This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/iFuws9ube4NicfjvwBrMIzxf9IE.roa File: iFuws9ube4NicfjvwBrMIzxf9IE.roa (raw, json) Hash identifier: bb7gYY3+GZ9HbYbG/dlu+IgZBo5pvahIlhNxI7rzUKM= Subject key identifier: 88:5B:B0:B3:DB:9B:7B:83:62:71:F8:EF:C0:1A:CC:23:3C:5F:F4:81 Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Certificate serial: 019B77C76F3E3D4B42018933100BDBEF3B92 Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/iFuws9ube4NicfjvwBrMIzxf9IE.roa Signing time: Thu 01 Jan 2026 04:18:37 +0000 ROA not before: Thu 01 Jan 2026 04:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56679 IP address blocks: 81.3.154.0/24 maxlen: 24 84.204.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:6f:3e:3d:4b:42:01:89:33:10:0b:db:ef:3b:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Validity Not Before: Jan 1 04:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=885bb0b3db9b7b836271f8efc01acc233c5ff481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:81:03:d9:a1:73:ad:6c:28:61:cc:32:f7:b0: 90:e5:3f:a6:1d:69:97:16:cc:0a:55:9e:dc:13:75: a0:f2:5e:b1:2f:50:ce:17:4a:46:c0:ce:57:82:c1: fd:76:27:e0:87:5b:a5:57:67:b5:ae:22:9c:96:d0: 62:7b:5b:99:01:89:81:8c:ba:c3:cc:66:3e:40:5d: c3:1d:2c:1e:8b:74:32:a1:2b:30:93:95:a9:ea:c7: ee:97:5c:af:c2:5c:4d:d2:f5:25:db:34:da:31:27: 19:0c:c4:c3:4c:7b:33:18:e3:91:10:e9:cd:26:d1: e1:c0:21:ed:32:9b:ed:dd:f1:b2:46:18:f0:c9:a3: 76:bb:0e:0d:ea:7b:63:7f:2c:9d:85:dc:59:55:fe: 37:44:54:cb:ee:97:cd:39:b1:1e:8c:84:2a:f0:df: b3:db:1f:7b:05:2e:77:19:7f:2c:9b:09:b3:c0:11: b4:48:43:1b:17:c9:fd:9a:2b:01:50:b2:73:05:d5: 6d:eb:30:b6:1f:fa:44:61:68:36:dc:bd:b2:f8:77: a9:b2:c4:8f:01:b6:8d:94:b1:8f:c6:6c:67:8b:1f: ad:17:dc:00:fe:75:d4:5c:bc:f1:20:7b:41:80:92: d9:47:dc:95:fb:5c:c6:03:74:fb:d8:35:66:b4:4d: 87:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:5B:B0:B3:DB:9B:7B:83:62:71:F8:EF:C0:1A:CC:23:3C:5F:F4:81 X509v3 Authority Key Identifier: keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/iFuws9ube4NicfjvwBrMIzxf9IE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.3.154.0/24 84.204.148.0/24 Signature Algorithm: sha256WithRSAEncryption 76:60:3f:4c:48:87:4e:cd:cb:54:59:91:87:a5:5c:77:4a:f5: 44:ab:73:86:b4:1b:22:30:de:0a:02:4f:2d:cb:8d:b7:e5:58: 05:f5:22:ae:70:7e:4c:5d:fe:77:12:d2:d3:be:c2:28:0c:2d: a1:2c:41:6d:a3:a1:b3:15:27:c9:35:49:db:a1:c5:84:79:ab: 2b:34:e0:8e:bb:e8:5e:90:38:7e:7b:63:44:b0:a9:ef:c6:59: a7:d1:08:f6:59:bf:f5:05:0d:11:50:74:76:31:71:4e:7a:af: 68:46:44:92:da:16:b3:2d:de:93:39:4f:64:76:f5:4f:1e:54: 32:d9:3e:bd:bb:39:0e:c4:7b:7f:cc:39:dc:1c:50:ba:ec:3e: 72:c9:47:fd:fe:2d:42:00:a3:fc:19:e9:e5:86:01:05:4b:c5: c1:bf:81:84:9d:f2:9e:ad:39:23:6e:d2:86:37:f3:87:6c:90: ec:36:29:ed:1e:d1:e3:5a:6b:ac:be:0e:5b:3b:e1:7b:73:be: ca:0e:f7:9a:fb:ad:f0:95:63:ee:9a:37:68:23:8b:16:0f:a2: fc:4f:31:2b:07:75:27:3b:cc:94:5c:97:6d:6f:0e:91:38:10: 54:e1:58:98:61:7e:2d:b9:82:35:49:d4:ae:cb:58:3f:d5:94: 2d:f0:cd:56 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3x28+PUtCAYkzEAvb7zuSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx Nzg1YzAwHhcNMjYwMTAxMDQxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODViYjBiM2RiOWI3YjgzNjI3MWY4ZWZjMDFhY2MyMzNjNWZmNDgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYED2aFzrWwoYcwy97CQ5T+mHWmX FswKVZ7cE3Wg8l6xL1DOF0pGwM5XgsH9difgh1ulV2e1riKcltBie1uZAYmBjLrD zGY+QF3DHSwei3QyoSswk5Wp6sful1yvwlxN0vUl2zTaMScZDMTDTHszGOOREOnN JtHhwCHtMpvt3fGyRhjwyaN2uw4N6ntjfyydhdxZVf43RFTL7pfNObEejIQq8N+z 2x97BS53GX8smwmzwBG0SEMbF8n9misBULJzBdVt6zC2H/pEYWg23L2y+HepssSP AbaNlLGPxmxnix+tF9wA/nXUXLzxIHtBgJLZR9yV+1zGA3T72DVmtE2HdwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIhbsLPbm3uDYnH478AazCM8X/SBMB8GA1UdIwQY MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct ODllNTZjODBkMWQwLzEvaUZ1d3M5dWJlNE5pY2ZqdndCck1JenhmOUlFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUQOaAwQA VMyUMA0GCSqGSIb3DQEBCwUAA4IBAQB2YD9MSIdOzctUWZGHpVx3SvVEq3OGtBsi MN4KAk8ty4235VgF9SKucH5MXf53EtLTvsIoDC2hLEFto6GzFSfJNUnbocWEeasr NOCOu+hekDh+e2NEsKnvxlmn0Qj2Wb/1BQ0RUHR2MXFOeq9oRkSS2hazLd6TOU9k dvVPHlQy2T69uzkOxHt/zDncHFC67D5yyUf9/i1CAKP8GenlhgEFS8XBv4GEnfKe rTkjbtKGN/OHbJDsNintHtHjWmusvg5bO+F7c77KDvea+63wlWPumjdoI4sWD6L8 TzErB3UnO8yUXJdtbw6ROBBU4ViYYX4tuYI1SdSuy1g/1ZQt8M1W -----END CERTIFICATE-----Generated at Sun Jan 25 22:41:44 2026 by rpki-client