This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/81lwN7PJ1k_OmJqY6Y-QKVEh_d4.roa File: 81lwN7PJ1k_OmJqY6Y-QKVEh_d4.roa (raw, json) Hash identifier: GrHuXfs5jEjbKpmLaqruIgR2TLpQWiNwgRNbypze6fI= Subject key identifier: F3:59:70:37:B3:C9:D6:4F:CE:98:9A:98:E9:8F:90:29:51:21:FD:DE Certificate issuer: /CN=0d44da5c1904095860e868180573ee3c895a7b45 Certificate serial: 019B7834C644864FD3E0410630648F250BA1 Authority key identifier: 0D:44:DA:5C:19:04:09:58:60:E8:68:18:05:73:EE:3C:89:5A:7B:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/81lwN7PJ1k_OmJqY6Y-QKVEh_d4.roa Signing time: Thu 01 Jan 2026 06:18:03 +0000 ROA not before: Thu 01 Jan 2026 06:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8455 IP address blocks: 109.71.48.0/24 maxlen: 24 109.71.49.0/24 maxlen: 24 109.71.50.0/24 maxlen: 24 109.71.51.0/24 maxlen: 24 109.71.52.0/24 maxlen: 24 109.71.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.crl rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:c6:44:86:4f:d3:e0:41:06:30:64:8f:25:0b:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d44da5c1904095860e868180573ee3c895a7b45 Validity Not Before: Jan 1 06:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f3597037b3c9d64fce989a98e98f90295121fdde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:eb:84:2a:b7:27:dc:ee:42:84:a9:98:9d:b3: b6:47:6a:2e:4a:b9:36:c1:fa:02:f9:d6:e6:76:05: 66:72:e5:ed:89:91:b1:d0:13:66:c5:52:54:29:49: 22:ce:e4:31:29:67:06:dd:11:28:31:fc:15:2e:39: af:a9:2a:70:f3:3c:84:35:4d:33:4f:14:66:ff:ec: b6:16:46:74:7d:85:5d:ad:7e:74:96:0f:58:28:46: 4d:2e:5a:29:f7:af:1d:81:61:5d:dc:37:61:76:37: 02:6f:62:2a:01:6c:0b:91:b9:69:08:1f:a3:ad:02: 97:86:32:a7:33:68:fd:89:0b:10:c0:e6:03:7c:77: 91:8f:40:ed:f3:58:24:6b:a0:59:6e:34:27:f9:7b: 92:8f:89:cb:de:10:7b:ba:0a:e3:08:0c:5c:1d:89: 12:32:d8:5b:5b:d5:43:d6:27:91:c3:42:b3:62:1a: 56:6f:ff:46:41:48:c7:bf:c7:8a:3b:4c:b2:d4:12: f8:a9:2f:ed:df:74:4d:0f:b1:6c:94:49:fa:44:d9: 8c:e3:70:3c:ad:5b:d8:00:0e:19:e2:d4:53:c2:18: fc:2b:ff:0b:de:df:49:f4:10:96:4e:e9:36:ea:d7: 2c:64:a2:fb:b4:6d:46:76:85:73:e1:62:a0:7c:bc: a8:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:59:70:37:B3:C9:D6:4F:CE:98:9A:98:E9:8F:90:29:51:21:FD:DE X509v3 Authority Key Identifier: keyid:0D:44:DA:5C:19:04:09:58:60:E8:68:18:05:73:EE:3C:89:5A:7B:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/81lwN7PJ1k_OmJqY6Y-QKVEh_d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.71.48.0-109.71.53.255 Signature Algorithm: sha256WithRSAEncryption 