This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/o4kcznAm2T0ASiz1k23GlpFApQo.roa File: o4kcznAm2T0ASiz1k23GlpFApQo.roa (raw, json) Hash identifier: 0h+QZjz610NJvNnLCynCQNNnIrDvurMXfFwfYmM8IOM= Subject key identifier: A3:89:1C:CE:70:26:D9:3D:00:4A:2C:F5:93:6D:C6:96:91:40:A5:0A Certificate issuer: /CN=fc44297e9271c6edf064915f6180ae12690dda8b Certificate serial: 019B791051FBC32F04F5A48830CA1809A49B Authority key identifier: FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/o4kcznAm2T0ASiz1k23GlpFApQo.roa Signing time: Thu 01 Jan 2026 10:17:51 +0000 ROA not before: Thu 01 Jan 2026 10:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200403 IP address blocks: 82.114.48.0/24 maxlen: 24 82.114.49.0/24 maxlen: 24 82.114.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.mft rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:51:fb:c3:2f:04:f5:a4:88:30:ca:18:09:a4:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc44297e9271c6edf064915f6180ae12690dda8b Validity Not Before: Jan 1 10:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a3891cce7026d93d004a2cf5936dc6969140a50a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:4b:7c:95:2b:84:28:2a:bf:a6:46:57:4b:5a: a2:da:24:f5:70:97:39:a1:a7:66:f4:33:21:40:ab: 0e:09:bf:09:10:05:73:b0:6f:6f:be:69:df:5b:70: 3b:30:1e:e6:58:44:68:ac:b8:eb:37:b1:a4:3f:ba: 3b:b7:fc:18:41:26:e7:fd:87:f9:a7:10:3e:c2:da: c1:9a:33:03:93:9c:34:8a:b3:85:36:d9:75:d3:a6: 65:ca:64:60:9e:f7:0c:3b:ae:4f:df:4c:ea:48:d6: 6d:cb:59:a7:c5:4b:58:ed:32:5d:fe:11:5c:d4:58: 84:b4:81:43:d0:3f:ea:2c:df:68:b9:e6:74:ba:b8: d2:d4:26:83:0c:28:f3:12:21:b9:56:40:ba:22:99: 27:4c:c6:80:d5:d2:72:0d:f8:bd:e3:22:f7:a7:8f: 54:7a:f6:67:42:35:71:60:d6:a2:34:a9:01:97:ef: 02:7b:26:28:82:64:0b:ac:e9:c2:8d:38:f9:fe:4c: ec:98:38:c7:48:db:3e:91:8d:41:41:75:36:85:69: d6:93:3d:29:7c:97:23:66:a4:e7:75:17:3c:03:df: 30:8a:4f:a9:5c:53:bc:f4:c1:90:8d:da:0a:70:d3: 61:41:77:c1:07:75:48:3b:33:ae:7a:41:3c:2c:dc: cc:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:89:1C:CE:70:26:D9:3D:00:4A:2C:F5:93:6D:C6:96:91:40:A5:0A X509v3 Authority Key Identifier: keyid:FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/o4kcznAm2T0ASiz1k23GlpFApQo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.114.48.0-82.114.50.255 Signature Algorithm: sha256WithRSAEncryption 07:ea:08:6f:fe:a5:bb:95:c4:e5:a2:b1:7b:fb:b6:07:81:49: f7:a6:25:6b:d6:a4:93:3f:3d:49:f6:08:75:3f:48:32:35:04: