This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/RuW_JMeiBcDQE85HV1YwQT7oBdo.roa
File: RuW_JMeiBcDQE85HV1YwQT7oBdo.roa (raw, json)
Hash identifier: KFY10v7O+4BxNGP02Y+zwFzv2T+zQfO0fowpEljrzi0=
Subject key identifier: 46:E5:BF:24:C7:A2:05:C0:D0:13:CE:47:57:56:30:41:3E:E8:05:DA
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019B7A5AB928230A2686843CDC91868A14F6
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/RuW_JMeiBcDQE85HV1YwQT7oBdo.roa
Signing time: Thu 01 Jan 2026 16:18:44 +0000
ROA not before: Thu 01 Jan 2026 16:18:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202662
IP address blocks: 82.152.160.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5a:b9:28:23:0a:26:86:84:3c:dc:91:86:8a:14:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 16:18:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=46e5bf24c7a205c0d013ce47575630413ee805da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:fb:f0:b3:64:17:f2:1a:57:27:78:c0:24:78:
e8:f0:39:41:eb:88:ff:2a:2b:81:6b:9f:f0:6a:65:
ca:38:23:ec:d2:30:1d:96:09:dd:f2:02:20:43:b2:
77:f2:5a:a4:61:e8:25:ae:d1:17:94:b8:42:96:f0:
d3:d1:a7:24:04:27:79:bb:2f:1a:65:8c:12:f7:85:
95:21:d0:64:62:05:ba:80:4c:4f:c1:0e:8d:00:0d:
a2:72:cf:0d:5f:32:f3:00:50:be:24:e4:11:a4:1f:
46:44:6a:59:b7:6e:90:4c:23:95:2e:bc:85:1b:1c:
f0:2d:bc:c9:b9:23:6b:82:f6:0f:2e:3a:fe:23:de:
01:c8:be:50:d7:08:cf:6f:5e:f7:7f:d1:54:6c:93:
e1:80:0e:65:c3:73:b1:bb:04:19:ae:29:c0:52:a4:
5a:3e:03:71:ef:dd:c1:f2:b7:3b:2b:f4:7e:08:56:
3d:a7:35:c7:d3:40:2a:b2:8c:6c:12:8a:b2:d4:64:
70:7e:f7:f7:75:c4:06:26:56:2b:88:2a:cf:af:92:
a0:62:7f:14:f2:1f:58:ff:a8:b3:ac:be:a2:67:bf:
39:e0:e2:65:e0:24:da:2e:55:2f:5b:c3:60:03:be:
c7:5e:81:db:97:3f:0a:0c:ed:2b:59:29:1c:b7:42:
53:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E5:BF:24:C7:A2:05:C0:D0:13:CE:47:57:56:30:41:3E:E8:05:DA
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/RuW_JMeiBcDQE85HV1YwQT7oBdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.160.0/21
Signature Algorithm: sha256WithRSAEncryption
90:8c:1f:18:6c:74:de:7b:ca:3a:cd:59:8d:d4:14:59:b3:3e:
57:3f:0f:f2:7c:ee:30:88:6a:a4:7d:d1:11:8c:1f:6f:28:cf:
7e:25:27:48:f1:98:44:2e:8b:cf:9b:4e:56:0f:6f:47:ec:a4:
e3:5c:e3:3d:7d:bc:1a:90:f4:16:a5:3c:53:93:98:db:9e:40:
15:d6:0b:48:e5:6a:34:c1:87:e9:c8:33:02:a7:fe:21:df:6d:
33:1d:bc:58:52:9b:c7:2c:dc:89:40:aa:fd:22:81:4a:e8:fd:
c1:46:3b:39:64:90:ca:d6:c5:25:cf:f8:5e:c9:49:ca:03:60:
47:18:09:99:3a:17:9e:4f:d1:7f:bc:71:14:d8:43:b0:47:11:
ab:18:97:c3:30:3e:fb:3e:8a:db:b0:1c:d2:56:e1:98:dc:0a:
27:26:0a:fc:be:b9:0b:1c:43:e6:fc:d2:c5:ac:c0:3c:34:dc:
d1:04:e1:f5:67:41:c9:86:59:82:0d:08:4e:1a:c7:48:38:c1:
0c:e6:2a:6b:3b:c6:56:64:ed:70:10:a0:1c:7e:54:c4:8d:84:
bc:fc:55:20:dd:27:a5:cc:29:07:17:68:9a:0f:aa:43:c5:da:
04:5b:39:39:ca:a1:c2:80:a9:c7:81:54:8d:2b:13:01:c5:b8:
c0:3e:52:bf
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt6WrkoIwomhoQ83JGGihT2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjYwMTAxMTYxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NmU1YmYyNGM3YTIwNWMwZDAxM2NlNDc1NzU2MzA0MTNlZTgwNWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPvws2QX8hpXJ3jAJHjo8DlB64j/
KiuBa5/wamXKOCPs0jAdlgnd8gIgQ7J38lqkYeglrtEXlLhClvDT0ackBCd5uy8a
ZYwS94WVIdBkYgW6gExPwQ6NAA2ics8NXzLzAFC+JOQRpB9GRGpZt26QTCOVLryF
GxzwLbzJuSNrgvYPLjr+I94ByL5Q1wjPb173f9FUbJPhgA5lw3OxuwQZrinAUqRa
PgNx793B8rc7K/R+CFY9pzXH00AqsoxsEoqy1GRwfvf3dcQGJlYriCrPr5KgYn8U
8h9Y/6izrL6iZ7854OJl4CTaLlUvW8NgA77HXoHblz8KDO0rWSkct0JTTQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEblvyTHogXA0BPOR1dWMEE+6AXaMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvUnVXX0pNZWlCY0RRRTg1SFYxWXdRVDdvQmRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDUpigMA0G
CSqGSIb3DQEBCwUAA4IBAQCQjB8YbHTee8o6zVmN1BRZsz5XPw/yfO4wiGqkfdER
jB9vKM9+JSdI8ZhELovPm05WD29H7KTjXOM9fbwakPQWpTxTk5jbnkAV1gtI5Wo0
wYfpyDMCp/4h320zHbxYUpvHLNyJQKr9IoFK6P3BRjs5ZJDK1sUlz/heyUnKA2BH
GAmZOheeT9F/vHEU2EOwRxGrGJfDMD77PorbsBzSVuGY3AonJgr8vrkLHEPm/NLF
rMA8NNzRBOH1Z0HJhlmCDQhOGsdIOMEM5iprO8ZWZO1wEKAcflTEjYS8/FUg3Sel
zCkHF2iaD6pDxdoEWzk5yqHCgKnHgVSNKxMBxbjAPlK/
-----END CERTIFICATE-----
Generated at Sun Jan 25 07:15:57 2026 by rpki-client