85:ce:76:da:e9:ed:78:4b:c8:c9:19:cf:a9:3d:e9:a8:13:42: e4:91:ab:29:e8:83:4d:e1:9f:3d:0f:21:3f:1f:76:d6:e9:00: b5:71:15:df:f8:d0:24:cb:f9:c4:bb:ff:66:e9:98:06:43:3c: 4c:77:c2:23:2f:48:24:3d:7c:09:c2:c5:bb:de:80:31:cf:c6: 30:39:d9:37:78:0c:49:3a:a5:93:b4:f0:15:c4:7c:86:0e:6b: 0a:c7:8d:bc:19:4c:50:c1:9f:a6:a5:83:bb:df:ed:ce:0c:7e: 6c:c5:ff:d5:aa:1d:56:00:c5:d3:be:c9:73:b3:66:97:81:e4: 2f:80:0f:11:32:08:11:28:cf:f5:62:e1:35:28:9f:63:4d:1e: b8:62:17:de:6b:d1:eb:d7:b7:7a:c6:2c:bb:56:4b:cf:35:b0: 1a:c4:b3:f0:5a:8d:86:db:88:00:e0:d3:37:47:da:92:1d:b6: d0:37:5f:ce:28:31:2a:c5:df:22:c3:fd:a8:ed:8f:7b:e8:dd: c5:b0:5c:a4:55:ca:40:53:48:aa:6e:e7:c0:e1:61:10:aa:fa: d0:d9:7f:66:8b:7b:d9:8b:71:e3:2e:91:2f:7e:da:5c:6d:22: 06:91:18:3e:28:74:49:1e:44:2f:26:be:16:7f:26:39:d9:df: fa:51:70:00 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt4NMZEhk/T4EEGMGSPJQuhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNDRkYTVjMTkwNDA5NTg2MGU4NjgxODA1NzNlZTNjODk1 YTdiNDUwHhcNMjYwMTAxMDYxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzU5NzAzN2IzYzlkNjRmY2U5ODlhOThlOThmOTAyOTUxMjFmZGRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6+uEKrcn3O5ChKmYnbO2R2ouSrk2 wfoC+dbmdgVmcuXtiZGx0BNmxVJUKUkizuQxKWcG3REoMfwVLjmvqSpw8zyENU0z TxRm/+y2FkZ0fYVdrX50lg9YKEZNLlop968dgWFd3DdhdjcCb2IqAWwLkblpCB+j rQKXhjKnM2j9iQsQwOYDfHeRj0Dt81gka6BZbjQn+XuSj4nL3hB7ugrjCAxcHYkS MthbW9VD1ieRw0KzYhpWb/9GQUjHv8eKO0yy1BL4qS/t33RND7FslEn6RNmM43A8 rVvYAA4Z4tRTwhj8K/8L3t9J9BCWTuk26tcsZKL7tG1GdoVz4WKgfLyoWwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFPNZcDezydZPzpiamOmPkClRIf3eMB8GA1UdIwQY MBaAFA1E2lwZBAlYYOhoGAVz7jyJWntFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFVUYVhCa0VDVmhnNkdnWUJYUHVQSWxhZTBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9iY2U1M2QtZDM5ZC00ZTIzLWFhMTct MjdmYjU4MjJiMzJkLzEvODFsd043UEoxa19PbUpxWTZZLVFLVkVoX2Q0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9iY2U1M2QtZDM5ZC00ZTIzLWFhMTctMjdmYjU4MjJiMzJk LzEvRFVUYVhCa0VDVmhnNkdnWUJYUHVQSWxhZTBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBARtRzAD BAFtRzQwDQYJKoZIhvcNAQELBQADggEBAIXOdtrp7XhLyMkZz6k96agTQuSRqyno g03hnz0PIT8fdtbpALVxFd/40CTL+cS7/2bpmAZDPEx3wiMvSCQ9fAnCxbvegDHP xjA52Td4DEk6pZO08BXEfIYOawrHjbwZTFDBn6alg7vf7c4MfmzF/9WqHVYAxdO+ yXOzZpeB5C+ADxEyCBEoz/Vi4TUon2NNHrhiF95r0evXt3rGLLtWS881sBrEs/Ba jYbbiADg0zdH2pIdttA3X84oMSrF3yLD/ajtj3vo3cWwXKRVykBTSKpu58DhYRCq +tDZf2aLe9mLceMukS9+2lxtIgaRGD4odEkeRC8mvhZ/JjnZ3/pRcAA= -----END CERTIFICATE-----Generated at Mon Jan 26 10:52:59 2026 by rpki-client