This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/9juOHHvd5RFbMo7YpBoEDVPCe1k.roa File: 9juOHHvd5RFbMo7YpBoEDVPCe1k.roa (raw, json) Hash identifier: Np2xOmc+WOwvwwk8juGM7WJDeqa+XWYrYA4kRq6ZgRQ= Subject key identifier: F6:3B:8E:1C:7B:DD:E5:11:5B:32:8E:D8:A4:1A:04:0D:53:C2:7B:59 Certificate issuer: /CN=185a2f67d245cba9518b017061a71692ee79e7ff Certificate serial: 019B7AC8CD34BBDB23DF89D05E6435FE1D92 Authority key identifier: 18:5A:2F:67:D2:45:CB:A9:51:8B:01:70:61:A7:16:92:EE:79:E7:FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/9juOHHvd5RFbMo7YpBoEDVPCe1k.roa Signing time: Thu 01 Jan 2026 18:18:58 +0000 ROA not before: Thu 01 Jan 2026 18:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213273 IP address blocks: 81.163.192.0/23 maxlen: 23 81.163.194.0/24 maxlen: 24 2a13:1a81::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:cd:34:bb:db:23:df:89:d0:5e:64:35:fe:1d:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=185a2f67d245cba9518b017061a71692ee79e7ff Validity Not Before: Jan 1 18:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f63b8e1c7bdde5115b328ed8a41a040d53c27b59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:4a:0e:d7:3f:4d:34:f0:1f:24:a7:c0:f9:72: 3d:64:c7:10:8b:d4:06:ec:c4:eb:1f:3e:e1:f0:c0: d8:c6:84:66:ec:70:7f:ed:60:30:79:b6:42:dc:bc: 5d:c5:50:43:69:14:52:cf:ef:8f:85:95:e1:46:97: 16:80:28:c0:21:24:91:43:99:11:ec:e3:1f:4b:0d: 24:0c:40:86:55:72:18:8a:05:6c:2a:7f:26:00:87: 03:6f:b3:12:02:57:8d:9e:7f:dc:ea:dd:87:4e:65: da:cf:52:c1:6f:ed:0a:1e:fa:7d:99:20:87:2d:96: 58:48:ee:71:d3:d7:b6:b8:f6:cf:13:ef:93:55:03: b7:da:cf:d3:3f:03:8b:77:46:7a:ce:b7:dd:5b:3a: 8b:b2:21:e3:f9:0f:29:15:7a:49:c2:2e:bc:96:16: a2:2f:1e:04:aa:7d:c1:d4:b5:2f:a1:9c:99:85:dc: 21:87:c2:61:9e:0a:37:89:c8:92:34:f1:85:f1:cc: 41:a5:e1:04:1f:a0:6d:a9:55:c6:c4:3e:8f:3d:7f: b3:ad:a4:f2:aa:be:c6:fe:06:fa:d7:92:ef:95:8e: a7:8d:e9:e4:11:ba:e5:52:a6:0f:34:af:9f:70:53: f4:ae:fe:36:00:e7:54:c1:71:cf:01:c2:e9:5a:21: 18:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:3B:8E:1C:7B:DD:E5:11:5B:32:8E:D8:A4:1A:04:0D:53:C2:7B:59 X509v3 Authority Key Identifier: keyid:18:5A:2F:67:D2:45:CB:A9:51:8B:01:70:61:A7:16:92:EE:79:E7:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/9juOHHvd5RFbMo7YpBoEDVPCe1k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.163.192.0-81.163.194.255 IPv6: 2a13:1a81::/32 Signature Algorithm: sha256WithRSAEncryption 32:ce:aa:9a:a0:b8:fa:68:0d:96:cc:93:d2:9b:9b:77:ff:13: 