This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1-REOUg9CKAxHg48ENUXs9SIAZRo.roa File: 1-REOUg9CKAxHg48ENUXs9SIAZRo.roa (raw, json) Hash identifier: fLXcX8O5jltP6bo/qHmWqGa3zOBw13YugQEwMcd5KCg= Subject key identifier: F9:11:0E:52:0F:42:28:0C:47:83:8F:04:35:45:EC:F5:22:00:65:1A Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5AAD366938C2EE1EBC49EF6307FDE3 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1-REOUg9CKAxHg48ENUXs9SIAZRo.roa Signing time: Thu 01 Jan 2026 16:18:41 +0000 ROA not before: Thu 01 Jan 2026 16:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 63023 IP address blocks: 82.153.216.0/24 maxlen: 24 89.213.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:ad:36:69:38:c2:ee:1e:bc:49:ef:63:07:fd:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f9110e520f42280c47838f043545ecf52200651a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:39:e8:4d:66:e9:4a:22:2c:72:6f:08:18:71: 3b:d4:86:74:c9:f8:8c:15:17:a9:a0:d9:9a:01:e8: 5f:80:d2:4d:68:77:ce:a3:05:2a:02:ce:d9:fc:fb: 0f:48:24:e5:65:d7:e3:4a:28:41:fd:1a:cf:b9:94: af:18:b7:5b:4f:e1:34:b4:63:af:5d:21:c5:ef:78: c2:d3:57:3d:7d:37:1e:52:bd:3e:9e:c3:e7:03:a6: 60:ed:8a:37:6b:5b:61:cf:5c:5d:a5:25:59:cf:85: 45:be:04:67:14:45:ed:71:73:20:4d:be:8f:33:2e: 16:2b:18:74:18:88:0b:fb:31:58:d3:b4:2c:ac:bf: 8c:be:92:df:c2:72:e9:e9:ec:af:9f:49:5e:09:94: 44:fe:36:1b:eb:f4:80:e2:c6:5d:fb:26:a8:e9:71: 4a:90:2b:52:bd:b0:91:21:b1:22:d5:53:f6:3b:39: 32:a2:d9:a7:24:f9:95:60:57:7e:02:03:c8:8b:ef: b6:cd:d3:03:15:cb:8d:c4:c0:e4:56:e4:52:4e:f4: d2:5a:f9:3a:c3:8d:a6:b8:30:d0:dd:28:ad:17:1f: 5b:1f:d4:2a:16:9b:36:d4:2b:18:51:c1:c1:68:5a: 79:bf:41:2a:8d:dd:72:80:61:c3:83:e3:25:c1:48: 8e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:11:0E:52:0F:42:28:0C:47:83:8F:04:35:45:EC:F5:22:00:65:1A X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1-REOUg9CKAxHg48ENUXs9SIAZRo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.153.216.0/24 89.213.213.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:ad:e6:50:da:e5:63:73:12:68:ef:55:a1:02:a5:a4:5a:0b: b6:57:44:aa:3f:82:c7:1a:63:c4:16:e2:f0:7d:5e:66:82:69: 3d:f3:dc:0e:78:1e:28:9a:33:22:56:a0:ea:de:7d:38:87:28: b4:4d:c7:f6:c8:81:6a:22:ca:e7:20:c1:2b:9c:eb:b7:f1:14: ca:cb:98:32:dc:99:3f:df:be:89:48:3f:68:30:14:52:43:9c: 60:1b:c4:2c:19:5f:e4:7a:ff:94:3a:ef:4c:aa:c2:57:67:19: c1:8f:29:92:8b:89:36:e2:14:c2:f1:b1:55:68:26:0d:a8:0a: 88:56:73:a2:6a:f7:5c:f3:7b:03:4c:4a:7b:3f:3a:05:58:2e: 08:58:70:a9:4c:d4:6b:b7:e0:c4:59:da:62:27:0f:7f:95:df: ac:66:18:6f:c6:e1:1a:1d:a2:5e:13:a2:22:8b:50:b8:2a:34: dd:7c:2f:da:ba:0a:87:0d:d9:31:e7:0c:03:82:36:d3:76:38: 51:46:3b:9d:fc:f1:56:c6:1e:11:10:b2:7b:95:35:a9:47:1e: 0d:ce:df:b1:01:52:5f:89:8c:80:3f:5b:fe:35:13:f8:5a:0e: e4:fb:e1:9f:44:86:af:de:e0:b7:9f:14:87:e5:63:43:5c:9e: af:d8:15:de -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgISAZt6Wq02aTjC7h68Se9jB/3jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTExMGU1MjBmNDIyODBjNDc4MzhmMDQzNTQ1ZWNmNTIyMDA2NTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1znoTWbpSiIscm8IGHE71IZ0yfiM FRepoNmaAehfgNJNaHfOowUqAs7Z/PsPSCTlZdfjSihB/RrPuZSvGLdbT+E0tGOv XSHF73jC01c9fTceUr0+nsPnA6Zg7Yo3a1thz1xdpSVZz4VFvgRnFEXtcXMgTb6P My4WKxh0GIgL+zFY07QsrL+MvpLfwnLp6eyvn0leCZRE/jYb6/SA4sZd+yao6XFK kCtSvbCRIbEi1VP2OzkyotmnJPmVYFd+AgPIi++2zdMDFcuNxMDkVuRSTvTSWvk6 w42muDDQ3SitFx9bH9QqFps21CsYUcHBaFp5v0Eqjd1ygGHDg+MlwUiOOwIDAQAB o4ICEDCCAgwwHQYDVR0OBBYEFPkRDlIPQigMR4OPBDVF7PUiAGUaMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvMS1SRU9VZzlDS0F4SGc0OEVOVVhzOVNJQVpSby5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOGEvNDlkYzAwLTk3ZTItNDYyOC1hZTM5LTQxMjI4ZTM5ZmY3 Yy8xL1A5TU5pbjRTX0h2Mkxnd1NIbnpDSnQ2bE81cy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAFKZ2AME AFnV1TANBgkqhkiG9w0BAQsFAAOCAQEAnK3mUNrlY3MSaO9VoQKlpFoLtldEqj+C xxpjxBbi8H1eZoJpPfPcDngeKJozIlag6t59OIcotE3H9siBaiLK5yDBK5zrt/EU ysuYMtyZP9++iUg/aDAUUkOcYBvELBlf5Hr/lDrvTKrCV2cZwY8pkouJNuIUwvGx VWgmDagKiFZzomr3XPN7A0xKez86BVguCFhwqUzUa7fgxFnaYicPf5XfrGYYb8bh Gh2iXhOiIotQuCo03Xwv2roKhw3ZMecMA4I203Y4UUY7nfzxVsYeERCye5U1qUce Dc7fsQFSX4mMgD9b/jUT+FoO5Pvhn0SGr97gt58Uh+VjQ1yer9gV3g== -----END CERTIFICATE-----Generated at Mon Jan 19 18:01:33 2026 by rpki-client