This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/KU8q2n2CMANYI0fRJo2s7p5G3KY.roa File: KU8q2n2CMANYI0fRJo2s7p5G3KY.roa (raw, json) Hash identifier: TGvZcgRzyrpwF/XoDD+tDWJMqg0cIvjLnDlG6w6JYqw= Subject key identifier: 29:4F:2A:DA:7D:82:30:03:58:23:47:D1:26:8D:AC:EE:9E:46:DC:A6 Certificate issuer: /CN=d6e535ef216ebe6f7fc55cfbdc31532b912d8e63 Certificate serial: 019B7FF21B2D7CDDE244600974F86D5A837E Authority key identifier: D6:E5:35:EF:21:6E:BE:6F:7F:C5:5C:FB:DC:31:53:2B:91:2D:8E:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1uU17yFuvm9_xVz73DFTK5EtjmM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/KU8q2n2CMANYI0fRJo2s7p5G3KY.roa Signing time: Fri 02 Jan 2026 18:22:11 +0000 ROA not before: Fri 02 Jan 2026 18:22:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47692 IP address blocks: 81.173.84.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.mft rsync://rpki.ripe.net/repository/DEFAULT/1uU17yFuvm9_xVz73DFTK5EtjmM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:1b:2d:7c:dd:e2:44:60:09:74:f8:6d:5a:83:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6e535ef216ebe6f7fc55cfbdc31532b912d8e63 Validity Not Before: Jan 2 18:22:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=294f2ada7d823003582347d1268dacee9e46dca6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:22:ca:b6:e4:04:5c:81:73:29:0c:ba:c9:ad: 75:f6:a5:9b:d3:27:c0:d4:6d:36:a4:cd:c3:4d:ac: 96:07:e8:93:54:fb:96:83:37:f7:cd:9f:55:35:1d: d0:84:5b:22:34:2a:f2:e2:05:5c:5e:72:d4:85:ef: 95:a1:33:cb:81:73:a9:56:6d:87:a8:85:6d:97:ed: ce:f1:2e:b5:37:41:4e:20:aa:1c:56:f4:ef:fa:18: 4f:ca:91:1f:fa:d8:e4:29:6c:be:94:ae:ce:1a:53: 02:c2:b0:b0:fe:01:84:a9:7d:9d:93:87:19:23:7b: d4:f6:51:b4:ec:1e:cc:80:00:bc:10:1e:4c:7b:53: 57:1c:97:b3:f8:33:66:c3:c8:56:f7:56:0a:27:ec: 15:25:4c:b2:7a:49:f1:50:f9:9e:aa:0d:cc:f5:8c: 43:b0:df:db:87:2c:6c:c6:77:55:a5:1b:11:ad:ec: 4e:54:0e:9f:dd:bf:b9:c2:c4:62:eb:b5:46:7c:98: 03:2e:37:f6:21:24:5f:7f:9e:a7:c1:9a:10:7a:d2: b5:fb:43:24:4b:f1:53:3e:bd:ea:36:d2:30:78:26: 81:93:56:f7:b1:27:f4:79:ed:e6:3c:e4:28:21:15: b2:e3:5a:c1:c4:75:c2:7f:7c:00:bf:5c:3c:68:0d: 3e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:4F:2A:DA:7D:82:30:03:58:23:47:D1:26:8D:AC:EE:9E:46:DC:A6 X509v3 Authority Key Identifier: keyid:D6:E5:35:EF:21:6E:BE:6F:7F:C5:5C:FB:DC:31:53:2B:91:2D:8E:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uU17yFuvm9_xVz73DFTK5EtjmM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/KU8q2n2CMANYI0fRJo2s7p5G3KY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.173.84.0/22 