This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/auC-KUXuVSWTRCoJ-mNPx3MCUFw.roa File: auC-KUXuVSWTRCoJ-mNPx3MCUFw.roa (raw, json) Hash identifier: +C/QtgKrOLURKElQX+XVSCWq/0p3fegwREWk8DWsWko= Subject key identifier: 6A:E0:BE:29:45:EE:55:25:93:44:2A:09:FA:63:4F:C7:73:02:50:5C Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5AD6EA4E353830FE5694DE7B700A9C Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/auC-KUXuVSWTRCoJ-mNPx3MCUFw.roa Signing time: Thu 01 Jan 2026 16:18:52 +0000 ROA not before: Thu 01 Jan 2026 16:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214209 IP address blocks: 82.153.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:d6:ea:4e:35:38:30:fe:56:94:de:7b:70:0a:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ae0be2945ee552593442a09fa634fc77302505c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:29:e8:0f:1f:36:49:ab:91:06:25:05:58:1a: 19:58:00:87:ac:fd:ee:5a:ab:fd:d2:e4:41:e0:eb: 3c:d3:51:58:98:60:13:c1:d0:ad:a3:6f:24:31:01: 88:73:7f:a0:fa:20:95:16:cb:23:da:ae:8a:57:c6: ff:d1:27:3f:6e:02:7a:c2:5c:93:95:cd:3c:42:92: a2:3e:7b:bd:59:ee:eb:75:3c:ad:2e:72:90:a5:c5: ef:95:44:d0:54:6e:2c:6f:68:9a:39:32:3f:45:ca: f5:14:4f:bd:49:e0:6f:49:46:29:11:1f:c0:09:91: 69:29:d0:f3:35:48:a7:5f:49:fb:87:e1:4f:de:12: ca:cc:db:86:54:89:df:de:de:a9:8c:66:65:d8:aa: 65:f8:ff:f6:74:c9:56:6d:aa:9a:9a:e5:3f:38:d7: 20:9a:dc:b9:50:2a:7e:57:42:7d:d4:a5:64:ff:49: 2c:d5:2f:c6:aa:d6:15:d8:4b:4f:75:4f:0d:27:84: 2b:e9:0c:ad:2b:c8:d4:09:c2:3b:a4:69:69:b8:3d: fc:e8:cb:76:f0:97:27:31:26:fa:4b:3d:2e:12:b4: 42:10:3b:37:bf:24:61:7e:37:e7:f1:91:4b:b0:7b: 7b:fc:6b:ae:14:0b:f7:8d:c3:85:f6:8b:6f:76:7e: f0:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:E0:BE:29:45:EE:55:25:93:44:2A:09:FA:63:4F:C7:73:02:50:5C X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/auC-KUXuVSWTRCoJ-mNPx3MCUFw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.153.138.0/24 Signature Algorithm: sha256WithRSAEncryption 29:9f:5f:62:97:9b:b2:f6:bd:c5:48:c2:6e:60:2c:1d:8a:c8: cc:5b:bf:16:ab:a8:b0:36:0b:6c:5f:aa:6b:33:47:91:6f:e1: c9:45:94:09:2f:32:36:a4:81:84:a1:0a:ce:11:c5:d5:a7:90: d2:88:e8:ff:28:0f:2f:86:54:09:3f:d7:54:00:a2:2b:86:fe: 39:60:83:d1:e5:2e:76:88:d8:2c:41:13:76:fa:6d:05:7c:0e: 7b:55:2a:83:7c:c7:de:39:b6:1b:23:0a:a1:5a:80:14:42:14: ae:70:6e:55:dc:4d:b0:95:ac:72:a1:50:61:0a:20:45:db:89: 44:a1:b0:7b:f3:14:a3:f8:43:d8:e7:49:3b:73:55:40:58:f9: 78:1f:a6:19:6e:1c:8c:0d:3c:96:f1:40:b8:01:34:dc:ce:2b: 05:ad:e6:0a:68:cb:52:23:ca:c4:ef:13:b8:bd:67:06:1d:23: 98:b7:0c:9e:77:49:68:f7:a6:e5:7f:80:e2:53:63:dc:8b:93: bd:d6:2a:d3:5a:06:06:78:e1:42:27:e6:e3:ff:03:e4:1d:87: f5:21:b2:67:c4:31:5d:1d:ab:7b:16:db:39:2e:b7:34:30:0a: ae:fa:d8:44:93:90:29:d2:47:15:f1:52:10:ee:a5:f6:20:74: 9d:f0:a2:7c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WtbqTjU4MP5WlN57cAqcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YWUwYmUyOTQ1ZWU1NTI1OTM0NDJhMDlmYTYzNGZjNzczMDI1MDVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ynoDx82SauRBiUFWBoZWACHrP3u Wqv90uRB4Os801FYmGATwdCto28kMQGIc3+g+iCVFssj2q6KV8b/0Sc/bgJ6wlyT lc08QpKiPnu9We7rdTytLnKQpcXvlUTQVG4sb2iaOTI/Rcr1FE+9SeBvSUYpER/A CZFpKdDzNUinX0n7h+FP3hLKzNuGVInf3t6pjGZl2Kpl+P/2dMlWbaqamuU/ONcg mty5UCp+V0J91KVk/0ks1S/GqtYV2EtPdU8NJ4Qr6QytK8jUCcI7pGlpuD386Mt2 8JcnMSb6Sz0uErRCEDs3vyRhfjfn8ZFLsHt7/GuuFAv3jcOF9otvdn7wqwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGrgvilF7lUlk0QqCfpjT8dzAlBcMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvYXVDLUtVWHVWU1dUUkNvSi1tTlB4M01DVUZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUpmKMA0G CSqGSIb3DQEBCwUAA4IBAQApn19il5uy9r3FSMJuYCwdisjMW78Wq6iwNgtsX6pr M0eRb+HJRZQJLzI2pIGEoQrOEcXVp5DSiOj/KA8vhlQJP9dUAKIrhv45YIPR5S52 iNgsQRN2+m0FfA57VSqDfMfeObYbIwqhWoAUQhSucG5V3E2wlaxyoVBhCiBF24lE obB78xSj+EPY50k7c1VAWPl4H6YZbhyMDTyW8UC4ATTczisFreYKaMtSI8rE7xO4 vWcGHSOYtwyed0lo96blf4DiU2Pci5O91irTWgYGeOFCJ+bj/wPkHYf1IbJnxDFd Hat7Fts5Lrc0MAqu+thEk5Ap0kcV8VIQ7qX2IHSd8KJ8 -----END CERTIFICATE-----Generated at Sun Jan 25 07:17:27 2026 by rpki-client