This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/82ApyNmRp1qxc05ND1KxdzqdyAs.roa File: 82ApyNmRp1qxc05ND1KxdzqdyAs.roa (raw, json) Hash identifier: HI/EcdJ3F5IPr3I1G9yKimSr9GjqqIMMcTKrmzqtdHY= Subject key identifier: F3:60:29:C8:D9:91:A7:5A:B1:73:4E:4D:0F:52:B1:77:3A:9D:C8:0B Certificate issuer: /CN=0d18532baa2fd86583a263bb1fbccbc80d40d990 Certificate serial: 019B7F83B2CA15C5DF8D33286A6CDA97EADD Authority key identifier: 0D:18:53:2B:AA:2F:D8:65:83:A2:63:BB:1F:BC:CB:C8:0D:40:D9:90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/82ApyNmRp1qxc05ND1KxdzqdyAs.roa Signing time: Fri 02 Jan 2026 16:21:35 +0000 ROA not before: Fri 02 Jan 2026 16:21:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16338 IP address blocks: 176.119.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:b2:ca:15:c5:df:8d:33:28:6a:6c:da:97:ea:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d18532baa2fd86583a263bb1fbccbc80d40d990 Validity Not Before: Jan 2 16:21:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f36029c8d991a75ab1734e4d0f52b1773a9dc80b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:58:52:73:fa:7e:92:72:29:5e:0f:62:64:c4: 20:0f:9c:79:c9:5a:5b:4b:25:a9:7c:38:e2:76:ad: 7c:36:1f:7c:45:57:e8:71:01:54:fd:a9:3c:6a:44: 9c:02:41:59:d6:b2:4d:6a:13:05:30:f4:05:b0:c4: 41:20:38:a8:44:e5:7f:d6:8f:b8:2e:b0:c1:dd:c2: 0c:13:58:91:24:34:3c:3d:a2:65:83:47:1d:2f:b6: f9:5f:9d:1c:29:40:86:5c:74:ae:d9:c3:06:59:1c: 4d:0c:5f:7c:74:c9:90:3d:66:fc:a2:d3:0e:21:82: fb:a5:24:ee:09:76:9d:56:df:c0:c3:08:b5:76:f1: bb:b2:1f:02:6f:39:3b:84:02:e4:11:d7:18:3e:89: aa:41:2e:c5:53:dd:ff:d0:a0:29:af:2e:cb:0b:9e: 47:1f:4a:02:43:1d:2d:89:0a:91:0e:88:e3:33:35: 46:d6:be:bd:bc:c8:dc:2e:9d:10:1a:05:e9:38:ff: 7c:bf:17:91:d7:bb:71:95:ec:f4:eb:16:ce:b5:a4: ac:fe:af:b0:c4:6c:56:49:85:16:66:d8:9d:3b:ea: 11:f2:92:de:e2:e7:a5:f3:17:27:2b:f5:e3:d7:29: 6c:f9:bf:86:21:e8:04:73:68:90:6a:61:8c:08:a5: d1:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:60:29:C8:D9:91:A7:5A:B1:73:4E:4D:0F:52:B1:77:3A:9D:C8:0B X509v3 Authority Key Identifier: keyid:0D:18:53:2B:AA:2F:D8:65:83:A2:63:BB:1F:BC:CB:C8:0D:40:D9:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/82ApyNmRp1qxc05ND1KxdzqdyAs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.119.207.0/24 Signature Algorithm: sha256WithRSAEncryption 21:c0:97:e4:3b:28:7c:35:89:f7:2a:ac:2c:af:d4:91:02:3c: 12:3b:d7:41:17:75:c2:36:c7:13:c5:0e:13:93:25:c5:b2:2a: