This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/XuKWpFnXaJB0gtal7fqUS1fMEg8.roa File: XuKWpFnXaJB0gtal7fqUS1fMEg8.roa (raw, json) Hash identifier: fZ0gDaNy7iCopngCMQx3WGFJao02SoThGdAJ/JuVVp4= Subject key identifier: 5E:E2:96:A4:59:D7:68:90:74:82:D6:A5:ED:FA:94:4B:57:CC:12:0F Certificate issuer: /CN=230340d27e4b24f9124977322edb36942e2d160c Certificate serial: 019B77C6F167BA64CF328F48F337E10E4FA0 Authority key identifier: 23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/XuKWpFnXaJB0gtal7fqUS1fMEg8.roa Signing time: Thu 01 Jan 2026 04:18:05 +0000 ROA not before: Thu 01 Jan 2026 04:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208930 IP address blocks: 81.6.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:f1:67:ba:64:cf:32:8f:48:f3:37:e1:0e:4f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=230340d27e4b24f9124977322edb36942e2d160c Validity Not Before: Jan 1 04:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ee296a459d768907482d6a5edfa944b57cc120f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4a:e9:4a:a4:20:d0:2f:21:f4:86:36:37:02: 8b:23:7b:83:a6:1b:8a:c2:27:b7:11:6e:16:24:73: 62:f2:a7:4f:5b:a3:d1:55:96:53:ab:c1:0e:da:4b: 18:f4:78:4c:0b:0b:3b:d5:ed:c7:43:0a:e7:89:ec: 32:dc:9c:2d:8d:de:bc:6d:09:2f:1d:cb:c8:09:f7: 03:bb:34:b4:57:43:a3:53:56:cf:97:e0:d9:e0:30: 82:72:04:88:e3:3e:ab:07:16:fc:eb:10:97:bd:2f: 22:1a:78:d6:77:b4:25:1b:a0:ce:aa:2d:2a:a2:aa: 10:78:26:3d:87:50:d1:be:b3:10:87:0e:33:27:53: a4:44:0c:12:89:05:dc:ab:9e:bb:9e:ce:10:64:a1: 31:d6:63:1b:22:82:70:6d:9a:f5:73:55:dd:84:54: 78:30:bd:70:56:43:6a:3c:07:cf:50:b1:b9:62:90: e4:4e:3b:d8:09:13:4d:f4:bd:2d:68:ab:47:dc:7e: 18:30:cc:f2:ef:4c:d9:f5:6c:77:a6:ce:88:5d:0e: e0:e8:1e:72:ba:1b:77:a3:f0:03:93:ca:dc:49:25: ac:a2:dc:ac:24:db:c9:88:20:4b:c9:29:f3:37:9a: cf:66:e0:83:0a:67:82:52:d8:be:ae:ff:f1:f6:1f: 49:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:E2:96:A4:59:D7:68:90:74:82:D6:A5:ED:FA:94:4B:57:CC:12:0F X509v3 Authority Key Identifier: keyid:23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/XuKWpFnXaJB0gtal7fqUS1fMEg8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.6.136.0/24 Signature Algorithm: sha256WithRSAEncryption d0:12:5d:06:03:e8:da:96:4c:02:0c:91:9a:17:c2:b0:df:dd: e1:e2:31:e3:4b:81:2d:f5:00:54:a6:51:40:5a:04:40:63:a5: 20:0b:8d:3c:00:37:6e:18:3f:85:cd:c4:06:2c:94:50:b8:26: 06:46:bb:ff:ca:0e:cf:d3:46:f4:59:07:ec:fa:cf:76:95:32: 68:b8:1a:2d:9f:ad:c1:eb:67:50:ab:04:db:b8:d2:15:f1:ec: 3a:4c:8a:af:8a:db:f5:bb:25:89:8d:d6:6c:dd:5d:b0:82:14: 92:1f:57:ec:79:dc:3b:ca:33:7e:6d:c7:c2:c0:dc:34:d4:a9: 5c:33:1f:12:99:08:de:a0:77:e4:b4:a0:5f:3f:29:b0:65:d2: b5:de:95:e7:8d:ad:51:4b:b0:8f:46:1e:d8:34:ee:c0:d2:ef: 76:51:02:c9:14:9e:09:da:5c:fc:c3:38:e8:e6:82:87:15:8f: 64:f7:09:35:e3:fd:5d:7c:a3:77:33:ca:ce:55:db:53:67:d7: 3a:fe:b5:0f:6e:a8:a5:8c:9a:9c:36:e2:81:d5:77:a3:1f:3e: 8a:e2:bc:72:5c:23:93:cc:32:cb:99:84:66:a0:de:70:68:e2: 65:f8:ea:80:b0:26:05:8e:68:1d:84:ed:21:5f:95:5e:c2:e6: 3c:d0:76:07 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xvFnumTPMo9I8zfhDk+gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMDM0MGQyN2U0YjI0ZjkxMjQ5NzczMjJlZGIzNjk0MmUy ZDE2MGMwHhcNMjYwMTAxMDQxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZWUyOTZhNDU5ZDc2ODkwNzQ4MmQ2YTVlZGZhOTQ0YjU3Y2MxMjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkrpSqQg0C8h9IY2NwKLI3uDphuK wie3EW4WJHNi8qdPW6PRVZZTq8EO2ksY9HhMCws71e3HQwrniewy3Jwtjd68bQkv HcvICfcDuzS0V0OjU1bPl+DZ4DCCcgSI4z6rBxb86xCXvS8iGnjWd7QlG6DOqi0q oqoQeCY9h1DRvrMQhw4zJ1OkRAwSiQXcq567ns4QZKEx1mMbIoJwbZr1c1XdhFR4 ML1wVkNqPAfPULG5YpDkTjvYCRNN9L0taKtH3H4YMMzy70zZ9Wx3ps6IXQ7g6B5y uht3o/ADk8rcSSWsotysJNvJiCBLySnzN5rPZuCDCmeCUti+rv/x9h9JQwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF7ilqRZ12iQdILWpe36lEtXzBIPMB8GA1UdIwQY MBaAFCMDQNJ+SyT5Ekl3Mi7bNpQuLRYMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXdOQTBuNUxKUGtTU1hjeUx0czJsQzR0Rmd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS83YmRmNTItNmFjNS00YzI0LWJmZDAt YjU3MDkwN2I1OWViLzEvWHVLV3BGblhhSkIwZ3RhbDdmcVVTMWZNRWc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS83YmRmNTItNmFjNS00YzI0LWJmZDAtYjU3MDkwN2I1OWVi LzEvSXdOQTBuNUxKUGtTU1hjeUx0czJsQzR0Rmd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUQaIMA0G CSqGSIb3DQEBCwUAA4IBAQDQEl0GA+jalkwCDJGaF8Kw393h4jHjS4Et9QBUplFA WgRAY6UgC408ADduGD+FzcQGLJRQuCYGRrv/yg7P00b0WQfs+s92lTJouBotn63B 62dQqwTbuNIV8ew6TIqvitv1uyWJjdZs3V2wghSSH1fsedw7yjN+bcfCwNw01Klc Mx8SmQjeoHfktKBfPymwZdK13pXnja1RS7CPRh7YNO7A0u92UQLJFJ4J2lz8wzjo 5oKHFY9k9wk14/1dfKN3M8rOVdtTZ9c6/rUPbqiljJqcNuKB1XejHz6K4rxyXCOT zDLLmYRmoN5waOJl+OqAsCYFjmgdhO0hX5VewuY80HYH -----END CERTIFICATE-----Generated at Mon Jan 26 15:17:43 2026 by rpki-client