This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/SI4UYl-YRXBKI6SCJDewazLkhZA.roa File: SI4UYl-YRXBKI6SCJDewazLkhZA.roa (raw, json) Hash identifier: D/5RK/iOOh1gBTVHhnYfmnFEI/81r1SfF30mXdBdxz8= Subject key identifier: 48:8E:14:62:5F:98:45:70:4A:23:A4:82:24:37:B0:6B:32:E4:85:90 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5AD589C871926C2E2D6F777882F57C Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/SI4UYl-YRXBKI6SCJDewazLkhZA.roa Signing time: Thu 01 Jan 2026 16:18:51 +0000 ROA not before: Thu 01 Jan 2026 16:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214143 IP address blocks: 82.152.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:d5:89:c8:71:92:6c:2e:2d:6f:77:78:82:f5:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=488e14625f9845704a23a4822437b06b32e48590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:43:70:1d:db:83:5b:c1:87:a8:db:a1:0c:95: 6f:e9:ad:68:cc:d8:e4:74:30:34:95:71:49:bf:94: 74:cf:00:ae:77:06:92:93:a2:ca:cc:a9:b0:55:b6: 1e:76:96:56:31:d7:78:8b:b7:3b:39:67:84:40:19: 66:18:17:c5:72:d3:1f:88:31:59:b5:a3:c6:7a:5e: db:b1:33:1d:9f:6a:d7:26:c2:89:bf:b3:58:e2:8c: cc:0b:32:42:da:89:16:6c:e9:c5:11:e1:0d:c4:9e: cd:88:79:8c:60:46:77:9c:8a:cb:34:21:1f:9c:63: 4e:cd:a4:c8:8b:ba:76:a0:ca:b7:2b:a7:0a:2c:fe: 8d:c5:3d:da:f2:da:ec:c5:bd:92:cd:62:9e:54:57: a5:ca:97:e8:c2:f9:fc:60:d2:3d:60:c6:2a:58:5c: 07:ab:5c:b5:f4:4d:39:85:2d:01:06:cb:87:fe:0c: ce:e7:5d:c2:af:2b:26:bd:bd:19:8a:c5:5e:09:b8: c0:e9:e0:7b:82:db:04:1b:c3:c0:4e:f6:b8:5c:ef: 46:70:fd:89:c9:61:93:16:3e:00:b1:c4:91:69:e5: ad:61:6d:0f:c3:c6:e5:87:85:4a:a3:e1:a9:c7:a2: a3:9e:79:40:86:63:4b:88:ca:5e:3d:8c:98:65:75: 80:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:8E:14:62:5F:98:45:70:4A:23:A4:82:24:37:B0:6B:32:E4:85:90 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/SI4UYl-YRXBKI6SCJDewazLkhZA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.152.49.0/24 Signature Algorithm: sha256WithRSAEncryption 37:90:b8:c4:19:d3:17:14:6b:ed:bb:a0:a1:41:92:22:60:c1: 45:5a:3c:20:4b:ef:d9:78:8b:46:21:78:3d:a0:d9:40:bf:08: b0:38:1e:62:5b:a2:89:2f:ff:69:83:bb:26:d5:a9:d9:4e:da: eb:36:81:c2:ea:51:c9:d6:38:34:b8:a8:c6:e0:c8:27:6f:ac: b5:3a:69:b0:ef:6a:2f:3e:1f:49:66:42:9f:6f:90:66:ca:a1: f4:e4:3a:6b:a3:20:c8:fe:0c:87:99:7f:47:f9:d3:ae:67:0e: 8c:df:ab:4d:0c:02:8b:57:8f:59:d0:a4:4e:fd:94:a5:a3:77: 3f:46:c9:63:2e:2d:57:47:a5:7b:d2:54:78:89:e8:0d:f4:2e: e1:25:83:16:2b:84:c0:c3:e1:5f:bf:c3:d5:ba:68:71:49:08: f0:7a:1e:6c:06:f1:3d:34:49:d4:68:32:9a:b3:be:b0:76:05: 6a:ab:86:9a:c3:fb:97:2a:cb:5c:84:5f:f8:6e:ec:15:30:22: a0:51:46:86:85:3d:c2:cf:55:30:62:9a:9d:57:ad:2f:16:1c: fe:67:57:96:4b:fa:5c:5e:65:52:42:d3:9e:9f:f9:a6:cc:a3: bc:f1:7d:f7:6f:7e:4b:a2:e6:7f:1d:07:68:c7:0c:e4:3f:f7: 21:3a:59:fc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WtWJyHGSbC4tb3d4gvV8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ODhlMTQ2MjVmOTg0NTcwNGEyM2E0ODIyNDM3YjA2YjMyZTQ4NTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUNwHduDW8GHqNuhDJVv6a1ozNjk dDA0lXFJv5R0zwCudwaSk6LKzKmwVbYedpZWMdd4i7c7OWeEQBlmGBfFctMfiDFZ taPGel7bsTMdn2rXJsKJv7NY4ozMCzJC2okWbOnFEeENxJ7NiHmMYEZ3nIrLNCEf nGNOzaTIi7p2oMq3K6cKLP6NxT3a8trsxb2SzWKeVFelypfowvn8YNI9YMYqWFwH q1y19E05hS0BBsuH/gzO513Crysmvb0ZisVeCbjA6eB7gtsEG8PATva4XO9GcP2J yWGTFj4AscSRaeWtYW0Pw8blh4VKo+Gpx6KjnnlAhmNLiMpePYyYZXWA8QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEiOFGJfmEVwSiOkgiQ3sGsy5IWQMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvU0k0VVlsLVlSWEJLSTZTQ0pEZXdhekxraFpBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUpgxMA0G CSqGSIb3DQEBCwUAA4IBAQA3kLjEGdMXFGvtu6ChQZIiYMFFWjwgS+/ZeItGIXg9 oNlAvwiwOB5iW6KJL/9pg7sm1anZTtrrNoHC6lHJ1jg0uKjG4Mgnb6y1Ommw72ov Ph9JZkKfb5BmyqH05DproyDI/gyHmX9H+dOuZw6M36tNDAKLV49Z0KRO/ZSlo3c/ RsljLi1XR6V70lR4iegN9C7hJYMWK4TAw+Ffv8PVumhxSQjweh5sBvE9NEnUaDKa s76wdgVqq4aaw/uXKstchF/4buwVMCKgUUaGhT3Cz1UwYpqdV60vFhz+Z1eWS/pc XmVSQtOen/mmzKO88X33b35LouZ/HQdoxwzkP/chOln8 -----END CERTIFICATE-----Generated at Mon Jan 19 23:20:58 2026 by rpki-client