84:6a:aa:b1:f7:cc:a9:6b:e7:a9:32:a0:07:17:04:1d:d3:24: 65:0b:aa:b9:c8:40:f8:40:d0:65:22:dc:aa:1b:03:fb:e5:7a: ed:51:c6:4e:ab:11:81:20:3b:6a:5a:5e:47:8a:6a:f6:6a:72: 90:8f:ef:fb:3e:71:da:24:74:d1:cd:f9:8c:b6:92:61:11:c5: 07:ab:55:88:04:57:67:ef:f8:27:43:78:2c:4e:67:fc:b2:d9: 31:b4:10:d9:a4:a4:d7:8b:a2:59:9e:9c:71:84:a1:c9:d3:f8: 74:53:74:50:ed:97:ff:44:64:29:77:f6:bb:a0:62:30:98:5d: cc:37:ff:85:0f:1d:03:9d:67:ca:ea:38:39:f0:b9:fd:09:a2: e0:ca:17:f9:f2:73:59:b5:6d:bd:9d:0d:53:6a:a1:3d:93:53: b9:9d:ca:4c:67:e7:c3:b0:0d:35:94:78:54:97:3d:14:87:72: 91:d0:87:5c:ca:7f:97:74:ae:68:ca:90:f5:39:b1:6d:e6:91: 82:cc:19:5e:9c:ac:3a:da:05:31:c2:17:82:e0:83:df:ee:8f: 6e:13:51:f4:0a:73:95:36:36:3a:49:71:fc:48:ff:7c:d0:c1: ba:68:b0:5f -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt6yM00u9sj34nQXmQ1/h2SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4NWEyZjY3ZDI0NWNiYTk1MThiMDE3MDYxYTcxNjkyZWU3 OWU3ZmYwHhcNMjYwMTAxMTgxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjNiOGUxYzdiZGRlNTExNWIzMjhlZDhhNDFhMDQwZDUzYzI3YjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0oO1z9NNPAfJKfA+XI9ZMcQi9QG 7MTrHz7h8MDYxoRm7HB/7WAwebZC3LxdxVBDaRRSz++PhZXhRpcWgCjAISSRQ5kR 7OMfSw0kDECGVXIYigVsKn8mAIcDb7MSAleNnn/c6t2HTmXaz1LBb+0KHvp9mSCH LZZYSO5x09e2uPbPE++TVQO32s/TPwOLd0Z6zrfdWzqLsiHj+Q8pFXpJwi68lhai Lx4Eqn3B1LUvoZyZhdwhh8Jhngo3iciSNPGF8cxBpeEEH6BtqVXGxD6PPX+zraTy qr7G/gb615LvlY6njenkEbrlUqYPNK+fcFP0rv42AOdUwXHPAcLpWiEYDQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFPY7jhx73eURWzKO2KQaBA1TwntZMB8GA1UdIwQY MBaAFBhaL2fSRcupUYsBcGGnFpLueef/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0Zvdlo5SkZ5NmxSaXdGd1lhY1drdTU1NV84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9kNTU5ODgtNDJkMi00MjA2LTk1YTkt YmIwMThjZmJlYWEyLzEvOWp1T0hIdmQ1UkZiTW83WXBCb0VEVlBDZTFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi9kNTU5ODgtNDJkMi00MjA2LTk1YTktYmIwMThjZmJlYWEy LzEvR0Zvdlo5SkZ5NmxSaXdGd1lhY1drdTU1NV84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAUBAIAATAOMAwDBAZRo8AD BABRo8IwDQQCAAIwBwMFACoTGoEwDQYJKoZIhvcNAQELBQADggEBADLOqpqguPpo DZbMk9Kbm3f/E4RqqrH3zKlr56kyoAcXBB3TJGULqrnIQPhA0GUi3KobA/vleu1R xk6rEYEgO2paXkeKavZqcpCP7/s+cdokdNHN+Yy2kmERxQerVYgEV2fv+CdDeCxO Z/yy2TG0ENmkpNeLolmenHGEocnT+HRTdFDtl/9EZCl39rugYjCYXcw3/4UPHQOd Z8rqODnwuf0JouDKF/nyc1m1bb2dDVNqoT2TU7mdykxn58OwDTWUeFSXPRSHcpHQ h1zKf5d0rmjKkPU5sW3mkYLMGV6crDraBTHCF4Lgg9/uj24TUfQKc5U2NjpJcfxI /3zQwbposF8= -----END CERTIFICATE-----Generated at Mon Jan 12 03:31:35 2026 by rpki-client