This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/xSBFV8U7y87zVDFPL4jPQfvvtOU.roa File: xSBFV8U7y87zVDFPL4jPQfvvtOU.roa (raw, json) Hash identifier: howMz6Nsd0jM+jO5YdPKfliBN30mZjVWYcE8bbBa4xU= Subject key identifier: C5:20:45:57:C5:3B:CB:CE:F3:54:31:4F:2F:88:CF:41:FB:EF:B4:E5 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5ABA91AC6C878447912A41345C624F Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/xSBFV8U7y87zVDFPL4jPQfvvtOU.roa Signing time: Thu 01 Jan 2026 16:18:44 +0000 ROA not before: Thu 01 Jan 2026 16:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202736 IP address blocks: 82.153.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:ba:91:ac:6c:87:84:47:91:2a:41:34:5c:62:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c5204557c53bcbcef354314f2f88cf41fbefb4e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:62:71:35:40:77:4f:3a:a8:e3:d6:9f:7a:1d: 6b:25:90:a1:e6:d3:2c:a2:bc:ab:a5:6c:a9:97:24: 8f:c5:05:f2:ce:07:9b:93:63:c1:02:ca:e6:ac:b2: 87:9c:00:f2:c9:aa:98:c7:0e:c8:7b:5c:4c:27:1d: 63:ff:ae:63:63:d4:37:18:5c:79:f9:1b:82:2f:9c: 57:e4:ad:9b:45:33:47:ae:a0:48:c5:5a:69:b3:87: 8e:3b:75:aa:ab:7e:39:80:30:7f:d1:6f:4d:53:6c: 9c:5c:b3:b7:c6:51:56:4d:14:64:33:6d:fd:33:f5: cc:c2:8e:b0:6b:87:f2:18:87:05:a6:be:c6:39:53: d8:9f:4c:1e:ae:96:dd:5c:95:dd:5c:74:81:64:4e: b5:cd:37:4b:cc:0c:05:f4:b9:0a:c6:1f:57:0b:33: 9c:f5:c0:93:2f:f1:3a:a0:f9:b6:3f:5c:91:91:c7: a3:95:60:b8:0f:b5:aa:8b:71:6d:b6:99:67:8a:7b: 7f:c0:19:ea:4c:f8:40:f5:fd:37:8c:04:c1:2c:d5: 43:63:12:eb:f0:da:14:ba:e0:d6:69:0f:e9:36:40: 6b:14:68:87:89:fd:2a:2f:12:c8:71:ee:c8:ff:93: f8:57:55:f8:d0:bc:cd:27:75:2d:af:7b:68:8e:3c: f9:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:20:45:57:C5:3B:CB:CE:F3:54:31:4F:2F:88:CF:41:FB:EF:B4:E5 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/xSBFV8U7y87zVDFPL4jPQfvvtOU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.153.212.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:37:8c:af:33:56:76:cb:ea:13:8f:91:fe:11:12:0e:06:27: d2:8d:79:1a:11:4e:b1:96:0f:1c:74:cb:b1:80:45:56:b6:a3: ac:5b:8c:cf:23:9a:02:17:12:8f:81:59:50:e8:9c:9b:99:a8: 9c:a2:0b:7d:c0:48:c0:d9:8c:a2:21:6e:c6:6f:f1:80:65:d0: 4b:bc:c6:42:3a:28:7d:e2:d4:34:46:75:45:33:5a:0b:59:b8: 44:b6:5f:34:56:d2:47:9c:ed:c5:30:86:f9:4a:6b:88:f2:bb: 23:e0:ec:e7:96:1f:61:ff:15:5f:ad:32:02:28:54:11:0e:8f: 19:b4:8f:a5:64:43:41:2f:dd:fa:97:24:69:7e:0b:74:a4:fb: fb:57:6f:a4:aa:34:f5:07:ac:36:72:33:fa:c6:5a:5c:8d:00: a7:df:f4:a5:18:15:0a:68:50:ae:57:1b:50:72:8f:47:71:87: 0c:57:1a:96:24:d4:2c:7e:fb:70:29:6c:81:9f:dd:0d:4a:3d: 7a:e2:8c:ce:ea:aa:86:01:ff:0f:95:14:0e:6b:d5:06:d8:c0: f5:f0:a5:f0:99:85:78:b9:8d:f4:7f:a8:26:f4:d3:4c:1d:d2: 69:c5:94:0d:f4:78:4f:c8:e0:8d:c1:4a:a1:fd:f6:88:3b:45: b2:de:ad:f9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WrqRrGyHhEeRKkE0XGJPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTIwNDU1N2M1M2JjYmNlZjM1NDMxNGYyZjg4Y2Y0MWZiZWZiNGU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGJxNUB3Tzqo49afeh1rJZCh5tMs oryrpWyplySPxQXyzgebk2PBAsrmrLKHnADyyaqYxw7Ie1xMJx1j/65jY9Q3GFx5 +RuCL5xX5K2bRTNHrqBIxVpps4eOO3Wqq345gDB/0W9NU2ycXLO3xlFWTRRkM239 M/XMwo6wa4fyGIcFpr7GOVPYn0werpbdXJXdXHSBZE61zTdLzAwF9LkKxh9XCzOc 9cCTL/E6oPm2P1yRkcejlWC4D7Wqi3Fttplnint/wBnqTPhA9f03jATBLNVDYxLr 8NoUuuDWaQ/pNkBrFGiHif0qLxLIce7I/5P4V1X40LzNJ3Utr3tojjz5owIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMUgRVfFO8vO81QxTy+Iz0H777TlMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEveFNCRlY4VTd5ODd6VkRGUEw0alBRZnZ2dE9VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUpnUMA0G CSqGSIb3DQEBCwUAA4IBAQBLN4yvM1Z2y+oTj5H+ERIOBifSjXkaEU6xlg8cdMux gEVWtqOsW4zPI5oCFxKPgVlQ6Jybmaicogt9wEjA2YyiIW7Gb/GAZdBLvMZCOih9 4tQ0RnVFM1oLWbhEtl80VtJHnO3FMIb5SmuI8rsj4Oznlh9h/xVfrTICKFQRDo8Z tI+lZENBL936lyRpfgt0pPv7V2+kqjT1B6w2cjP6xlpcjQCn3/SlGBUKaFCuVxtQ co9HcYcMVxqWJNQsfvtwKWyBn90NSj164ozO6qqGAf8PlRQOa9UG2MD18KXwmYV4 uY30f6gm9NNMHdJpxZQN9HhPyOCNwUqh/faIO0Wy3q35 -----END CERTIFICATE-----Generated at Sun Jan 11 07:31:09 2026 by rpki-client