This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/15abc3-c4e3-4ba9-82ae-5f620b38b908/1/751Hu9ZI3DqojMJGB1I0rXnda_M.roa File: 751Hu9ZI3DqojMJGB1I0rXnda_M.roa (raw, json) Hash identifier: YsN2FofLzMH/lt9gntXVVlk6Piw3TDvammcUwDb+SmU= Subject key identifier: EF:9D:47:BB:D6:48:DC:3A:A8:8C:C2:46:07:52:34:AD:79:DD:6B:F3 Certificate issuer: /CN=dc167379b591e95710cf7f31de2ec73ffbfb5ae7 Certificate serial: 019B78A354DBB1BAAB32BCE195F36D064C44 Authority key identifier: DC:16:73:79:B5:91:E9:57:10:CF:7F:31:DE:2E:C7:3F:FB:FB:5A:E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BZzebWR6VcQz38x3i7HP_v7Wuc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/15abc3-c4e3-4ba9-82ae-5f620b38b908/1/751Hu9ZI3DqojMJGB1I0rXnda_M.roa Signing time: Thu 01 Jan 2026 08:18:48 +0000 ROA not before: Thu 01 Jan 2026 08:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216315 IP address blocks: 83.220.30.0/23 maxlen: 23 83.220.30.0/24 maxlen: 24 83.220.31.0/24 maxlen: 24 2a13:abc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/15abc3-c4e3-4ba9-82ae-5f620b38b908/1/3BZzebWR6VcQz38x3i7HP_v7Wuc.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/15abc3-c4e3-4ba9-82ae-5f620b38b908/1/3BZzebWR6VcQz38x3i7HP_v7Wuc.mft rsync://rpki.ripe.net/repository/DEFAULT/3BZzebWR6VcQz38x3i7HP_v7Wuc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:54:db:b1:ba:ab:32:bc:e1:95:f3:6d:06:4c:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc167379b591e95710cf7f31de2ec73ffbfb5ae7 Validity Not Before: Jan 1 08:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ef9d47bbd648dc3aa88cc246075234ad79dd6bf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:80:75:73:66:48:5b:58:37:61:5f:99:35:94: e1:0a:d1:e6:23:db:47:cc:97:fb:85:a9:bb:e6:80: 20:74:1a:3e:47:ab:dd:90:e4:03:f8:76:db:7d:60: ba:fd:ba:47:f7:4e:e4:07:e3:ea:de:c3:2e:6a:26: 04:aa:ab:18:85:6a:67:76:15:69:f0:99:ee:eb:a4: 5d:3c:6a:ca:fb:a7:24:74:25:9a:66:2a:bd:50:40: 1c:6e:ba:b5:b1:85:48:fd:a3:4e:cf:a1:61:d1:61: dd:b2:36:f4:c2:0f:b0:ac:06:1c:6d:f1:a2:de:6e: 63:18:b8:b6:e0:d8:bd:57:40:d8:a0:09:9b:8f:a4: fd:f4:80:90:1d:ed:c2:a9:ec:cd:f5:07:9f:b1:d7: 97:99:2e:3e:6e:b8:b5:4b:b7:0f:6f:4b:f0:41:16: a9:1a:8b:bb:08:12:ea:45:48:85:3d:7a:cc:6c:11: a5:93:a1:f7:b5:d1:ac:e0:28:9c:c2:e6:69:e9:28: ef:03:1b:5c:a2:0a:67:fe:23:e5:47:2e:3f:72:cf: b7:02:79:68:c5:6c:05:fe:05:9d:ac:16:49:37:72: 6d:98:16:4b:2f:15:cf:98:08:71:b1:5f:0b:ad:6b: 4a:ef:b5:ca:c8:f0:aa:94:21:74:49:d8:97:07:1d: 17:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:9D:47:BB:D6:48:DC:3A:A8:8C:C2:46:07:52:34:AD:79:DD:6B:F3 X509v3 Authority Key Identifier: