This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/03K7pBYzINIWU8gGUI3oclm4KAQ.roa File: 03K7pBYzINIWU8gGUI3oclm4KAQ.roa (raw, json) Hash identifier: lSynl87vFJD2/H8fpXTBuSoY50JxtkRNpYRy7jJ1L/4= Subject key identifier: D3:72:BB:A4:16:33:20:D2:16:53:C8:06:50:8D:E8:72:59:B8:28:04 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5AABE2045EE10DED4E99844D0A0FCF Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/03K7pBYzINIWU8gGUI3oclm4KAQ.roa Signing time: Thu 01 Jan 2026 16:18:41 +0000 ROA not before: Thu 01 Jan 2026 16:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61317 IP address blocks: 82.153.34.0/24 maxlen: 24 82.153.37.0/24 maxlen: 24 82.153.132.0/24 maxlen: 24 109.176.247.0/24 maxlen: 24 109.176.251.0/24 maxlen: 24 213.210.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:ab:e2:04:5e:e1:0d:ed:4e:99:84:4d:0a:0f:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d372bba4163320d21653c806508de87259b82804 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c0:b6:81:41:31:7f:22:a7:89:10:98:92:c5: ca:5f:e2:53:85:aa:dd:d1:85:6e:53:52:23:e8:07: ef:86:e5:01:2a:50:d2:3c:b7:e8:5d:f6:5c:cf:db: 1f:e8:fa:3b:9f:94:80:88:27:68:69:ef:a4:28:53: 48:c7:26:76:1d:40:cd:7e:3c:cc:4e:aa:c1:69:6a: 42:6d:46:0b:75:ce:f0:ad:07:6c:3c:1b:b5:71:b2: d4:0d:f1:17:ff:f9:75:3a:92:87:b5:95:8b:f4:de: 2c:7c:24:14:76:cb:ff:0e:51:49:c2:cb:7f:bd:16: 5e:8d:7c:84:8e:3e:97:91:4b:bf:c9:e6:4f:3b:2d: b7:7d:7c:ad:9c:85:21:5c:95:bf:36:b7:f0:f9:b5: 44:b9:fd:6f:51:09:c8:76:4f:98:a8:fd:2a:9f:2e: 3f:9f:52:c2:b8:e8:c8:a3:bc:70:10:a8:78:90:c7: 1b:d2:81:3f:6d:ee:5f:f3:a1:c9:53:a6:2e:c4:e1: b9:ff:e4:da:2e:0c:6a:ec:bb:f8:95:3a:0a:e3:c7: 6d:a3:c5:fb:2d:8d:16:0e:c4:01:57:ef:7f:4e:42: 74:a9:c8:00:5b:73:73:5e:69:1e:a6:56:f4:20:8c: 0f:d5:13:6d:63:37:48:8a:b7:e6:21:cc:56:b2:82: 7e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:72:BB:A4:16:33:20:D2:16:53:C8:06:50:8D:E8:72:59:B8:28:04 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/03K7pBYzINIWU8gGUI3oclm4KAQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.153.34.0/24 82.153.37.0/24 82.153.132.0/24 109.176.247.0/24 109.176.251.0/24 213.210.62.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:f7:60:d0:34:08:02:b0:0f:c5:60:f0:c3:8b:ba:6d:ad:17: a3:6f:77:e4:88:dc:ba:fb:f3:60:06:80:7e:3b:e0:d2:bd:0d: 69:9f:c2:e8:c0:52:0f:ab:93:bb:45:e7:dd:b3:81:27:f7:5e: 2a:84:87:b4:ab:43:e0:b5:31:cb:40:e2:0a:93:7a:52:df:b6: 95:34:0a:69:b3:d5:36:1a:15:04:ee:a9:98:34:ee:e6:50:bd: 65:f0:a4:85:d5:f8:b9:04:52:3e:7d:1f:28:84:8a:92:33:75: b0:31:cb:d8:1a:63:72:5e:a2:14:15:33:12:05:5d:16:80:90: 17:2b:3f:51:c7:a2:8c:a6:d0:67:93:62:73:64:39:82:61:c0: 7f:a9:57:08:10:2a:56:6f:29:66:51:5d:5d:50:9c:e3:32:25: bd:06:83:d3:52:db:c0:11:80:0d:1d:be:58:2f:7d:92:cc:4b: 6d:b9:00:c2:e5:ac:d9:32:c4:a3:04:f2:de:2b:e8:ca:59:00: cd:d4:6c:70:7c:1c:60:98:ac:74:46:ab:3c:cf:3b:19:be:c5: 88:93:04:58:14:9b:c5:15:7f:0d:ef:02:e1:69:3a:80:91:28: 67:db:54:00:22:1d:7c:04:00:7b:ba:fd:88:52:7c:ee:19:96: 66:77:8b:f2 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt6WqviBF7hDe1OmYRNCg/PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzcyYmJhNDE2MzMyMGQyMTY1M2M4MDY1MDhkZTg3MjU5YjgyODA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocC2gUExfyKniRCYksXKX+JThard 0YVuU1Ij6AfvhuUBKlDSPLfoXfZcz9sf6Po7n5SAiCdoae+kKFNIxyZ2HUDNfjzM TqrBaWpCbUYLdc7wrQdsPBu1cbLUDfEX//l1OpKHtZWL9N4sfCQUdsv/DlFJwst/ vRZejXyEjj6XkUu/yeZPOy23fXytnIUhXJW/Nrfw+bVEuf1vUQnIdk+YqP0qny4/ n1LCuOjIo7xwEKh4kMcb0oE/be5f86HJU6YuxOG5/+TaLgxq7Lv4lToK48dto8X7 LY0WDsQBV+9/TkJ0qcgAW3NzXmkeplb0IIwP1RNtYzdIirfmIcxWsoJ+sQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFNNyu6QWMyDSFlPIBlCN6HJZuCgEMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvMDNLN3BCWXpJTklXVThnR1VJM29jbG00S0FRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAUpkiAwQA UpklAwQAUpmEAwQAbbD3AwQAbbD7AwQA1dI+MA0GCSqGSIb3DQEBCwUAA4IBAQB8 92DQNAgCsA/FYPDDi7ptrRejb3fkiNy6+/NgBoB+O+DSvQ1pn8LowFIPq5O7Refd s4En914qhIe0q0PgtTHLQOIKk3pS37aVNApps9U2GhUE7qmYNO7mUL1l8KSF1fi5 BFI+fR8ohIqSM3WwMcvYGmNyXqIUFTMSBV0WgJAXKz9Rx6KMptBnk2JzZDmCYcB/ qVcIECpWbylmUV1dUJzjMiW9BoPTUtvAEYANHb5YL32SzEttuQDC5azZMsSjBPLe K+jKWQDN1GxwfBxgmKx0Rqs8zzsZvsWIkwRYFJvFFX8N7wLhaTqAkShn21QAIh18 BAB7uv2IUnzuGZZmd4vy -----END CERTIFICATE-----Generated at Thu Jan 8 12:59:39 2026 by rpki-client