This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/71Udwj_4kHr3rTwC_IL-C92FWPU.roa File: 71Udwj_4kHr3rTwC_IL-C92FWPU.roa (raw, json) Hash identifier: gbqsECvxqM5JI8YdnSe5GI/1R0+U6pp7SZ+Ocej//Wg= Subject key identifier: EF:55:1D:C2:3F:F8:90:7A:F7:AD:3C:02:FC:82:FE:0B:DD:85:58:F5 Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Certificate serial: 019B78A2C5421A539150B0E558C8E8513A73 Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/71Udwj_4kHr3rTwC_IL-C92FWPU.roa Signing time: Thu 01 Jan 2026 08:18:11 +0000 ROA not before: Thu 01 Jan 2026 08:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 996 IP address blocks: 81.22.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:c5:42:1a:53:91:50:b0:e5:58:c8:e8:51:3a:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Validity Not Before: Jan 1 08:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ef551dc23ff8907af7ad3c02fc82fe0bdd8558f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:fd:88:bb:06:1f:26:dc:41:15:db:6c:06:d3: 7a:36:b3:b1:2e:75:76:8b:7f:27:b6:14:3c:32:e2: 89:41:65:b3:95:24:38:a5:3a:02:31:96:1a:19:9f: 32:0c:60:32:fd:7a:1b:4e:a7:0f:e1:db:2c:9f:0f: bd:d4:b9:f1:69:07:67:3a:6c:ed:e6:7d:55:d3:bc: e0:48:ea:8b:42:60:f3:54:d2:7c:e2:22:b9:83:ea: cc:f7:23:1f:58:57:cc:21:32:73:6f:3a:bb:9d:27: a3:10:0f:a9:bf:54:bd:cb:4b:b5:ea:c9:96:8d:97: 54:00:62:06:b4:db:18:cb:9a:3b:32:35:be:a6:60: d8:d3:fb:15:b9:2f:44:6e:5e:06:ab:2c:0e:95:9b: 3d:88:8b:16:e8:61:71:44:91:3f:b9:2f:cc:1b:c7: cd:79:bf:e5:37:11:ee:25:26:08:94:f7:7f:18:b1: 89:0f:e5:ef:8c:7a:a6:92:0f:ef:ad:c8:35:89:aa: 6c:ab:c4:d2:fc:e7:f3:0a:af:69:b3:07:71:69:b2: bb:9f:71:45:cd:08:5d:89:c3:2a:e7:ee:32:39:5c: 0e:e7:e8:98:58:93:15:01:b7:08:5d:17:ba:f7:ad: 50:01:85:8a:2b:25:ea:99:d9:13:6a:5f:ce:be:72: 77:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:55:1D:C2:3F:F8:90:7A:F7:AD:3C:02:FC:82:FE:0B:DD:85:58:F5 X509v3 Authority Key Identifier: keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/71Udwj_4kHr3rTwC_IL-C92FWPU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.22.131.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:b5:41:c1:67:c6:03:9e:ac:f1:d5:ca:60:42:af:f4:0b:06: 3e:73:42:81:49:ce:16:2f:f5:b0:b4:41:da:ef:a9:4d:bf:6e: a8:ec:e5:63:4a:42:44:cf:c4:61:72:6c:03:99:11:85:71:59: 6a:48:b3:e5:f5:11:dd:0b:d8:de:cc:f4:3c:27:9e:d0:69:28: 14:a1:86:1e:33:89:fd:12:41:88:ff:90:06:2c:9f:b4:d5:75: 87:52:da:d9:42:98:49:5a:49:d2:3a:83:22:c4:bb:24:0c:73: 4b:1e:52:13:59:72:c6:70:d3:65:11:91:c6:b4:5c:e4:01:38: a1:9e:45:ee:5d:78:73:d8:a8:80:2d:46:35:ef:d4:3e:8d:62: 5f:a0:8f:e2:0a:ca:9f:b4:00:26:ee:f8:5b:4e:f9:14:93:39: 66:83:52:40:1f:8d:71:f5:78:da:3c:67:03:a5:c0:d5:05:2b: db:ca:7d:ff:8f:df:03:2e:c9:68:70:4c:c8:e5:b4:9f:98:cc: 0e:c4:1b:7e:96:2c:5b:d5:08:94:a9:cd:1b:53:d5:81:2c:68: 43:ea:d4:ad:3d:c1:1e:fe:f5:26:21:f0:ca:70:92:54:57:3c: ac:b4:e9:2f:85:f6:da:e2:9e:3e:94:22:72:2a:3f:11:9a:48: 66:f3:df:a0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4osVCGlORULDlWMjoUTpzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk OGRhYmUwHhcNMjYwMTAxMDgxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZjU1MWRjMjNmZjg5MDdhZjdhZDNjMDJmYzgyZmUwYmRkODU1OGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5v2IuwYfJtxBFdtsBtN6NrOxLnV2 i38nthQ8MuKJQWWzlSQ4pToCMZYaGZ8yDGAy/XobTqcP4dssnw+91LnxaQdnOmzt 5n1V07zgSOqLQmDzVNJ84iK5g+rM9yMfWFfMITJzbzq7nSejEA+pv1S9y0u16smW jZdUAGIGtNsYy5o7MjW+pmDY0/sVuS9Ebl4GqywOlZs9iIsW6GFxRJE/uS/MG8fN eb/lNxHuJSYIlPd/GLGJD+XvjHqmkg/vrcg1iapsq8TS/OfzCq9pswdxabK7n3FF zQhdicMq5+4yOVwO5+iYWJMVAbcIXRe6961QAYWKKyXqmdkTal/OvnJ31QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO9VHcI/+JB69608AvyC/gvdhVj1MB8GA1UdIwQY MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt ODJhZDE0NTU1ZWFhLzEvNzFVZHdqXzRrSHIzclR3Q19JTC1DOTJGV1BVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEtODJhZDE0NTU1ZWFh LzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAURaDMA0G CSqGSIb3DQEBCwUAA4IBAQB6tUHBZ8YDnqzx1cpgQq/0CwY+c0KBSc4WL/WwtEHa 76lNv26o7OVjSkJEz8RhcmwDmRGFcVlqSLPl9RHdC9jezPQ8J57QaSgUoYYeM4n9 EkGI/5AGLJ+01XWHUtrZQphJWknSOoMixLskDHNLHlITWXLGcNNlEZHGtFzkATih nkXuXXhz2KiALUY179Q+jWJfoI/iCsqftAAm7vhbTvkUkzlmg1JAH41x9XjaPGcD pcDVBSvbyn3/j98DLslocEzI5bSfmMwOxBt+lixb1QiUqc0bU9WBLGhD6tStPcEe /vUmIfDKcJJUVzystOkvhfba4p4+lCJyKj8Rmkhm89+g -----END CERTIFICATE-----Generated at Mon Jan 26 01:15:47 2026 by rpki-client