d8:23:f1:3e:40:1d:51:f7:5a:22:a5:89:cc:c0:b5:50:f4:91: 48:5a:f1:fe:b2:01:81:37:0f:77:b6:20:79:68:ae:64:14:c4: e9:5b:84:95:53:e9:33:a3:da:d6:37:ed:da:c9:76:fc:c1:2a: ef:21:0c:fc:73:9f:58:a0:26:36:90:81:63:b7:c9:2e:f2:05: ee:ad:fe:1d:60:8c:c8:a8:72:90:42:09:6b:a3:ee:49:7d:19: 08:47:de:b6:25:41:92:14:49:7e:7e:05:99:53:a4:31:65:dc: da:27:dc:0b:f2:c8:29:fe:0e:03:c2:b0:9f:69:5f:b0:4d:b5: 0f:03:a1:8c:85:c2:8d:79:1b:74:d9:c1:65:c0:81:fa:87:a5: 37:d2:2b:c0:15:5d:38:e1:eb:78:0c:ed:ae:0e:b6:7b:d5:81: 1f:f9:8e:2f:a4:70:ab:9f:a0:48:83:70:aa:5c:49:35:15:12: 09:84:7f:30:14:7b:1c:2d:6d:b7:b3:27:4c:ec:3c:3c:49:08: f7:71:73:9d:85:5f:b4:43:56:c4:7e:44:44:40:8e:cd:f2:8e: 00:ab:fe:c9 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt5EFH7wy8E9aSIMMoYCaSbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjNDQyOTdlOTI3MWM2ZWRmMDY0OTE1ZjYxODBhZTEyNjkw ZGRhOGIwHhcNMjYwMTAxMTAxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzg5MWNjZTcwMjZkOTNkMDA0YTJjZjU5MzZkYzY5NjkxNDBhNTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykt8lSuEKCq/pkZXS1qi2iT1cJc5 oadm9DMhQKsOCb8JEAVzsG9vvmnfW3A7MB7mWERorLjrN7GkP7o7t/wYQSbn/Yf5 pxA+wtrBmjMDk5w0irOFNtl106ZlymRgnvcMO65P30zqSNZty1mnxUtY7TJd/hFc 1FiEtIFD0D/qLN9oueZ0urjS1CaDDCjzEiG5VkC6IpknTMaA1dJyDfi94yL3p49U evZnQjVxYNaiNKkBl+8CeyYogmQLrOnCjTj5/kzsmDjHSNs+kY1BQXU2hWnWkz0p fJcjZqTndRc8A98wik+pXFO89MGQjdoKcNNhQXfBB3VIOzOuekE8LNzM0wIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFKOJHM5wJtk9AEos9ZNtxpaRQKUKMB8GA1UdIwQY MBaAFPxEKX6Sccbt8GSRX2GArhJpDdqLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0VRcGZwSnh4dTN3WkpGZllZQ3VFbWtOMm9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi83Y2IxNzktYWQyYy00ODI0LWExZTUt YWUwN2YzMmU0MTAyLzEvbzRrY3puQW0yVDBBU2l6MWsyM0dscEZBcFFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi83Y2IxNzktYWQyYy00ODI0LWExZTUtYWUwN2YzMmU0MTAy LzEvX0VRcGZwSnh4dTN3WkpGZllZQ3VFbWtOMm9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBARScjAD BABScjIwDQYJKoZIhvcNAQELBQADggEBAAfqCG/+pbuVxOWisXv7tgeBSfemJWvW pJM/PUn2CHU/SDI1BNgj8T5AHVH3WiKliczAtVD0kUha8f6yAYE3D3e2IHlormQU xOlbhJVT6TOj2tY37drJdvzBKu8hDPxzn1igJjaQgWO3yS7yBe6t/h1gjMiocpBC CWuj7kl9GQhH3rYlQZIUSX5+BZlTpDFl3Non3AvyyCn+DgPCsJ9pX7BNtQ8DoYyF wo15G3TZwWXAgfqHpTfSK8AVXTjh63gM7a4OtnvVgR/5ji+kcKufoEiDcKpcSTUV EgmEfzAUexwtbbezJ0zsPDxJCPdxc52FX7RDVsR+RERAjs3yjgCr/sk= -----END CERTIFICATE-----Generated at Sun Jan 25 22:31:20 2026 by rpki-client