a:2c:4c:57:b5:1c: 01:f4:89:f3:24:a6:03:94:4e:0a:38:73:a0:6c:5f: 6e:82:64:6e:6e:4d:51:27:08:8e:fe:a0:33:d7:77: 86:0b:df:71:81:01:e3:f5:1c:5e:27:e8:78:c6:1c: 37:e1:24:dc:49:4f:37:bc:05:5d:dd:dc:46:06:8a: 90:da:a0:ec:58:7c:0e:e9:ea:38:a6:b4:1e:ea:ad: 9b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:A6:CA:AB:4B:65:64:5B:C9:29:D6:41:25:4A:D4:6A:5B:62:49:A1 X509v3 Authority Key Identifier: keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/CqbKq0tlZFvJKdZBJUrUaltiSaE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.12.0.0/22 Signature Algorithm: sha256WithRSAEncryption 63:e1:96:db:91:27:63:e7:fd:0a:c1:16:18:4d:06:0b:53:e5: 51:2b:1c:f6:b0:8e:6c:7c:ba:8f:2d:b4:60:5c:40:3b:7c:0f: a5:21:d5:e3:d0:90:99:2c:75:4d:53:41:a0:ae:f1:42:b2:e3: de:fe:03:09:a1:57:18:5b:9b:01:a0:a5:db:93:f9:96:e7:9d: 0a:2f:88:23:c4:1e:35:aa:cd:9d:35:d5:84:1c:f7:92:f2:97: 05:9f:b4:10:99:2a:96:d4:f6:76:5c:14:83:74:f6:2d:1c:8c: a5:f3:3a:ac:ac:e4:9f:0a:24:05:2c:75:10:5a:b8:07:53:d7: 7f:b3:2a:c6:fb:df:90:1f:2b:73:c4:ae:b1:ab:ca:f5:b7:9e: 78:08:2f:86:5f:e4:e1:cd:6b:cb:b3:7e:51:22:b5:b8:81:c7: 21:ee:1c:01:a9:6c:ad:b0:82:3c:28:98:5b:5f:ec:5b:2d:bb: e5:00:b6:67:a2:e2:0f:b5:af:7e:ab:49:31:2e:a1:10:95:9c: 62:5a:b1:2c:e7:fc:dd:e7:3e:fa:a7:1e:0c:68:72:ae:03:d6: 5c:38:90:9b:eb:91:f4:3d:69:fd:dd:73:e6:f9:f1:82:e1:d3: 1f:e7:e9:dc:46:4c:7f:7e:b6:75:92:04:2d:d5:15:7d:65:eb: 13:26:92:05 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FPjJi59/ESjhjfkIqWpKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwNzc1ZDk0NzFiODVkOTYzZmVmNmQyODM1OTBlMmQ5NDJk ZDVjMjEwHhcNMjYwMTAyMTQyMDM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYWE2Y2FhYjRiNjU2NDViYzkyOWQ2NDEyNTRhZDQ2YTViNjI0OWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1K4hZzsat+1CYiNImXfif0KJ9yvG WhX+9jlfMb99Vw4WegFUim7lr94EEVcb6+wzW/Fe86xrTqrk/5tUJnGNvO4HU6hg ILlHqGQyUlRfPOK/qKsw/v/k9gC7L6G2QB0RB4NUQyCGFRbDEi+/c/l4aE0b+jQX 3lhn8eUfgOvDwLEvETN+z6r43/RGgPKnumMtbCOdsFRR7zXvdmR5UJs2Op0OXVig G36xmc0z3Xo6LExXtRwB9InzJKYDlE4KOHOgbF9ugmRubk1RJwiO/qAz13eGC99x gQHj9RxeJ+h4xhw34STcSU83vAVd3dxGBoqQ2qDsWHwO6eo4prQe6q2b6wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAqmyqtLZWRbySnWQSVK1GpbYkmhMB8GA1UdIwQY MBaAFAB3XZRxuF2WP+9tKDWQ4tlC3VwhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQt NzZiMzNlNGNlODIxLzEvQ3FiS3EwdGxaRnZKS2RaQkpVclVhbHRpU2FFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQtNzZiMzNlNGNlODIx LzEvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCUQwAMA0G CSqGSIb3DQEBCwUAA4IBAQBj4ZbbkSdj5/0KwRYYTQYLU+VRKxz2sI5sfLqPLbRg XEA7fA+lIdXj0JCZLHVNU0GgrvFCsuPe/gMJoVcYW5sBoKXbk/mW550KL4gjxB41 qs2dNdWEHPeS8pcFn7QQmSqW1PZ2XBSDdPYtHIyl8zqsrOSfCiQFLHUQWrgHU9d/ syrG+9+QHytzxK6xq8r1t554CC+GX+ThzWvLs35RIrW4gcch7hwBqWytsII8KJhb X+xbLbvlALZnouIPta9+q0kxLqEQlZxiWrEs5/zd5z76px4MaHKuA9ZcOJCb65H0 PWn93XPm+fGC4dMf5+ncRkx/frZ1kgQt1RV9ZesTJpIF -----END CERTIFICATE-----Generated at Sun Jan 25 23:31:55 2026 by rpki-client