This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/0aJN7g9UYNuSlDNSd_3v9NXySfE.roa File: 0aJN7g9UYNuSlDNSd_3v9NXySfE.roa (raw, json) Hash identifier: XdSFGqdiTuD/o/ulQOKcxfFCoC2HDjIrsCDJsOgnLwo= Subject key identifier: D1:A2:4D:EE:0F:54:60:DB:92:94:33:52:77:FD:EF:F4:D5:F2:49:F1 Certificate issuer: /CN=a4cb50e78a3a31e3375cf2aab865e845ff2e99c1 Certificate serial: 019B7A5B401733BA58C12159AD4E1AA4594F Authority key identifier: A4:CB:50:E7:8A:3A:31:E3:37:5C:F2:AA:B8:65:E8:45:FF:2E:99:C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pMtQ54o6MeM3XPKquGXoRf8umcE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/0aJN7g9UYNuSlDNSd_3v9NXySfE.roa Signing time: Thu 01 Jan 2026 16:19:19 +0000 ROA not before: Thu 01 Jan 2026 16:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30848 IP address blocks: 82.145.96.0/23 maxlen: 24 82.145.102.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.crl rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.mft rsync://rpki.ripe.net/repository/DEFAULT/pMtQ54o6MeM3XPKquGXoRf8umcE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:40:17:33:ba:58:c1:21:59:ad:4e:1a:a4:59:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4cb50e78a3a31e3375cf2aab865e845ff2e99c1 Validity Not Before: Jan 1 16:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d1a24dee0f5460db9294335277fdeff4d5f249f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c0:c2:13:24:4e:16:29:d0:a8:da:18:ca:b5: 76:bd:36:2a:0b:39:81:83:de:ed:db:85:ad:c3:f0: fb:ff:9f:35:15:c6:1b:77:92:f3:6e:32:80:7e:7a: 89:9d:51:8c:05:ab:67:d3:7a:74:8d:9a:c4:20:4c: 4a:7e:72:1a:5c:9e:47:72:cf:11:9c:08:1a:ae:f1: 06:5a:28:da:f9:d2:3a:84:53:81:62:82:f4:f9:b7: a3:36:74:27:79:f5:32:9b:e2:da:2d:9f:58:74:0a: 00:84:3c:a7:93:8c:30:c6:d5:cf:64:2f:8c:10:dd: 98:ea:0a:88:4e:64:2d:8d:ad:96:1f:02:27:44:da: ee:60:fb:fe:b6:3e:54:f8:5a:eb:66:2f:1e:5e:8e: ec:4c:c0:1c:12:3f:04:c7:78:27:bf:1f:5a:97:f6: b8:26:41:c4:3e:e8:ad:29:c7:bd:57:31:f4:1e:2f: e9:dc:a2:f6:e3:cd:99:ea:9c:f5:b9:ef:66:4e:96: e0:e7:a7:1d:64:9d:37:4d:7a:28:86:99:d2:d5:1b: 5b:b2:88:14:7f:21:5a:7e:7a:7a:c3:e5:d2:6d:7f: a8:67:c9:5e:d5:90:88:30:6c:fb:0a:bf:9d:7e:31: 7f:ea:af:4c:af:6b:5d:6a:63:78:3f:e4:38:65:76: 8a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:A2:4D:EE:0F:54:60:DB:92:94:33:52:77:FD:EF:F4:D5:F2:49:F1 X509v3 Authority Key Identifier: keyid:A4:CB:50:E7:8A:3A:31:E3:37:5C:F2:AA:B8:65:E8:45:FF:2E:99:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMtQ54o6MeM3XPKquGXoRf8umcE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/0aJN7g9UYNuSlDNSd_3v9NXySfE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.145.96.0/23 