This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/9HtQbFiuMYK5vn6ZdJ9A8WN33CU.roa File: 9HtQbFiuMYK5vn6ZdJ9A8WN33CU.roa (raw, json) Hash identifier: NhpPo4MiaM2h+3uIW+206u04bojlNWdCKr/u5d1izOo= Subject key identifier: F4:7B:50:6C:58:AE:31:82:B9:BE:7E:99:74:9F:40:F1:63:77:DC:25 Certificate issuer: /CN=4f36103344fcd3b5759f2db3f3c7071376f9e233 Certificate serial: 019B7DCAEC442BF9062BBD336FBA881F4C0B Authority key identifier: 4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/9HtQbFiuMYK5vn6ZdJ9A8WN33CU.roa Signing time: Fri 02 Jan 2026 08:20:09 +0000 ROA not before: Fri 02 Jan 2026 08:20:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12301 IP address blocks: 82.150.37.0/24 maxlen: 24 193.194.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:ec:44:2b:f9:06:2b:bd:33:6f:ba:88:1f:4c:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f36103344fcd3b5759f2db3f3c7071376f9e233 Validity Not Before: Jan 2 08:20:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f47b506c58ae3182b9be7e99749f40f16377dc25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0a:5d:60:69:57:f4:e2:81:26:22:95:c5:b3: 06:48:da:85:a6:87:62:55:83:8a:64:70:50:5d:1b: cb:48:2a:c3:3d:9e:2d:9d:7d:b2:2f:5b:98:b8:11: ab:c1:ff:fa:42:7d:2c:cc:15:51:37:04:a5:02:5f: 4a:f5:9e:c0:d4:27:b6:a6:8d:63:ad:58:bf:f8:05: 3e:b6:42:47:3e:ab:5f:29:df:f2:52:76:dc:77:e7: 77:cb:ea:2f:05:3e:de:85:c2:f9:89:e1:de:0c:84: 84:63:d5:00:df:16:90:38:09:1e:01:44:38:84:d3: d1:ec:92:9e:1a:41:0f:09:2e:ed:f8:ef:61:c6:f9: 75:c9:74:cf:dd:2b:bf:27:dc:09:fa:ef:d7:a0:b4: 39:65:0e:d9:80:00:12:c5:cf:03:a9:f4:a0:40:81: 1c:bf:d9:04:2a:1e:db:f3:c8:9b:48:f3:56:f0:22: 6b:cb:80:ff:38:0d:e4:c5:39:2a:e9:e4:55:f9:42: 89:26:d6:ec:a2:b0:20:03:5a:e2:23:c7:4e:93:1f: e2:11:fa:36:79:b4:7e:7d:60:b3:aa:f8:27:d4:8c: ab:7a:f7:3f:4f:5b:2f:f1:ff:a6:eb:60:8e:70:91: 28:ac:f7:bf:97:c6:26:04:91:e0:f7:0a:e8:58:0c: dd:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:7B:50:6C:58:AE:31:82:B9:BE:7E:99:74:9F:40:F1:63:77:DC:25 X509v3 Authority Key Identifier: keyid:4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/9HtQbFiuMYK5vn6ZdJ9A8WN33CU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.150.37.0/24 193.194.159.0/24 Signature Algorithm: sha256WithRSAEncryption 02:76:bb:8f:ea:47:09:0a:af:65:9b:68:87:4a:cb:07:99:40: ca:46:60:39:dc:1a:72:c6:a0:2e:d4:88:e4:ed:87:fb:8c:71: 