Signature Algorithm: sha256WithRSAEncryption 00:03:77:5c:78:ba:bc:2e:3d:3e:26:a7:2e:ee:c1:aa:97:42: 58:2a:6e:58:20:c8:da:20:03:36:b9:9d:f2:b6:3a:cb:4c:bb: 97:07:b6:d2:18:cc:83:3d:16:c3:5a:f7:5b:b5:b0:7a:25:2f: 69:76:36:d7:0b:d2:1d:87:55:f3:d4:86:0d:b4:76:c5:20:39: e0:c4:59:ab:54:b1:bb:43:77:d7:60:3c:00:54:c7:d2:92:1b: d9:39:70:bd:ac:60:df:99:33:93:3c:b6:f9:85:3b:20:ec:2c: 18:7f:5e:f1:ca:c8:df:70:87:43:fb:77:61:ff:87:10:5d:e1: f9:80:3a:1b:05:45:0b:af:98:27:0a:0e:07:5b:00:88:1c:07: b4:06:b9:92:61:71:c3:b8:10:44:17:89:93:aa:17:e9:bd:5d: fa:ea:41:ac:2f:b1:86:ae:80:d8:c0:c8:61:53:ea:f5:e2:19: a6:4f:ac:d8:28:b4:ae:a4:01:7c:cd:6e:9e:90:cc:16:6a:c8: 6b:b0:55:c9:f7:8e:52:e0:48:38:fd:ad:28:d2:fe:a3:da:6c: 1c:61:fe:aa:46:00:2f:e9:77:cb:07:4c:13:43:34:2e:0a:6a: 1d:f9:c5:ad:75:85:87:c1:f5:13:9e:38:9e:f8:d8:e5:d4:77: 4e:df:1c:a1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8hstfN3iRGAJdPhtWoN+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2ZTUzNWVmMjE2ZWJlNmY3ZmM1NWNmYmRjMzE1MzJiOTEy ZDhlNjMwHhcNMjYwMTAyMTgyMjExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTRmMmFkYTdkODIzMDAzNTgyMzQ3ZDEyNjhkYWNlZTllNDZkY2E2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CLKtuQEXIFzKQy6ya119qWb0yfA 1G02pM3DTayWB+iTVPuWgzf3zZ9VNR3QhFsiNCry4gVcXnLUhe+VoTPLgXOpVm2H qIVtl+3O8S61N0FOIKocVvTv+hhPypEf+tjkKWy+lK7OGlMCwrCw/gGEqX2dk4cZ I3vU9lG07B7MgAC8EB5Me1NXHJez+DNmw8hW91YKJ+wVJUyyeknxUPmeqg3M9YxD sN/bhyxsxndVpRsRrexOVA6f3b+5wsRi67VGfJgDLjf2ISRff56nwZoQetK1+0Mk S/FTPr3qNtIweCaBk1b3sSf0ee3mPOQoIRWy41rBxHXCf3wAv1w8aA0+vwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFClPKtp9gjADWCNH0SaNrO6eRtymMB8GA1UdIwQY MBaAFNblNe8hbr5vf8Vc+9wxUyuRLY5jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXVVMTd5RnV2bTlfeFZ6NzNERlRLNUV0am1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9iZDBkN2QtZjQyNS00MDhhLWIwN2Qt MDc3MTFlZDAyYjc1LzEvS1U4cTJuMkNNQU5ZSTBmUkpvMnM3cDVHM0tZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9iZDBkN2QtZjQyNS00MDhhLWIwN2QtMDc3MTFlZDAyYjc1 LzEvMXVVMTd5RnV2bTlfeFZ6NzNERlRLNUV0am1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCUa1UMA0G CSqGSIb3DQEBCwUAA4IBAQAAA3dceLq8Lj0+Jqcu7sGql0JYKm5YIMjaIAM2uZ3y tjrLTLuXB7bSGMyDPRbDWvdbtbB6JS9pdjbXC9Idh1Xz1IYNtHbFIDngxFmrVLG7 Q3fXYDwAVMfSkhvZOXC9rGDfmTOTPLb5hTsg7CwYf17xysjfcIdD+3dh/4cQXeH5 gDobBUULr5gnCg4HWwCIHAe0BrmSYXHDuBBEF4mTqhfpvV366kGsL7GGroDYwMhh U+r14hmmT6zYKLSupAF8zW6ekMwWashrsFXJ945S4Eg4/a0o0v6j2mwcYf6qRgAv 6XfLB0wTQzQuCmod+cWtdYWHwfUTnjie+Njl1HdO3xyh -----END CERTIFICATE-----Generated at Sun Jan 25 13:03:29 2026 by rpki-client