cc:38:4f:0d:ac:b3:c4:a4:b6:66:58:dc:86:93:dc:02:e2:e8: 25:08:b6:54:93:37:14:27:c0:ac:ed:13:ca:bf:0d:08:05:44: 4e:aa:80:c3:5a:4b:d3:00:c7:56:53:1b:3e:cd:1f:65:49:be: 94:7a:bb:0b:e0:4e:07:9b:9f:9b:0e:87:98:9d:fe:5e:c2:6d: 57:76:ad:51:06:59:82:11:d8:e8:50:5a:46:7a:6f:78:c5:e4: 7f:2a:95:93:11:e1:5e:ef:89:1b:2f:26:40:15:e5:d1:8d:be: ef:f1:fb:71:67:91:e1:8b:81:48:bd:27:6e:93:17:0e:5a:c0: f6:6c:be:0d:33:30:e1:46:14:22:ce:9d:f9:93:43:97:02:90: e0:32:3e:40:81:d7:06:25:c8:bd:11:48:19:c7:6a:4c:5f:b6: 3a:09:3b:76:c6:1c:31:71:38:51:31:c1:51:e7:23:e6:ee:04: 68:5d:21:f8:92:36:6f:39:c8:11:7a:b4:de:a8:b5:00:12:6f: 4d:df:25:40:d8:8b:16:10:58:57:cb:f8:e9:e8:9b:5b:70:33: cb:39:c8:72 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g7LKFcXfjTMoamzal+rdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMTg1MzJiYWEyZmQ4NjU4M2EyNjNiYjFmYmNjYmM4MGQ0 MGQ5OTAwHhcNMjYwMTAyMTYyMTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzYwMjljOGQ5OTFhNzVhYjE3MzRlNGQwZjUyYjE3NzNhOWRjODBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFhSc/p+knIpXg9iZMQgD5x5yVpb SyWpfDjidq18Nh98RVfocQFU/ak8akScAkFZ1rJNahMFMPQFsMRBIDioROV/1o+4 LrDB3cIME1iRJDQ8PaJlg0cdL7b5X50cKUCGXHSu2cMGWRxNDF98dMmQPWb8otMO IYL7pSTuCXadVt/Awwi1dvG7sh8Cbzk7hALkEdcYPomqQS7FU93/0KApry7LC55H H0oCQx0tiQqRDojjMzVG1r69vMjcLp0QGgXpOP98vxeR17txlez06xbOtaSs/q+w xGxWSYUWZtidO+oR8pLe4uel8xcnK/Xj1yls+b+GIegEc2iQamGMCKXR2wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPNgKcjZkadasXNOTQ9SsXc6ncgLMB8GA1UdIwQY MBaAFA0YUyuqL9hlg6Jjux+8y8gNQNmQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFJoVEs2b3YyR1dEb21PN0g3ekx5QTFBMlpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9iOGI1YmQtOGFkZi00M2VmLThhYmQt MmIzYTE1OWNhMmVmLzEvODJBcHlObVJwMXF4YzA1TkQxS3hkenFkeUFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9iOGI1YmQtOGFkZi00M2VmLThhYmQtMmIzYTE1OWNhMmVm LzEvRFJoVEs2b3YyR1dEb21PN0g3ekx5QTFBMlpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsHfPMA0G CSqGSIb3DQEBCwUAA4IBAQAhwJfkOyh8NYn3Kqwsr9SRAjwSO9dBF3XCNscTxQ4T kyXFsirMOE8NrLPEpLZmWNyGk9wC4uglCLZUkzcUJ8Cs7RPKvw0IBUROqoDDWkvT AMdWUxs+zR9lSb6UersL4E4Hm5+bDoeYnf5ewm1Xdq1RBlmCEdjoUFpGem94xeR/ KpWTEeFe74kbLyZAFeXRjb7v8ftxZ5Hhi4FIvSdukxcOWsD2bL4NMzDhRhQizp35 k0OXApDgMj5AgdcGJci9EUgZx2pMX7Y6CTt2xhwxcThRMcFR5yPm7gRoXSH4kjZv OcgRerTeqLUAEm9N3yVA2IsWEFhXy/jp6JtbcDPLOchy -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:29 2026 by rpki-client