82.145.102.0/23 Signature Algorithm: sha256WithRSAEncryption 4b:d6:30:66:5d:90:80:45:80:e3:b1:a3:83:4c:ea:9d:40:98: f4:d5:a0:ab:48:68:30:9c:63:6e:28:24:02:1f:38:f9:27:b1: 2f:c0:1d:ad:ce:b6:87:83:70:27:38:40:84:90:9e:4e:7f:66: ad:a2:c3:ad:d8:b5:e5:8d:a5:97:ed:fb:99:ef:72:9b:a6:55: 10:9a:25:08:5c:c0:25:05:34:6a:95:1f:d1:2f:58:99:63:0b: 69:ec:82:20:ce:f3:17:cd:3e:db:e0:41:f5:82:88:de:cd:06: d3:41:62:82:2b:de:95:ca:aa:63:ff:e7:5f:e0:24:84:03:21: 77:7e:92:48:78:6c:b0:3d:37:53:53:4c:4c:33:87:6d:2e:41: d9:e7:99:42:63:b3:4f:6a:f9:2b:3c:df:71:59:3a:16:82:f8: ab:fe:a1:a6:01:f7:30:63:f6:74:2a:13:ab:30:7a:d2:ae:14: d9:05:75:25:c7:bb:a6:b7:2d:0c:73:15:c6:06:ef:d6:f0:bb: 3d:67:bb:7e:8b:09:b5:27:e1:d3:9b:3c:22:9c:1a:13:95:c4: 58:9d:dd:bf:35:78:45:d0:67:9a:15:c6:e6:45:96:b0:e3:af: a4:ba:55:83:69:a7:14:51:f9:5f:ba:97:d9:25:37:ad:0a:42: 64:20:d8:e7 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6W0AXM7pYwSFZrU4apFlPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0Y2I1MGU3OGEzYTMxZTMzNzVjZjJhYWI4NjVlODQ1ZmYy ZTk5YzEwHhcNMjYwMTAxMTYxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMWEyNGRlZTBmNTQ2MGRiOTI5NDMzNTI3N2ZkZWZmNGQ1ZjI0OWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMDCEyROFinQqNoYyrV2vTYqCzmB g97t24Wtw/D7/581FcYbd5LzbjKAfnqJnVGMBatn03p0jZrEIExKfnIaXJ5Hcs8R nAgarvEGWija+dI6hFOBYoL0+bejNnQnefUym+LaLZ9YdAoAhDynk4wwxtXPZC+M EN2Y6gqITmQtja2WHwInRNruYPv+tj5U+FrrZi8eXo7sTMAcEj8Ex3gnvx9al/a4 JkHEPuitKce9VzH0Hi/p3KL2482Z6pz1ue9mTpbg56cdZJ03TXoohpnS1RtbsogU fyFafnp6w+XSbX+oZ8le1ZCIMGz7Cr+dfjF/6q9Mr2tdamN4P+Q4ZXaKOwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNGiTe4PVGDbkpQzUnf97/TV8knxMB8GA1UdIwQY MBaAFKTLUOeKOjHjN1zyqrhl6EX/LpnBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcE10UTU0bzZNZU0zWFBLcXVHWG9SZjh1bWNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9iMWYyZTAtOGE2MC00YzhhLTkwZGMt NGJlNzk0ZDY0MDZkLzEvMGFKTjdnOVVZTnVTbEROU2RfM3Y5Tlh5U2ZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny9iMWYyZTAtOGE2MC00YzhhLTkwZGMtNGJlNzk0ZDY0MDZk LzEvcE10UTU0bzZNZU0zWFBLcXVHWG9SZjh1bWNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBUpFgAwQB UpFmMA0GCSqGSIb3DQEBCwUAA4IBAQBL1jBmXZCARYDjsaODTOqdQJj01aCrSGgw nGNuKCQCHzj5J7EvwB2tzraHg3AnOECEkJ5Of2atosOt2LXljaWX7fuZ73KbplUQ miUIXMAlBTRqlR/RL1iZYwtp7IIgzvMXzT7b4EH1gojezQbTQWKCK96Vyqpj/+df 4CSEAyF3fpJIeGywPTdTU0xMM4dtLkHZ55lCY7NPavkrPN9xWToWgvir/qGmAfcw Y/Z0KhOrMHrSrhTZBXUlx7umty0McxXGBu/W8Ls9Z7t+iwm1J+HTmzwinBoTlcRY nd2/NXhF0GeaFcbmRZaw46+kulWDaacUUflfupfZJTetCkJkINjn -----END CERTIFICATE-----Generated at Tue Jan 27 08:30:22 2026 by rpki-client