This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/PdBo5LYrW3mTEROFtgvAOtWJw7o.roa File: PdBo5LYrW3mTEROFtgvAOtWJw7o.roa (raw, json) Hash identifier: FthkQ7lp8mIcRsIs/VRf4z45qSoRaUz1xKUgBE6qdA4= Subject key identifier: 3D:D0:68:E4:B6:2B:5B:79:93:11:13:85:B6:0B:C0:3A:D5:89:C3:BA Certificate issuer: /CN=ee8ba8824c5c8d207326a4a3ab893ebb8f5096ad Certificate serial: 019BFEEFDB03E62398E724AB60E3AFF4CDC5 Authority key identifier: EE:8B:A8:82:4C:5C:8D:20:73:26:A4:A3:AB:89:3E:BB:8F:50:96:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ouogkxcjSBzJqSjq4k-u49Qlq0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/PdBo5LYrW3mTEROFtgvAOtWJw7o.roa Signing time: Tue 27 Jan 2026 10:11:30 +0000 ROA not before: Tue 27 Jan 2026 10:11:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203378 IP address blocks: 82.197.54.0/23 maxlen: 23 82.197.54.0/24 maxlen: 24 82.197.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.mft rsync://rpki.ripe.net/repository/DEFAULT/7ouogkxcjSBzJqSjq4k-u49Qlq0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Jan 2026 23:50:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:ef:db:03:e6:23:98:e7:24:ab:60:e3:af:f4:cd:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee8ba8824c5c8d207326a4a3ab893ebb8f5096ad Validity Not Before: Jan 27 10:11:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3dd068e4b62b5b7993111385b60bc03ad589c3ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9c:27:ed:01:2c:24:fe:a6:79:fe:83:8e:f6: c4:44:9d:1f:ed:1e:23:e9:33:93:ab:aa:ee:03:28: 66:5d:10:0b:fb:94:f5:11:48:74:89:e4:6b:e1:a2: fc:8e:51:39:3f:f8:bc:9f:47:63:e1:0c:00:9f:12: de:e6:dd:c6:50:18:91:bd:30:8c:ee:70:13:85:04: 6e:a9:77:9a:55:b2:07:fa:33:19:d5:57:22:f6:8f: 40:87:f0:fd:c6:f4:01:18:cf:2a:e2:ae:e1:9d:b4: 16:06:2a:51:a0:10:ec:ab:f7:75:be:76:20:8b:c7: 5f:95:52:fb:28:71:a3:b2:67:ea:db:4c:19:c7:aa: d0:fc:e1:b9:aa:25:a5:10:ed:f7:3b:85:ad:71:8e: e5:13:03:8d:33:db:78:fd:af:cc:06:6c:29:57:5f: 93:df:aa:20:9b:03:00:e9:9c:91:8f:be:7e:6e:8c: 54:82:f1:e8:fd:c2:cb:df:2d:7d:52:a9:c5:a4:53: d2:80:38:e4:46:70:32:0f:24:92:75:1a:50:5d:f5: a7:a6:53:75:7a:34:85:7d:53:a7:f7:d8:6b:62:92: 38:bf:e0:95:87:63:f5:e7:72:1f:8d:3e:8d:ac:91: 96:66:13:7b:6f:12:2c:bc:9e:4f:f9:9b:d0:45:44: a7:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:D0:68:E4:B6:2B:5B:79:93:11:13:85:B6:0B:C0:3A:D5:89:C3:BA X509v3 Authority Key Identifier: keyid:EE:8B:A8:82:4C:5C:8D:20:73:26:A4:A3:AB:89:3E:BB:8F:50:96:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ouogkxcjSBzJqSjq4k-u49Qlq0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/PdBo5LYrW3mTEROFtgvAOtWJw7o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.197.54.0/23 