This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/9Ftjq_Eq-fyNHlW3WtWYGabPEOo.roa File: 9Ftjq_Eq-fyNHlW3WtWYGabPEOo.roa (raw, json) Hash identifier: RROt5jRdMmps8oCVGgLhKd+7IXUEEDExlgWjv5fKF/c= Subject key identifier: F4:5B:63:AB:F1:2A:F9:FC:8D:1E:55:B7:5A:D5:98:19:A6:CF:10:EA Certificate issuer: /CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c Certificate serial: 019B7DCB2AFDF6E515FC0912E4D3C0118FF5 Authority key identifier: 20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/9Ftjq_Eq-fyNHlW3WtWYGabPEOo.roa Signing time: Fri 02 Jan 2026 08:20:25 +0000 ROA not before: Fri 02 Jan 2026 08:20:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60781 IP address blocks: 82.150.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:2a:fd:f6:e5:15:fc:09:12:e4:d3:c0:11:8f:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c Validity Not Before: Jan 2 08:20:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f45b63abf12af9fc8d1e55b75ad59819a6cf10ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b4:02:3a:b4:2a:f8:42:55:a2:65:c7:2b:43: db:64:79:53:ff:a2:c2:06:b5:9e:05:a5:22:f4:70: 12:e2:57:4f:3c:ae:83:42:2b:33:df:1f:7f:17:03: f8:ea:84:3a:d5:ec:f8:7a:46:13:5a:11:d4:2a:25: 6c:81:5b:97:15:e3:53:ad:02:43:9d:d8:05:d4:c5: 71:0b:ef:e7:40:34:05:8e:6b:70:96:44:f8:cc:4a: 90:46:3f:89:16:c7:0d:59:26:cc:e5:c2:0f:de:4d: e8:41:23:cf:7f:5d:12:77:37:94:05:a1:93:86:54: 4b:16:b9:7c:84:9f:e9:3b:52:d4:10:65:21:b2:ca: 8d:08:5c:f4:32:78:c0:8e:38:b3:a1:b2:b7:64:bc: 15:71:88:17:c2:31:dd:d9:aa:10:8e:0d:14:77:19: 30:ae:18:c7:5a:c6:63:cf:0a:7d:b6:7a:37:88:90: 87:63:29:35:a0:5c:80:4c:28:9a:82:2a:60:c5:0d: b0:8a:ed:a7:a9:a9:19:c0:8c:e0:94:66:5c:3e:1f: f8:f2:e2:ac:0e:46:e5:57:1e:4f:55:fd:7a:00:f5: c5:c0:d4:26:7b:2f:83:75:58:a1:56:68:1c:0c:f3: 18:c4:86:ee:f0:d3:02:ea:ab:16:cb:c0:b4:3a:b6: d4:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:5B:63:AB:F1:2A:F9:FC:8D:1E:55:B7:5A:D5:98:19:A6:CF:10:EA X509v3 Authority Key Identifier: keyid:20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/9Ftjq_Eq-fyNHlW3WtWYGabPEOo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.150.152.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:2c:23:ab:5b:3f:34:ac:64:a7:ce:ca:00:d0:6d:c0:72:5a: a4:18:a6:76:19:44:6a:61:51:49:07:b1:0b:57:43:09:b5:7d: fc:7c:be:41:37:df:fc:bb:79:ae:50:9d:83:da:1e:2d:33:47: 93:28:cc:7c:8d:a6:cc:5e:f1:a0:62:b5:9b:bd:07:eb:96:fd: f6:02:b4:6c:d4:91:3a:78:bf:77:d3:c9:f0:7a:bd:a0:6d:0e: a1:fb:96:4c:bc:29:87:17:f8:e9:8d:c9:25:4a:3d:46:89:8e: 0c:69:2b:96:73:38:23:19:c1:1d:ea:8f:26:5f:16:d4:f5:b0: 66:fc:1c:3d:b1:d3:ad:aa:f8:6c:0b:cb:35:37:25:de:7b:13: 17:6c:d3:9b:a4:15:eb:46:9e:76:b7:cd:88:c2:97:e5:ae:30: ec:d3:42:28:d4:e8:32:3c:dc:e1:65:9d:cd:79:20:01:83:09: 5c:8e:df:87:c9:f7:c1:60:fe:e2:0f:bf:a4:45:f7:63:8a:09: 72:e1:be:59:09:31:39:30:13:ff:81:2f:88:9d:96:7f:3e:23: 24:cd:0f:ce:d2:30:f3:ed:5b:b2:d6:3c:89:39:35:08:97:06: 1e:a4:76:73:97:d7:b5:8d:02:0a:f0:8c:8f:1b:5b:9d:6e:f7: 13:f4:c3:a6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yyr99uUV/AkS5NPAEY/1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwMWZlMzBmYzZiNGIwZDBmNmRiNGUxYmZiYmQ1MDE5NWRj YTU3NWMwHhcNMjYwMTAyMDgyMDI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNDViNjNhYmYxMmFmOWZjOGQxZTU1Yjc1YWQ1OTgxOWE2Y2YxMGVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirQCOrQq+EJVomXHK0PbZHlT/6LC BrWeBaUi9HAS4ldPPK6DQisz3x9/FwP46oQ61ez4ekYTWhHUKiVsgVuXFeNTrQJD ndgF1MVxC+/nQDQFjmtwlkT4zEqQRj+JFscNWSbM5cIP3k3oQSPPf10SdzeUBaGT hlRLFrl8hJ/pO1LUEGUhssqNCFz0MnjAjjizobK3ZLwVcYgXwjHd2aoQjg0Udxkw rhjHWsZjzwp9tno3iJCHYyk1oFyATCiagipgxQ2wiu2nqakZwIzglGZcPh/48uKs DkblVx5PVf16APXFwNQmey+DdVihVmgcDPMYxIbu8NMC6qsWy8C0OrbUeQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPRbY6vxKvn8jR5Vt1rVmBmmzxDqMB8GA1UdIwQY MBaAFCAf4w/GtLDQ9ttOG/u9UBldyldcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUJfakQ4YTBzTkQyMjA0Yi03MVFHVjNLVjF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My84ZDgwZjktNDk0ZS00YWJiLTk5NTYt ZmMxMjFjODAwYjMwLzEvOUZ0anFfRXEtZnlOSGxXM1d0V1lHYWJQRU9vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My84ZDgwZjktNDk0ZS00YWJiLTk5NTYtZmMxMjFjODAwYjMw LzEvSUJfakQ4YTBzTkQyMjA0Yi03MVFHVjNLVjF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUpaYMA0G CSqGSIb3DQEBCwUAA4IBAQBPLCOrWz80rGSnzsoA0G3AclqkGKZ2GURqYVFJB7EL V0MJtX38fL5BN9/8u3muUJ2D2h4tM0eTKMx8jabMXvGgYrWbvQfrlv32ArRs1JE6 eL9308nwer2gbQ6h+5ZMvCmHF/jpjcklSj1GiY4MaSuWczgjGcEd6o8mXxbU9bBm /Bw9sdOtqvhsC8s1NyXeexMXbNObpBXrRp52t82IwpflrjDs00Io1OgyPNzhZZ3N eSABgwlcjt+HyffBYP7iD7+kRfdjigly4b5ZCTE5MBP/gS+InZZ/PiMkzQ/O0jDz 7Vuy1jyJOTUIlwYepHZzl9e1jQIK8IyPG1udbvcT9MOm -----END CERTIFICATE-----Generated at Mon Jan 19 16:55:51 2026 by rpki-client