This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/3i7eecIYXJFMtWbTomoMld1jbsU.roa File: 3i7eecIYXJFMtWbTomoMld1jbsU.roa (raw, json) Hash identifier: IKHXGLydTQAG9uvsO3wqN1AT0T0tKUnVEdCSkS/dVQk= Subject key identifier: DE:2E:DE:79:C2:18:5C:91:4C:B5:66:D3:A2:6A:0C:95:DD:63:6E:C5 Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d Certificate serial: 019B7AC826AF523312960B8962C3FAE5CFC5 Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/3i7eecIYXJFMtWbTomoMld1jbsU.roa Signing time: Thu 01 Jan 2026 18:18:15 +0000 ROA not before: Thu 01 Jan 2026 18:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5511 IP address blocks: 82.140.128.0/24 maxlen: 24 82.140.129.0/24 maxlen: 24 82.140.130.0/24 maxlen: 24 82.140.159.0/24 maxlen: 24 82.140.177.0/24 maxlen: 24 82.140.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:26:af:52:33:12:96:0b:89:62:c3:fa:e5:cf:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d Validity Not Before: Jan 1 18:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de2ede79c2185c914cb566d3a26a0c95dd636ec5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:dd:19:a5:fc:d4:17:3d:2d:e6:cb:b7:05:9e: bf:85:d0:16:26:28:c9:8f:8c:25:20:fc:f1:c5:6e: 4f:af:bf:a1:8f:53:67:46:13:b9:15:13:67:ab:9a: 8f:19:b4:d2:83:c2:e0:18:41:7f:97:af:7f:0a:4e: c5:ef:fd:5e:ec:84:72:4e:42:30:34:18:bc:3f:45: 1d:65:6d:fb:20:e4:d7:fc:9b:5d:5a:5c:93:92:8b: fb:43:ea:23:0d:10:bc:ab:6a:a9:c2:94:2e:58:f1: 7e:1a:99:c7:8f:79:25:a6:d3:e8:e0:cb:d5:2f:73: 50:d3:11:29:b0:93:60:d4:c5:cd:2c:bb:a1:ca:6a: 44:ee:fc:7e:6e:5f:55:ad:d6:76:72:23:7b:9f:82: ed:4b:9e:1c:d0:c0:5e:d0:f5:d8:ba:43:09:e6:33: f7:a3:15:00:a3:df:0f:8b:d6:e5:a7:dc:82:98:29: 6a:92:39:5d:23:d2:11:27:91:ea:18:e4:35:0b:24: 07:65:41:50:16:80:2b:b5:72:bf:3f:1c:83:ee:50: b0:87:7b:60:bc:5b:a8:fc:e7:58:f3:51:75:8e:95: bc:07:e3:84:26:a7:ad:97:da:a9:ef:87:cb:ed:88: cf:80:83:73:5f:36:9e:35:65:b4:3e:d6:25:89:5a: e6:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:2E:DE:79:C2:18:5C:91:4C:B5:66:D3:A2:6A:0C:95:DD:63:6E:C5 X509v3 Authority Key Identifier: keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/3i7eecIYXJFMtWbTomoMld1jbsU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.140.128.0-82.140.130.255 82.140.159.0/24 82.140.177.0/24 82.140.180.0/24 Signature Algorithm: sha256WithRSAEncryption 15:9e:52:62:8b:5e:73:e4:f9:c1:32:2b:72:de:45:b3:88:02: 