Signature Algorithm: sha256WithRSAEncryption 64:fb:f0:36:52:16:65:a6:cf:cd:28:ec:77:54:3b:8b:c9:53: 68:a4:65:bf:5d:6b:49:e6:9c:07:75:b2:4c:59:1f:db:79:e0: bb:9c:64:7c:2e:93:14:86:f8:8d:c3:19:b5:85:54:43:37:1d: 61:29:54:60:a0:14:d2:de:d6:23:a8:14:81:f4:c3:07:2a:dd: 4e:8b:f9:75:f6:9a:c6:89:9d:80:28:47:2c:0c:92:3e:3e:b1: 3c:90:4c:6d:f7:58:db:bc:6e:f6:27:47:8b:2c:95:95:cc:5c: c5:8b:6d:ef:61:4b:76:f3:19:ec:40:ad:5b:53:86:30:c3:9d: 45:1d:99:17:b5:6b:c5:84:a6:db:f6:db:3f:89:48:81:46:1e: 9c:a9:1a:ef:ba:9a:b5:0e:f1:50:07:74:36:c6:da:df:79:db: e1:ac:04:3d:d8:b1:18:68:34:1b:08:d3:16:e0:10:4d:c1:67: e8:ab:5f:02:39:06:69:be:de:f3:9c:cb:86:6b:b5:fd:30:20: f2:c6:71:d5:be:d8:a7:0e:7b:f0:0b:5b:42:e4:0f:00:90:06: d5:a0:86:8f:aa:04:73:db:95:22:60:5a:9a:db:a8:a8:a2:30: a3:fa:37:56:4b:46:88:13:d0:fc:c8:94:81:e8:6e:4e:27:45: a1:5b:e9:51 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZv+79sD5iOY5ySrYOOv9M3FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlOGJhODgyNGM1YzhkMjA3MzI2YTRhM2FiODkzZWJiOGY1 MDk2YWQwHhcNMjYwMTI3MTAxMTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZGQwNjhlNGI2MmI1Yjc5OTMxMTEzODViNjBiYzAzYWQ1ODljM2JhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspwn7QEsJP6mef6DjvbERJ0f7R4j 6TOTq6ruAyhmXRAL+5T1EUh0ieRr4aL8jlE5P/i8n0dj4QwAnxLe5t3GUBiRvTCM 7nAThQRuqXeaVbIH+jMZ1Vci9o9Ah/D9xvQBGM8q4q7hnbQWBipRoBDsq/d1vnYg i8dflVL7KHGjsmfq20wZx6rQ/OG5qiWlEO33O4WtcY7lEwONM9t4/a/MBmwpV1+T 36ogmwMA6ZyRj75+boxUgvHo/cLL3y19UqnFpFPSgDjkRnAyDySSdRpQXfWnplN1 ejSFfVOn99hrYpI4v+CVh2P153IfjT6NrJGWZhN7bxIsvJ5P+ZvQRUSnhwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD3QaOS2K1t5kxEThbYLwDrVicO6MB8GA1UdIwQY MBaAFO6LqIJMXI0gcyako6uJPruPUJatMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN291b2dreGNqU0J6SnFTanE0ay11NDlRbHEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC82MzUwOWMtNTY3Ni00ZWFmLTk5ZDQt ZWVjZDI4ZTI4ZTM1LzEvUGRCbzVMWXJXM21URVJPRnRndkFPdFdKdzdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC82MzUwOWMtNTY3Ni00ZWFmLTk5ZDQtZWVjZDI4ZTI4ZTM1 LzEvN291b2dreGNqU0J6SnFTanE0ay11NDlRbHEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBUsU2MA0G CSqGSIb3DQEBCwUAA4IBAQBk+/A2UhZlps/NKOx3VDuLyVNopGW/XWtJ5pwHdbJM WR/beeC7nGR8LpMUhviNwxm1hVRDNx1hKVRgoBTS3tYjqBSB9MMHKt1Oi/l19prG iZ2AKEcsDJI+PrE8kExt91jbvG72J0eLLJWVzFzFi23vYUt28xnsQK1bU4Yww51F HZkXtWvFhKbb9ts/iUiBRh6cqRrvupq1DvFQB3Q2xtrfedvhrAQ92LEYaDQbCNMW 4BBNwWfoq18COQZpvt7znMuGa7X9MCDyxnHVvtinDnvwC1tC5A8AkAbVoIaPqgRz 25UiYFqa26ioojCj+jdWS0aIE9D8yJSB6G5OJ0WhW+lR -----END CERTIFICATE-----Generated at Sat Jan 31 07:25:21 2026 by rpki-client