1a:50:b0:07:27:f4:19:d4:a6:98:be:2d:37:7f:0a:f6:f4:89: 2a:02:e2:6e:d1:ba:e2:47:69:98:0c:d5:79:2d:54:81:5d:46: d3:c8:0a:b5:9e:9f:35:9c:f5:94:59:27:09:f4:87:d3:4c:54: 5c:54:a3:7e:1d:ee:42:fe:23:39:ed:09:85:28:68:b9:a2:aa: 11:31:4c:4a:4f:e7:0c:90:f2:f6:23:ae:cc:f0:68:c3:52:9b: 1e:f8:4c:34:a9:af:0e:d9:4c:79:66:1c:c9:a8:29:05:5f:ba: 12:5d:01:c7:50:96:d2:55:ce:b6:24:ad:48:bb:5f:5f:fa:bb: 6b:a0:de:35:90:51:06:92:42:66:ed:30:79:c0:ea:80:4b:cd: 5d:4f:7e:7a:c3:f4:17:6d:db:ce:92:f6:dd:19:2a:3a:e6:c6: e7:17:b6:55:c4:e1:ba:17:64:2c:f9:9f:22:c7:27:d7:46:9d: 9c:5a:c3:59:a1:ef:fd:07:a4:25:97:84:f0:89:d6:7a:f7:18: ac:33:42:f7:f8:de:ff:8b:24:19:1a:97:e4:c9:21:e2:b5:f1: e6:a8:60:76 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9yuxEK/kGK70zb7qIH0wLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMzYxMDMzNDRmY2QzYjU3NTlmMmRiM2YzYzcwNzEzNzZm OWUyMzMwHhcNMjYwMTAyMDgyMDA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNDdiNTA2YzU4YWUzMTgyYjliZTdlOTk3NDlmNDBmMTYzNzdkYzI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvApdYGlX9OKBJiKVxbMGSNqFpodi VYOKZHBQXRvLSCrDPZ4tnX2yL1uYuBGrwf/6Qn0szBVRNwSlAl9K9Z7A1Ce2po1j rVi/+AU+tkJHPqtfKd/yUnbcd+d3y+ovBT7ehcL5ieHeDISEY9UA3xaQOAkeAUQ4 hNPR7JKeGkEPCS7t+O9hxvl1yXTP3Su/J9wJ+u/XoLQ5ZQ7ZgAASxc8DqfSgQIEc v9kEKh7b88ibSPNW8CJry4D/OA3kxTkq6eRV+UKJJtbsorAgA1riI8dOkx/iEfo2 ebR+fWCzqvgn1Iyrevc/T1sv8f+m62COcJEorPe/l8YmBJHg9wroWAzdGQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPR7UGxYrjGCub5+mXSfQPFjd9wlMB8GA1UdIwQY MBaAFE82EDNE/NO1dZ8ts/PHBxN2+eIzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHpZUU0wVDgwN1Yxbnkyejg4Y0hFM2I1NGpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy84MGQ5ZGYtZWFmMy00OGI2LThmZDUt MGFjYzg5MmIxMWQyLzEvOUh0UWJGaXVNWUs1dm42WmRKOUE4V04zM0NVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy84MGQ5ZGYtZWFmMy00OGI2LThmZDUtMGFjYzg5MmIxMWQy LzEvVHpZUU0wVDgwN1Yxbnkyejg4Y0hFM2I1NGpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUpYlAwQA wcKfMA0GCSqGSIb3DQEBCwUAA4IBAQACdruP6kcJCq9lm2iHSssHmUDKRmA53Bpy xqAu1Ijk7Yf7jHEaULAHJ/QZ1KaYvi03fwr29IkqAuJu0briR2mYDNV5LVSBXUbT yAq1np81nPWUWScJ9IfTTFRcVKN+He5C/iM57QmFKGi5oqoRMUxKT+cMkPL2I67M 8GjDUpse+Ew0qa8O2Ux5ZhzJqCkFX7oSXQHHUJbSVc62JK1Iu19f+rtroN41kFEG kkJm7TB5wOqAS81dT356w/QXbdvOkvbdGSo65sbnF7ZVxOG6F2Qs+Z8ixyfXRp2c WsNZoe/9B6Qll4TwidZ69xisM0L3+N7/iyQZGpfkySHitfHmqGB2 -----END CERTIFICATE-----Generated at Sun Jan 25 16:09:53 2026 by rpki-client