This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/aD3ir7gVxlUOm_2sjOyjhFZE8xU.roa File: aD3ir7gVxlUOm_2sjOyjhFZE8xU.roa (raw, json) Hash identifier: WmqoSaafVJGk4mr4QTxo1ZyjpXHkEKbLAP8ZEUygZf4= Subject key identifier: 68:3D:E2:AF:B8:15:C6:55:0E:9B:FD:AC:8C:EC:A3:84:56:44:F3:15 Certificate issuer: /CN=e7f881401abacc88c941fdf740f1ab1536f05dba Certificate serial: 019B7EA6648266D5C1D32D7EDC91EB97B0A8 Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/aD3ir7gVxlUOm_2sjOyjhFZE8xU.roa Signing time: Fri 02 Jan 2026 12:19:52 +0000 ROA not before: Fri 02 Jan 2026 12:19:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34462 IP address blocks: 82.119.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.mft rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:64:82:66:d5:c1:d3:2d:7e:dc:91:eb:97:b0:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba Validity Not Before: Jan 2 12:19:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=683de2afb815c6550e9bfdac8ceca3845644f315 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d0:c1:40:88:f9:71:77:2c:47:5e:83:3e:20: c7:d4:03:2a:9b:8b:43:7c:a0:41:b7:cc:ae:07:e8: 73:98:31:85:96:4b:a8:19:9c:df:0b:9f:e8:c4:07: 0f:0b:15:a0:e3:bc:b7:25:d3:8c:d5:e9:33:a7:c7: 31:27:c7:53:e1:a6:e3:10:b8:cc:73:fd:29:61:37: de:44:3f:36:7f:1b:3e:e3:80:57:db:9e:ff:45:7c: 78:00:d6:8a:57:c5:cf:6f:9d:90:fa:0e:58:0a:82: 86:02:45:dd:0d:f5:a4:c7:18:86:1a:fd:88:f3:61: bf:1a:a7:7c:9f:e2:b5:f3:04:0f:4b:20:df:ea:2c: 75:33:0a:6f:a8:72:da:ff:67:52:f8:5b:bc:9d:f4: 18:a3:a0:b3:d1:b1:32:24:01:8f:29:96:5b:a2:5b: fb:56:a7:6f:3a:c4:4d:04:7f:2a:1a:1b:ec:5b:17: 90:78:d0:79:66:40:c3:c4:d7:d0:c9:b7:1b:6d:d0: b0:aa:1d:81:95:b2:15:d7:d8:38:95:18:8d:19:13: 9f:c5:59:50:71:c9:7c:7e:86:ef:8f:58:4b:d1:ac: 87:e8:6b:46:aa:c1:9c:b2:b1:e6:41:36:22:bb:2c: 74:8e:be:b9:75:6b:fc:67:2e:83:f2:94:b6:69:a3: 99:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:3D:E2:AF:B8:15:C6:55:0E:9B:FD:AC:8C:EC:A3:84:56:44:F3:15 X509v3 Authority Key Identifier: keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/aD3ir7gVxlUOm_2sjOyjhFZE8xU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.119.228.0/23 Signature Algorithm: sha256WithRSAEncryption 11:be:a2:8d:45:4b:f9:23:aa:0f:0e:eb:13:a6:6b:74:e2:1f: 82:7a:90:5f:bf:2a:ea:b3:60:76:23:b3:c6:b9:f4:cf:45:df: af:f5:f9:f7:03:27:8e:31:c9:c5:9f:5c:6f:5e:12:3b:47:00: