This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/bn5DIEB7h417zigDbxPNaTfKJVE.roa File: bn5DIEB7h417zigDbxPNaTfKJVE.roa (raw, json) Hash identifier: 1UP3MaF3B8GgUJNYJAJfcEuya7S1x4U9A8CMZh0i1KQ= Subject key identifier: 6E:7E:43:20:40:7B:87:8D:7B:CE:28:03:6F:13:CD:69:37:CA:25:51 Certificate issuer: /CN=2a6edf23264b43821dae97d10bd364cb6bb7f234 Certificate serial: 019B7CED5CB2FEC9A31BB30E8E589CDDB970 Authority key identifier: 2A:6E:DF:23:26:4B:43:82:1D:AE:97:D1:0B:D3:64:CB:6B:B7:F2:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/bn5DIEB7h417zigDbxPNaTfKJVE.roa Signing time: Fri 02 Jan 2026 04:18:09 +0000 ROA not before: Fri 02 Jan 2026 04:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210644 IP address blocks: 82.117.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:5c:b2:fe:c9:a3:1b:b3:0e:8e:58:9c:dd:b9:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a6edf23264b43821dae97d10bd364cb6bb7f234 Validity Not Before: Jan 2 04:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6e7e4320407b878d7bce28036f13cd6937ca2551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:06:ce:28:48:4e:61:37:a2:66:02:1a:81:a5: a9:8f:17:a4:e0:46:6a:bc:b3:c3:58:b0:c6:1c:55: e9:ec:8a:36:e3:db:2c:95:45:0c:f0:17:82:03:02: 74:9a:84:15:9c:66:fe:dd:41:cd:80:3a:ef:90:16: a3:6a:1c:45:d7:4f:1a:1e:00:be:f3:6f:2e:e8:6f: 60:5e:98:95:0b:cb:3a:3d:bd:a1:aa:a6:f7:cc:8e: 03:84:fd:18:22:05:f0:34:15:6d:47:13:10:ef:72: b1:51:f0:d5:9e:3e:95:91:73:1d:9b:8a:3c:d2:b4: 4a:3c:80:a6:dc:54:a6:db:53:27:f0:fe:72:87:f9: 90:9d:ff:5b:c7:da:3e:29:d1:1e:99:be:dd:81:f5: 14:26:39:08:5a:a2:a0:cf:c6:e8:0d:e4:56:aa:e6: 9b:f0:89:74:91:81:93:3e:c3:2e:e7:06:ac:d8:19: 0e:f4:14:52:70:f7:33:44:0b:3b:0b:48:85:b0:f6: dd:97:6a:93:77:a8:21:65:d5:5c:ac:4e:d3:fc:5d: 4d:63:b1:e7:b9:d2:e7:f6:64:19:9b:33:4f:f3:72: 83:a9:ac:63:04:1c:88:95:46:a0:cc:cb:d1:bd:3e: 9e:c3:d0:ca:c9:53:05:df:35:93:50:ad:d0:bd:79: a3:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:7E:43:20:40:7B:87:8D:7B:CE:28:03:6F:13:CD:69:37:CA:25:51 X509v3 Authority Key Identifier: keyid:2A:6E:DF:23:26:4B:43:82:1D:AE:97:D1:0B:D3:64:CB:6B:B7:F2:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/bn5DIEB7h417zigDbxPNaTfKJVE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.117.84.