This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Pu77EDEHVOmrBvkSGZaZqjz31e4.roa File: Pu77EDEHVOmrBvkSGZaZqjz31e4.roa (raw, json) Hash identifier: hIYaCDPh9s1FSwHMD3oTogaiOD7pcWMi5zIvepJYfZo= Subject key identifier: 3E:EE:FB:10:31:07:54:E9:AB:06:F9:12:19:96:99:AA:3C:F7:D5:EE Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5A9901752CE8A8FC9CBEEAF5C4C52B Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Pu77EDEHVOmrBvkSGZaZqjz31e4.roa Signing time: Thu 01 Jan 2026 16:18:36 +0000 ROA not before: Thu 01 Jan 2026 16:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13649 IP address blocks: 82.153.68.0/24 maxlen: 24 82.153.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:99:01:75:2c:e8:a8:fc:9c:be:ea:f5:c4:c5:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3eeefb10310754e9ab06f912199699aa3cf7d5ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7e:7e:fd:fb:e8:80:a6:56:41:f8:76:c4:50: f4:e0:c7:37:b3:95:2d:b3:c2:cd:73:34:72:f4:02: fb:98:83:6a:fb:a1:77:f0:53:cc:55:55:31:4b:90: df:28:ef:69:c3:28:78:52:13:3f:a4:0a:49:8e:89: d5:50:77:94:7c:1c:65:28:d7:10:d9:43:fa:e2:e2: 44:f4:86:55:24:e8:8a:8b:70:5f:75:35:69:6f:4b: 83:5a:29:38:1d:05:5b:0d:bf:16:ba:0e:6b:d9:fb: ec:d8:f9:63:7c:63:60:b0:41:55:73:9d:ad:68:51: 23:35:28:62:02:dc:59:93:d6:28:59:f0:6e:dc:1c: 55:db:56:c0:a1:61:65:73:5f:0d:5a:2e:8f:e6:09: 57:13:9b:3e:58:a8:e9:9c:4e:8c:7e:2c:42:af:69: 73:f6:6c:09:c1:a9:17:f9:7e:16:d6:4d:d6:1d:01: 8f:7d:df:cd:ff:25:b3:16:f5:a9:2c:f5:05:11:b2: d6:0f:de:80:dc:10:9d:e6:fa:63:04:d1:ef:b7:23: 87:42:20:40:d1:c8:63:32:90:d4:73:92:98:8e:af: 6a:82:54:d5:17:14:95:97:e4:4c:77:11:56:c2:76: c7:54:9b:42:ee:a4:5a:15:41:2c:ed:18:dc:49:76: e9:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:EE:FB:10:31:07:54:E9:AB:06:F9:12:19:96:99:AA:3C:F7:D5:EE X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Pu77EDEHVOmrBvkSGZaZqjz31e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.153.68.0/24 82.153.71.0/24 Signature Algorithm: sha256WithRSAEncryption 49:3b:bc:cf:c3:5f:2b:2b:3b:47:2e:04:e8:c3:6c:9c:1a:48: 97:7a:5f:0c:fa:3b:04:6f:22:e2:78:51:43:05:b2:4a:8c:23: 0c:5c:3a:97:ef:dd:c4:6e:b8:a2:27:b8:01:94:ec:c7:0f:3f: 85:13:a5:01:d0:69:bc:64:4f:db:5d:e7:74:11:d3:9d:03:a9: 7b:2f:d0:df:bd:6c:d8:9b:69:59:eb:96:6d:69:d6:d8:08:8b: c2:87:31:c0:6c:e2:9c:cf:e5:4a:f9:84:10:e4:cc:03:34:15: c8:65:89:dc:a9:44:2c:18:5b:4a:cd:d1:b6:36:5b:4c:f6:d9: e5:97:62:a4:38:20:02:0d:d1:c9:d5:25:05:ee:29:8f:5f:4f: 84:6c:c6:6b:a0:8f:80:14:b2:50:a4:6e:35:10:c6:a3:44:89: 5a:c5:d5:7c:d9:e9:40:a3:fb:3f:7a:7a:9b:ef:57:1a:74:b3: 56:54:1b:80:49:cc:5b:b4:dd:92:8c:1a:6e:07:2d:84:92:00: bd:2d:3c:6d:7e:db:f2:f0:b7:69:ed:90:32:d0:ae:49:8e:11: ce:84:d1:16:1b:61:cb:d1:73:ae:21:2f:da:01:18:a8:f5:23: 6b:cd:26:fd:b7:da:5d:29:7f:86:be:6f:2a:55:e3:ef:13:30: 6b:53:e5:42 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6WpkBdSzoqPycvur1xMUrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZWVlZmIxMDMxMDc1NGU5YWIwNmY5MTIxOTk2OTlhYTNjZjdkNWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw35+/fvogKZWQfh2xFD04Mc3s5Ut s8LNczRy9AL7mINq+6F38FPMVVUxS5DfKO9pwyh4UhM/pApJjonVUHeUfBxlKNcQ 2UP64uJE9IZVJOiKi3BfdTVpb0uDWik4HQVbDb8Wug5r2fvs2PljfGNgsEFVc52t aFEjNShiAtxZk9YoWfBu3BxV21bAoWFlc18NWi6P5glXE5s+WKjpnE6MfixCr2lz 9mwJwakX+X4W1k3WHQGPfd/N/yWzFvWpLPUFEbLWD96A3BCd5vpjBNHvtyOHQiBA 0chjMpDUc5KYjq9qglTVFxSVl+RMdxFWwnbHVJtC7qRaFUEs7RjcSXbpIwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFD7u+xAxB1Tpqwb5EhmWmao899XuMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvUHU3N0VERUhWT21yQnZrU0daYVpxanozMWU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUplEAwQA UplHMA0GCSqGSIb3DQEBCwUAA4IBAQBJO7zPw18rKztHLgTow2ycGkiXel8M+jsE byLieFFDBbJKjCMMXDqX793EbriiJ7gBlOzHDz+FE6UB0Gm8ZE/bXed0EdOdA6l7 L9DfvWzYm2lZ65ZtadbYCIvChzHAbOKcz+VK+YQQ5MwDNBXIZYncqUQsGFtKzdG2 NltM9tnll2KkOCACDdHJ1SUF7imPX0+EbMZroI+AFLJQpG41EMajRIlaxdV82elA o/s/enqb71cadLNWVBuAScxbtN2SjBpuBy2EkgC9LTxtftvy8Ldp7ZAy0K5JjhHO hNEWG2HL0XOuIS/aARio9SNrzSb9t9pdKX+Gvm8qVePvEzBrU+VC -----END CERTIFICATE-----Generated at Sun Jan 25 07:15:55 2026 by rpki-client