This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/82kGAC9wtvGZ6gS4bLlhDSZ1ekc.roa File: 82kGAC9wtvGZ6gS4bLlhDSZ1ekc.roa (raw, json) Hash identifier: vPPab/KGHpKzLrTGlISXYHb0sr+wSckNgKD9qG+MfNw= Subject key identifier: F3:69:06:00:2F:70:B6:F1:99:EA:04:B8:6C:B9:61:0D:26:75:7A:47 Certificate issuer: /CN=321ec194107843848cd36330232b5f6a43791db4 Certificate serial: 019B7AC948092F143E1039AD62E033E2DF9E Authority key identifier: 32:1E:C1:94:10:78:43:84:8C:D3:63:30:23:2B:5F:6A:43:79:1D:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/82kGAC9wtvGZ6gS4bLlhDSZ1ekc.roa Signing time: Thu 01 Jan 2026 18:19:29 +0000 ROA not before: Thu 01 Jan 2026 18:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 155.231.110.0/24 maxlen: 24 155.231.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:48:09:2f:14:3e:10:39:ad:62:e0:33:e2:df:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=321ec194107843848cd36330232b5f6a43791db4 Validity Not Before: Jan 1 18:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f36906002f70b6f199ea04b86cb9610d26757a47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f0:6a:4c:77:b7:04:05:b9:d0:f9:71:3b:8f: c8:cf:9c:70:44:33:f2:96:ab:7d:98:d6:23:12:4b: 32:9c:39:58:d2:00:19:64:75:4c:19:ef:5d:f4:f6: a2:d3:ba:7d:42:3c:da:e6:b0:6f:2e:e5:cc:30:77: d1:14:3f:ff:d9:c1:f4:da:84:1c:8d:14:b2:17:d6: d0:4b:92:f5:90:26:8b:ab:ff:b1:c6:b3:31:44:a4: 64:5f:50:71:97:dd:0e:3c:15:e5:b3:c8:69:70:48: 19:f1:33:14:0f:6f:b7:66:d3:7e:5b:f2:97:9f:99: 93:cb:51:45:27:45:56:ea:6d:35:f4:1e:dd:99:9a: cf:6b:3e:9e:1c:24:89:7d:5d:f0:01:b7:3d:a4:fe: 24:70:f5:f8:9e:1a:0c:09:b1:f2:04:10:21:69:66: 0b:17:f3:79:5e:d1:37:9c:d3:fe:d1:cd:92:92:98: d9:72:00:99:ae:2b:36:e5:0b:fd:96:2e:61:e3:c4: 80:2c:8d:42:af:e8:ef:95:f6:17:05:00:3d:6b:38: 5e:74:c7:d5:49:f2:68:39:98:f2:fa:b5:9e:a4:14: 93:e5:5c:a7:e9:c2:29:2b:8d:d5:97:32:0c:a7:a3: 35:20:5e:9d:e0:2a:07:f6:d0:53:11:1f:12:db:0a: a4:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:69:06:00:2F:70:B6:F1:99:EA:04:B8:6C:B9:61:0D:26:75:7A:47 X509v3 Authority Key Identifier: keyid:32:1E:C1:94:10:78:43:84:8C:D3:63:30:23:2B:5F:6A:43:79:1D:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/82kGAC9wtvGZ6gS4bLlhDSZ1ekc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 155.231.110.0/23 Signature Algorithm: sha256WithRSAEncryption 5b:39:d8:75:b3:8b:10:cd:43:5f:30:05:81:20:f3:52:04:81: b3:93:4d:c6:fc:f7:a5:d6:5d:42:32:07:de:98:86:67:a9:45: 