This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1BR9P1QV_mnr8WiOzr7GiBV3EPw.roa File: 1BR9P1QV_mnr8WiOzr7GiBV3EPw.roa (raw, json) Hash identifier: GwYSqeMeuv0iN4jxwfpxAUaB5+CfywTfm/X2YCQ7BUg= Subject key identifier: D4:14:7D:3F:54:15:FE:69:EB:F1:68:8E:CE:BE:C6:88:15:77:10:FC Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5ABFB44CE53C2B3A9AA13E4589501C Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1BR9P1QV_mnr8WiOzr7GiBV3EPw.roa Signing time: Thu 01 Jan 2026 16:18:46 +0000 ROA not before: Thu 01 Jan 2026 16:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207992 IP address blocks: 82.153.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:bf:b4:4c:e5:3c:2b:3a:9a:a1:3e:45:89:50:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d4147d3f5415fe69ebf1688ecebec688157710fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:96:ed:f4:0a:26:99:27:62:ba:29:01:74:b1: 73:76:7b:67:37:4b:62:5f:08:bb:b6:0c:52:c1:a1: c2:69:dd:8f:ed:bf:c8:84:7f:47:c1:b5:49:ca:e3: f4:09:11:34:a8:38:e1:72:b9:94:92:e9:f7:c1:ea: b9:ee:71:f6:04:e4:15:db:ce:6a:09:b6:25:67:ac: 7c:6b:e5:05:f7:38:48:6b:0b:aa:65:76:1f:b7:0a: 27:79:04:a4:ad:3d:ba:68:7c:8c:6b:8c:e1:6c:33: 1c:9c:7c:68:65:8f:e9:e0:47:10:08:54:7c:72:0b: 45:2f:48:f2:6b:c7:81:2d:ea:3e:b0:7d:4c:30:a8: de:2a:35:bb:0c:97:92:45:2a:11:ab:48:bd:80:9e: 75:b0:eb:12:c2:c7:c8:70:e8:95:9a:2c:bc:e5:cf: 02:55:ce:3e:39:65:b3:ef:f4:2c:cb:01:97:5b:46: 26:f6:47:45:4c:c6:ca:25:fa:7b:c3:4d:65:6f:eb: ca:72:a9:3b:35:75:a2:8f:63:97:46:ba:cf:42:15: 81:07:e8:69:9c:6e:29:0d:92:d9:71:f3:69:11:79: 89:fc:a2:78:12:2a:33:0c:f5:62:cf:89:89:61:d0: a0:b0:e3:b2:90:e1:f8:51:4f:9a:14:8e:4d:b2:56: 8b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:14:7D:3F:54:15:FE:69:EB:F1:68:8E:CE:BE:C6:88:15:77:10:FC X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1BR9P1QV_mnr8WiOzr7GiBV3EPw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.153.202.0/24 Signature Algorithm: sha256WithRSAEncryption 35:aa:93:6f:4c:ef:74:18:27:6f:df:6c:bc:e6:bb:dd:87:78: af:fe:57:8d:72:07:39:27:76:e0:2c:b8:c7:55:d1:1c:bb:8a: 90:db:d5:2d:35:49:eb:8b:6e:4b:7e:f6:42:7d:a7:41:78:8b: 73:16:b3:69:b9:07:e1:61:47:3f:62:a2:67:c9:cf:35:e3:bf: e3:1b:c5:d6:c8:de:73:39:1f:0a:e8:44:67:4e:c5:12:c9:5c: f0:df:68:c9:56:f9:a0:b0:b4:4b:d3:9f:84:5f:ee:f5:59:65: ff:18:68:0b:22:7e:b1:21:43:5f:7f:3e:1e:21:7e:17:65:13: 9e:93:62:2f:6b:1d:30:91:ee:7d:5e:69:43:96:39:9d:45:91: 96:39:0e:c6:5a:97:fd:bd:92:d3:a0:56:d5:f2:e7:ec:cb:a2: 6f:46:6c:f0:eb:a1:67:e9:af:7e:93:fa:a6:9c:2c:d3:e8:12: 15:70:46:96:be:93:90:58:87:98:fb:49:0b:01:7b:5e:45:c1: b4:47:96:5f:19:dc:2d:f4:4b:f3:2a:2d:e4:1d:11:58:ae:f3: 40:72:f7:c9:4a:8e:8d:b3:d6:22:d1:b2:0e:c4:41:dc:0d:ee: 1d:c1:54:f3:39:97:d4:e6:08:d1:d1:23:17:50:81:4f:45:e0: 8e:ce:c4:b6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wr+0TOU8KzqaoT5FiVAcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDE0N2QzZjU0MTVmZTY5ZWJmMTY4OGVjZWJlYzY4ODE1NzcxMGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5bt9AommSdiuikBdLFzdntnN0ti Xwi7tgxSwaHCad2P7b/IhH9HwbVJyuP0CRE0qDjhcrmUkun3weq57nH2BOQV285q CbYlZ6x8a+UF9zhIawuqZXYftwoneQSkrT26aHyMa4zhbDMcnHxoZY/p4EcQCFR8 cgtFL0jya8eBLeo+sH1MMKjeKjW7DJeSRSoRq0i9gJ51sOsSwsfIcOiVmiy85c8C Vc4+OWWz7/QsywGXW0Ym9kdFTMbKJfp7w01lb+vKcqk7NXWij2OXRrrPQhWBB+hp nG4pDZLZcfNpEXmJ/KJ4EiozDPViz4mJYdCgsOOykOH4UU+aFI5NslaLfwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNQUfT9UFf5p6/Fojs6+xogVdxD8MB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvMUJSOVAxUVZfbW5yOFdpT3pyN0dpQlYzRVB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUpnKMA0G CSqGSIb3DQEBCwUAA4IBAQA1qpNvTO90GCdv32y85rvdh3iv/leNcgc5J3bgLLjH VdEcu4qQ29UtNUnri25LfvZCfadBeItzFrNpuQfhYUc/YqJnyc8147/jG8XWyN5z OR8K6ERnTsUSyVzw32jJVvmgsLRL05+EX+71WWX/GGgLIn6xIUNffz4eIX4XZROe k2Ivax0wke59XmlDljmdRZGWOQ7GWpf9vZLToFbV8ufsy6JvRmzw66Fn6a9+k/qm nCzT6BIVcEaWvpOQWIeY+0kLAXteRcG0R5ZfGdwt9EvzKi3kHRFYrvNAcvfJSo6N s9Yi0bIOxEHcDe4dwVTzOZfU5gjR0SMXUIFPReCOzsS2 -----END CERTIFICATE-----Generated at Sun Jan 25 10:08:26 2026 by rpki-client