This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/i2ip3ClaBDk8K-xOqpebdwt1qZk.roa File: i2ip3ClaBDk8K-xOqpebdwt1qZk.roa (raw, json) Hash identifier: n9wEOC6qCVKNONqpdVLm6uWq7MOOkRaDBcCMVsbbO38= Subject key identifier: 8B:68:A9:DC:29:5A:04:39:3C:2B:EC:4E:AA:97:9B:77:0B:75:A9:99 Certificate issuer: /CN=230340d27e4b24f9124977322edb36942e2d160c Certificate serial: 019B77C6EF104D8766235F000F829A89530E Authority key identifier: 23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/i2ip3ClaBDk8K-xOqpebdwt1qZk.roa Signing time: Thu 01 Jan 2026 04:18:04 +0000 ROA not before: Thu 01 Jan 2026 04:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8308 IP address blocks: 81.26.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:ef:10:4d:87:66:23:5f:00:0f:82:9a:89:53:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=230340d27e4b24f9124977322edb36942e2d160c Validity Not Before: Jan 1 04:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b68a9dc295a04393c2bec4eaa979b770b75a999 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8e:d0:c4:77:cc:50:17:72:ff:c9:9c:28:d3: 4f:1c:65:3c:d9:4d:07:48:21:d3:d1:b0:46:56:70: e9:46:96:73:e5:a4:59:bc:c4:eb:e2:a7:52:90:b0: aa:08:b0:12:7a:24:d2:b1:15:79:84:d5:36:57:c8: 7c:67:ce:bb:f4:76:0c:49:eb:31:9f:40:ce:13:d7: 89:54:23:28:75:c3:29:2a:80:54:11:75:b7:3e:91: 97:45:f9:4f:ec:16:98:b2:80:cc:59:f6:47:d6:6d: 51:c0:0c:15:8c:fc:96:79:5a:57:48:10:4a:64:54: 0b:1b:18:5a:6a:a2:7a:14:e2:9f:ba:ad:37:e4:7f: 25:0a:b8:8a:7e:52:da:84:44:59:b9:bb:38:e5:31: 2c:58:41:70:4f:8c:8c:c7:6b:77:4a:e3:e8:25:31: 5e:3f:df:82:18:81:d5:c7:8f:c1:a9:5c:ff:fd:a7: b1:7b:83:2b:03:0c:12:b5:d9:c4:ff:91:63:42:47: cb:51:40:a9:8b:7d:56:83:fb:e8:da:07:c7:ea:95: 77:8e:48:25:60:c8:89:48:ae:5f:62:b3:55:77:11: 4b:0e:6a:3c:03:69:52:87:01:48:dc:9e:23:15:5c: 4a:11:c5:90:a2:5d:2e:d4:00:4a:cf:7d:4e:0f:18: 66:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:68:A9:DC:29:5A:04:39:3C:2B:EC:4E:AA:97:9B:77:0B:75:A9:99 X509v3 Authority Key Identifier: keyid:23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/i2ip3ClaBDk8K-xOqpebdwt1qZk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.26.31.0/24 Signature Algorithm: sha256WithRSAEncryption c2:d7:e4:77:38:0d:fe:ba:95:c8:00:f0:b2:d9:79:3a:e2:11: 77:b4:46:52:1e:26:74:70:a7:67:66:ef:dc:da:10:fa:78:0e: 87:21:30:73:a7:a4:48:c1:37:25:7b:30:18:27:be:d7:8d:c4: 96:54:67:41:85:15:52:46:b1:89:af:47:7f:c9:f5:b3:8d:1b: ef:80:9c:23:f2:8e:19:1f:ab:c2:af:e1:68:3d:ad:7c:10:de: d8:28:f0:3c:03:5e:eb:09:92:fb:97:2f:3b:21:b8:3b:c0:55: 5a:cc:60:6d:ad:3f:bb:da:48:93:ef:aa:76:37:7f:2f:41:a2: 30:c0:9f:67:13:af:6c:7d:ab:dd:72:65:60:cf:46:48:69:e0: a2:df:9d:79:f2:97:ec:75:e7:75:d3:a0:32:34:e9:9a:c5:49: 52:74:dc:f6:7d:97:cd:e0:c2:b3:ca:58:d5:bd:71:85:b2:4d: 91:4f:75:ea:67:bc:31:57:73:c6:67:24:f0:56:82:3a:94:50: 90:85:14:18:80:1a:b7:d5:58:f5:a5:23:bb:e7:05:7f:ea:65: 5e:3a:f0:79:56:bd:78:f7:86:68:ae:e9:e1:0e:ef:3a:4a:cc: be:b8:50:45:4e:4e:63:cd:ef:f5:b1:76:a8:34:e2:41:49:a9: 5b:cb:bf:c7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xu8QTYdmI18AD4KaiVMOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMDM0MGQyN2U0YjI0ZjkxMjQ5NzczMjJlZGIzNjk0MmUy ZDE2MGMwHhcNMjYwMTAxMDQxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjY4YTlkYzI5NWEwNDM5M2MyYmVjNGVhYTk3OWI3NzBiNzVhOTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx47QxHfMUBdy/8mcKNNPHGU82U0H SCHT0bBGVnDpRpZz5aRZvMTr4qdSkLCqCLASeiTSsRV5hNU2V8h8Z8679HYMSesx n0DOE9eJVCModcMpKoBUEXW3PpGXRflP7BaYsoDMWfZH1m1RwAwVjPyWeVpXSBBK ZFQLGxhaaqJ6FOKfuq035H8lCriKflLahERZubs45TEsWEFwT4yMx2t3SuPoJTFe P9+CGIHVx4/BqVz//aexe4MrAwwStdnE/5FjQkfLUUCpi31Wg/vo2gfH6pV3jkgl YMiJSK5fYrNVdxFLDmo8A2lShwFI3J4jFVxKEcWQol0u1ABKz31ODxhm0wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFItoqdwpWgQ5PCvsTqqXm3cLdamZMB8GA1UdIwQY MBaAFCMDQNJ+SyT5Ekl3Mi7bNpQuLRYMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXdOQTBuNUxKUGtTU1hjeUx0czJsQzR0Rmd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS83YmRmNTItNmFjNS00YzI0LWJmZDAt YjU3MDkwN2I1OWViLzEvaTJpcDNDbGFCRGs4Sy14T3FwZWJkd3QxcVprLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS83YmRmNTItNmFjNS00YzI0LWJmZDAtYjU3MDkwN2I1OWVi LzEvSXdOQTBuNUxKUGtTU1hjeUx0czJsQzR0Rmd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAURofMA0G CSqGSIb3DQEBCwUAA4IBAQDC1+R3OA3+upXIAPCy2Xk64hF3tEZSHiZ0cKdnZu/c 2hD6eA6HITBzp6RIwTclezAYJ77XjcSWVGdBhRVSRrGJr0d/yfWzjRvvgJwj8o4Z H6vCr+FoPa18EN7YKPA8A17rCZL7ly87Ibg7wFVazGBtrT+72kiT76p2N38vQaIw wJ9nE69sfavdcmVgz0ZIaeCi35158pfsded106AyNOmaxUlSdNz2fZfN4MKzyljV vXGFsk2RT3XqZ7wxV3PGZyTwVoI6lFCQhRQYgBq31Vj1pSO75wV/6mVeOvB5Vr14 94ZorunhDu86Ssy+uFBFTk5jze/1sXaoNOJBSalby7/H -----END CERTIFICATE-----Generated at Mon Jan 26 11:39:59 2026 by rpki-client