8e:74:2c:3d:1a:41:68:d9:19:10:12:9b:8a:67:32:88:0d:71: 79:ce:86:43:d3:3a:eb:f8:4f:8a:a9:24:a8:59:d7:8e:53:8a: 2d:83:c7:d2:5d:5f:c0:2d:16:d8:f0:a0:0a:68:48:57:96:87: b2:af:4a:98:36:9c:75:97:c8:e4:4c:cd:a2:5a:f0:4f:0e:4e: 42:8b:0d:b9:80:18:5d:8f:7a:ce:5b:84:7b:c9:97:b0:99:0c: da:1b:70:4a:29:f3:6e:24:68:18:45:46:7f:2e:cf:95:32:55: 16:a6:77:1d:3d:45:d6:b3:ba:2e:a0:13:19:a0:df:7c:97:7c: ab:29:5e:1b:30:e7:2a:3a:96:71:d9:d5:31:06:4e:fb:4f:a2: e2:32:96:af:c5:f2:86:a7:c7:4c:68:26:d6:f7:e6:97:30:48: 49:4a:67:ad:1d:c5:7d:05:6d:c7:2c:a3:db:9f:83:a8:2b:c3: c3:f9:19:1a:0e:00:62:69:f7:a5:77:29:05:8a:2f:6c:1d:74: 84:18:58:47:71:0b:4e:26:f8:18:78:3c:c2:d0:9f:5b:d3:46: 4b:72:96:8d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yUgJLxQ+EDmtYuAz4t+eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyMWVjMTk0MTA3ODQzODQ4Y2QzNjMzMDIzMmI1ZjZhNDM3 OTFkYjQwHhcNMjYwMTAxMTgxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzY5MDYwMDJmNzBiNmYxOTllYTA0Yjg2Y2I5NjEwZDI2NzU3YTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/BqTHe3BAW50PlxO4/Iz5xwRDPy lqt9mNYjEksynDlY0gAZZHVMGe9d9Pai07p9Qjza5rBvLuXMMHfRFD//2cH02oQc jRSyF9bQS5L1kCaLq/+xxrMxRKRkX1Bxl90OPBXls8hpcEgZ8TMUD2+3ZtN+W/KX n5mTy1FFJ0VW6m019B7dmZrPaz6eHCSJfV3wAbc9pP4kcPX4nhoMCbHyBBAhaWYL F/N5XtE3nNP+0c2SkpjZcgCZris25Qv9li5h48SALI1Cr+jvlfYXBQA9azhedMfV SfJoOZjy+rWepBST5Vyn6cIpK43VlzIMp6M1IF6d4CoH9tBTER8S2wqk2QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPNpBgAvcLbxmeoEuGy5YQ0mdXpHMB8GA1UdIwQY MBaAFDIewZQQeEOEjNNjMCMrX2pDeR20MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWg3QmxCQjRRNFNNMDJNd0l5dGZha041SGJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9mMTQ1OGYtYmRjMy00ZTRiLTlmNjgt M2E2MTFjMDkzYTJjLzEvODJrR0FDOXd0dkdaNmdTNGJMbGhEU1oxZWtjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9mMTQ1OGYtYmRjMy00ZTRiLTlmNjgtM2E2MTFjMDkzYTJj LzEvTWg3QmxCQjRRNFNNMDJNd0l5dGZha041SGJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBm+duMA0G CSqGSIb3DQEBCwUAA4IBAQBbOdh1s4sQzUNfMAWBIPNSBIGzk03G/Pel1l1CMgfe mIZnqUWOdCw9GkFo2RkQEpuKZzKIDXF5zoZD0zrr+E+KqSSoWdeOU4otg8fSXV/A LRbY8KAKaEhXloeyr0qYNpx1l8jkTM2iWvBPDk5Ciw25gBhdj3rOW4R7yZewmQza G3BKKfNuJGgYRUZ/Ls+VMlUWpncdPUXWs7ouoBMZoN98l3yrKV4bMOcqOpZx2dUx Bk77T6LiMpavxfKGp8dMaCbW9+aXMEhJSmetHcV9BW3HLKPbn4OoK8PD+RkaDgBi afeldykFii9sHXSEGFhHcQtOJvgYeDzC0J9b00ZLcpaN -----END CERTIFICATE-----Generated at Fri Jan 2 09:29:40 2026 by rpki-client