This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/t3DRvfzDghCM8TZP9XLjWqcoCxQ.roa File: t3DRvfzDghCM8TZP9XLjWqcoCxQ.roa (raw, json) Hash identifier: ik/ERHUxzP249hIjQvvZoeZpRFPiHkFs2QNFai4VWYM= Subject key identifier: B7:70:D1:BD:FC:C3:82:10:8C:F1:36:4F:F5:72:E3:5A:A7:28:0B:14 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5AD29392D4356460A3967DAC8C22AE Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/t3DRvfzDghCM8TZP9XLjWqcoCxQ.roa Signing time: Thu 01 Jan 2026 16:18:51 +0000 ROA not before: Thu 01 Jan 2026 16:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213738 IP address blocks: 82.153.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:d2:93:92:d4:35:64:60:a3:96:7d:ac:8c:22:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b770d1bdfcc382108cf1364ff572e35aa7280b14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:7c:a5:2c:6a:17:6b:36:8c:4f:9e:cf:97:db: 97:24:76:74:a6:85:e8:01:06:70:db:3e:06:f1:09: 1e:eb:c8:72:04:14:e8:41:9a:23:80:b5:f5:7a:2f: 30:cf:71:3c:ca:e2:a2:15:bf:40:6c:1d:62:b0:f2: 8c:c4:09:64:ad:90:ea:08:d8:c5:e2:48:a8:b4:ed: 51:98:5a:37:0d:dc:01:d0:0c:57:ca:21:52:54:71: 5a:e8:06:32:5a:67:84:11:16:6b:e9:1c:16:9e:43: 2c:b5:ca:c0:3a:7c:5e:17:36:ba:88:0f:54:32:f5: 7d:c6:98:8e:6e:54:f3:00:b4:ae:44:5b:66:11:0d: ba:eb:25:88:a3:01:23:b0:3d:55:14:e4:3b:71:b0: 6f:50:74:f4:8e:aa:1a:da:4f:6b:b3:2e:88:17:51: 63:cd:fd:35:a6:c4:57:ec:9f:ee:77:ad:17:b0:e1: 64:7a:8a:02:f3:69:84:fa:0a:79:97:0a:6b:22:a0: 02:03:60:12:11:a7:44:5d:64:26:d6:1c:36:b2:67: ab:49:8a:49:6a:da:52:23:be:6c:2a:21:ba:c0:eb: 4c:a3:4b:45:f5:ac:9d:0c:8d:4c:fa:21:99:d2:c8: d9:a8:4d:9c:91:49:57:16:8e:ff:62:0e:d1:51:a2: 9d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:70:D1:BD:FC:C3:82:10:8C:F1:36:4F:F5:72:E3:5A:A7:28:0B:14 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/t3DRvfzDghCM8TZP9XLjWqcoCxQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.153.35.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:65:83:ad:1f:b2:be:7b:1d:bc:9f:38:71:05:14:e9:4e:d1: cf:b5:21:85:c1:1b:b6:21:71:78:35:94:31:5d:5f:d3:5d:b6: e8:dc:5a:b0:8d:1c:52:23:51:16:f4:68:93:b8:1a:76:71:4e: 80:14:69:8e:20:3a:05:02:6d:b0:6a:3e:51:ea:b8:b3:59:3d: 1a:6c:f4:74:74:c1:3f:ed:85:f1:2f:ef:b1:20:0e:c1:8a:45: 68:d1:8b:0d:a9:cf:39:28:56:4b:9e:f6:7c:a7:73:2e:4d:39: be:22:e0:08:03:c2:12:99:22:41:2d:d0:b3:5e:3d:a3:db:73: 2a:8e:f0:e3:c8:ac:4e:71:c4:cd:f4:54:0a:cc:f8:a0:af:b2: 2b:c5:bb:57:24:6e:57:8c:aa:f7:d4:40:1b:da:69:1e:67:f7: 7b:e8:00:2f:7b:1e:d6:4a:2e:5c:b9:6d:47:0e:8c:2d:61:25: 5c:a2:db:f3:55:d8:f9:ba:66:91:36:94:41:f5:40:49:12:8b: af:37:55:2e:6e:c7:cf:a9:1f:91:ec:d0:7e:59:63:84:a4:42: 3f:e9:d1:59:fa:b6:c4:2d:de:fe:1e:63:9c:3f:e9:77:6f:55: 76:9f:24:46:87:0c:77:96:fa:3f:97:38:9d:ff:b0:67:c7:43: 55:ad:66:56 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WtKTktQ1ZGCjln2sjCKuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzcwZDFiZGZjYzM4MjEwOGNmMTM2NGZmNTcyZTM1YWE3MjgwYjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3ylLGoXazaMT57Pl9uXJHZ0poXo AQZw2z4G8Qke68hyBBToQZojgLX1ei8wz3E8yuKiFb9AbB1isPKMxAlkrZDqCNjF 4kiotO1RmFo3DdwB0AxXyiFSVHFa6AYyWmeEERZr6RwWnkMstcrAOnxeFza6iA9U MvV9xpiOblTzALSuRFtmEQ266yWIowEjsD1VFOQ7cbBvUHT0jqoa2k9rsy6IF1Fj zf01psRX7J/ud60XsOFkeooC82mE+gp5lwprIqACA2ASEadEXWQm1hw2smerSYpJ atpSI75sKiG6wOtMo0tF9aydDI1M+iGZ0sjZqE2ckUlXFo7/Yg7RUaKdpQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLdw0b38w4IQjPE2T/Vy41qnKAsUMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvdDNEUnZmekRnaENNOFRaUDlYTGpXcWNvQ3hRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUpkjMA0G CSqGSIb3DQEBCwUAA4IBAQCLZYOtH7K+ex28nzhxBRTpTtHPtSGFwRu2IXF4NZQx XV/TXbbo3FqwjRxSI1EW9GiTuBp2cU6AFGmOIDoFAm2waj5R6rizWT0abPR0dME/ 7YXxL++xIA7BikVo0YsNqc85KFZLnvZ8p3MuTTm+IuAIA8ISmSJBLdCzXj2j23Mq jvDjyKxOccTN9FQKzPigr7IrxbtXJG5XjKr31EAb2mkeZ/d76AAvex7WSi5cuW1H DowtYSVcotvzVdj5umaRNpRB9UBJEouvN1UubsfPqR+R7NB+WWOEpEI/6dFZ+rbE Ld7+HmOcP+l3b1V2nyRGhwx3lvo/lzid/7Bnx0NVrWZW -----END CERTIFICATE-----Generated at Mon Jan 19 23:36:33 2026 by rpki-client