This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/C9kf1X1mdHi9nthV-VO43Au5cQk.roa File: C9kf1X1mdHi9nthV-VO43Au5cQk.roa (raw, json) Hash identifier: swHjsNFIgS3EPuEf14TKl67eOCVuXojYuOiZeAOas4s= Subject key identifier: 0B:D9:1F:D5:7D:66:74:78:BD:9E:D8:55:F9:53:B8:DC:0B:B9:71:09 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5AE4E2EE4B2DDDE89F004B6342A83B Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/C9kf1X1mdHi9nthV-VO43Au5cQk.roa Signing time: Thu 01 Jan 2026 16:18:55 +0000 ROA not before: Thu 01 Jan 2026 16:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216026 IP address blocks: 82.152.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:e4:e2:ee:4b:2d:dd:e8:9f:00:4b:63:42:a8:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0bd91fd57d667478bd9ed855f953b8dc0bb97109 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:17:d3:3d:c9:62:87:e6:0c:09:a2:f8:eb:44: 6a:42:89:cb:60:d7:78:8a:10:f4:4c:04:8b:af:89: 5b:d9:90:73:f8:d7:7f:72:e1:2d:91:25:1c:94:dd: 0c:c6:58:80:e2:00:2e:13:f9:24:53:36:a2:e4:30: 00:43:2e:a7:ca:74:56:f5:9f:21:3e:23:84:e4:ce: 96:9b:f4:94:fe:b0:fe:34:dd:87:fd:b5:2f:0d:78: e6:5c:0c:9d:6e:9e:85:83:98:d2:13:4f:5d:d2:af: 5f:a2:08:a7:51:91:9e:02:0b:e6:f3:bf:e5:b8:01: e8:ef:48:5e:a0:ab:1d:aa:b1:82:d5:93:16:e0:07: ee:7e:19:cc:ef:1f:c9:0a:80:70:94:3a:5e:76:51: f0:bf:04:1e:2e:96:74:c3:84:99:d7:ff:b0:37:aa: e5:47:72:95:d5:60:58:ac:70:05:44:d5:8d:5f:97: 8b:f4:b3:b2:d4:87:62:00:30:dd:fb:b6:0f:d8:c4: 2b:73:82:ba:c1:c0:81:a3:de:57:af:3d:ea:cf:af: 2a:08:cd:65:64:a6:ff:4d:34:3b:88:7a:9c:8f:62: 3f:66:17:44:43:fa:cb:42:eb:43:15:a0:39:68:bc: a5:88:68:dd:ac:01:3b:4e:75:e8:05:16:56:cd:b9: 37:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:D9:1F:D5:7D:66:74:78:BD:9E:D8:55:F9:53:B8:DC:0B:B9:71:09 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/C9kf1X1mdHi9nthV-VO43Au5cQk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.152.108.0/24 Signature Algorithm: sha256WithRSAEncryption a1:35:33:79:98:c7:17:a8:eb:34:94:bf:50:0d:03:b3:12:e4: 93:55:87:96:84:d9:3e:e0:7f:ba:ca:64:cb:cb:30:6e:92:30: 1e:28:f9:b5:07:35:0b:1a:88:4d:c6:1d:df:7a:e9:4d:65:92: b4:c1:8e:14:d6:f6:7c:5b:f7:37:62:4b:6d:9c:7b:4c:76:56: 26:86:c5:d0:df:9a:95:9d:ad:a6:ea:4b:7d:89:08:86:87:48: 76:53:b0:8b:06:9b:c1:70:f2:01:52:45:a9:ed:69:97:0f:b4: 09:e0:ba:e6:91:24:66:69:ef:61:16:0b:f4:db:29:0b:4c:b3: e1:13:83:55:55:31:c2:e7:5c:1d:4f:07:d9:ec:a2:73:63:47: 71:2b:bb:35:ee:3a:bd:89:7e:8a:bf:76:d9:63:8e:32:8b:63: bf:1f:e9:3e:9b:75:1a:e0:84:75:45:b1:50:15:21:0a:27:6c: 71:e1:a6:52:1b:00:49:5d:f3:7f:52:6f:24:26:eb:88:ac:f2: 44:d6:a9:20:a4:45:4d:95:09:1e:06:6f:7d:c2:90:a5:a2:2a: 26:7f:2f:14:20:53:78:52:cd:f2:19:1d:25:c5:46:be:69:16: 0b:4f:39:93:2a:65:65:86:dd:c6:d9:c7:f6:97:22:ed:dd:49: 12:11:5f:1d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WuTi7kst3eifAEtjQqg7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYmQ5MWZkNTdkNjY3NDc4YmQ5ZWQ4NTVmOTUzYjhkYzBiYjk3MTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBfTPclih+YMCaL460RqQonLYNd4 ihD0TASLr4lb2ZBz+Nd/cuEtkSUclN0MxliA4gAuE/kkUzai5DAAQy6nynRW9Z8h PiOE5M6Wm/SU/rD+NN2H/bUvDXjmXAydbp6Fg5jSE09d0q9foginUZGeAgvm87/l uAHo70heoKsdqrGC1ZMW4AfufhnM7x/JCoBwlDpedlHwvwQeLpZ0w4SZ1/+wN6rl R3KV1WBYrHAFRNWNX5eL9LOy1IdiADDd+7YP2MQrc4K6wcCBo95Xrz3qz68qCM1l ZKb/TTQ7iHqcj2I/ZhdEQ/rLQutDFaA5aLyliGjdrAE7TnXoBRZWzbk3LwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAvZH9V9ZnR4vZ7YVflTuNwLuXEJMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvQzlrZjFYMW1kSGk5bnRoVi1WTzQzQXU1Y1FrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUphsMA0G CSqGSIb3DQEBCwUAA4IBAQChNTN5mMcXqOs0lL9QDQOzEuSTVYeWhNk+4H+6ymTL yzBukjAeKPm1BzULGohNxh3feulNZZK0wY4U1vZ8W/c3YkttnHtMdlYmhsXQ35qV na2m6kt9iQiGh0h2U7CLBpvBcPIBUkWp7WmXD7QJ4LrmkSRmae9hFgv02ykLTLPh E4NVVTHC51wdTwfZ7KJzY0dxK7s17jq9iX6Kv3bZY44yi2O/H+k+m3Ua4IR1RbFQ FSEKJ2xx4aZSGwBJXfN/Um8kJuuIrPJE1qkgpEVNlQkeBm99wpCloiomfy8UIFN4 Us3yGR0lxUa+aRYLTzmTKmVlht3G2cf2lyLt3UkSEV8d -----END CERTIFICATE-----Generated at Sun Jan 25 07:15:36 2026 by rpki-client