This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/41UDb8PFLYomt2031aTgiY3AQ40.roa File: 41UDb8PFLYomt2031aTgiY3AQ40.roa (raw, json) Hash identifier: bmp07VNfPBzFitEFlf/fmkB49dR4XxuwZAwtFoPyweY= Subject key identifier: E3:55:03:6F:C3:C5:2D:8A:26:B7:6D:37:D5:A4:E0:89:8D:C0:43:8D Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5 Certificate serial: 019B7FF1E0F00D5CA2E879828B01383E9005 Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/41UDb8PFLYomt2031aTgiY3AQ40.roa Signing time: Fri 02 Jan 2026 18:21:56 +0000 ROA not before: Fri 02 Jan 2026 18:21:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212477 IP address blocks: 82.206.12.0/23 maxlen: 23 82.206.14.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 07:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:e0:f0:0d:5c:a2:e8:79:82:8b:01:38:3e:90:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5 Validity Not Before: Jan 2 18:21:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e355036fc3c52d8a26b76d37d5a4e0898dc0438d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:9a:a4:52:fc:03:86:29:b5:28:ee:3a:2b:b6: b3:3d:6e:69:fd:8a:74:f7:97:10:c1:95:96:e3:25: 86:58:34:c8:7e:69:49:91:85:5b:44:43:84:d5:61: a8:c5:0a:35:fc:c9:d2:26:90:ae:bb:d6:76:88:8d: a5:59:6c:d9:7b:79:bd:b5:16:f7:8e:25:ec:13:94: 9d:be:f6:3b:ba:b6:7c:50:ca:15:6f:7f:17:25:d2: 96:2e:b8:fd:b4:79:43:fa:2a:fd:ef:75:ab:05:b6: 26:60:1d:11:d9:6c:d7:79:50:b6:cf:76:7d:4a:d9: 28:14:3c:1d:09:3b:ae:0d:79:61:f1:4c:0e:bc:45: c7:86:f2:6a:d2:d8:05:93:50:d8:ef:d2:64:89:76: 86:2e:2e:7f:8b:87:ea:43:69:9a:d8:ea:e1:62:21: 3b:f8:c6:63:9d:5d:4a:90:f9:4d:0f:1f:a4:30:3b: 62:4f:b6:12:49:dd:b4:23:9e:89:70:c8:4f:f3:1a: 16:f4:1e:61:a2:1c:4b:f6:10:85:af:66:4a:2b:08: a6:f6:bc:d4:5d:12:47:d4:e2:b6:57:1f:10:67:32: 64:d4:0c:21:fa:61:f3:31:fc:d4:70:f5:92:00:27: 63:bf:05:a8:31:2f:bf:98:50:b6:ea:a6:59:5a:ea: 15:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:55:03:6F:C3:C5:2D:8A:26:B7:6D:37:D5:A4:E0:89:8D:C0:43:8D X509v3 Authority Key Identifier: keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/41UDb8PFLYomt2031aTgiY3AQ40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.206.12.0/22 Signature Algorithm: sha256WithRSAEncryption 49:42:57:5b:eb:28:96:da:10:ed:74:65:aa:c9:03:18:f5:17: 5c:ce:d5:45:29:56:00:95:dc:c4:dd:46:15:33:b1:7c:8b:18: 09:98:0c:6e:89:9b:0a:b1:bf:10:97:71:45:80:ed:e9:24:b0: 90:15:a1:c8:a9:27:0a:8a:e0:7c:8d:a1:07:f5:23:ef:07:33: 64:0a:42:3c:13:1b:5b:7d:50:5c:e6:43:01:ac:f9:4f:71:36: a0:1f:28:67:00:23:3a:0f:99:54:e7:0f:f1:87:88:7d:55:5e: e9:34:a5:2c:ac:46:a6:b9:ca:b5:a0:b5:a2:72:4a:9b:a3:51: 98:19:ba:bd:6d:fc:cf:45:22:c4:a1:1d:d1:84:e4:9e:42:5b: 66:6f:a3:42:22:35:a0:e3:99:c3:3e:73:e7:2c:62:87:f3:4f: c9:36:c8:f3:0f:b3:43:0a:46:29:56:b1:f2:03:a2:cb:e1:e0: f5:a1:e5:df:61:18:cc:d8:a2:e9:91:c6:db:59:19:b3:fd:79: ab:09:b5:97:07:5d:a6:0b:4f:96:1d:46:ff:df:4e:39:5f:6d: 78:36:f6:79:ce:28:c1:52:94:93:35:c5:47:be:83:fb:1e:93: 55:84:09:03:31:ee:d6:cb:98:50:b8:31:1b:c8:c3:f1:7a:5c: 72:09:50:1c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8eDwDVyi6HmCiwE4PpAFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3OTkxNDBiNDJkYjZjYjZiZjhjNmRkNDEzNzQ3ZmNmNGE2 ZmQ5YjUwHhcNMjYwMTAyMTgyMTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzU1MDM2ZmMzYzUyZDhhMjZiNzZkMzdkNWE0ZTA4OThkYzA0MzhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4pqkUvwDhim1KO46K7azPW5p/Yp0 95cQwZWW4yWGWDTIfmlJkYVbREOE1WGoxQo1/MnSJpCuu9Z2iI2lWWzZe3m9tRb3 jiXsE5SdvvY7urZ8UMoVb38XJdKWLrj9tHlD+ir973WrBbYmYB0R2WzXeVC2z3Z9 StkoFDwdCTuuDXlh8UwOvEXHhvJq0tgFk1DY79JkiXaGLi5/i4fqQ2ma2OrhYiE7 +MZjnV1KkPlNDx+kMDtiT7YSSd20I56JcMhP8xoW9B5hohxL9hCFr2ZKKwim9rzU XRJH1OK2Vx8QZzJk1Awh+mHzMfzUcPWSACdjvwWoMS+/mFC26qZZWuoVGwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFONVA2/DxS2KJrdtN9Wk4ImNwEONMB8GA1UdIwQY MBaAFJeZFAtC22y2v4xt1BN0f89Kb9m1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2Qt NTk1OTE5YmUwZjUyLzEvNDFVRGI4UEZMWW9tdDIwMzFhVGdpWTNBUTQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2QtNTk1OTE5YmUwZjUy LzEvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCUs4MMA0G CSqGSIb3DQEBCwUAA4IBAQBJQldb6yiW2hDtdGWqyQMY9RdcztVFKVYAldzE3UYV M7F8ixgJmAxuiZsKsb8Ql3FFgO3pJLCQFaHIqScKiuB8jaEH9SPvBzNkCkI8Extb fVBc5kMBrPlPcTagHyhnACM6D5lU5w/xh4h9VV7pNKUsrEamucq1oLWickqbo1GY Gbq9bfzPRSLEoR3RhOSeQltmb6NCIjWg45nDPnPnLGKH80/JNsjzD7NDCkYpVrHy A6LL4eD1oeXfYRjM2KLpkcbbWRmz/XmrCbWXB12mC0+WHUb/3045X214NvZ5zijB UpSTNcVHvoP7HpNVhAkDMe7Wy5hQuDEbyMPxelxyCVAc -----END CERTIFICATE-----Generated at Sun Jan 11 15:07:47 2026 by rpki-client