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:82:a8:e6:d5:36:bf:e0:e4:51:51:b0:86:90:25:33:bc:41: 9d:2d:12:b5:ae:c3:d0:c8:4a:20:2d:cc:36:f7:75:a5:4c:fd: 1b:ef:95:67:bf:7f:38:74:33:9c:52:bd:5c:09:ee:7e:90:48: 99:fe:a3:78:e4:76:ce:b9:e0:50:85:8a:f2:23:37:e9:e7:b7: 66:cc:20:8a:26:10:a2:b7:86:d1:3c:e4:36:71:87:ae:c1:dd: a4:34:91:c2:46:d0:c7:5d:7c:a6:9b:e4:f7:f0:16:7b:b5:32: 39:cd:78:a2:ed:e4:73:1d:9b:ed:dc:7c:33:73:8f:d8:f8:62: 6a:1c:82:73:e9:1b:7e:6c:ed:ae:0e:3a:ed:0b:ad:d3:a8:26: b2:12:b8:27:22:0e:90:01:fb:1b:94:12:2a:f5:47:1c:38:26: af:83:b9:37:78:c5:8c:dd:c6:3d:17:c7:df:f3:c4:a4:be:0e: 28:99:c0:70:4a:77:1e:d3:70:1e:0a:07:bb:d2:aa:aa:00:b8: f6:aa:bd:a4:05:28:79:f7:09:de:77:b0:59:13:4d:3e:3c:2e: 8e:7e:63:1f:2b:5b:26:f9:93:59:51:c2:06:1f:08:45:8e:31: 12:16:02:1c:0e:34:34:bb:07:d9:c3:dd:c6:75:1d:fd:a3:35: ee:8c:0f:bf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87Vyy/smjG7MOjlic3blwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhNmVkZjIzMjY0YjQzODIxZGFlOTdkMTBiZDM2NGNiNmJi N2YyMzQwHhcNMjYwMTAyMDQxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZTdlNDMyMDQwN2I4NzhkN2JjZTI4MDM2ZjEzY2Q2OTM3Y2EyNTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAbOKEhOYTeiZgIagaWpjxek4EZq vLPDWLDGHFXp7Io249sslUUM8BeCAwJ0moQVnGb+3UHNgDrvkBajahxF108aHgC+ 828u6G9gXpiVC8s6Pb2hqqb3zI4DhP0YIgXwNBVtRxMQ73KxUfDVnj6VkXMdm4o8 0rRKPICm3FSm21Mn8P5yh/mQnf9bx9o+KdEemb7dgfUUJjkIWqKgz8boDeRWquab 8Il0kYGTPsMu5was2BkO9BRScPczRAs7C0iFsPbdl2qTd6ghZdVcrE7T/F1NY7Hn udLn9mQZmzNP83KDqaxjBByIlUagzMvRvT6ew9DKyVMF3zWTUK3QvXmjsQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG5+QyBAe4eNe84oA28TzWk3yiVRMB8GA1UdIwQY MBaAFCpu3yMmS0OCHa6X0QvTZMtrt/I0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS203Zkl5WkxRNElkcnBmUkM5Tmt5MnUzOGpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS85YmI0MGQtMzYzOC00NDllLWFlMjUt ZDQyOGYyMzQ5NjYwLzEvYm41RElFQjdoNDE3emlnRGJ4UE5hVGZLSlZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS85YmI0MGQtMzYzOC00NDllLWFlMjUtZDQyOGYyMzQ5NjYw LzEvS203Zkl5WkxRNElkcnBmUkM5Tmt5MnUzOGpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUnVUMA0G CSqGSIb3DQEBCwUAA4IBAQB6gqjm1Ta/4ORRUbCGkCUzvEGdLRK1rsPQyEogLcw2 93WlTP0b75Vnv384dDOcUr1cCe5+kEiZ/qN45HbOueBQhYryIzfp57dmzCCKJhCi t4bRPOQ2cYeuwd2kNJHCRtDHXXymm+T38BZ7tTI5zXii7eRzHZvt3Hwzc4/Y+GJq HIJz6Rt+bO2uDjrtC63TqCayErgnIg6QAfsblBIq9UccOCavg7k3eMWM3cY9F8ff 88Skvg4omcBwSnce03AeCge70qqqALj2qr2kBSh59wned7BZE00+PC6OfmMfK1sm +ZNZUcIGHwhFjjESFgIcDjQ0uwfZw93GdR39ozXujA+/ -----END CERTIFICATE-----Generated at Tue Jan 20 06:03:51 2026 by rpki-client