This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/82RdLIr9CZuGHYbttdDK-gKo-fY.roa File: 82RdLIr9CZuGHYbttdDK-gKo-fY.roa (raw, json) Hash identifier: E2pIOP0/2BIqXfciC4v6i2AUjWNBTzZoEz3K87+tj9A= Subject key identifier: F3:64:5D:2C:8A:FD:09:9B:86:1D:86:ED:B5:D0:CA:FA:02:A8:F9:F6 Certificate issuer: /CN=7f7734dfea120657412ea867ddbc7b84d132bf78 Certificate serial: 019B7DCAA6C5CCE722AA718619402CC13D69 Authority key identifier: 7F:77:34:DF:EA:12:06:57:41:2E:A8:67:DD:BC:7B:84:D1:32:BF:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f3c03-oSBldBLqhn3bx7hNEyv3g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/82RdLIr9CZuGHYbttdDK-gKo-fY.roa Signing time: Fri 02 Jan 2026 08:19:51 +0000 ROA not before: Fri 02 Jan 2026 08:19:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 212.23.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/f3c03-oSBldBLqhn3bx7hNEyv3g.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/f3c03-oSBldBLqhn3bx7hNEyv3g.mft rsync://rpki.ripe.net/repository/DEFAULT/f3c03-oSBldBLqhn3bx7hNEyv3g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:a6:c5:cc:e7:22:aa:71:86:19:40:2c:c1:3d:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f7734dfea120657412ea867ddbc7b84d132bf78 Validity Not Before: Jan 2 08:19:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f3645d2c8afd099b861d86edb5d0cafa02a8f9f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6e:c8:58:e1:01:7e:fd:fd:f8:81:ab:f3:65: 82:ee:57:9a:8f:e2:9f:87:5a:5e:11:5c:f8:70:30: 3f:15:af:0d:73:cc:25:cf:56:4d:d2:81:47:09:a1: 1c:ad:f7:71:77:5c:a1:3d:4b:f0:94:46:25:53:2b: 4f:e7:4b:3a:5e:70:dd:53:90:e3:50:be:62:72:e6: d0:6c:a2:21:ff:5e:81:89:a9:da:ec:98:9c:17:a9: 25:48:58:0e:36:ab:da:2f:17:f2:9e:5d:b6:7c:52: 4d:87:fc:3f:a7:31:14:87:ff:89:b7:91:8b:03:ee: 3f:2b:8f:da:78:78:f0:61:58:3a:8e:27:51:fd:59: bd:72:9c:32:d7:50:3d:7b:70:60:54:68:0e:4a:9a: df:6f:66:a9:e6:7f:dc:db:91:e4:cd:dc:ff:ad:a3: 2e:23:72:e7:cf:a2:cd:81:0b:28:ee:74:f1:13:23: 7e:5a:65:a0:75:f3:b6:cd:5e:a6:0a:df:fa:89:be: f0:f7:cb:7f:95:34:87:ec:eb:96:df:44:28:e8:b9: 48:1c:a1:7b:45:eb:50:84:72:7b:bd:65:93:09:77: 66:7e:f5:37:b8:e6:a3:0f:21:0c:13:38:28:26:d7: 72:ee:73:67:0e:c2:66:4f:54:ba:16:70:9c:49:f5: 1e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:64:5D:2C:8A:FD:09:9B:86:1D:86:ED:B5:D0:CA:FA:02:A8:F9:F6 X509v3 Authority Key Identifier: keyid:7F:77:34:DF:EA:12:06:57:41:2E:A8:67:DD:BC:7B:84:D1:32:BF:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3c03-oSBldBLqhn3bx7hNEyv3g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/82RdLIr9CZuGHYbttdDK-gKo-fY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/f3c03-oSBldBLqhn3bx7hNEyv3g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.23.208.