This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/Rmbqki6sfeVONmSCUKVbSwnLV2w.roa File: Rmbqki6sfeVONmSCUKVbSwnLV2w.roa (raw, json) Hash identifier: m02OGs1ERDq2Tep5VBBDirUwK9M85zv/SGcl5/T9Gng= Subject key identifier: 46:66:EA:92:2E:AC:7D:E5:4E:36:64:82:50:A5:5B:4B:09:CB:57:6C Certificate issuer: /CN=621a130a90cb037e3803fea0bf465aa082fe3498 Certificate serial: 019B7D5CEB4B73ECDBDED16A7313547ED01A Authority key identifier: 62:1A:13:0A:90:CB:03:7E:38:03:FE:A0:BF:46:5A:A0:82:FE:34:98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhoTCpDLA344A_6gv0ZaoIL-NJg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/Rmbqki6sfeVONmSCUKVbSwnLV2w.roa Signing time: Fri 02 Jan 2026 06:20:00 +0000 ROA not before: Fri 02 Jan 2026 06:20:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20473 IP address blocks: 81.30.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.mft rsync://rpki.ripe.net/repository/DEFAULT/YhoTCpDLA344A_6gv0ZaoIL-NJg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:eb:4b:73:ec:db:de:d1:6a:73:13:54:7e:d0:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=621a130a90cb037e3803fea0bf465aa082fe3498 Validity Not Before: Jan 2 06:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4666ea922eac7de54e36648250a55b4b09cb576c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:85:80:47:1d:76:ef:78:c4:e6:13:92:da:58: 77:ca:04:33:3b:16:a6:56:6f:42:14:0f:32:4d:d5: 94:46:e0:6b:3f:f2:a9:25:d9:54:0e:85:54:68:83: f7:17:6a:3e:1b:5f:33:cf:68:ea:84:c7:cb:fb:69: 3e:f3:ab:63:1a:c2:67:c9:12:9e:64:87:f8:7e:78: 04:de:0d:b0:c4:85:36:d4:18:89:63:60:60:d0:27: 69:1e:5a:8f:af:ba:f8:65:6a:cf:ef:bf:2f:73:41: a8:10:7f:57:28:c6:65:f9:ca:68:a2:90:9f:f0:f1: ed:71:41:fc:27:1e:ac:bb:9d:bb:06:49:49:f5:03: 96:0e:19:6e:a8:48:e0:a8:f7:39:84:44:44:de:61: f9:52:0e:99:3b:45:b4:20:12:25:c1:d9:7a:97:87: 98:f7:3b:0c:72:14:9a:21:01:de:26:ec:5c:f0:a9: e5:bc:7f:74:51:75:29:cc:a1:80:54:45:ba:f0:37: 35:93:4a:dc:8e:ed:de:c5:f7:8f:cf:63:93:2c:23: 06:bd:61:ed:a9:54:f6:fb:9f:49:6a:15:b8:40:0c: 6f:1b:2c:26:85:30:2e:ee:a8:7d:dd:76:99:9b:e6: a6:1a:15:fc:6c:a1:8e:e6:97:98:2f:7e:85:04:87: cd:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:66:EA:92:2E:AC:7D:E5:4E:36:64:82:50:A5:5B:4B:09:CB:57:6C X509v3 Authority Key Identifier: keyid:62:1A:13:0A:90:CB:03:7E:38:03:FE:A0:BF:46:5A:A0:82:FE:34:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhoTCpDLA344A_6gv0ZaoIL-NJg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/Rmbqki6sfeVONmSCUKVbSwnLV2w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.30.104.0/24 