This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/RF4hbtE_Ku8xs3hjoAO48EkUPAE.roa File: RF4hbtE_Ku8xs3hjoAO48EkUPAE.roa (raw, json) Hash identifier: M8sqB3rRA/Xf50ipuQ4Clt2uS5mNCD5ezRR/YxqG/cU= Subject key identifier: 44:5E:21:6E:D1:3F:2A:EF:31:B3:78:63:A0:03:B8:F0:49:14:3C:01 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5AE4450D895461BE94D4856CD5D474 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/RF4hbtE_Ku8xs3hjoAO48EkUPAE.roa Signing time: Thu 01 Jan 2026 16:18:55 +0000 ROA not before: Thu 01 Jan 2026 16:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215727 IP address blocks: 82.153.148.0/24 maxlen: 24 89.213.63.0/24 maxlen: 24 89.213.157.0/24 maxlen: 24 89.213.227.0/24 maxlen: 24 109.176.242.0/24 maxlen: 24 213.130.137.0/24 maxlen: 24 213.130.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:e4:45:0d:89:54:61:be:94:d4:85:6c:d5:d4:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=445e216ed13f2aef31b37863a003b8f049143c01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ad:bf:e5:6c:4a:ac:a0:f3:a5:a1:e5:e4:e5: 5f:fd:e2:08:e8:df:86:a8:f1:64:b5:ab:ea:15:b9: eb:42:8e:98:c1:70:2f:cd:ac:20:9b:b3:67:91:ae: e9:3a:0a:a7:61:8f:1c:0d:2a:19:11:96:37:f6:45: 75:0f:79:20:37:bb:1f:6e:89:6d:cb:4e:e9:ad:88: 0d:5b:d7:bb:bd:2e:49:25:3e:42:73:22:22:57:a1: 37:0d:d5:2c:03:44:66:36:e2:2f:19:5b:d4:21:21: d3:58:39:fb:1c:76:20:fa:17:f9:f5:cf:53:f7:37: 6b:5a:24:26:c1:2c:b9:43:99:d5:4f:e3:1b:8e:d6: 1c:ba:43:40:dd:65:3f:d2:48:cd:5a:4c:c6:0a:12: fd:be:45:93:4d:43:4d:f5:3d:f8:96:68:cc:86:2e: 16:fe:b6:bd:b5:88:23:60:05:47:7a:47:e1:c7:b7: f5:53:a1:c4:d7:8b:d4:97:32:58:10:4c:1e:b5:e8: a9:9a:f7:60:31:6c:dd:ee:dc:a0:00:b3:d3:c2:50: 4c:f3:39:97:ed:b6:e8:1a:13:59:af:11:be:8d:8d: 09:25:37:3f:b8:08:d1:d2:d0:dc:9f:88:c9:2b:98: 59:c4:91:44:f0:39:09:6d:8d:a5:40:d7:bd:fc:75: 1a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:5E:21:6E:D1:3F:2A:EF:31:B3:78:63:A0:03:B8:F0:49:14:3C:01 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/RF4hbtE_Ku8xs3hjoAO48EkUPAE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.153.148.0/24 89.213.63.0/24 89.213.157.0/24 89.213.227.0/24 109.176.242.0/24 213.130.137.0/24 213.130.152.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:73:8d:00:2d:34:05:65:74:8b:d9:aa:ed:dc:24:5b:a9:32: 31:76:2a:38:34:70:47:1e:70:df:ef:93:69:b3:af:28:74:dc: dd:34:08:84:18:ff:fc:52:4d:a7:4f:32:8c:f0:34:65:ba:97: 4d:65:7f:0c:aa:ab:2f:67:e6:6f:75:67:ac:5d:75:2c:3f:ca: c2:61:43:22:41:4d:1a:f9:eb:85:5c:8b:8e:a8:cc:28:99:e0: 3b:c5:d2:30:ff:eb:28:e0:a4:f7:22:55:d3:83:e5:49:f1:ae: 80:fb:0f:6f:d7:02:5d:fb:a0:3e:87:24:10:b8:4a:8e:7f:07: fb:cb:c7:25:4f:08:f6:52:0e:85:a0:66:5a:1d:e3:92:2a:64: 12:24:51:00:38:9f:fa:5a:36:01:6d:7a:c3:d8:8a:01:7c:e3: 12:3c:b5:01:e1:8e:fd:9c:17:31:5a:9a:bb:98:40:20:64:96: 7c:40:94:6d:13:40:be:12:f1:20:9b:b2:73:8d:ed:c5:67:fa: ad:6f:a5:24:1f:a9:a0:76:be:b8:c2:22:74:a9:23:e6:20:16: fd:8e:af:d2:bf:ad:af:83:91:dc:c3:94:cf:7b:64:89:a4:31: 9b:81:81:2c:ff:0e:9e:44:da:08:5d:af:0e:21:db:7f:9a:01: f5:b8:b4:c1 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt6WuRFDYlUYb6U1IVs1dR0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NDVlMjE2ZWQxM2YyYWVmMzFiMzc4NjNhMDAzYjhmMDQ5MTQzYzAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsq2/5WxKrKDzpaHl5OVf/eII6N+G qPFktavqFbnrQo6YwXAvzawgm7Nnka7pOgqnYY8cDSoZEZY39kV1D3kgN7sfbolt y07prYgNW9e7vS5JJT5CcyIiV6E3DdUsA0RmNuIvGVvUISHTWDn7HHYg+hf59c9T 9zdrWiQmwSy5Q5nVT+MbjtYcukNA3WU/0kjNWkzGChL9vkWTTUNN9T34lmjMhi4W /ra9tYgjYAVHekfhx7f1U6HE14vUlzJYEEweteipmvdgMWzd7tygALPTwlBM8zmX 7bboGhNZrxG+jY0JJTc/uAjR0tDcn4jJK5hZxJFE8DkJbY2lQNe9/HUa1wIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFEReIW7RPyrvMbN4Y6ADuPBJFDwBMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvUkY0aGJ0RV9LdTh4czNoam9BTzQ4RWtVUEFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAUpmUAwQA WdU/AwQAWdWdAwQAWdXjAwQAbbDyAwQA1YKJAwQA1YKYMA0GCSqGSIb3DQEBCwUA A4IBAQA7c40ALTQFZXSL2art3CRbqTIxdio4NHBHHnDf75Nps68odNzdNAiEGP/8 Uk2nTzKM8DRlupdNZX8MqqsvZ+ZvdWesXXUsP8rCYUMiQU0a+euFXIuOqMwomeA7 xdIw/+so4KT3IlXTg+VJ8a6A+w9v1wJd+6A+hyQQuEqOfwf7y8clTwj2Ug6FoGZa HeOSKmQSJFEAOJ/6WjYBbXrD2IoBfOMSPLUB4Y79nBcxWpq7mEAgZJZ8QJRtE0C+ EvEgm7Jzje3FZ/qtb6UkH6mgdr64wiJ0qSPmIBb9jq/Sv62vg5Hcw5TPe2SJpDGb gYEs/w6eRNoIXa8OIdt/mgH1uLTB -----END CERTIFICATE-----Generated at Mon Jan 19 18:25:35 2026 by rpki-client