This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Z6TAw-KKqvNU5ZVrEJs1aTgotew.roa File: Z6TAw-KKqvNU5ZVrEJs1aTgotew.roa (raw, json) Hash identifier: xCw4/39c8aj5Y2cmW/rql0/EtOrW2SSJcTIBjIDGhwo= Subject key identifier: 67:A4:C0:C3:E2:8A:AA:F3:54:E5:95:6B:10:9B:35:69:38:28:B5:EC Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B8D87633A226445B903131BFB6015A578 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Z6TAw-KKqvNU5ZVrEJs1aTgotew.roa Signing time: Mon 05 Jan 2026 09:40:18 +0000 ROA not before: Mon 05 Jan 2026 09:40:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7346 IP address blocks: 82.152.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 04:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8d:87:63:3a:22:64:45:b9:03:13:1b:fb:60:15:a5:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 5 09:40:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=67a4c0c3e28aaaf354e5956b109b35693828b5ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4d:69:45:a8:23:62:17:d2:d8:62:2d:1d:a8: 57:15:86:e3:9f:d9:2c:05:34:ff:b5:1e:04:c6:ca: c1:29:44:ca:16:66:b6:64:f8:79:ce:e3:80:82:78: de:7e:2c:c2:13:b9:7a:72:99:14:82:f6:ad:57:31: 80:22:77:ab:51:bc:d6:69:4e:4d:7c:37:72:86:05: 57:20:30:23:9c:3f:bd:6f:4e:d7:e4:48:0c:d7:15: 26:8b:f0:1f:09:9e:fe:77:72:a8:3d:2a:a5:dd:9e: 49:0e:18:57:a1:89:f4:fc:7b:aa:73:52:58:4c:07: 06:c6:b9:f5:32:b9:65:d7:fb:d6:b0:9f:3a:a2:4d: 60:54:a9:d7:67:c5:da:38:5d:19:ba:50:ee:a4:ec: c1:9c:e8:0c:bf:8e:7f:f8:9f:9e:bb:45:a4:54:b6: 2d:2f:ca:72:12:76:56:f2:2c:bd:fc:e6:a7:6b:83: c2:15:e2:be:fc:09:d1:db:25:5b:f5:35:94:45:21: fb:06:81:4a:cd:34:06:b1:6a:2b:a1:aa:79:5a:36: 80:03:fa:92:85:3f:1f:0f:a6:a4:a2:c2:f6:63:e5: d8:98:18:e5:ba:b8:78:81:32:f7:4d:19:b8:10:f3: 66:5e:63:69:a3:eb:06:08:d9:59:6f:77:d4:6e:69: 09:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:A4:C0:C3:E2:8A:AA:F3:54:E5:95:6B:10:9B:35:69:38:28:B5:EC X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Z6TAw-KKqvNU5ZVrEJs1aTgotew.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.152.248.0/24 Signature Algorithm: sha256WithRSAEncryption 66:90:35:f5:aa:87:97:4d:55:cd:07:55:3c:62:a1:b1:84:ef: c9:47:f7:4b:3f:89:6b:6a:d9:da:54:c9:ed:57:61:10:8e:4a: 98:ba:95:46:62:f1:cf:90:d8:13:2e:7b:0c:27:84:f8:f0:ae: e5:43:19:2d:b4:63:8c:0c:1f:cd:36:c8:3c:ba:09:ba:77:e4: f5:5c:e2:de:54:3a:06:31:f0:04:2c:ac:39:df:99:3d:d4:a9: 13:90:d8:b4:d1:99:ac:16:32:3f:c3:55:08:c3:ab:56:68:b0: 8f:e1:6d:3a:2f:33:6d:b6:95:3c:1f:a5:aa:77:fd:82:3e:e4: 8d:aa:82:ce:3d:7c:fd:04:87:ad:0a:94:69:54:88:bd:7b:d0: 6a:14:05:07:17:d6:52:53:9c:bb:0a:73:56:1d:9b:a0:fa:5f: fe:a2:40:fe:52:78:91:17:3a:99:50:f0:2e:56:73:d7:29:15: 13:52:1d:bb:9c:8e:3a:db:5c:83:03:d2:90:2e:31:91:06:28: d1:0c:b5:70:95:80:90:19:60:79:c9:39:54:7e:60:dd:18:ea: 55:62:14:b2:f8:4c:19:ca:e8:d0:c6:0f:51:74:0f:01:18:0a: 01:34:e0:d8:ea:99:44:a0:bb:16:01:49:73:6b:15:44:b8:05: 14:d6:f5:47 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuNh2M6ImRFuQMTG/tgFaV4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTA1MDk0MDE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2N2E0YzBjM2UyOGFhYWYzNTRlNTk1NmIxMDliMzU2OTM4MjhiNWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1E1pRagjYhfS2GItHahXFYbjn9ks BTT/tR4ExsrBKUTKFma2ZPh5zuOAgnjefizCE7l6cpkUgvatVzGAInerUbzWaU5N fDdyhgVXIDAjnD+9b07X5EgM1xUmi/AfCZ7+d3KoPSql3Z5JDhhXoYn0/Huqc1JY TAcGxrn1Mrll1/vWsJ86ok1gVKnXZ8XaOF0ZulDupOzBnOgMv45/+J+eu0WkVLYt L8pyEnZW8iy9/Oana4PCFeK+/AnR2yVb9TWURSH7BoFKzTQGsWoroap5WjaAA/qS hT8fD6akosL2Y+XYmBjlurh4gTL3TRm4EPNmXmNpo+sGCNlZb3fUbmkJZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGekwMPiiqrzVOWVaxCbNWk4KLXsMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvWjZUQXctS0txdk5VNVpWckVKczFhVGdvdGV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUpj4MA0G CSqGSIb3DQEBCwUAA4IBAQBmkDX1qoeXTVXNB1U8YqGxhO/JR/dLP4lratnaVMnt V2EQjkqYupVGYvHPkNgTLnsMJ4T48K7lQxkttGOMDB/NNsg8ugm6d+T1XOLeVDoG MfAELKw535k91KkTkNi00ZmsFjI/w1UIw6tWaLCP4W06LzNttpU8H6Wqd/2CPuSN qoLOPXz9BIetCpRpVIi9e9BqFAUHF9ZSU5y7CnNWHZug+l/+okD+UniRFzqZUPAu VnPXKRUTUh27nI4621yDA9KQLjGRBijRDLVwlYCQGWB5yTlUfmDdGOpVYhSy+EwZ yujQxg9RdA8BGAoBNODY6plEoLsWAUlzaxVEuAUU1vVH -----END CERTIFICATE-----Generated at Sun Jan 11 12:29:11 2026 by rpki-client