This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/OfUtj8eK-xCF2fN1vsmhorbiYyk.roa File: OfUtj8eK-xCF2fN1vsmhorbiYyk.roa (raw, json) Hash identifier: WsYkPggUIz4GKuKazGc0PjZjNqn9S2MiL7+39VKhLEQ= Subject key identifier: 39:F5:2D:8F:C7:8A:FB:10:85:D9:F3:75:BE:C9:A1:A2:B6:E2:63:29 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5ACE502678A808E8CD4C6245CAA92A Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/OfUtj8eK-xCF2fN1vsmhorbiYyk.roa Signing time: Thu 01 Jan 2026 16:18:49 +0000 ROA not before: Thu 01 Jan 2026 16:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213426 IP address blocks: 82.153.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:ce:50:26:78:a8:08:e8:cd:4c:62:45:ca:a9:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=39f52d8fc78afb1085d9f375bec9a1a2b6e26329 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:0e:96:9b:39:60:e4:f7:0d:d8:28:c7:cc:b9: 64:08:14:85:3b:ce:7a:63:63:2f:bd:4d:f3:43:72: cb:ca:f0:f0:b7:d5:16:46:bf:60:0b:af:da:f1:02: 91:79:6a:4a:76:b1:6a:db:0c:f9:14:ce:55:62:76: 30:51:af:0b:21:70:83:ec:7a:59:0e:3c:30:c7:24: 6e:b0:1b:b3:68:c3:da:d2:61:29:1e:63:c9:24:52: c0:86:e4:62:fb:28:a9:e3:a1:47:41:95:03:46:01: 83:7d:dd:a9:74:8d:8f:36:5a:95:27:f8:6f:da:03: ba:e1:1e:36:e3:28:a9:fb:6e:47:66:67:9c:59:b0: 10:9b:4e:94:ce:5b:75:92:98:a6:ee:e9:b3:9b:f5: ed:3d:58:31:a9:f3:6f:32:b0:88:6d:6a:97:d4:23: c9:94:61:db:be:7b:fd:08:fe:68:9e:32:91:86:f2: 52:7b:16:2a:ce:db:13:2f:7e:a3:01:b8:6e:8a:14: d6:66:76:20:8a:24:7c:3a:42:13:72:5c:7c:17:aa: 75:df:f1:c2:5d:a3:52:6d:e8:3e:8c:1b:10:25:f7: e8:45:fa:1b:b9:72:49:c3:ba:b6:22:db:5f:fa:91: 58:ad:58:7b:2b:08:6f:eb:2a:7f:77:ae:61:64:9f: bb:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:F5:2D:8F:C7:8A:FB:10:85:D9:F3:75:BE:C9:A1:A2:B6:E2:63:29 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/OfUtj8eK-xCF2fN1vsmhorbiYyk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.153.225.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:24:61:3c:77:19:48:73:74:5e:07:e5:73:e6:3f:0f:62:35: e7:08:d4:4b:d4:bc:fb:fd:19:a4:c4:99:f3:2d:07:09:7f:04: e1:69:31:2a:0d:b3:83:e3:ed:6c:c0:7e:58:98:36:ff:ec:70: 5a:68:91:e2:93:cc:3d:72:d0:90:94:d1:0d:60:d6:35:56:43: 8c:5c:ac:d0:d3:0c:65:f8:82:e6:8a:78:ec:9c:9b:69:27:7b: c1:68:f7:1b:6f:2c:ad:26:8e:72:c3:25:28:cc:8c:d5:fa:e5: a6:7f:90:99:cb:fa:d5:4e:6c:14:de:d4:18:a9:a9:1d:66:26: 0c:91:b3:5e:87:22:0a:88:de:0b:d5:11:71:b5:50:59:63:b5: e1:c3:da:cb:56:3f:27:8b:2f:d7:cb:30:76:15:c4:dc:5e:40: 41:6e:84:10:3a:8c:76:55:20:72:91:d9:fc:3e:74:34:e2:65: 19:e3:a9:05:f5:66:46:7e:0a:e8:60:8f:be:29:fc:8b:74:81: cc:95:e8:2b:37:02:5c:3a:a1:71:df:42:2e:23:58:f4:2d:2f: 39:5f:66:8a:fe:a6:de:74:fc:7a:7b:cb:2e:bf:76:18:3b:a8: 78:89:96:b0:12:d6:85:07:12:6c:ca:e3:b9:e2:35:23:50:31: cc:12:35:95 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Ws5QJnioCOjNTGJFyqkqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOWY1MmQ4ZmM3OGFmYjEwODVkOWYzNzViZWM5YTFhMmI2ZTI2MzI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQ6Wmzlg5PcN2CjHzLlkCBSFO856 Y2MvvU3zQ3LLyvDwt9UWRr9gC6/a8QKReWpKdrFq2wz5FM5VYnYwUa8LIXCD7HpZ DjwwxyRusBuzaMPa0mEpHmPJJFLAhuRi+yip46FHQZUDRgGDfd2pdI2PNlqVJ/hv 2gO64R424yip+25HZmecWbAQm06Uzlt1kpim7umzm/XtPVgxqfNvMrCIbWqX1CPJ lGHbvnv9CP5onjKRhvJSexYqztsTL36jAbhuihTWZnYgiiR8OkITclx8F6p13/HC XaNSbeg+jBsQJffoRfobuXJJw7q2Ittf+pFYrVh7Kwhv6yp/d65hZJ+77wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDn1LY/HivsQhdnzdb7JoaK24mMpMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvT2ZVdGo4ZUsteENGMmZOMXZzbWhvcmJpWXlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUpnhMA0G CSqGSIb3DQEBCwUAA4IBAQCbJGE8dxlIc3ReB+Vz5j8PYjXnCNRL1Lz7/RmkxJnz LQcJfwThaTEqDbOD4+1swH5YmDb/7HBaaJHik8w9ctCQlNENYNY1VkOMXKzQ0wxl +ILminjsnJtpJ3vBaPcbbyytJo5ywyUozIzV+uWmf5CZy/rVTmwU3tQYqakdZiYM kbNehyIKiN4L1RFxtVBZY7Xhw9rLVj8niy/XyzB2FcTcXkBBboQQOox2VSBykdn8 PnQ04mUZ46kF9WZGfgroYI++KfyLdIHMlegrNwJcOqFx30IuI1j0LS85X2aK/qbe dPx6e8suv3YYO6h4iZawEtaFBxJsyuO54jUjUDHMEjWV -----END CERTIFICATE-----Generated at Sun Jan 25 07:18:03 2026 by rpki-client