This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/F5GEPb5TQlW_tRfpfC0ivBl-u70.roa File: F5GEPb5TQlW_tRfpfC0ivBl-u70.roa (raw, json) Hash identifier: lcCwXA37pmYQGQ5ILQ7civP3tiqiVEL7tWgB87rLoNk= Subject key identifier: 17:91:84:3D:BE:53:42:55:BF:B5:17:E9:7C:2D:22:BC:19:7E:BB:BD Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5AAFB0B549B76F4830DB2BBD34E9B6 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/F5GEPb5TQlW_tRfpfC0ivBl-u70.roa Signing time: Thu 01 Jan 2026 16:18:42 +0000 ROA not before: Thu 01 Jan 2026 16:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 136501 IP address blocks: 82.153.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:af:b0:b5:49:b7:6f:48:30:db:2b:bd:34:e9:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1791843dbe534255bfb517e97c2d22bc197ebbbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a7:86:80:67:b6:9d:64:e4:a0:ce:36:30:e8: 12:f8:d6:27:d0:d9:36:ff:1b:3a:9f:e9:4a:b2:a4: 61:2a:1d:87:72:62:93:fa:bb:3c:7a:03:7d:ae:9b: 4b:30:22:e3:54:fb:2f:e6:2a:63:be:8d:9a:b2:8a: 38:fa:16:8f:22:7f:04:55:ae:6a:e7:36:a1:57:78: 33:d4:0e:c1:91:3d:6a:88:c2:ed:9a:64:21:6e:09: 52:5e:27:f3:46:04:90:9f:74:1d:c7:55:6f:c0:fa: 0b:4d:cc:fa:e3:2b:4b:0a:5b:1f:a2:09:f2:dd:83: b1:d5:fb:3f:8c:e5:ad:6b:08:41:69:33:b2:c8:03: b4:5b:d8:a8:93:40:54:f8:f7:4c:f9:c8:d3:38:7f: f9:2b:48:f8:d8:62:06:79:dc:33:eb:2f:b8:89:7a: d5:6c:a4:0e:95:3e:d8:bf:c1:49:4f:d4:7a:56:93: b0:61:9f:a8:41:6b:8a:d4:3a:97:9f:a5:d9:67:f5: d4:b8:91:02:67:c3:5e:53:cf:63:52:5c:9e:e0:90: c1:76:11:e6:75:1a:33:58:50:47:99:56:e8:10:23: 87:74:d0:36:56:11:a8:8f:3d:57:7a:75:a4:6a:9f: fc:bf:85:cf:0c:f6:2b:0c:78:87:3f:5d:24:66:90: 72:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:91:84:3D:BE:53:42:55:BF:B5:17:E9:7C:2D:22:BC:19:7E:BB:BD X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/F5GEPb5TQlW_tRfpfC0ivBl-u70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.153.219.0/24 Signature Algorithm: sha256WithRSAEncryption 07:d8:f3:15:ea:e9:e0:dd:1b:8a:ac:e9:de:94:f4:7b:f7:37: f9:91:b8:d9:3d:57:0a:6e:92:13:2f:28:50:94:48:d3:ca:54: 40:c5:23:3f:1f:07:a3:94:d9:41:86:fc:48:41:b6:55:47:4d: 5c:b9:db:a4:e4:ea:f5:b5:12:be:ee:20:ed:a5:a2:a5:b3:03: af:1a:5f:0a:b9:98:6f:1f:8d:9f:f4:c0:d7:e6:c7:53:ba:d9: 51:d9:44:bc:86:16:58:a5:dc:c7:d1:e0:53:51:1d:d4:f1:65: 7a:fc:1d:0e:f5:ce:64:d0:e3:00:76:3c:5f:01:d4:6e:5b:78: e3:62:da:13:54:46:a4:3c:e7:17:9a:0a:a8:09:ca:e6:a3:94: 01:1d:69:07:54:f0:11:2b:71:a6:3a:01:bf:f6:99:b5:1f:3e: 85:1d:50:46:af:e8:5f:35:3d:6c:bd:f8:cc:68:f8:7c:ee:fe: 7a:0b:00:93:7e:f6:58:f5:87:1f:1f:ef:08:66:2a:5e:91:37: 29:17:1c:a3:ff:c9:69:f5:a1:be:64:9a:7c:55:a9:ef:9d:45: 07:6b:95:79:3b:5d:ef:ff:f8:fb:36:6e:70:c6:0c:ff:06:fd: 5a:a3:3b:0e:4a:2f:96:f7:c5:ea:b4:57:e7:98:06:46:d7:44: 5a:57:3b:e4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wq+wtUm3b0gw2yu9NOm2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzkxODQzZGJlNTM0MjU1YmZiNTE3ZTk3YzJkMjJiYzE5N2ViYmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KeGgGe2nWTkoM42MOgS+NYn0Nk2 /xs6n+lKsqRhKh2HcmKT+rs8egN9rptLMCLjVPsv5ipjvo2asoo4+haPIn8EVa5q 5zahV3gz1A7BkT1qiMLtmmQhbglSXifzRgSQn3Qdx1VvwPoLTcz64ytLClsfogny 3YOx1fs/jOWtawhBaTOyyAO0W9iok0BU+PdM+cjTOH/5K0j42GIGedwz6y+4iXrV bKQOlT7Yv8FJT9R6VpOwYZ+oQWuK1DqXn6XZZ/XUuJECZ8NeU89jUlye4JDBdhHm dRozWFBHmVboECOHdNA2VhGojz1XenWkap/8v4XPDPYrDHiHP10kZpByWQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBeRhD2+U0JVv7UX6XwtIrwZfru9MB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvRjVHRVBiNVRRbFdfdFJmcGZDMGl2QmwtdTcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUpnbMA0G CSqGSIb3DQEBCwUAA4IBAQAH2PMV6ung3RuKrOnelPR79zf5kbjZPVcKbpITLyhQ lEjTylRAxSM/HwejlNlBhvxIQbZVR01cuduk5Or1tRK+7iDtpaKlswOvGl8KuZhv H42f9MDX5sdTutlR2US8hhZYpdzH0eBTUR3U8WV6/B0O9c5k0OMAdjxfAdRuW3jj YtoTVEakPOcXmgqoCcrmo5QBHWkHVPARK3GmOgG/9pm1Hz6FHVBGr+hfNT1svfjM aPh87v56CwCTfvZY9YcfH+8IZipekTcpFxyj/8lp9aG+ZJp8VanvnUUHa5V5O13v //j7Nm5wxgz/Bv1aozsOSi+W98XqtFfnmAZG10RaVzvk -----END CERTIFICATE-----Generated at Sun Jan 25 07:17:28 2026 by rpki-client