This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Q97r5DpOzAiwP4rhjuyHyUDSJ20.roa File: Q97r5DpOzAiwP4rhjuyHyUDSJ20.roa (raw, json) Hash identifier: 9OXjDqXqUBHg5Xmpj9SZ8E0O+G30jS5FTAp/zLKlpOg= Subject key identifier: 43:DE:EB:E4:3A:4E:CC:08:B0:3F:8A:E1:8E:EC:87:C9:40:D2:27:6D Certificate issuer: /CN=2a6edf23264b43821dae97d10bd364cb6bb7f234 Certificate serial: 019B7CED5D18E3F5794EC03C11BFA3D0CF22 Authority key identifier: 2A:6E:DF:23:26:4B:43:82:1D:AE:97:D1:0B:D3:64:CB:6B:B7:F2:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Q97r5DpOzAiwP4rhjuyHyUDSJ20.roa Signing time: Fri 02 Jan 2026 04:18:09 +0000 ROA not before: Fri 02 Jan 2026 04:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213541 IP address blocks: 82.117.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:5d:18:e3:f5:79:4e:c0:3c:11:bf:a3:d0:cf:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a6edf23264b43821dae97d10bd364cb6bb7f234 Validity Not Before: Jan 2 04:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=43deebe43a4ecc08b03f8ae18eec87c940d2276d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f7:75:20:47:af:00:d2:94:59:53:71:d5:79: 75:f2:7c:1d:17:b2:a7:40:37:21:a0:83:58:be:5b: 18:46:68:99:bb:ac:c2:b7:d1:5e:0e:30:34:53:cc: 54:a6:64:ec:1a:38:10:0b:de:40:de:ee:c5:cd:8d: 99:60:24:f4:42:9f:85:e5:01:34:e5:15:6e:63:42: 80:ee:2a:20:5e:3f:c5:76:02:f6:35:67:51:1c:26: da:ef:e7:35:97:09:80:41:e4:a9:e4:1a:fc:64:f0: 83:19:3b:9d:61:8a:e9:02:c7:b1:92:f9:ed:21:58: 45:ee:2e:bf:78:19:4a:88:bd:05:be:a1:23:8c:66: b1:b5:d1:bc:91:bf:de:60:7a:3e:34:b3:bf:1e:f6: 46:7a:1d:1e:46:14:ba:35:a7:47:02:08:6d:f3:50: 6d:95:b4:74:7e:5a:4b:cf:b1:2e:79:7d:19:61:62: 04:2a:7a:c1:08:96:ff:59:52:4d:9f:2d:1d:08:80: 8b:bd:60:30:ee:00:a6:54:4d:6f:6b:78:e7:07:07: 76:58:49:f2:69:4d:a8:12:8c:6b:c0:f1:60:70:ea: dd:c1:4a:8e:ea:85:ec:79:60:aa:1c:3e:42:6c:73: e7:9c:1b:13:ef:ca:7f:98:c4:8c:31:dd:dc:a7:24: 1c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:DE:EB:E4:3A:4E:CC:08:B0:3F:8A:E1:8E:EC:87:C9:40:D2:27:6D X509v3 Authority Key Identifier: keyid:2A:6E:DF:23:26:4B:43:82:1D:AE:97:D1:0B:D3:64:CB:6B:B7:F2:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Q97r5DpOzAiwP4rhjuyHyUDSJ20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.117.82.0/24 Signature Algorithm: sha256WithRSAEncryption 19:39:a6:ca:e0:09:9b:3d:b5:5e:ae:51:51:14:b6:fa:e9:fb: 8b:5f:93:00:2c:05:f4:bd:b3:cd:7f:c4:0b:74:2e:0d:d4:cc: 