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:f2:fa:f7:7f:8b:e0:56:90:ca:5e:62:e4:0d:6b:54:6b:60: 83:f4:df:62:30:50:88:14:c8:bf:17:4f:6d:97:85:ee:6a:b0: 7f:58:9b:c9:f7:b3:cb:af:f3:14:23:80:a3:70:cd:d6:5c:b5: fe:f8:c6:03:09:07:af:5a:52:36:a3:59:f6:5e:5e:ae:f1:de: 60:ed:45:0d:6b:df:4c:db:8c:78:63:b5:f1:c9:26:3d:89:97: 23:f4:77:82:ed:ee:29:0b:73:74:85:89:01:27:16:6b:90:70: 4d:a6:4a:0c:90:c6:da:55:a9:b6:b1:26:8e:cb:6c:38:77:ad: 75:a3:15:46:08:01:07:4b:d2:b0:27:a1:c4:8f:aa:73:5c:da: 92:c6:57:33:5d:c0:7b:b7:96:92:63:50:92:cc:60:41:8c:76: fc:da:93:9b:d6:d8:27:18:91:bd:75:0f:f1:08:d6:ae:ea:79: e7:81:e5:c5:50:7c:3c:91:b9:5d:4c:a2:ac:a0:19:54:bf:ce: 70:84:d4:a3:c9:a6:a6:63:b2:fc:85:87:56:39:1b:d3:e9:60: fe:73:3c:92:a4:69:63:65:c7:44:ef:ad:86:7a:6b:4f:47:f5: e5:f9:12:01:3d:dd:a7:3a:c1:97:53:65:09:e6:de:f1:cc:01: e7:44:09:81 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yqbFzOciqnGGGUAswT1pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmNzczNGRmZWExMjA2NTc0MTJlYTg2N2RkYmM3Yjg0ZDEz MmJmNzgwHhcNMjYwMTAyMDgxOTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzY0NWQyYzhhZmQwOTliODYxZDg2ZWRiNWQwY2FmYTAyYThmOWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuW7IWOEBfv39+IGr82WC7leaj+Kf h1peEVz4cDA/Fa8Nc8wlz1ZN0oFHCaEcrfdxd1yhPUvwlEYlUytP50s6XnDdU5Dj UL5icubQbKIh/16Biana7JicF6klSFgONqvaLxfynl22fFJNh/w/pzEUh/+Jt5GL A+4/K4/aeHjwYVg6jidR/Vm9cpwy11A9e3BgVGgOSprfb2ap5n/c25Hkzdz/raMu I3Lnz6LNgQso7nTxEyN+WmWgdfO2zV6mCt/6ib7w98t/lTSH7OuW30Qo6LlIHKF7 RetQhHJ7vWWTCXdmfvU3uOajDyEMEzgoJtdy7nNnDsJmT1S6FnCcSfUesQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPNkXSyK/Qmbhh2G7bXQyvoCqPn2MB8GA1UdIwQY MBaAFH93NN/qEgZXQS6oZ928e4TRMr94MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjNjMDMtb1NCbGRCTHFobjNieDdoTkV5djNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS82ODAzMjQtZWUxZi00MGYyLTg4ZGYt MTk2OTMxOTYyZDNjLzEvODJSZExJcjlDWnVHSFlidHRkREstZ0tvLWZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS82ODAzMjQtZWUxZi00MGYyLTg4ZGYtMTk2OTMxOTYyZDNj LzEvZjNjMDMtb1NCbGRCTHFobjNieDdoTkV5djNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1BfQMA0G CSqGSIb3DQEBCwUAA4IBAQCN8vr3f4vgVpDKXmLkDWtUa2CD9N9iMFCIFMi/F09t l4XuarB/WJvJ97PLr/MUI4CjcM3WXLX++MYDCQevWlI2o1n2Xl6u8d5g7UUNa99M 24x4Y7XxySY9iZcj9HeC7e4pC3N0hYkBJxZrkHBNpkoMkMbaVam2sSaOy2w4d611 oxVGCAEHS9KwJ6HEj6pzXNqSxlczXcB7t5aSY1CSzGBBjHb82pOb1tgnGJG9dQ/x CNau6nnngeXFUHw8kbldTKKsoBlUv85whNSjyaamY7L8hYdWORvT6WD+czySpGlj ZcdE762GemtPR/Xl+RIBPd2nOsGXU2UJ5t7xzAHnRAmB -----END CERTIFICATE-----Generated at Tue Feb 10 00:13:22 2026 by rpki-client