This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/cijQaohZUtPMhbamU2igLu33O1A.roa File: cijQaohZUtPMhbamU2igLu33O1A.roa (raw, json) Hash identifier: 6aOov2XzZpxNl7eFfASn1g6jvTwrAqajrG89nK6/aeQ= Subject key identifier: 72:28:D0:6A:88:59:52:D3:CC:85:B6:A6:53:68:A0:2E:ED:F7:3B:50 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5AD71886C997184A769A984FB07416 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/cijQaohZUtPMhbamU2igLu33O1A.roa Signing time: Thu 01 Jan 2026 16:18:52 +0000 ROA not before: Thu 01 Jan 2026 16:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214271 IP address blocks: 77.93.158.0/24 maxlen: 24 82.152.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:d7:18:86:c9:97:18:4a:76:9a:98:4f:b0:74:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7228d06a885952d3cc85b6a65368a02eedf73b50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fa:4c:27:db:a9:db:63:b9:4e:9a:e3:6b:23: bd:13:f0:45:d6:3c:9d:8e:2e:e5:8d:bd:c1:51:c8: 2e:ba:ee:9d:85:73:f7:c4:8d:56:c2:42:31:4a:c1: 4e:93:06:90:fb:03:9b:f9:73:46:70:d2:f0:95:0c: ce:b4:d2:e4:91:bc:90:00:c6:d1:dc:e5:ba:89:cd: 01:be:db:79:b6:8a:12:dd:49:c4:dc:44:1a:81:d4: 6a:06:ff:12:ec:65:bb:a6:bf:02:44:fa:53:ec:94: 16:86:de:65:a8:b9:77:68:60:89:f8:3c:5b:ee:cb: 8c:15:ee:3c:e8:5d:05:b3:02:75:78:bf:0d:56:10: e0:61:0b:2c:ea:d4:d4:9f:a1:3c:db:97:b6:b9:44: 05:b9:bb:e7:2c:90:80:e1:b2:8d:ae:b5:a6:94:f8: a8:79:bb:89:01:ee:d9:c2:4a:33:e9:ff:70:f7:79: d6:a8:bd:8a:ee:9e:54:01:bd:d7:fd:b7:ba:cf:81: 40:66:bf:cc:d9:93:a4:01:d8:a4:a9:50:0f:2c:c5: 52:31:aa:80:95:fd:e1:ce:3c:9e:ba:ab:6b:c0:ad: 7e:e0:4e:d0:5a:3c:5c:5c:0e:0d:10:74:47:0b:9f: ad:1e:5d:dc:e0:6f:5b:95:b4:c4:03:75:49:bc:14: 2c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:28:D0:6A:88:59:52:D3:CC:85:B6:A6:53:68:A0:2E:ED:F7:3B:50 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/cijQaohZUtPMhbamU2igLu33O1A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.93.158.0/24 82.152.178.0/24 Signature Algorithm: sha256WithRSAEncryption 41:de:a7:27:45:5f:b2:ad:b2:93:7e:26:03:3d:7f:bc:a9:35: bb:af:1a:e5:d3:d6:2b:05:2a:a8:bc:34:7d:46:27:5d:97:e6: ce:94:d1:0e:bb:22:33:30:7e:6d:b9:42:e5:88:2c:0d:af:fd: ef:44:08:3b:e2:a5:04:a5:71:48:b3:f6:63:2c:20:dc:1f:ca: e3:51:05:1c:bd:1f:2a:95:21:66:8a:57:8c:dc:ef:15:b5:77: fa:5c:9d:03:ae:7d:a5:ae:24:e7:2d:66:cc:68:52:38:e2:2b: 60:66:c3:f7:04:05:13:ce:9b:89:66:8d:a5:02:f6:88:c0:26: 4b:f4:b2:80:25:a0:77:6b:ee:31:5f:42:c5:85:9a:81:a5:a9: a8:df:62:8a:ac:51:ca:99:8d:0f:8c:ec:50:d0:66:86:60:dc: 3c:5e:21:d7:99:65:75:c3:5b:06:8d:60:a7:37:7e:4a:d5:06: 9f:f3:68:58:ca:bc:a6:0a:2c:d4:28:7a:b2:b9:cd:d8:3a:9f: 63:67:6a:f5:87:f7:e3:41:72:8f:72:7c:a8:70:5b:d3:7a:ae: 4e:ee:3d:e1:f8:79:7b:80:55:6c:c1:78:e6:95:c0:ae:ed:2c: e8:6a:01:a6:85:20:ed:fc:57:5f:36:13:15:a6:37:44:c4:85: 1e:5a:5a:8e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6WtcYhsmXGEp2mphPsHQWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MjI4ZDA2YTg4NTk1MmQzY2M4NWI2YTY1MzY4YTAyZWVkZjczYjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufpMJ9up22O5TprjayO9E/BF1jyd ji7ljb3BUcguuu6dhXP3xI1WwkIxSsFOkwaQ+wOb+XNGcNLwlQzOtNLkkbyQAMbR 3OW6ic0Bvtt5tooS3UnE3EQagdRqBv8S7GW7pr8CRPpT7JQWht5lqLl3aGCJ+Dxb 7suMFe486F0FswJ1eL8NVhDgYQss6tTUn6E825e2uUQFubvnLJCA4bKNrrWmlPio ebuJAe7Zwkoz6f9w93nWqL2K7p5UAb3X/be6z4FAZr/M2ZOkAdikqVAPLMVSMaqA lf3hzjyeuqtrwK1+4E7QWjxcXA4NEHRHC5+tHl3c4G9blbTEA3VJvBQsYwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHIo0GqIWVLTzIW2plNooC7t9ztQMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvY2lqUWFvaFpVdFBNaGJhbVUyaWdMdTMzTzFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATV2eAwQA UpiyMA0GCSqGSIb3DQEBCwUAA4IBAQBB3qcnRV+yrbKTfiYDPX+8qTW7rxrl09Yr BSqovDR9Riddl+bOlNEOuyIzMH5tuULliCwNr/3vRAg74qUEpXFIs/ZjLCDcH8rj UQUcvR8qlSFmileM3O8VtXf6XJ0Drn2lriTnLWbMaFI44itgZsP3BAUTzpuJZo2l AvaIwCZL9LKAJaB3a+4xX0LFhZqBpamo32KKrFHKmY0PjOxQ0GaGYNw8XiHXmWV1 w1sGjWCnN35K1Qaf82hYyrymCizUKHqyuc3YOp9jZ2r1h/fjQXKPcnyocFvTeq5O 7j3h+Hl7gFVswXjmlcCu7SzoagGmhSDt/FdfNhMVpjdExIUeWlqO -----END CERTIFICATE-----Generated at Sun Jan 25 08:47:41 2026 by rpki-client