28:84:7b:0a:98:82:b7:9f:1a:f2:b4:27:92:9f:f6:d2:97:f4: db:4d:60:e8:52:66:49:b1:14:63:fb:c5:08:63:b4:74:a2:3a: b8:34:57:01:00:bf:ff:43:07:b4:b7:40:1d:a2:6d:72:75:47: 01:f0:ed:92:92:54:ea:63:06:21:c5:39:3d:cc:ba:ae:0b:6b: 03:f1:e4:40:2c:36:78:9c:f1:52:69:9b:e9:93:e9:62:a0:68: b7:1b:59:2d:7c:9f:f4:b3:a5:a9:94:a8:16:a0:45:d3:02:52: 10:7b:1a:6c:82:6c:95:a8:f0:2a:ca:b1:52:1c:55:93:d5:d6: 2d:06:d8:d0:e5:be:c5:e5:a2:54:f8:4d:0e:e6:8d:fd:30:2e: 73:d3:c3:ad:dc:3b:90:42:d2:bd:dc:3b:dd:71:c5:f4:e7:dd: 5e:f4:a3:25:e7:12:67:47:9d:93:63:b2:17:7c:76:94:6f:8e: 40:dd:98:58:6a:36:5c:49:7b:14:31:e7:9c:2b:57:8d:79:dd: 5f:bc:83:c0:f3:1e:06:76:fd:81:53:5d:93:60:e5:00:09:98: e8:a8:de:fb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87V0Y4/V5TsA8Eb+j0M8iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhNmVkZjIzMjY0YjQzODIxZGFlOTdkMTBiZDM2NGNiNmJi N2YyMzQwHhcNMjYwMTAyMDQxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0M2RlZWJlNDNhNGVjYzA4YjAzZjhhZTE4ZWVjODdjOTQwZDIyNzZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPd1IEevANKUWVNx1Xl18nwdF7Kn QDchoINYvlsYRmiZu6zCt9FeDjA0U8xUpmTsGjgQC95A3u7FzY2ZYCT0Qp+F5QE0 5RVuY0KA7iogXj/FdgL2NWdRHCba7+c1lwmAQeSp5Br8ZPCDGTudYYrpAsexkvnt IVhF7i6/eBlKiL0FvqEjjGaxtdG8kb/eYHo+NLO/HvZGeh0eRhS6NadHAght81Bt lbR0flpLz7EueX0ZYWIEKnrBCJb/WVJNny0dCICLvWAw7gCmVE1va3jnBwd2WEny aU2oEoxrwPFgcOrdwUqO6oXseWCqHD5CbHPnnBsT78p/mMSMMd3cpyQcAQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEPe6+Q6TswIsD+K4Y7sh8lA0idtMB8GA1UdIwQY MBaAFCpu3yMmS0OCHa6X0QvTZMtrt/I0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS203Zkl5WkxRNElkcnBmUkM5Tmt5MnUzOGpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS85YmI0MGQtMzYzOC00NDllLWFlMjUt ZDQyOGYyMzQ5NjYwLzEvUTk3cjVEcE96QWl3UDRyaGp1eUh5VURTSjIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS85YmI0MGQtMzYzOC00NDllLWFlMjUtZDQyOGYyMzQ5NjYw LzEvS203Zkl5WkxRNElkcnBmUkM5Tmt5MnUzOGpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUnVSMA0G CSqGSIb3DQEBCwUAA4IBAQAZOabK4AmbPbVerlFRFLb66fuLX5MALAX0vbPNf8QL dC4N1MwohHsKmIK3nxrytCeSn/bSl/TbTWDoUmZJsRRj+8UIY7R0ojq4NFcBAL// Qwe0t0Adom1ydUcB8O2SklTqYwYhxTk9zLquC2sD8eRALDZ4nPFSaZvpk+lioGi3 G1ktfJ/0s6WplKgWoEXTAlIQexpsgmyVqPAqyrFSHFWT1dYtBtjQ5b7F5aJU+E0O 5o39MC5z08Ot3DuQQtK93DvdccX0591e9KMl5xJnR52TY7IXfHaUb45A3ZhYajZc SXsUMeecK1eNed1fvIPA8x4Gdv2BU12TYOUACZjoqN77 -----END CERTIFICATE-----Generated at Sun Jan 25 13:07:22 2026 by rpki-client