This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/9kA1pTGSHGi3ihbK2CP6YKcFME4.roa File: 9kA1pTGSHGi3ihbK2CP6YKcFME4.roa (raw, json) Hash identifier: JkZspsbukAqJ1cfObkCfq1pEAoeV9tSaL9MIwOgDfzs= Subject key identifier: F6:40:35:A5:31:92:1C:68:B7:8A:16:CA:D8:23:FA:60:A7:05:30:4E Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5AD997F2D141947F7066E22F64502A Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/9kA1pTGSHGi3ihbK2CP6YKcFME4.roa Signing time: Thu 01 Jan 2026 16:18:52 +0000 ROA not before: Thu 01 Jan 2026 16:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214483 IP address blocks: 82.153.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:d9:97:f2:d1:41:94:7f:70:66:e2:2f:64:50:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f64035a531921c68b78a16cad823fa60a705304e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:d3:4e:89:0a:30:bd:60:25:e4:32:1b:bc:f1: 30:71:f5:fc:a8:d1:8d:ec:49:4a:34:3f:f9:5d:81: 9a:19:b2:aa:1c:d5:62:25:89:c1:66:5a:f0:08:93: 76:c3:51:bb:e0:29:79:e2:d4:b6:e0:7c:64:59:b1: 59:26:b4:60:ca:e8:04:e6:c2:27:44:76:70:d2:6e: 12:91:35:21:16:cb:85:24:c7:5a:1b:50:af:29:ae: ee:e2:00:a6:49:4e:e6:4c:ea:d3:2a:ff:75:9d:78: 55:98:08:c7:07:dd:39:6e:87:0a:54:1a:1f:8c:9c: c0:65:0f:d4:02:12:d8:1d:e5:7c:57:ca:06:ac:5f: e5:75:0e:5b:f6:23:33:33:eb:7e:55:43:d8:f3:b8: 5c:72:64:d6:0a:76:dc:52:34:8a:98:25:92:9c:89: a7:07:43:d5:b8:3f:65:b3:0e:74:96:29:d8:03:5e: 83:e4:9d:52:28:ec:20:c9:f1:c7:fe:10:2a:52:56: 21:ee:28:e5:61:99:95:3e:6e:66:7a:f3:50:ad:07: e2:e1:ea:68:56:34:19:49:bb:cc:c6:85:b2:72:25: 03:ad:40:c0:d3:a6:6c:43:6b:0f:9d:37:eb:84:ff: 22:62:12:a6:00:d6:12:b1:f8:5b:60:85:ba:84:23: 9f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:40:35:A5:31:92:1C:68:B7:8A:16:CA:D8:23:FA:60:A7:05:30:4E X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/9kA1pTGSHGi3ihbK2CP6YKcFME4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.153.218.0/24 Signature Algorithm: sha256WithRSAEncryption a8:d9:9e:b2:72:0c:83:4e:bb:02:7e:56:e4:c9:7c:05:e3:ae: 9f:d5:c7:a5:9c:83:e9:6f:9a:b2:a8:52:2e:29:43:30:51:6b: 6c:a6:f7:24:49:01:05:ec:52:db:a6:93:68:48:12:12:b3:12: e1:00:67:e7:a5:5c:6f:e5:92:72:e1:b2:d5:62:a7:e2:1b:30: f2:28:8a:7b:be:85:fe:d9:85:fa:5b:8f:bd:ec:53:e7:50:fb: 5f:ff:5e:27:d1:c3:c7:c3:ea:64:8d:43:5b:5a:af:17:d3:66: 74:4a:61:e8:67:c6:64:0d:ac:fb:82:80:92:55:ff:7c:d8:27: 8d:05:95:e7:c6:1a:11:e7:d0:32:ea:0a:b0:0c:ec:5b:64:83: af:3b:01:3b:0e:21:b4:ed:b2:a0:9d:63:48:7a:f7:a1:c7:1a: 27:94:b3:e7:ce:74:05:88:a6:89:23:3d:7c:7a:13:7e:a9:66: 4d:9d:9d:2a:4e:4c:bb:f6:e2:93:0f:72:1e:11:a8:0e:9f:6c: 77:5d:6a:79:62:7f:3e:ff:d4:a6:6b:79:8c:f1:07:67:2a:e6: 5b:72:be:d1:28:e4:af:8e:7c:f4:8b:a6:58:a0:5c:94:26:ea: 8e:a3:a0:62:b3:fe:f2:2a:56:00:32:e1:7b:ed:30:ea:88:15: 4d:6c:36:41 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WtmX8tFBlH9wZuIvZFAqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjQwMzVhNTMxOTIxYzY4Yjc4YTE2Y2FkODIzZmE2MGE3MDUzMDRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7tNOiQowvWAl5DIbvPEwcfX8qNGN 7ElKND/5XYGaGbKqHNViJYnBZlrwCJN2w1G74Cl54tS24HxkWbFZJrRgyugE5sIn RHZw0m4SkTUhFsuFJMdaG1CvKa7u4gCmSU7mTOrTKv91nXhVmAjHB905bocKVBof jJzAZQ/UAhLYHeV8V8oGrF/ldQ5b9iMzM+t+VUPY87hccmTWCnbcUjSKmCWSnImn B0PVuD9lsw50linYA16D5J1SKOwgyfHH/hAqUlYh7ijlYZmVPm5mevNQrQfi4epo VjQZSbvMxoWyciUDrUDA06ZsQ2sPnTfrhP8iYhKmANYSsfhbYIW6hCOfWwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPZANaUxkhxot4oWytgj+mCnBTBOMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvOWtBMXBUR1NIR2kzaWhiSzJDUDZZS2NGTUU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUpnaMA0G CSqGSIb3DQEBCwUAA4IBAQCo2Z6ycgyDTrsCflbkyXwF466f1celnIPpb5qyqFIu KUMwUWtspvckSQEF7FLbppNoSBISsxLhAGfnpVxv5ZJy4bLVYqfiGzDyKIp7voX+ 2YX6W4+97FPnUPtf/14n0cPHw+pkjUNbWq8X02Z0SmHoZ8ZkDaz7goCSVf982CeN BZXnxhoR59Ay6gqwDOxbZIOvOwE7DiG07bKgnWNIevehxxonlLPnznQFiKaJIz18 ehN+qWZNnZ0qTky79uKTD3IeEagOn2x3XWp5Yn8+/9Sma3mM8QdnKuZbcr7RKOSv jnz0i6ZYoFyUJuqOo6Bis/7yKlYAMuF77TDqiBVNbDZB -----END CERTIFICATE-----Generated at Sun Jan 25 08:47:22 2026 by rpki-client