This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/82H1zOCTQDypvCqoPuf64HIGCNs.roa
File: 82H1zOCTQDypvCqoPuf64HIGCNs.roa (raw, json)
Hash identifier: OjMqE4nBwVgcGVmO5TIDFN6XpFP5Ht4TkG9+jF5A/Lc=
Subject key identifier: F3:61:F5:CC:E0:93:40:3C:A9:BC:2A:A8:3E:E7:FA:E0:72:06:08:DB
Certificate issuer: /CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Certificate serial: 019B7F83A75C0FC877DA1FD7A28B8DAEF55B
Authority key identifier: 73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/82H1zOCTQDypvCqoPuf64HIGCNs.roa
Signing time: Fri 02 Jan 2026 16:21:33 +0000
ROA not before: Fri 02 Jan 2026 16:21:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6830
IP address blocks: 83.229.113.0/24 maxlen: 24
185.90.220.0/24 maxlen: 24
185.90.221.0/24 maxlen: 24
185.90.222.0/24 maxlen: 24
185.90.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Jan 2026 00:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:83:a7:5c:0f:c8:77:da:1f:d7:a2:8b:8d:ae:f5:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Validity
Not Before: Jan 2 16:21:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f361f5cce093403ca9bc2aa83ee7fae0720608db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f5:b9:02:65:fe:e4:19:dc:ac:00:5d:bd:9b:
fe:f1:41:89:19:66:de:0a:d4:30:6f:f8:32:2a:00:
80:28:66:54:19:f6:97:c6:cc:aa:73:35:cb:ac:7b:
c3:94:50:e0:ec:ae:c5:8b:39:1f:3e:49:88:f0:20:
b5:40:fd:06:4a:c6:e3:a3:f4:f2:9a:51:ca:61:c7:
e7:46:31:b3:f1:b2:bc:61:64:45:d6:5e:9c:ab:73:
86:22:6f:46:a1:fd:5f:57:33:b2:97:6d:66:33:2b:
c4:a6:e8:e4:f0:32:23:2a:de:7c:4a:07:ca:71:1b:
45:db:be:89:9d:dd:f4:d4:6c:39:3f:b3:b8:9e:e0:
b7:8d:9c:a3:14:ec:c8:1b:7b:68:b4:67:2d:db:2d:
fc:42:4a:05:90:55:8f:54:61:06:e2:02:e4:c2:5d:
f4:28:39:30:20:a3:c2:ac:98:3c:a0:63:a5:dd:02:
8d:19:fa:c2:cf:26:70:1b:55:a8:7a:19:96:fa:e3:
fa:44:01:cd:b8:14:c4:aa:61:27:12:26:8a:0e:a9:
80:a3:96:9e:b0:9e:be:9d:9c:e4:1e:f3:09:1d:4a:
34:8c:93:59:3a:fd:77:5c:9a:a0:a9:ae:29:5a:9a:
ef:cf:d2:c9:62:66:17:ea:96:cd:88:72:62:1d:b8:
4b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:61:F5:CC:E0:93:40:3C:A9:BC:2A:A8:3E:E7:FA:E0:72:06:08:DB
X509v3 Authority Key Identifier:
keyid:73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/82H1zOCTQDypvCqoPuf64HIGCNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.229.113.0/24
185.90.220.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:bd:82:9f:8f:c3:72:0e:eb:3a:0c:9c:15:97:df:95:c1:44:
60:58:5f:75:9c:08:57:ae:7f:0c:fc:b1:08:9f:f3:99:0c:74:
96:98:16:f5:2b:21:6d:9d:5b:ef:56:85:8f:ed:09:f0:92:d3:
79:83:ec:c0:0c:dd:be:d2:81:88:15:e1:33:c9:7e:b3:5d:48:
fe:d5:e3:dc:bd:13:3c:32:9c:a2:e7:9e:73:3c:e2:95:36:a6:
d2:fb:b8:3d:d3:5f:6f:6f:aa:76:a2:a9:b7:21:12:31:c9:02:
a1:04:bd:41:cc:d3:b4:62:ec:8d:9e:6a:fa:0f:e8:ba:c0:9a:
47:1f:bd:66:56:05:71:96:d3:ff:2c:7f:1c:ed:81:d3:e8:94:
87:eb:b6:0e:63:02:25:8d:11:22:d3:78:ad:21:10:2b:de:de:
92:96:08:46:b6:0f:96:e1:8e:28:c8:cd:ef:1a:c0:4d:aa:6f:
58:cb:91:fb:3f:57:96:d8:84:65:ce:e7:ea:f5:0c:c2:2c:0c:
82:ff:ae:10:03:d7:8c:ae:d8:b2:c8:09:2e:a4:72:f6:5f:37:
12:fc:f2:aa:8a:e9:4f:32:61:ec:bc:56:7d:5a:ce:23:ba:8f:
24:0f:5a:e0:4e:2f:6c:7c:78:f7:01:22:ce:07:1e:06:84:8e:
47:95:35:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 04:59:25 2026 by rpki-client