This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/jB3wCiu-AvDKO3DTXUCgLV9LXBA.roa
File: jB3wCiu-AvDKO3DTXUCgLV9LXBA.roa (raw, json)
Hash identifier: 1qE+PeKCdqwLTMKhlG/DvcYz45q96dHEsGiuDU6+/bM=
Subject key identifier: 8C:1D:F0:0A:2B:BE:02:F0:CA:3B:70:D3:5D:40:A0:2D:5F:4B:5C:10
Certificate issuer: /CN=c9fe703d3790cdb8514a603e7a45ee50eeffa962
Certificate serial: 019B7C124AF27F90091C05F2BC3676E79F5A
Authority key identifier: C9:FE:70:3D:37:90:CD:B8:51:4A:60:3E:7A:45:EE:50:EE:FF:A9:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/jB3wCiu-AvDKO3DTXUCgLV9LXBA.roa
Signing time: Fri 02 Jan 2026 00:18:52 +0000
ROA not before: Fri 02 Jan 2026 00:18:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212865
IP address blocks: 185.82.103.0/24 maxlen: 24
2a05:8f00:8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:12:4a:f2:7f:90:09:1c:05:f2:bc:36:76:e7:9f:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9fe703d3790cdb8514a603e7a45ee50eeffa962
Validity
Not Before: Jan 2 00:18:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8c1df00a2bbe02f0ca3b70d35d40a02d5f4b5c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2c:35:0c:1c:44:d4:f6:58:46:9a:f0:7e:83:
76:ee:4a:f5:11:70:29:fa:65:ea:d0:fd:5e:c4:e8:
b5:03:3e:c5:96:08:93:67:ee:e3:9f:b7:18:03:64:
83:b9:fe:4a:29:1f:25:a9:1d:97:2b:10:7a:92:27:
c8:ca:4f:79:9d:15:45:a4:20:43:f1:55:9f:59:a0:
4d:e2:40:97:11:7e:96:d0:d9:a8:49:1b:02:05:e4:
f0:ba:61:3e:b5:9a:2b:61:b2:60:73:6e:f1:3c:0b:
88:35:a6:6f:ee:7d:3a:66:d9:bf:5f:70:fa:ca:5f:
95:23:6b:a6:1b:27:d3:51:71:27:99:01:55:38:e3:
74:39:9a:db:78:cb:1e:40:8e:da:78:6c:cf:ff:6b:
ca:fe:dc:dc:d8:d0:72:02:08:8c:9c:c3:c7:f8:c1:
3e:53:f5:d3:c1:e9:1c:c1:c7:7b:d0:6a:3c:de:2a:
d0:e9:a1:7f:30:8a:7f:20:62:b9:e3:8d:b5:30:02:
35:30:1b:ee:c8:c0:a0:50:cf:c2:87:8d:1a:96:bb:
a3:e7:41:a3:97:9c:38:85:e6:9d:b4:04:4c:41:8a:
af:20:3f:ae:a7:ca:dd:cb:f4:0b:55:bb:25:2a:b5:
4f:4c:76:a3:2f:c7:12:35:b4:41:67:a3:1b:88:c1:
c2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:1D:F0:0A:2B:BE:02:F0:CA:3B:70:D3:5D:40:A0:2D:5F:4B:5C:10
X509v3 Authority Key Identifier:
keyid:C9:FE:70:3D:37:90:CD:B8:51:4A:60:3E:7A:45:EE:50:EE:FF:A9:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/jB3wCiu-AvDKO3DTXUCgLV9LXBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.82.103.0/24
IPv6:
2a05:8f00:8::/48
Signature Algorithm: sha256WithRSAEncryption
9d:db:e4:13:8b:30:a4:cc:54:54:6d:ee:72:c0:59:8c:bb:32:
d6:b8:b6:02:d1:59:ae:12:d8:9c:a7:5f:35:28:81:6c:17:02:
