This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/T__cUWWyWm7OLBD7Yuee0m67U_w.roa File: T__cUWWyWm7OLBD7Yuee0m67U_w.roa (raw, json) Hash identifier: li9qBoNwHtBqQA0ACGZy7uW2CLkSI3wicm64NYyagGg= Subject key identifier: 4F:FF:DC:51:65:B2:5A:6E:CE:2C:10:FB:62:E7:9E:D2:6E:BB:53:FC Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5AA1704761EEAFAD505A5858088928 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/T__cUWWyWm7OLBD7Yuee0m67U_w.roa Signing time: Thu 01 Jan 2026 16:18:38 +0000 ROA not before: Thu 01 Jan 2026 16:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 40605 IP address blocks: 82.152.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:a1:70:47:61:ee:af:ad:50:5a:58:58:08:89:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4fffdc5165b25a6ece2c10fb62e79ed26ebb53fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:3f:a0:5e:c5:87:6e:1e:e0:67:5e:17:d0:15: 7d:02:9e:c4:18:91:74:6e:52:45:c6:b6:45:3a:fc: 70:8c:6b:36:de:8f:6b:33:2a:e2:9a:c1:8e:a2:f1: cc:1e:33:42:09:4b:71:b8:22:69:71:0b:b5:a7:33: 43:7e:22:61:e4:64:f0:9b:b4:c5:c4:f0:4c:70:3d: 6b:17:a2:ca:8f:5d:4e:3a:89:70:5d:f5:32:31:fb: 03:bb:22:a3:be:f6:ac:2d:1f:ea:42:47:f5:df:19: 94:71:0d:1f:7c:f6:01:ba:e9:57:f0:f4:01:76:49: fd:c9:66:c1:ee:de:7b:64:ba:20:8a:b9:cb:50:db: 70:f6:8b:fb:fe:42:2d:f8:94:f3:0c:94:50:85:3a: 06:2b:36:87:13:b7:97:e3:a3:4f:74:ff:42:ac:bb: 8e:da:06:a7:6d:97:1d:e0:43:44:b8:05:45:9d:ce: b5:95:df:57:e9:12:6c:40:b3:b2:af:2b:35:c5:06: 33:f6:0f:c8:31:c5:4e:6a:97:24:8b:d0:26:36:b2: a1:a7:f4:21:db:aa:59:f0:63:13:49:5d:24:9c:b5: 0d:60:59:9a:b0:49:df:7a:9f:4e:c6:94:5a:80:df: 8b:ec:aa:4c:69:e0:e1:8a:d0:bb:7d:ea:d6:bd:d6: 71:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:FF:DC:51:65:B2:5A:6E:CE:2C:10:FB:62:E7:9E:D2:6E:BB:53:FC X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/T__cUWWyWm7OLBD7Yuee0m67U_w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.152.177.0/24 Signature Algorithm: sha256WithRSAEncryption 84:16:57:4a:fc:90:06:f4:d1:54:07:9a:d0:3d:1b:96:58:9c: c0:95:e4:f6:e7:57:46:5e:50:14:a8:b9:da:7d:89:bf:34:c3: 58:85:69:19:d6:3e:9f:c6:9d:a4:ed:c3:98:82:b5:09:84:be: d6:52:f2:2a:f9:19:56:41:16:22:88:11:75:76:5f:c2:89:47: f2:d4:61:08:9e:19:aa:15:e2:f1:ad:46:e6:58:ba:00:c5:cd: e5:7e:31:23:80:11:63:98:e2:b0:a3:ae:dc:42:33:1c:65:0a: 7c:76:4b:30:c8:31:42:a4:7e:5a:22:b2:52:37:0f:51:b7:92: 60:66:88:31:7d:67:2f:fa:bd:7d:aa:48:7c:e9:27:f7:43:42: f4:f1:8c:d1:8c:f5:f8:ac:f9:28:92:93:bf:3b:e5:bf:c8:87: 95:e5:89:61:d7:60:c2:27:5d:2a:bf:dd:4a:b4:6e:2d:a9:3b: 94:79:c0:30:1d:e1:c7:97:5e:bb:66:38:44:2b:23:4e:0c:4b: e4:51:ec:9f:3d:f0:ec:53:37:ca:f3:6a:b6:ac:20:26:83:90: 0e:6c:26:e8:b1:2b:a8:90:85:20:6b:f4:e9:1b:46:43:ba:9f: d0:d4:09:8f:89:99:ec:d3:d9:98:e8:ae:2a:4c:8c:0e:41:8f: 71:49:66:0c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WqFwR2Hur61QWlhYCIkoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZmZmZGM1MTY1YjI1YTZlY2UyYzEwZmI2MmU3OWVkMjZlYmI1M2ZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmj+gXsWHbh7gZ14X0BV9Ap7EGJF0 blJFxrZFOvxwjGs23o9rMyrimsGOovHMHjNCCUtxuCJpcQu1pzNDfiJh5GTwm7TF xPBMcD1rF6LKj11OOolwXfUyMfsDuyKjvvasLR/qQkf13xmUcQ0ffPYBuulX8PQB dkn9yWbB7t57ZLogirnLUNtw9ov7/kIt+JTzDJRQhToGKzaHE7eX46NPdP9CrLuO 2ganbZcd4ENEuAVFnc61ld9X6RJsQLOyrys1xQYz9g/IMcVOapcki9AmNrKhp/Qh 26pZ8GMTSV0knLUNYFmasEnfep9OxpRagN+L7KpMaeDhitC7ferWvdZxKwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE//3FFlslpuziwQ+2LnntJuu1P8MB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvVF9fY1VXV3lXbTdPTEJEN1l1ZWUwbTY3VV93LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUpixMA0G CSqGSIb3DQEBCwUAA4IBAQCEFldK/JAG9NFUB5rQPRuWWJzAleT251dGXlAUqLna fYm/NMNYhWkZ1j6fxp2k7cOYgrUJhL7WUvIq+RlWQRYiiBF1dl/CiUfy1GEInhmq FeLxrUbmWLoAxc3lfjEjgBFjmOKwo67cQjMcZQp8dkswyDFCpH5aIrJSNw9Rt5Jg ZogxfWcv+r19qkh86Sf3Q0L08YzRjPX4rPkokpO/O+W/yIeV5Ylh12DCJ10qv91K tG4tqTuUecAwHeHHl167ZjhEKyNODEvkUeyfPfDsUzfK82q2rCAmg5AObCbosSuo kIUga/TpG0ZDup/Q1AmPiZns09mY6K4qTIwOQY9xSWYM -----END CERTIFICATE-----Generated at Sun Jan 25 07:17:23 2026 by rpki-client