This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/099e79-16fb-40be-a918-db7c1af3a073/1/g082PDAHpiRZAocEJGI8VaarFzs.roa File: g082PDAHpiRZAocEJGI8VaarFzs.roa (raw, json) Hash identifier: Au5SOTFMsi2+OrZE63a9/Ibnr7Cniiip3FgMbm/9rrs= Subject key identifier: 83:4F:36:3C:30:07:A6:24:59:02:87:04:24:62:3C:55:A6:AB:17:3B Certificate issuer: /CN=20d4a142d1e31704eb5bcf03a785f6378355b799 Certificate serial: 019B7EA578BA42C5CEC15A5287221A7B682B Authority key identifier: 20:D4:A1:42:D1:E3:17:04:EB:5B:CF:03:A7:85:F6:37:83:55:B7:99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INShQtHjFwTrW88Dp4X2N4NVt5k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/099e79-16fb-40be-a918-db7c1af3a073/1/g082PDAHpiRZAocEJGI8VaarFzs.roa Signing time: Fri 02 Jan 2026 12:18:52 +0000 ROA not before: Fri 02 Jan 2026 12:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207335 IP address blocks: 185.243.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/099e79-16fb-40be-a918-db7c1af3a073/1/INShQtHjFwTrW88Dp4X2N4NVt5k.crl rsync://rpki.ripe.net/repository/DEFAULT/41/099e79-16fb-40be-a918-db7c1af3a073/1/INShQtHjFwTrW88Dp4X2N4NVt5k.mft rsync://rpki.ripe.net/repository/DEFAULT/INShQtHjFwTrW88Dp4X2N4NVt5k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:78:ba:42:c5:ce:c1:5a:52:87:22:1a:7b:68:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20d4a142d1e31704eb5bcf03a785f6378355b799 Validity Not Before: Jan 2 12:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=834f363c3007a6245902870424623c55a6ab173b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ca:19:a8:21:11:97:5e:88:86:ee:13:bd:0c: 58:43:d5:32:e6:36:e9:75:6f:1b:31:64:5e:2f:40: 84:e1:94:2a:1e:2d:c9:00:3b:65:7d:5f:7a:de:19: 55:9e:db:d5:58:76:ea:52:77:01:46:b6:ff:af:34: 18:d8:8a:b5:51:9c:a6:66:12:fa:d2:12:e3:70:d9: f2:20:ed:a5:5c:7f:6a:0e:d1:57:51:0a:a4:4d:41: d6:7c:f4:79:25:7c:ea:dc:54:80:40:b9:72:d1:ef: 21:bb:5c:33:5c:d6:78:22:eb:87:d9:f6:8c:d6:53: 8c:ee:f6:0e:7d:85:5d:0a:e7:b1:10:89:98:70:44: d6:70:55:46:26:82:b7:0d:00:09:f0:71:87:13:a0: 57:fb:06:27:d4:8a:67:1d:c1:f1:84:80:55:dd:63: 3a:70:1c:50:e5:c7:27:a8:f7:d9:f6:22:f1:7a:4a: 41:72:f9:c3:23:ec:13:4f:02:d1:5c:eb:67:c9:c7: a3:33:82:03:08:a7:8a:c0:a6:61:ba:46:95:fc:a2: b6:f0:e8:16:12:f6:fa:fd:8e:fe:ed:6f:1b:ce:6b: ec:f0:37:f9:60:ca:53:57:79:42:a8:33:50:bf:98: 9d:b2:7d:44:bd:bc:92:a5:b2:ea:6e:09:7e:42:06: 06:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:4F:36:3C:30:07:A6:24:59:02:87:04:24:62:3C:55:A6:AB:17:3B X509v3 Authority Key Identifier: keyid:20:D4:A1:42:D1:E3:17:04:EB:5B:CF:03:A7:85:F6:37:83:55:B7:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INShQtHjFwTrW88Dp4X2N4NVt5k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/099e79-16fb-40be-a918-db7c1af3a073/1/g082PDAHpiRZAocEJGI8VaarFzs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/099e79-16fb-40be-a918-db7c1af3a073/1/INShQtHjFwTrW88Dp4X2N4NVt5k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.243.64.0/22 