This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/_6SUA7PKYEVFBTaDAhE_A7MmF48.roa File: _6SUA7PKYEVFBTaDAhE_A7MmF48.roa (raw, json) Hash identifier: uJO3tMs1LSBIuJd7osQRiXv584cj5QanzKyRrYPze+w= Subject key identifier: FF:A4:94:03:B3:CA:60:45:45:05:36:83:02:11:3F:03:B3:26:17:8F Certificate issuer: /CN=fb987244611b5230536744b6a89f044f32f462ea Certificate serial: 019B7C129E29DAE311C1AE508FE9EDB72BC3 Authority key identifier: FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/_6SUA7PKYEVFBTaDAhE_A7MmF48.roa Signing time: Fri 02 Jan 2026 00:19:13 +0000 ROA not before: Fri 02 Jan 2026 00:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43463 IP address blocks: 82.135.156.0/23 maxlen: 23 82.135.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:9e:29:da:e3:11:c1:ae:50:8f:e9:ed:b7:2b:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb987244611b5230536744b6a89f044f32f462ea Validity Not Before: Jan 2 00:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ffa49403b3ca60454505368302113f03b326178f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d1:2c:e9:b5:4b:b5:7f:c4:57:ff:f2:ef:e4: 51:49:11:d3:d0:06:23:b2:9b:02:3a:58:15:b5:54: f9:77:ac:02:4a:86:47:a7:ec:4e:ea:fd:f4:87:f2: f7:72:24:5c:41:81:e3:3d:40:d5:86:8c:fd:77:83: 36:62:c8:63:70:34:08:8e:a8:7f:34:16:83:6b:74: ab:15:4e:32:16:5b:a6:1c:f9:33:ab:00:64:f9:32: 78:a4:1e:0d:1e:de:06:b7:35:e3:33:06:da:c7:41: eb:5d:81:ef:a5:c8:d7:c3:a7:dc:be:d3:18:49:47: 75:1e:55:f7:b5:d4:34:a7:a8:d9:0a:89:3e:e0:14: 09:d6:c4:26:9d:71:a4:9f:a8:c3:8e:6f:f6:6a:b6: 2b:ce:9d:34:1b:d0:f3:c1:4d:df:0e:0a:7f:36:a4: 39:85:73:35:04:7e:be:bf:8f:4f:6b:1c:07:70:35: de:fb:b2:af:d4:28:8d:77:28:a2:65:b9:ba:e1:e9: 54:ae:3f:8d:b2:e0:be:46:03:cd:0f:29:2c:64:41: b8:01:b8:e2:3e:2c:f4:dc:99:c8:d4:cb:dd:af:a9: 76:e9:0f:28:79:3c:3b:2a:88:67:2b:5d:be:99:cb: 19:e5:55:bf:71:50:f9:05:23:f0:73:1a:7e:0a:71: ca:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:A4:94:03:B3:CA:60:45:45:05:36:83:02:11:3F:03:B3:26:17:8F X509v3 Authority Key Identifier: keyid:FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/_6SUA7PKYEVFBTaDAhE_A7MmF48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.135.156.0/23 82.135.228.0/22 Signature Algorithm: sha256WithRSAEncryption 2a:1e:d8:15:0e:a8:a0:0a:13:17:23:74:6c:af:9a:b2:9c:c0: e9:01:33:67:bb:ea:d7:36:fd:ed:30:18:56:a1:46:6a:44:e4: bb:8a:b9:34:7b:77:74:a2:85:c6:c5:d9:9c:76:be:67:d0:65: 