18:aa:e3:5f:a6:d5:7c:5c:da:3e:3a:08:3c:72:c0:6a:0e:18: c3:55:c8:2b:0f:6b:8b:cc:62:63:71:69:70:1b:6f:96:86:ac: 3a:42:3e:d5:66:c6:1a:95:7d:d0:e3:e2:b3:6d:9f:ed:28:18: 00:15:ba:28:a0:68:98:dc:77:fa:d6:8b:99:fb:52:f7:92:26: 50:06:08:a7:bd:71:d8:7f:f9:c3:75:01:79:89:c7:aa:d2:ca: 24:06:64:d1:46:a1:e6:ab:22:ba:d7:70:dc:c1:ab:6b:70:5b: 9e:b8:c1:7b:93:b6:33:b3:cf:3d:f6:b9:32:e9:a2:4d:e4:1d: 04:c9:e1:26:5f:8b:e3:b6:b2:25:14:80:82:15:83:dd:45:4b: 5d:1b:ae:f3:cf:57:e5:13:8e:8f:c4:0c:77:89:15:c7:69:c2: 45:b5:f1:e0:25:ac:bb:cb:20:48:02:5e:3f:15:ae:d5:5e:e1: a8:0e:f6:6b:0c:88:d5:3f:8a:0d:ff:cd:ce:0d:7f:6b:d7:32: be:2d:34:b5:5f:20:8e:77:8c:6e:f0:df:07:c9:bb:ae:9e:f4: ac:3b:b5:77:3f:58:85:ae:73:0d:71:0d:5f:b4:75:b5:f1:8e: d9:a8:7a:6c -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt6yCavUjMSlguJYsP65c/FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZGQ4MWE4MzNkOWIwNDNjN2ZmZDYzNWE1OTg3ZjUzNjk3 MTE4MGQwHhcNMjYwMTAxMTgxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTJlZGU3OWMyMTg1YzkxNGNiNTY2ZDNhMjZhMGM5NWRkNjM2ZWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA190ZpfzUFz0t5su3BZ6/hdAWJijJ j4wlIPzxxW5Pr7+hj1NnRhO5FRNnq5qPGbTSg8LgGEF/l69/Ck7F7/1e7IRyTkIw NBi8P0UdZW37IOTX/JtdWlyTkov7Q+ojDRC8q2qpwpQuWPF+GpnHj3klptPo4MvV L3NQ0xEpsJNg1MXNLLuhympE7vx+bl9VrdZ2ciN7n4LtS54c0MBe0PXYukMJ5jP3 oxUAo98Pi9blp9yCmClqkjldI9IRJ5HqGOQ1CyQHZUFQFoArtXK/PxyD7lCwh3tg vFuo/OdY81F1jpW8B+OEJqetl9qp74fL7YjPgINzXzaeNWW0PtYliVrmYQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFN4u3nnCGFyRTLVm06JqDJXdY27FMB8GA1UdIwQY MBaAFPDdgagz2bBDx//WNaWYf1NpcRgNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9hOGViZTQtZDBiMy00ZTdkLWFmMjUt MDQ2ODA0MjQ4NmRjLzEvM2k3ZWVjSVlYSkZNdFdiVG9tb01sZDFqYnNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9hOGViZTQtZDBiMy00ZTdkLWFmMjUtMDQ2ODA0MjQ4NmRj LzEvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBAdSjIAD BABSjIIDBABSjJ8DBABSjLEDBABSjLQwDQYJKoZIhvcNAQELBQADggEBABWeUmKL XnPk+cEyK3LeRbOIAhiq41+m1Xxc2j46CDxywGoOGMNVyCsPa4vMYmNxaXAbb5aG rDpCPtVmxhqVfdDj4rNtn+0oGAAVuiigaJjcd/rWi5n7UveSJlAGCKe9cdh/+cN1 AXmJx6rSyiQGZNFGoearIrrXcNzBq2twW564wXuTtjOzzz32uTLpok3kHQTJ4SZf i+O2siUUgIIVg91FS10brvPPV+UTjo/EDHeJFcdpwkW18eAlrLvLIEgCXj8VrtVe 4agO9msMiNU/ig3/zc4Nf2vXMr4tNLVfII53jG7w3wfJu66e9Kw7tXc/WIWucw1x DV+0dbXxjtmoemw= -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:14 2026 by rpki-client