This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/CLa3JNQ78J4sBQQxh8GAqDQBO2U.roa File: CLa3JNQ78J4sBQQxh8GAqDQBO2U.roa (raw, json) Hash identifier: Ptpr2OeA+6xL/czPzBtIc73Iw+siDZQ42cRR8gFjgKk= Subject key identifier: 08:B6:B7:24:D4:3B:F0:9E:2C:05:04:31:87:C1:80:A8:34:01:3B:65 Certificate issuer: /CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c Certificate serial: 019B7DCB2578F70ED7A7055A08DB2AE77D14 Authority key identifier: 20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/CLa3JNQ78J4sBQQxh8GAqDQBO2U.roa Signing time: Fri 02 Jan 2026 08:20:23 +0000 ROA not before: Fri 02 Jan 2026 08:20:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20562 IP address blocks: 82.150.150.0/24 maxlen: 24 82.150.151.0/24 maxlen: 24 82.150.153.0/24 maxlen: 24 82.150.154.0/24 maxlen: 24 82.150.155.0/24 maxlen: 24 82.150.156.0/24 maxlen: 24 82.150.157.0/24 maxlen: 24 82.150.158.0/24 maxlen: 24 82.150.159.0/24 maxlen: 24 213.207.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:25:78:f7:0e:d7:a7:05:5a:08:db:2a:e7:7d:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c Validity Not Before: Jan 2 08:20:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=08b6b724d43bf09e2c05043187c180a834013b65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0c:84:46:92:39:ea:c6:a2:2c:df:90:11:0b: ba:fc:84:d5:41:c1:e7:5e:59:1a:4a:73:5f:fc:83: 82:be:d0:59:04:d7:ee:b3:96:fd:26:4d:a9:b0:83: 03:d4:6b:77:d2:60:e1:b2:4a:2a:ab:76:aa:ce:4f: 69:65:8f:6c:ca:d5:35:14:fa:fe:0a:d8:6a:22:eb: ed:1a:5c:0b:ec:4e:02:1c:e0:fe:34:20:4e:83:dd: 24:de:8f:60:4e:07:f9:39:b3:13:6b:d8:9a:1a:ea: e1:90:07:c1:8c:de:a4:d8:4b:66:db:96:f2:18:b3: cc:de:6e:81:c5:e3:87:f3:af:e7:4c:0b:23:4e:92: 9d:78:97:48:e5:ee:fd:67:9d:9e:d7:c3:02:13:e6: 3f:75:8d:b8:96:d2:2e:66:12:43:f0:7d:e0:44:24: 6e:05:9f:f6:37:39:76:76:85:e8:fc:95:e3:af:35: 8d:07:1b:44:74:d1:8a:67:2d:6f:91:74:91:00:6a: e7:e2:8d:81:de:2c:9b:3c:96:21:c3:8d:4e:e7:f1: 69:72:86:e8:10:c6:ad:04:15:97:62:86:e3:bb:d5: d7:7b:ce:71:e9:bf:cd:ef:97:db:40:f0:7a:c8:01: 5d:8b:74:79:fd:31:3c:aa:48:bd:2b:d6:a0:b8:55: 25:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:B6:B7:24:D4:3B:F0:9E:2C:05:04:31:87:C1:80:A8:34:01:3B:65 X509v3 Authority Key Identifier: keyid:20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/CLa3JNQ78J4sBQQxh8GAqDQBO2U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.150.150.0/23 82.150.153.0-82.150.159.255 213.207.20.