Signature Algorithm: sha256WithRSAEncryption 0d:0b:1c:90:b9:53:a9:af:7d:4b:c2:08:09:f1:51:36:4f:43: b5:dd:06:83:47:90:72:b6:18:c0:29:5b:96:b6:57:e7:9c:26: f8:74:a5:db:b4:85:a2:bc:48:88:c1:65:65:1c:dd:33:f8:54: 74:a2:ce:f2:8f:e3:5a:5c:c4:9c:15:f4:36:bb:6d:74:3f:14: d1:f1:7d:aa:ba:e5:da:50:03:d1:16:71:81:f9:f4:4b:bf:0f: aa:4c:a4:db:8c:a1:38:4a:f7:93:ce:a2:80:4e:b9:c1:8d:ed: 42:be:77:0f:2b:59:9d:bc:32:46:03:ba:4a:c5:7e:49:0e:2a: a0:6b:e0:20:ae:47:be:d3:4b:f5:78:12:8a:82:75:9c:c2:0f: 8e:8d:24:d1:62:c5:11:46:60:5a:b5:44:25:3b:52:49:70:a2: c2:59:ab:8d:98:4e:d3:99:f7:86:fe:01:b4:29:b6:57:ca:25: bc:02:e3:22:bb:9e:ec:08:7d:65:ed:e9:70:fd:bd:db:59:8b: 08:2d:47:73:7b:fa:b0:cf:b4:36:df:cc:ba:73:74:38:d4:16: a7:a9:e7:87:ca:2f:a3:b2:36:de:76:99:99:08:0a:a8:1c:11: 40:d5:60:66:4c:28:d0:a8:1d:49:cf:65:02:ac:42:b9:8d:89: f3:38:c7:31 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pXi6QsXOwVpShyIae2grMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZDRhMTQyZDFlMzE3MDRlYjViY2YwM2E3ODVmNjM3ODM1 NWI3OTkwHhcNMjYwMTAyMTIxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MzRmMzYzYzMwMDdhNjI0NTkwMjg3MDQyNDYyM2M1NWE2YWIxNzNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MoZqCERl16Ihu4TvQxYQ9Uy5jbp dW8bMWReL0CE4ZQqHi3JADtlfV963hlVntvVWHbqUncBRrb/rzQY2Iq1UZymZhL6 0hLjcNnyIO2lXH9qDtFXUQqkTUHWfPR5JXzq3FSAQLly0e8hu1wzXNZ4IuuH2faM 1lOM7vYOfYVdCuexEImYcETWcFVGJoK3DQAJ8HGHE6BX+wYn1IpnHcHxhIBV3WM6 cBxQ5ccnqPfZ9iLxekpBcvnDI+wTTwLRXOtnycejM4IDCKeKwKZhukaV/KK28OgW Evb6/Y7+7W8bzmvs8Df5YMpTV3lCqDNQv5idsn1EvbySpbLqbgl+QgYGzwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFINPNjwwB6YkWQKHBCRiPFWmqxc7MB8GA1UdIwQY MBaAFCDUoULR4xcE61vPA6eF9jeDVbeZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU5TaFF0SGpGd1RyVzg4RHA0WDJONE5WdDVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8wOTllNzktMTZmYi00MGJlLWE5MTgt ZGI3YzFhZjNhMDczLzEvZzA4MlBEQUhwaVJaQW9jRUpHSThWYWFyRnpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS8wOTllNzktMTZmYi00MGJlLWE5MTgtZGI3YzFhZjNhMDcz LzEvSU5TaFF0SGpGd1RyVzg4RHA0WDJONE5WdDVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCufNAMA0G CSqGSIb3DQEBCwUAA4IBAQANCxyQuVOpr31LwggJ8VE2T0O13QaDR5BythjAKVuW tlfnnCb4dKXbtIWivEiIwWVlHN0z+FR0os7yj+NaXMScFfQ2u210PxTR8X2quuXa UAPRFnGB+fRLvw+qTKTbjKE4SveTzqKATrnBje1CvncPK1mdvDJGA7pKxX5JDiqg a+Agrke+00v1eBKKgnWcwg+OjSTRYsURRmBatUQlO1JJcKLCWauNmE7TmfeG/gG0 KbZXyiW8AuMiu57sCH1l7elw/b3bWYsILUdze/qwz7Q238y6c3Q41BanqeeHyi+j sjbedpmZCAqoHBFA1WBmTCjQqB1Jz2UCrEK5jYnzOMcx -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:32 2026 by rpki-client