Signature Algorithm: sha256WithRSAEncryption 56:8b:86:5c:74:65:a4:a1:7f:cb:75:8e:63:40:8d:27:b3:79: 6a:c6:89:3e:b8:18:ca:50:ad:67:89:0d:aa:6f:6e:f5:b0:4d: 83:d9:0e:59:4d:d4:00:1e:23:d9:5c:91:f3:26:af:19:ed:5f: 4f:c7:65:f7:37:26:34:fc:4f:41:7a:04:46:c8:46:4b:76:29: 4d:5b:07:e0:19:40:d6:cf:72:71:d0:db:16:f9:4c:48:2a:35: 3f:18:83:b2:ee:85:cc:43:99:63:fa:26:43:05:67:19:83:e7: 45:3c:0f:c3:d9:99:21:d6:65:e2:ad:93:90:64:a3:cf:4e:7f: 38:47:c9:6a:51:15:89:94:c4:75:63:9f:28:b3:50:09:8c:12: b4:03:9a:b7:ea:20:27:9e:f4:2f:84:4e:0f:9d:0b:68:01:db: 97:67:ea:13:08:b3:22:03:28:06:ef:6c:cf:ad:50:5a:dd:63: 47:fa:cf:ad:73:bf:57:13:8e:d6:c1:35:92:be:71:1d:a5:af: 05:1e:26:2a:e5:69:6e:05:f1:5f:9e:c7:6f:34:f5:c3:19:68: cf:5a:21:25:2d:2d:3d:e4:61:13:b8:a8:02:a0:e6:26:cd:4e: 81:7c:87:41:32:74:36:35:af:47:6d:b6:10:e9:c2:9b:ab:ad: b0:06:68:48 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XOtLc+zb3tFqcxNUftAaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMWExMzBhOTBjYjAzN2UzODAzZmVhMGJmNDY1YWEwODJm ZTM0OTgwHhcNMjYwMTAyMDYyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjY2ZWE5MjJlYWM3ZGU1NGUzNjY0ODI1MGE1NWI0YjA5Y2I1NzZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYWARx1273jE5hOS2lh3ygQzOxam Vm9CFA8yTdWURuBrP/KpJdlUDoVUaIP3F2o+G18zz2jqhMfL+2k+86tjGsJnyRKe ZIf4fngE3g2wxIU21BiJY2Bg0CdpHlqPr7r4ZWrP778vc0GoEH9XKMZl+cpoopCf 8PHtcUH8Jx6su527BklJ9QOWDhluqEjgqPc5hERE3mH5Ug6ZO0W0IBIlwdl6l4eY 9zsMchSaIQHeJuxc8KnlvH90UXUpzKGAVEW68Dc1k0rcju3exfePz2OTLCMGvWHt qVT2+59JahW4QAxvGywmhTAu7qh93XaZm+amGhX8bKGO5peYL36FBIfN0QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEZm6pIurH3lTjZkglClW0sJy1dsMB8GA1UdIwQY MBaAFGIaEwqQywN+OAP+oL9GWqCC/jSYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWhvVENwRExBMzQ0QV82Z3YwWmFvSUwtTkpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8yMTQ5MmYtMTY2My00MDlkLWJmYjIt NmEwNDUxYzQ5ZDRkLzEvUm1icWtpNnNmZVZPTm1TQ1VLVmJTd25MVjJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC8yMTQ5MmYtMTY2My00MDlkLWJmYjItNmEwNDUxYzQ5ZDRk LzEvWWhvVENwRExBMzQ0QV82Z3YwWmFvSUwtTkpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUR5oMA0G CSqGSIb3DQEBCwUAA4IBAQBWi4ZcdGWkoX/LdY5jQI0ns3lqxok+uBjKUK1niQ2q b271sE2D2Q5ZTdQAHiPZXJHzJq8Z7V9Px2X3NyY0/E9BegRGyEZLdilNWwfgGUDW z3Jx0NsW+UxIKjU/GIOy7oXMQ5lj+iZDBWcZg+dFPA/D2Zkh1mXirZOQZKPPTn84 R8lqURWJlMR1Y58os1AJjBK0A5q36iAnnvQvhE4PnQtoAduXZ+oTCLMiAygG72zP rVBa3WNH+s+tc79XE47WwTWSvnEdpa8FHiYq5WluBfFfnsdvNPXDGWjPWiElLS09 5GETuKgCoOYmzU6BfIdBMnQ2Na9HbbYQ6cKbq62wBmhI -----END CERTIFICATE-----Generated at Mon Jan 26 06:17:59 2026 by rpki-client