2d:c9:57:01:15:30:9f:4f:5a:27:f8:25:7c:83:02:91:62:d2: 06:f6:c3:1f:cd:e2:78:bb:ae:63:d9:00:d7:4d:e8:7f:39:cf: 2a:ea:39:b1:e2:8b:50:65:f3:07:eb:6c:10:27:10:61:5f:53: 53:a6:f7:76:8f:a2:41:9a:4d:00:8a:20:82:1c:92:53:57:f8: 09:0b:e1:ce:33:e2:32:ce:68:d7:78:32:0c:50:16:a1:dc:f8: 7b:37:e5:c5:58:ab:da:ea:77:fc:a8:88:0b:9a:62:d2:12:7d: aa:2d:98:50:bd:49:de:eb:48:3e:eb:1d:b6:e4:54:33:ac:bf: d3:93:75:c1:fc:89:6b:1b:c0:68:47:68:24:22:60:e9:0e:d3: ef:4a:c5:fe:51:4e:16:70:75:40:61:47:55:ba:45:1c:f0:94: 9e:44:e1:cb:a4:aa:19:06:92:eb:9a:68:f9:94:c4:c9:24:be: 9c:a8:41:2d:8a:95:03:14:10:ee:3b:2e:13:53:6f:12:3c:e2: 81:ce:fd:e2 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt8Ep4p2uMRwa5Qj+nttyvDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiOTg3MjQ0NjExYjUyMzA1MzY3NDRiNmE4OWYwNDRmMzJm NDYyZWEwHhcNMjYwMTAyMDAxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZmE0OTQwM2IzY2E2MDQ1NDUwNTM2ODMwMjExM2YwM2IzMjYxNzhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNEs6bVLtX/EV//y7+RRSRHT0AYj spsCOlgVtVT5d6wCSoZHp+xO6v30h/L3ciRcQYHjPUDVhoz9d4M2YshjcDQIjqh/ NBaDa3SrFU4yFlumHPkzqwBk+TJ4pB4NHt4GtzXjMwbax0HrXYHvpcjXw6fcvtMY SUd1HlX3tdQ0p6jZCok+4BQJ1sQmnXGkn6jDjm/2arYrzp00G9DzwU3fDgp/NqQ5 hXM1BH6+v49PaxwHcDXe+7Kv1CiNdyiiZbm64elUrj+NsuC+RgPNDyksZEG4Abji Piz03JnI1Mvdr6l26Q8oeTw7KohnK12+mcsZ5VW/cVD5BSPwcxp+CnHKoQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFP+klAOzymBFRQU2gwIRPwOzJhePMB8GA1UdIwQY MBaAFPuYckRhG1IwU2dEtqifBE8y9GLqMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS01aHlSR0ViVWpCVFowUzJxSjhFVHpMMFl1by5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDQvMzE5ZDdjLTdlNzYtNDMwOC1iYzAw LWJlNTgzMmQ1ZjdhYS8xL182U1VBN1BLWUVWRkJUYURBaEVfQTdNbUY0OC5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNDQvMzE5ZDdjLTdlNzYtNDMwOC1iYzAwLWJlNTgzMmQ1Zjdh YS8xLzEtNWh5UkdFYlVqQlRaMFMycUo4RVR6TDBZdW8uY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAFSh5wD BAJSh+QwDQYJKoZIhvcNAQELBQADggEBACoe2BUOqKAKExcjdGyvmrKcwOkBM2e7 6tc2/e0wGFahRmpE5LuKuTR7d3SihcbF2Zx2vmfQZS3JVwEVMJ9PWif4JXyDApFi 0gb2wx/N4ni7rmPZANdN6H85zyrqObHii1Bl8wfrbBAnEGFfU1Om93aPokGaTQCK IIIcklNX+AkL4c4z4jLOaNd4MgxQFqHc+Hs35cVYq9rqd/yoiAuaYtISfaotmFC9 Sd7rSD7rHbbkVDOsv9OTdcH8iWsbwGhHaCQiYOkO0+9Kxf5RThZwdUBhR1W6RRzw lJ5E4cukqhkGkuuaaPmUxMkkvpyoQS2KlQMUEO47LhNTbxI84oHO/eI= -----END CERTIFICATE-----Generated at Sun Jan 25 21:03:06 2026 by rpki-client