This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/pKPc_FKfkUgxY_AIoiItWUHy89Y.roa File: pKPc_FKfkUgxY_AIoiItWUHy89Y.roa (raw, json) Hash identifier: QqItoelsJ2U103hLYt++ivyHBi7lFYPL98TQuBCi1o4= Subject key identifier: A4:A3:DC:FC:52:9F:91:48:31:63:F0:08:A2:22:2D:59:41:F2:F3:D6 Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Certificate serial: 019B78A2CEA9CE28FDD38A06F890C51F4E0C Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/pKPc_FKfkUgxY_AIoiItWUHy89Y.roa Signing time: Thu 01 Jan 2026 08:18:14 +0000 ROA not before: Thu 01 Jan 2026 08:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212400 IP address blocks: 81.22.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:ce:a9:ce:28:fd:d3:8a:06:f8:90:c5:1f:4e:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Validity Not Before: Jan 1 08:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a4a3dcfc529f91483163f008a2222d5941f2f3d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e6:8c:a8:51:91:63:8c:18:b6:a7:9a:dc:1e: a5:7d:20:0e:c9:3e:bd:10:b4:47:15:29:17:ab:d8: fe:aa:16:45:45:47:1f:54:20:14:52:d5:13:e2:56: 8f:14:8f:f0:91:a4:e3:a7:16:bf:94:03:ef:e3:dc: 15:e3:b2:14:ec:e8:74:fe:d4:b2:f2:e2:ce:f4:43: 52:9d:9e:c7:11:f5:e7:14:e2:f0:e3:b1:82:f7:9e: ff:e7:0a:dc:56:97:11:03:60:41:98:c6:c1:b7:42: 2f:46:6e:ff:1c:d7:27:25:98:2a:f9:1b:5b:6f:d5: 04:6c:65:87:ec:9d:f4:f4:4c:66:fa:17:9a:53:bf: 43:9b:e0:4f:9c:88:e3:ac:83:59:2e:3a:38:c1:a5: 5f:41:3a:08:b9:1d:9b:2f:de:25:1a:5b:08:46:6d: 86:19:d2:07:27:7f:91:65:f0:e2:71:2d:73:18:d6: ea:22:1f:ea:b2:ce:c8:52:64:ff:fa:b2:ee:12:f7: 07:59:9e:d0:0d:8e:ea:39:f5:36:13:68:21:d3:f6: 91:d7:6d:01:9b:c0:47:ff:e8:83:f2:a6:7f:44:52: 3d:1e:07:65:38:ea:f8:1d:48:5b:e4:96:3d:c3:07: 88:6f:39:3a:22:bd:30:ff:88:cf:0f:e9:23:eb:0d: 11:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:A3:DC:FC:52:9F:91:48:31:63:F0:08:A2:22:2D:59:41:F2:F3:D6 X509v3 Authority Key Identifier: keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/pKPc_FKfkUgxY_AIoiItWUHy89Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.22.140.0/24 Signature Algorithm: sha256WithRSAEncryption 40:7f:83:6f:14:19:8c:7f:61:63:08:f9:a0:2d:ce:25:ac:c8: a8:81:c3:33:83:8d:8f:50:28:7f:d3:6f:5e:7f:31:b0:39:60: 50:7f:55:7b:81:90:16:f4:c5:05:ee:eb:9e:15:ca:5c:17:ec: 0f:a8:66:f1:b2:b2:5c:57:bd:66:b8:33:13:91:60:9c:f8:ab: 77:24:a1:ac:ff:2c:3d:33:af:7c:6c:f3:79:bd:e5:aa:0f:35: 60:b5:3a:fc:a8:fa:63:60:1c:0a:c9:5d:78:65:fd:46:a2:56: f4:c9:c2:5b:02:e1:2e:7e:2a:c2:08:9d:47:b6:f6:86:87:c9: 65:3a:9b:4c:dd:5e:df:ba:c9:39:38:a8:20:83:13:a5:a2:84: 79:2f:ec:33:73:3c:cf:3a:c3:7d:0d:3b:85:41:f0:11:ff:9b: a9:c5:4f:c2:2a:c1:45:fe:c7:a7:63:92:f6:fb:a1:2f:43:6b: 0b:a1:c7:83:01:07:8a:cb:91:4a:9f:29:9b:77:ce:da:59:3e: d7:42:ab:a1:b7:9c:3e:0d:46:e7:e0:ff:91:40:fa:4b:15:34: 80:a9:13:b7:fd:50:c8:64:f3:ed:70:1b:c7:73:b0:8f:91:86: c5:e4:3c:df:da:00:f4:69:97:55:47:46:a6:62:79:5b:36:e9: 18:00:22:68 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4os6pzij904oG+JDFH04MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk OGRhYmUwHhcNMjYwMTAxMDgxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNGEzZGNmYzUyOWY5MTQ4MzE2M2YwMDhhMjIyMmQ1OTQxZjJmM2Q2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveaMqFGRY4wYtqea3B6lfSAOyT69 ELRHFSkXq9j+qhZFRUcfVCAUUtUT4laPFI/wkaTjpxa/lAPv49wV47IU7Oh0/tSy 8uLO9ENSnZ7HEfXnFOLw47GC957/5wrcVpcRA2BBmMbBt0IvRm7/HNcnJZgq+Rtb b9UEbGWH7J309Exm+heaU79Dm+BPnIjjrINZLjo4waVfQToIuR2bL94lGlsIRm2G GdIHJ3+RZfDicS1zGNbqIh/qss7IUmT/+rLuEvcHWZ7QDY7qOfU2E2gh0/aR120B m8BH/+iD8qZ/RFI9HgdlOOr4HUhb5JY9wweIbzk6Ir0w/4jPD+kj6w0RbwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKSj3PxSn5FIMWPwCKIiLVlB8vPWMB8GA1UdIwQY MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt ODJhZDE0NTU1ZWFhLzEvcEtQY19GS2ZrVWd4WV9BSW9pSXRXVUh5ODlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEtODJhZDE0NTU1ZWFh LzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAURaMMA0G CSqGSIb3DQEBCwUAA4IBAQBAf4NvFBmMf2FjCPmgLc4lrMiogcMzg42PUCh/029e fzGwOWBQf1V7gZAW9MUF7uueFcpcF+wPqGbxsrJcV71muDMTkWCc+Kt3JKGs/yw9 M698bPN5veWqDzVgtTr8qPpjYBwKyV14Zf1Golb0ycJbAuEufirCCJ1HtvaGh8ll OptM3V7fusk5OKgggxOlooR5L+wzczzPOsN9DTuFQfAR/5upxU/CKsFF/senY5L2 +6EvQ2sLoceDAQeKy5FKnymbd87aWT7XQquht5w+DUbn4P+RQPpLFTSAqRO3/VDI ZPPtcBvHc7CPkYbF5Dzf2gD0aZdVR0amYnlbNukYACJo -----END CERTIFICATE-----Generated at Sun Jan 25 16:54:05 2026 by rpki-client