This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/8vS9V-5Cb-OR_TZq-nKtF-e5fYE.roa File: 8vS9V-5Cb-OR_TZq-nKtF-e5fYE.roa (raw, json) Hash identifier: nyBtCevOfNZcmOjQIUJObiyX8ZhOqGQ1r6mZY3TBuuk= Subject key identifier: F2:F4:BD:57:EE:42:6F:E3:91:FD:36:6A:FA:72:AD:17:E7:B9:7D:81 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5A9254B44B827541EB3FAA1B7CB01D Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/8vS9V-5Cb-OR_TZq-nKtF-e5fYE.roa Signing time: Thu 01 Jan 2026 16:18:34 +0000 ROA not before: Thu 01 Jan 2026 16:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5065 IP address blocks: 82.152.52.0/23 maxlen: 24 82.153.44.0/24 maxlen: 24 82.153.46.0/24 maxlen: 24 109.176.75.0/24 maxlen: 24 213.130.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:01:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:92:54:b4:4b:82:75:41:eb:3f:aa:1b:7c:b0:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f2f4bd57ee426fe391fd366afa72ad17e7b97d81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ac:63:3d:3d:b4:18:5d:d3:d4:67:19:6f:b2: d4:90:20:57:de:b1:c3:27:5a:30:d2:76:40:b1:d2: 03:e7:ce:f0:24:ef:09:b8:35:6a:c3:0c:47:fe:ce: cb:e8:ac:98:24:04:e5:71:80:7e:c9:99:ac:08:4e: 27:48:34:e4:33:27:cb:d6:d4:df:9a:3f:83:78:50: 50:33:77:3b:b9:19:4b:e5:50:f3:be:4a:61:42:57: 10:1b:94:c6:9d:00:5d:27:61:f0:6d:91:12:5d:b7: f2:c5:56:10:ed:dc:5d:2a:04:ed:cc:c1:2f:e8:f8: 51:53:c8:83:b6:52:8f:fa:dc:c8:57:9b:0f:62:a8: c2:84:4a:c3:c0:a4:74:56:c7:c5:1f:52:96:16:bc: ee:53:5f:cc:36:96:62:e3:99:87:fd:b3:b6:c5:f2: 47:68:9a:ad:1c:16:60:38:9f:6f:a1:51:aa:8c:6f: 5a:b5:50:27:1c:0e:a9:e0:44:4f:ae:97:77:60:fb: b7:53:7a:76:a9:94:a3:60:93:c1:95:45:93:53:e4: 90:d6:a7:17:f6:6f:66:49:d5:b8:ba:f9:87:09:62: ac:d3:b8:c9:60:07:c3:1c:41:7a:0b:53:60:8a:28: e9:26:e5:53:73:7b:71:95:81:dc:47:36:94:4c:52: d9:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:F4:BD:57:EE:42:6F:E3:91:FD:36:6A:FA:72:AD:17:E7:B9:7D:81 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/8vS9V-5Cb-OR_TZq-nKtF-e5fYE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.152.52.0/23 82.153.44.0/24 82.153.46.0/24 109.176.75.0/24 213.130.150.0/24 Signature Algorithm: sha256WithRSAEncryption a9:7c:e9:85:09:1c:df:be:5c:f7:26:44:34:d9:6c:dd:2e:eb: 34:16:bf:a8:2c:74:95:27:3c:37:b2:d1:4b:22:83:a9:61:1f: 0c:0a:af:66:e8:a9:a0:be:f5:1d:d3:78:37:7b:ba:07:04:b4: 9e:a9:24:ec:91:2b:84:2b:b6:56:ca:6b:65:75:79:ff:d8:72: f4:2a:46:54:3d:44:09:81:eb:a4:6b:a5:3b:c6:ed:7c:e0:99: fc:e9:d1:84:06:b8:5d:78:f0:51:e6:a6:87:09:44:55:d0:be: 64:db:c8:77:ca:f8:eb:c0:73:80:80:26:17:1d:50:53:ab:2d: 09:79:ef:0d:19:b5:da:1b:05:b6:3a:c3:0e:c7:91:f1:5f:47: 49:06:e7:b5:f1:1b:13:d3:3c:21:1e:a2:09:7a:cd:8f:a7:2b: ce:ad:ef:9c:a0:15:e4:37:71:b7:ae:33:a8:36:d1:14:24:71: 62:11:44:a0:f4:3c:0c:d6:ef:02:f5:39:32:5f:10:41:77:01: 1b:b7:03:6a:61:25:d6:0a:52:fa:91:af:ef:b4:3e:31:77:9b: 58:7a:69:f7:97:37:96:e7:2e:e4:73:86:03:80:61:6d:4d:04: 0a:4a:74:fb:c0:3a:76:44:4d:1d:11:49:68:40:41:5c:cf:ff: 79:da:02:96 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt6WpJUtEuCdUHrP6obfLAdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMmY0YmQ1N2VlNDI2ZmUzOTFmZDM2NmFmYTcyYWQxN2U3Yjk3ZDgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqxjPT20GF3T1GcZb7LUkCBX3rHD J1ow0nZAsdID587wJO8JuDVqwwxH/s7L6KyYJATlcYB+yZmsCE4nSDTkMyfL1tTf mj+DeFBQM3c7uRlL5VDzvkphQlcQG5TGnQBdJ2HwbZESXbfyxVYQ7dxdKgTtzMEv 6PhRU8iDtlKP+tzIV5sPYqjChErDwKR0VsfFH1KWFrzuU1/MNpZi45mH/bO2xfJH aJqtHBZgOJ9voVGqjG9atVAnHA6p4ERPrpd3YPu3U3p2qZSjYJPBlUWTU+SQ1qcX 9m9mSdW4uvmHCWKs07jJYAfDHEF6C1NgiijpJuVTc3txlYHcRzaUTFLZfQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFPL0vVfuQm/jkf02avpyrRfnuX2BMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvOHZTOVYtNUNiLU9SX1RacS1uS3RGLWU1ZllFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQBUpg0AwQA UpksAwQAUpkuAwQAbbBLAwQA1YKWMA0GCSqGSIb3DQEBCwUAA4IBAQCpfOmFCRzf vlz3JkQ02WzdLus0Fr+oLHSVJzw3stFLIoOpYR8MCq9m6KmgvvUd03g3e7oHBLSe qSTskSuEK7ZWymtldXn/2HL0KkZUPUQJgeuka6U7xu184Jn86dGEBrhdePBR5qaH CURV0L5k28h3yvjrwHOAgCYXHVBTqy0Jee8NGbXaGwW2OsMOx5HxX0dJBue18RsT 0zwhHqIJes2PpyvOre+coBXkN3G3rjOoNtEUJHFiEUSg9DwM1u8C9TkyXxBBdwEb twNqYSXWClL6ka/vtD4xd5tYemn3lzeW5y7kc4YDgGFtTQQKSnT7wDp2RE0dEUlo QEFcz/952gKW -----END CERTIFICATE-----Generated at Mon Jan 19 11:22:33 2026 by rpki-client