d3:51:c2:58:91:e6:55:b9:52:49:f9:1d:7b:3b:f9:67:83:44: dc:27:50:52:49:58:a1:af:fe:9b:4c:84:10:db:3a:e8:3c:1e: 7d:36:b5:04:fd:28:f4:81:e0:31:c7:20:d0:11:e6:56:bb:35: 61:8f:e6:3c:01:30:9d:45:f3:2b:13:3f:7a:c8:9a:6f:8d:24: f8:c6:b1:2e:33:6f:7e:73:7e:2b:c2:48:58:8a:b3:c4:4c:a4: 71:bc:fa:b9:98:54:82:ca:4f:61:6a:6a:be:51:fe:7e:cd:3d: 12:ea:40:d0:d3:ae:36:b5:49:b2:b9:f7:fe:71:a1:6a:95:ac: 81:60:72:dd:c0:30:5d:a9:49:00:bc:82:87:fb:ee:c1:55:10: eb:f0:b8:77:05:d5:b5:af:66:db:59:8a:07:21:0b:e0:6d:4a: e8:2b:e8:bf:94:93:5a:22:8f:c9:a8:09:88:58:b7:41:fe:69: 52:48:c4:d1:76:6f:aa:42:b0:89:05:e8:13:ab:5b:2f:63:f5: c8:6f:7e:01 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pmSCZtXB0y1+3JHrl7CoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3Zjg4MTQwMWFiYWNjODhjOTQxZmRmNzQwZjFhYjE1MzZm MDVkYmEwHhcNMjYwMTAyMTIxOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODNkZTJhZmI4MTVjNjU1MGU5YmZkYWM4Y2VjYTM4NDU2NDRmMzE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNDBQIj5cXcsR16DPiDH1AMqm4tD fKBBt8yuB+hzmDGFlkuoGZzfC5/oxAcPCxWg47y3JdOM1ekzp8cxJ8dT4abjELjM c/0pYTfeRD82fxs+44BX257/RXx4ANaKV8XPb52Q+g5YCoKGAkXdDfWkxxiGGv2I 82G/Gqd8n+K18wQPSyDf6ix1MwpvqHLa/2dS+Fu8nfQYo6Cz0bEyJAGPKZZbolv7 VqdvOsRNBH8qGhvsWxeQeNB5ZkDDxNfQybcbbdCwqh2BlbIV19g4lRiNGROfxVlQ ccl8fobvj1hL0ayH6GtGqsGcsrHmQTYiuyx0jr65dWv8Zy6D8pS2aaOZIQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGg94q+4FcZVDpv9rIzso4RWRPMVMB8GA1UdIwQY MBaAFOf4gUAausyIyUH990DxqxU28F26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNV9pQlFCcTZ6SWpKUWYzM1FQR3JGVGJ3WGJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9mNTUzNGEtYTYxMy00N2JlLWI0MmIt ZTJmYmMzYTY4ODAwLzEvYUQzaXI3Z1Z4bFVPbV8yc2pPeWpoRlpFOHhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9mNTUzNGEtYTYxMy00N2JlLWI0MmItZTJmYmMzYTY4ODAw LzEvNV9pQlFCcTZ6SWpKUWYzM1FQR3JGVGJ3WGJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBUnfkMA0G CSqGSIb3DQEBCwUAA4IBAQARvqKNRUv5I6oPDusTpmt04h+CepBfvyrqs2B2I7PG ufTPRd+v9fn3AyeOMcnFn1xvXhI7RwDTUcJYkeZVuVJJ+R17O/lng0TcJ1BSSVih r/6bTIQQ2zroPB59NrUE/Sj0geAxxyDQEeZWuzVhj+Y8ATCdRfMrEz96yJpvjST4 xrEuM29+c34rwkhYirPETKRxvPq5mFSCyk9hamq+Uf5+zT0S6kDQ0642tUmyuff+ caFqlayBYHLdwDBdqUkAvIKH++7BVRDr8Lh3BdW1r2bbWYoHIQvgbUroK+i/lJNa Io/JqAmIWLdB/mlSSMTRdm+qQrCJBegTq1svY/XIb34B -----END CERTIFICATE-----Generated at Mon Jan 26 12:18:27 2026 by rpki-client