This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/rBzlYUtz0gNPcjiJVsp7Vnd92EM.roa File: rBzlYUtz0gNPcjiJVsp7Vnd92EM.roa (raw, json) Hash identifier: XK/JURvnGdzWiBQMlnUCSRAgxZIMjt2+cXJOL0Mjm9E= Subject key identifier: AC:1C:E5:61:4B:73:D2:03:4F:72:38:89:56:CA:7B:56:77:7D:D8:43 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5AC332B731A157DA0438D3F80DAB3E Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/rBzlYUtz0gNPcjiJVsp7Vnd92EM.roa Signing time: Thu 01 Jan 2026 16:18:47 +0000 ROA not before: Thu 01 Jan 2026 16:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210542 IP address blocks: 82.152.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:c3:32:b7:31:a1:57:da:04:38:d3:f8:0d:ab:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ac1ce5614b73d2034f72388956ca7b56777dd843 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:c4:30:4c:0e:20:49:11:b6:4c:f4:f0:7d:af: 73:31:22:e6:9b:ef:47:0e:48:31:ce:3d:63:e4:bc: 09:04:c2:ef:f2:f7:8f:71:2b:97:08:f9:2a:ee:00: a7:e4:2d:2a:5a:be:67:87:32:d2:35:ad:c7:fb:ec: 98:44:e3:9c:a0:78:11:26:e6:b2:6c:2d:14:43:a3: 79:c8:86:06:24:ee:67:d2:6a:45:b8:5c:ef:e2:68: be:1f:34:ef:cf:fc:7f:50:2c:57:12:32:0d:07:26: 80:19:12:4b:a4:08:87:36:55:75:ef:77:08:8e:93: 14:c2:38:d3:f2:12:40:59:65:b8:ac:21:53:34:e9: 89:c0:cf:de:67:62:a7:82:b1:d6:15:2d:32:4d:60: 27:ef:6f:ff:bf:53:88:9a:49:2a:e5:cd:9e:72:af: 92:6c:17:5e:1c:ce:e3:11:ba:e9:2c:7f:b1:f2:fc: 99:2d:ea:83:ce:ad:93:11:07:78:5a:78:1e:b1:11: 76:44:1f:d0:0d:7f:9f:b3:4e:bf:a5:eb:8d:62:61: e2:a1:ba:0d:f3:65:f5:a2:b2:5b:ba:d1:67:94:4a: d8:bb:e7:aa:ba:d5:7e:bf:4e:c1:49:af:e6:6d:c3: 08:f4:09:3c:8b:fb:17:ca:12:28:f2:e1:60:d7:00: c2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:1C:E5:61:4B:73:D2:03:4F:72:38:89:56:CA:7B:56:77:7D:D8:43 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/rBzlYUtz0gNPcjiJVsp7Vnd92EM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.152.49.0/24 Signature Algorithm: sha256WithRSAEncryption 41:4e:ab:2e:b9:05:78:25:64:60:cf:50:c3:af:aa:73:be:c0: f6:d0:8b:ce:0c:6d:97:ef:77:a9:fb:0b:70:49:0c:e9:67:19: a7:32:80:9b:ad:17:40:a8:fc:93:38:85:28:57:36:1d:2c:c8: 7b:25:5a:82:29:bf:ae:81:26:f8:54:fe:d6:64:34:45:0c:5e: 19:67:43:9f:96:c0:5f:74:e1:61:c4:21:dd:87:3f:6c:f9:5f: 3a:33:c4:f4:81:de:67:c8:00:8e:82:06:9b:81:1c:25:5b:63: 0e:1e:bf:52:de:bc:43:44:70:a6:a5:fe:72:6d:1a:81:45:e3: 0f:c3:99:9a:19:41:f0:f6:91:4f:eb:54:be:a0:d6:ef:fd:d5: 73:a4:89:ba:86:68:79:1c:93:4f:4e:3e:db:ff:0c:3c:f1:9d: 6e:6b:79:f2:d8:a5:34:a7:35:61:bc:e6:06:fe:fe:4e:82:c2: 46:4c:21:96:a9:be:1a:09:26:b3:bd:e8:a9:cf:84:ec:9d:06: 1d:62:b1:b0:26:f0:fa:f1:83:fd:25:1e:af:5e:6f:ad:53:a1: 88:e4:aa:fb:05:db:22:ee:74:14:0f:1c:d3:11:50:19:ee:68: e8:6e:ba:ea:87:f7:a0:e0:41:1f:35:26:08:e0:58:67:2a:1e: 37:3a:98:9f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WsMytzGhV9oEONP4Das+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYzFjZTU2MTRiNzNkMjAzNGY3MjM4ODk1NmNhN2I1Njc3N2RkODQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4cQwTA4gSRG2TPTwfa9zMSLmm+9H Dkgxzj1j5LwJBMLv8vePcSuXCPkq7gCn5C0qWr5nhzLSNa3H++yYROOcoHgRJuay bC0UQ6N5yIYGJO5n0mpFuFzv4mi+HzTvz/x/UCxXEjINByaAGRJLpAiHNlV173cI jpMUwjjT8hJAWWW4rCFTNOmJwM/eZ2KngrHWFS0yTWAn72//v1OImkkq5c2ecq+S bBdeHM7jEbrpLH+x8vyZLeqDzq2TEQd4WngesRF2RB/QDX+fs06/peuNYmHioboN 82X1orJbutFnlErYu+equtV+v07BSa/mbcMI9Ak8i/sXyhIo8uFg1wDCYwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKwc5WFLc9IDT3I4iVbKe1Z3fdhDMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvckJ6bFlVdHowZ05QY2ppSlZzcDdWbmQ5MkVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUpgxMA0G CSqGSIb3DQEBCwUAA4IBAQBBTqsuuQV4JWRgz1DDr6pzvsD20IvODG2X73ep+wtw SQzpZxmnMoCbrRdAqPyTOIUoVzYdLMh7JVqCKb+ugSb4VP7WZDRFDF4ZZ0OflsBf dOFhxCHdhz9s+V86M8T0gd5nyACOggabgRwlW2MOHr9S3rxDRHCmpf5ybRqBReMP w5maGUHw9pFP61S+oNbv/dVzpIm6hmh5HJNPTj7b/ww88Z1ua3ny2KU0pzVhvOYG /v5OgsJGTCGWqb4aCSazveipz4TsnQYdYrGwJvD68YP9JR6vXm+tU6GI5Kr7Bdsi 7nQUDxzTEVAZ7mjobrrqh/eg4EEfNSYI4FhnKh43Opif -----END CERTIFICATE-----Generated at Wed Jan 21 01:08:57 2026 by rpki-client