73:df:08:ae:f9:ed:20:a5:e5:19:4e:6c:48:0b:2b:bb:02:d1:
59:c3:26:f8:f7:29:01:70:40:bb:e7:ff:ae:5f:4c:40:8f:34:
6d:41:30:28:5d:ce:be:b3:af:42:5e:b5:80:7e:96:73:d5:ac:
b5:b0:66:34:f4:7a:52:84:bd:a5:bb:1a:1c:38:05:7c:ac:7a:
9c:f7:9c:94:1c:71:3e:6a:e3:0d:65:45:b3:58:4e:86:8f:85:
76:0e:f1:36:1d:c8:9d:68:ea:08:f5:14:ef:32:e1:94:fb:4d:
1f:f6:75:e1:d9:72:27:3e:6b:01:23:b3:6f:8c:bf:38:e3:e8:
ae:b8:f2:42:a9:4f:25:2e:ea:4f:38:20:eb:23:e1:98:30:84:
82:c9:11:cd:c5:f6:62:f5:fe:b4:c9:4e:1e:50:47:a5:8e:f1:
fa:23:5a:7f:4e:25:19:7e:74:3d:c9:a7:a8:e2:4a:c8:4d:3a:
ba:39:84:84:f2:ea:0a:22:4b:f2:de:a8:7a:b6:08:35:dd:ce:
e7:3d:78:1c:ed:55:1b:75:8d:ee:10:c8:db:78:77:0b:08:fd:
db:db:24:13
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZt8Ekryf5AJHAXyvDZ2559aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZmU3MDNkMzc5MGNkYjg1MTRhNjAzZTdhNDVlZTUwZWVm
ZmE5NjIwHhcNMjYwMTAyMDAxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzFkZjAwYTJiYmUwMmYwY2EzYjcwZDM1ZDQwYTAyZDVmNGI1YzEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCw1DBxE1PZYRprwfoN27kr1EXAp
+mXq0P1exOi1Az7FlgiTZ+7jn7cYA2SDuf5KKR8lqR2XKxB6kifIyk95nRVFpCBD
8VWfWaBN4kCXEX6W0NmoSRsCBeTwumE+tZorYbJgc27xPAuINaZv7n06Ztm/X3D6
yl+VI2umGyfTUXEnmQFVOON0OZrbeMseQI7aeGzP/2vK/tzc2NByAgiMnMPH+ME+
U/XTwekcwcd70Go83irQ6aF/MIp/IGK54421MAI1MBvuyMCgUM/Ch40alruj50Gj
l5w4headtARMQYqvID+up8rdy/QLVbslKrVPTHajL8cSNbRBZ6MbiMHCVwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIwd8AorvgLwyjtw011AoC1fS1wQMB8GA1UdIwQY
MBaAFMn+cD03kM24UUpgPnpF7lDu/6liMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWY1d1BUZVF6YmhSU21BLWVrWHVVTzdfcVdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC80YzNkNWEtYTI3Zi00YjliLTlkMDgt
NzRjOGRhMjk0ZDVjLzEvakIzd0NpdS1BdkRLTzNEVFhVQ2dMVjlMWEJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC80YzNkNWEtYTI3Zi00YjliLTlkMDgtNzRjOGRhMjk0ZDVj
LzEveWY1d1BUZVF6YmhSU21BLWVrWHVVTzdfcVdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuVJnMA8E
AgACMAkDBwAqBY8AAAgwDQYJKoZIhvcNAQELBQADggEBAJ3b5BOLMKTMVFRt7nLA
WYy7Mta4tgLRWa4S2JynXzUogWwXAnPfCK757SCl5RlObEgLK7sC0VnDJvj3KQFw
QLvn/65fTECPNG1BMChdzr6zr0JetYB+lnPVrLWwZjT0elKEvaW7Ghw4BXysepz3
nJQccT5q4w1lRbNYToaPhXYO8TYdyJ1o6gj1FO8y4ZT7TR/2deHZcic+awEjs2+M
vzjj6K648kKpTyUu6k84IOsj4ZgwhILJEc3F9mL1/rTJTh5QR6WO8fojWn9OJRl+
dD3Jp6jiSshNOro5hITy6goiS/LeqHq2CDXdzuc9eBztVRt1je4QyNt4dwsI/dvb
JBM=
-----END CERTIFICATE-----
Generated at Mon Jan 26 01:15:00 2026 by rpki-client