keyid:DC:16:73:79:B5:91:E9:57:10:CF:7F:31:DE:2E:C7:3F:FB:FB:5A:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BZzebWR6VcQz38x3i7HP_v7Wuc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/15abc3-c4e3-4ba9-82ae-5f620b38b908/1/751Hu9ZI3DqojMJGB1I0rXnda_M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/15abc3-c4e3-4ba9-82ae-5f620b38b908/1/3BZzebWR6VcQz38x3i7HP_v7Wuc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.220.30.0/23 IPv6: 2a13:abc0::/29 Signature Algorithm: sha256WithRSAEncryption 15:0e:89:3e:8a:8f:e2:ca:90:73:5f:00:e2:78:e8:73:bc:84: 42:d8:45:5b:a1:8f:4d:29:8e:1e:50:ad:d0:79:03:50:13:13: 5d:7d:0c:1c:1c:8b:e6:04:cb:9a:41:15:77:b5:4c:ec:48:1b: 32:d8:d4:b7:a6:b9:e6:f1:4a:9a:3e:f9:b7:a2:b2:78:b8:92: ce:10:e9:8f:cb:77:f8:54:e0:44:f4:a0:05:4e:b3:61:37:75: 40:2a:75:3c:57:34:27:49:01:24:eb:50:ba:68:08:03:a0:f7: 68:17:26:27:b6:fb:f5:a2:56:e7:72:61:0a:24:a8:a5:69:bb: 3d:4f:ea:69:ff:cb:57:af:8a:9b:64:d2:ba:0a:b3:67:e4:4b: b8:b5:36:c1:7a:87:4a:4d:d2:d8:0a:23:59:49:dc:26:6e:3f: 6d:8d:17:14:f4:09:40:03:0b:0d:05:67:5d:d9:47:1e:83:e4: de:aa:9f:27:37:69:10:96:f9:32:51:46:9a:84:79:e9:81:4a: 2f:bc:c1:5c:dd:7b:79:39:0b:8b:5d:18:32:61:b6:2c:5a:38: 9a:f6:48:a9:5f:ab:d0:fc:dc:fe:11:c1:a4:25:6d:5d:6e:c8: f7:e4:d5:e2:6f:a8:12:7a:45:69:1a:03:a0:03:8f:45:9a:21: d7:73:91:fa -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4o1TbsbqrMrzhlfNtBkxEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMTY3Mzc5YjU5MWU5NTcxMGNmN2YzMWRlMmVjNzNmZmJm YjVhZTcwHhcNMjYwMTAxMDgxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZjlkNDdiYmQ2NDhkYzNhYTg4Y2MyNDYwNzUyMzRhZDc5ZGQ2YmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIB1c2ZIW1g3YV+ZNZThCtHmI9tH zJf7ham75oAgdBo+R6vdkOQD+HbbfWC6/bpH907kB+Pq3sMuaiYEqqsYhWpndhVp 8Jnu66RdPGrK+6ckdCWaZiq9UEAcbrq1sYVI/aNOz6Fh0WHdsjb0wg+wrAYcbfGi 3m5jGLi24Ni9V0DYoAmbj6T99ICQHe3CqezN9QefsdeXmS4+bri1S7cPb0vwQRap Gou7CBLqRUiFPXrMbBGlk6H3tdGs4CicwuZp6SjvAxtcogpn/iPlRy4/cs+3Anlo xWwF/gWdrBZJN3JtmBZLLxXPmAhxsV8LrWtK77XKyPCqlCF0SdiXBx0X9QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFO+dR7vWSNw6qIzCRgdSNK153WvzMB8GA1UdIwQY MBaAFNwWc3m1kelXEM9/Md4uxz/7+1rnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0JaemViV1I2VmNRejM4eDNpN0hQX3Y3V3VjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8xNWFiYzMtYzRlMy00YmE5LTgyYWUt NWY2MjBiMzhiOTA4LzEvNzUxSHU5WkkzRHFvak1KR0IxSTByWG5kYV9NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi8xNWFiYzMtYzRlMy00YmE5LTgyYWUtNWY2MjBiMzhiOTA4 LzEvM0JaemViV1I2VmNRejM4eDNpN0hQX3Y3V3VjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBU9weMA0E AgACMAcDBQMqE6vAMA0GCSqGSIb3DQEBCwUAA4IBAQAVDok+io/iypBzXwDieOhz vIRC2EVboY9NKY4eUK3QeQNQExNdfQwcHIvmBMuaQRV3tUzsSBsy2NS3prnm8Uqa Pvm3orJ4uJLOEOmPy3f4VOBE9KAFTrNhN3VAKnU8VzQnSQEk61C6aAgDoPdoFyYn tvv1olbncmEKJKilabs9T+pp/8tXr4qbZNK6CrNn5Eu4tTbBeodKTdLYCiNZSdwm bj9tjRcU9AlAAwsNBWdd2Uceg+Teqp8nN2kQlvkyUUaahHnpgUovvMFc3Xt5OQuL XRgyYbYsWjia9kipX6vQ/Nz+EcGkJW1dbsj35NXib6gSekVpGgOgA49FmiHXc5H6 -----END CERTIFICATE-----Generated at Mon Feb 9 22:27:59 2026 by rpki-client