This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1r4KmEEqnyBwatVSlyr4nKqNudo.roa File: 1r4KmEEqnyBwatVSlyr4nKqNudo.roa (raw, json) Hash identifier: wHzOFJFkDHLKH74xCPl1Yh3Nm4vDVD3RtR57gzEJMao= Subject key identifier: D6:BE:0A:98:41:2A:9F:20:70:6A:D5:52:97:2A:F8:9C:AA:8D:B9:DA Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019BE12CD711443D9A3277CDFE27CC5D3FB2 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1r4KmEEqnyBwatVSlyr4nKqNudo.roa Signing time: Wed 21 Jan 2026 15:29:30 +0000 ROA not before: Wed 21 Jan 2026 15:29:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215727 IP address blocks: 82.153.148.0/24 maxlen: 24 89.213.63.0/24 maxlen: 24 89.213.157.0/24 maxlen: 24 89.213.227.0/24 maxlen: 24 109.176.208.0/24 maxlen: 24 109.176.242.0/24 maxlen: 24 213.130.137.0/24 maxlen: 24 213.130.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e1:2c:d7:11:44:3d:9a:32:77:cd:fe:27:cc:5d:3f:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 21 15:29:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d6be0a98412a9f20706ad552972af89caa8db9da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b8:0f:a0:dd:75:5d:d9:c7:74:0b:94:db:94: 24:09:cf:40:05:d2:79:cf:2b:44:ea:99:52:4e:b7: 5f:49:af:95:41:3b:e6:9e:95:08:56:51:90:2e:c4: d9:84:97:75:78:18:55:ab:71:f4:59:2d:8b:b4:8c: 7e:0d:8f:a1:7b:4a:4b:76:d2:b9:c1:07:a5:d4:2b: 49:89:3f:bf:2a:15:2a:6e:b5:ac:b2:5f:b1:71:44: 17:91:fc:bd:33:b8:16:8f:82:27:fd:0c:16:7c:8a: e5:14:fa:0c:75:c7:70:e2:39:ee:6e:a0:6b:c9:26: e8:14:a1:5e:4c:94:1d:af:7e:ce:2f:bf:f3:ea:3d: 32:5c:12:11:91:18:3f:ad:6d:39:27:88:ce:60:17: d1:e5:a9:d0:c8:a4:00:dc:3b:ed:1c:f6:2f:c0:d0: 61:83:06:6a:ee:1b:05:63:27:58:45:de:6f:25:6e: bb:1c:c7:99:74:97:f1:c0:aa:43:28:a8:7a:bc:23: 97:e6:d4:b3:13:88:7f:37:a4:03:43:d1:0b:66:a0: 75:d3:48:ef:65:99:86:c9:8a:38:7d:c9:98:6e:a1: bb:75:e6:eb:d9:34:68:b0:1d:8b:23:21:c2:7b:7c: f4:ec:1b:e4:b6:5d:e7:de:98:7f:6c:6e:cf:f6:ab: 9b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:BE:0A:98:41:2A:9F:20:70:6A:D5:52:97:2A:F8:9C:AA:8D:B9:DA X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1r4KmEEqnyBwatVSlyr4nKqNudo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.153.148.0/24 89.213.63.0/24 89.213.157.0/24 89.213.227.0/24 109.176.208.0/24 109.176.242.0/24 213.130.137.0/24 213.130.152.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:9f:c6:26:97:5e:81:5c:fb:01:d4:ff:0b:47:d2:ce:f0:76: 7a:d7:a7:c3:01:8e:87:b8:16:01:0c:1a:a2:27:56:35:8d:3e: aa:9c:8f:c1:a2:01:37:ea:bb:be:41:92:f0:b5:a0:5a:a9:cc: c1:a8:4e:90:41:05:df:5a:fe:c4:bf:cb:0b:c8:b2:b4:ff:ff: 5b:f1:3b:ef:15:f0:d8:ed:95:3d:a2:39:f5:ef:f6:2f:a4:e9: d3:d2:e6:cf:41:ab:4f:0b:99:b9:6a:ae:ad:a9:f1:be:18:1d: e8:19:85:f4:12:fd:ba:14:ef:f9:dd:ba:f9:b4:3a:9d:48:5a: 3e:20:5b:28:68:6e:89:ff:65:95:11:db:8d:8a:5e:4d:93:75: e0:73:36:df:34:0b:f8:68:80:e0:33:96:53:dd:10:69:8f:d0: 41:c1:13:6d:bb:c6:c8:9a:55:65:62:8f:6d:02:9f:e6:b4:19: 61:7d:1f:e1:81:6a:a6:9c:d4:dc:7b:6e:7c:de:72:96:18:4d: 91:b8:f3:3f:4d:49:52:6a:aa:05:36:2d:95:c5:9f:4a:be:31: 8b:30:c1:c6:ec:90:ca:a4:58:5d:d3:6f:b5:19:65:9b:1d:34: 06:76:3f:6d:52:fb:40:59:34:b4:c2:21:14:25:ae:ab:9d:59: d8:c2:60:5c -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZvhLNcRRD2aMnfN/ifMXT+yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTIxMTUyOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNmJlMGE5ODQxMmE5ZjIwNzA2YWQ1NTI5NzJhZjg5Y2FhOGRiOWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07gPoN11XdnHdAuU25QkCc9ABdJ5 zytE6plSTrdfSa+VQTvmnpUIVlGQLsTZhJd1eBhVq3H0WS2LtIx+DY+he0pLdtK5 wQel1CtJiT+/KhUqbrWssl+xcUQXkfy9M7gWj4In/QwWfIrlFPoMdcdw4jnubqBr ySboFKFeTJQdr37OL7/z6j0yXBIRkRg/rW05J4jOYBfR5anQyKQA3DvtHPYvwNBh gwZq7hsFYydYRd5vJW67HMeZdJfxwKpDKKh6vCOX5tSzE4h/N6QDQ9ELZqB100jv ZZmGyYo4fcmYbqG7debr2TRosB2LIyHCe3z07Bvktl3n3ph/bG7P9qubmwIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFNa+CphBKp8gcGrVUpcq+JyqjbnaMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvMXI0S21FRXFueUJ3YXRWU2x5cjRuS3FOdWRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAUpmUAwQA WdU/AwQAWdWdAwQAWdXjAwQAbbDQAwQAbbDyAwQA1YKJAwQA1YKYMA0GCSqGSIb3 DQEBCwUAA4IBAQA7n8Yml16BXPsB1P8LR9LO8HZ616fDAY6HuBYBDBqiJ1Y1jT6q nI/BogE36ru+QZLwtaBaqczBqE6QQQXfWv7Ev8sLyLK0//9b8TvvFfDY7ZU9ojn1 7/YvpOnT0ubPQatPC5m5aq6tqfG+GB3oGYX0Ev26FO/53br5tDqdSFo+IFsoaG6J /2WVEduNil5Nk3XgczbfNAv4aIDgM5ZT3RBpj9BBwRNtu8bImlVlYo9tAp/mtBlh fR/hgWqmnNTce2583nKWGE2RuPM/TUlSaqoFNi2VxZ9KvjGLMMHG7JDKpFhd02+1 GWWbHTQGdj9tUvtAWTS0wiEUJa6rnVnYwmBc -----END CERTIFICATE-----Generated at Sun Jan 25 13:04:04 2026 by rpki-client