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:d8:b8:42:22:39:b1:29:d1:4f:60:6c:cf:66:dc:ff:5e:66: d9:fd:2f:96:b9:f6:a5:2f:e9:66:6e:4c:37:19:46:5b:80:0f: 01:82:0e:6c:ad:1d:54:ab:9f:b9:b8:07:a2:d7:65:f1:ce:81: bc:8d:23:f4:1a:3f:56:9f:ff:4e:b0:e2:1a:f9:d0:c1:ed:75: 72:1e:6d:d7:43:2c:4e:a3:f0:c4:30:33:ea:48:55:01:a8:b9: 33:1d:49:16:99:4b:93:76:c3:66:d9:8d:27:db:f3:99:77:b8: 54:73:78:64:7d:a4:28:02:68:75:c9:13:28:a2:71:44:8e:11: fc:7f:0c:d8:9d:de:78:cd:63:00:8c:a1:5e:34:78:d9:6d:a0: f6:89:1b:84:e2:fa:f7:b0:13:5a:5c:9a:36:55:02:b8:64:db: 20:ba:84:0a:49:26:21:0a:48:ce:fe:8f:e6:ce:3d:bf:d3:5f: f8:ab:77:9f:e3:90:e2:c8:ad:dd:72:0f:2a:6a:78:f3:f4:0a: 4b:d5:e9:ef:c8:dc:fc:bd:c9:94:98:98:63:83:d0:56:2c:3e: 5d:86:bf:c0:ad:8a:09:78:ca:50:14:25:4a:07:ee:64:b4:1d: 43:62:04:42:bd:55:bc:24:53:3b:6d:e9:58:c0:39:59:86:ae: 35:b7:0a:66 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt9yyV49w7XpwVaCNsq530UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwMWZlMzBmYzZiNGIwZDBmNmRiNGUxYmZiYmQ1MDE5NWRj YTU3NWMwHhcNMjYwMTAyMDgyMDIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOGI2YjcyNGQ0M2JmMDllMmMwNTA0MzE4N2MxODBhODM0MDEzYjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQyERpI56saiLN+QEQu6/ITVQcHn XlkaSnNf/IOCvtBZBNfus5b9Jk2psIMD1Gt30mDhskoqq3aqzk9pZY9sytU1FPr+ CthqIuvtGlwL7E4CHOD+NCBOg90k3o9gTgf5ObMTa9iaGurhkAfBjN6k2Etm25by GLPM3m6BxeOH86/nTAsjTpKdeJdI5e79Z52e18MCE+Y/dY24ltIuZhJD8H3gRCRu BZ/2Nzl2doXo/JXjrzWNBxtEdNGKZy1vkXSRAGrn4o2B3iybPJYhw41O5/Fpcobo EMatBBWXYobju9XXe85x6b/N75fbQPB6yAFdi3R5/TE8qki9K9aguFUlkQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFAi2tyTUO/CeLAUEMYfBgKg0ATtlMB8GA1UdIwQY MBaAFCAf4w/GtLDQ9ttOG/u9UBldyldcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUJfakQ4YTBzTkQyMjA0Yi03MVFHVjNLVjF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My84ZDgwZjktNDk0ZS00YWJiLTk5NTYt ZmMxMjFjODAwYjMwLzEvQ0xhM0pOUTc4SjRzQlFReGg4R0FxRFFCTzJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My84ZDgwZjktNDk0ZS00YWJiLTk5NTYtZmMxMjFjODAwYjMw LzEvSUJfakQ4YTBzTkQyMjA0Yi03MVFHVjNLVjF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQBUpaWMAwD BABSlpkDBAVSloADBADVzxQwDQYJKoZIhvcNAQELBQADggEBAC7YuEIiObEp0U9g bM9m3P9eZtn9L5a59qUv6WZuTDcZRluADwGCDmytHVSrn7m4B6LXZfHOgbyNI/Qa P1af/06w4hr50MHtdXIebddDLE6j8MQwM+pIVQGouTMdSRaZS5N2w2bZjSfb85l3 uFRzeGR9pCgCaHXJEyiicUSOEfx/DNid3njNYwCMoV40eNltoPaJG4Ti+vewE1pc mjZVArhk2yC6hApJJiEKSM7+j+bOPb/TX/ird5/jkOLIrd1yDypqePP0CkvV6e/I 3Py9yZSYmGOD0FYsPl2Gv8Ctigl4ylAUJUoH7mS0HUNiBEK9VbwkUztt6VjAOVmG rjW3CmY= -----END CERTIFICATE-----Generated at Sun Jan 25 19:39:32 2026 by rpki-client