This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/fF9PRhKkahp-f5LbND4Vg91ieH4.roa File: fF9PRhKkahp-f5LbND4Vg91ieH4.roa (raw, json) Hash identifier: zKbY/B/VqIo0hmxy22hJThwBAQLueb4GWAeEtF5h/Rg= Subject key identifier: 7C:5F:4F:46:12:A4:6A:1A:7E:7F:92:DB:34:3E:15:83:DD:62:78:7E Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5ABBA48F16CFEC395D94901FE9008A Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/fF9PRhKkahp-f5LbND4Vg91ieH4.roa Signing time: Thu 01 Jan 2026 16:18:45 +0000 ROA not before: Thu 01 Jan 2026 16:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203758 IP address blocks: 82.153.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:bb:a4:8f:16:cf:ec:39:5d:94:90:1f:e9:00:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7c5f4f4612a46a1a7e7f92db343e1583dd62787e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:32:47:07:92:4c:ce:7f:ef:5a:29:99:d3:ee: cc:1c:cf:4c:be:3a:98:e4:3e:05:ed:ca:ae:5a:e5: e9:79:2d:42:a5:cc:be:85:ac:00:fa:ca:cb:96:d8: 69:83:9a:dd:c9:26:9a:78:de:d9:c8:2a:70:54:1f: 6f:f6:2f:c4:3b:39:1f:28:15:2f:7e:3f:2b:5b:a6: 1d:a7:01:c7:7c:2d:eb:07:5c:f5:0b:9b:f4:20:de: 6e:40:7f:93:03:3a:d4:68:e4:e4:64:80:6f:28:12: ca:ea:e1:12:fa:0f:51:d8:e5:91:96:de:7b:31:8d: e1:a3:65:05:a7:45:1d:63:82:f8:b9:4a:4d:73:0d: 05:6d:97:1b:a9:bf:9c:b7:7c:91:04:ab:4c:0b:4b: 0f:2d:18:58:00:39:9a:b2:a7:bb:9e:5d:7f:9f:ed: 78:8f:61:1b:40:2d:6f:bd:a6:7b:7f:29:88:c3:36: 98:97:df:9f:bf:62:72:9d:c2:59:a9:73:42:1f:b5: 6f:4f:b3:86:af:9f:b6:ec:11:8f:f7:7d:2d:94:85: de:a8:f1:1d:e6:8b:2f:54:bf:01:77:02:6e:01:bd: 5c:d9:5d:c8:d3:b1:72:2f:2c:b5:e2:1c:7a:3a:cc: c5:94:56:ee:87:de:02:7a:43:44:ff:c8:71:6f:ed: 42:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:5F:4F:46:12:A4:6A:1A:7E:7F:92:DB:34:3E:15:83:DD:62:78:7E X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/fF9PRhKkahp-f5LbND4Vg91ieH4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.153.70.0/24 Signature Algorithm: sha256WithRSAEncryption 41:80:2d:68:07:5b:e9:78:8c:9f:1b:7b:4d:e2:b8:55:42:04: 60:8d:b4:67:4e:0b:a0:17:df:3b:ec:fe:15:90:58:85:41:e9: 62:e0:df:eb:64:1c:e4:60:83:d3:83:6d:80:11:66:67:c5:63: e8:f1:14:6a:1e:87:26:31:a4:2f:9c:96:53:ae:9e:68:99:1c: dd:4c:e8:ca:1a:73:23:b6:8f:c8:4b:49:bf:63:29:53:a7:bf: 38:9e:59:ed:12:d5:e8:0a:bd:d6:4e:b6:dc:b7:7b:a1:f4:05: 0d:ec:10:a1:8d:85:98:81:2d:de:d7:73:51:9b:e5:45:8d:3a: 74:de:b1:d8:80:d5:09:5a:3e:ae:2a:7e:fd:48:c9:02:8e:a3: 25:84:24:1d:75:09:7a:a7:b2:d8:c6:1d:a8:75:ed:2e:e3:b2: 32:fb:28:4d:19:9f:9c:b4:20:2f:37:84:95:16:d1:5f:ed:bd: 6c:41:75:00:cd:b0:e1:44:f8:70:4e:63:bb:72:c0:71:20:6b: e5:cf:e0:ea:18:a3:91:f9:64:74:e8:96:79:fb:9b:aa:ed:54: 28:ba:c5:9c:6a:c4:4c:37:a6:55:60:bd:19:7d:d4:96:49:c2: 2f:80:1e:f9:e1:8e:3d:01:d5:8b:25:63:41:dc:b7:8c:c7:11: db:c3:2e:c5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WrukjxbP7DldlJAf6QCKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YzVmNGY0NjEyYTQ2YTFhN2U3ZjkyZGIzNDNlMTU4M2RkNjI3ODdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jJHB5JMzn/vWimZ0+7MHM9MvjqY 5D4F7cquWuXpeS1Cpcy+hawA+srLlthpg5rdySaaeN7ZyCpwVB9v9i/EOzkfKBUv fj8rW6YdpwHHfC3rB1z1C5v0IN5uQH+TAzrUaOTkZIBvKBLK6uES+g9R2OWRlt57 MY3ho2UFp0UdY4L4uUpNcw0FbZcbqb+ct3yRBKtMC0sPLRhYADmasqe7nl1/n+14 j2EbQC1vvaZ7fymIwzaYl9+fv2JyncJZqXNCH7VvT7OGr5+27BGP930tlIXeqPEd 5osvVL8BdwJuAb1c2V3I07FyLyy14hx6OszFlFbuh94CekNE/8hxb+1CcwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHxfT0YSpGoafn+S2zQ+FYPdYnh+MB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvZkY5UFJoS2thaHAtZjVMYk5ENFZnOTFpZUg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUplGMA0G CSqGSIb3DQEBCwUAA4IBAQBBgC1oB1vpeIyfG3tN4rhVQgRgjbRnTgugF9877P4V kFiFQeli4N/rZBzkYIPTg22AEWZnxWPo8RRqHocmMaQvnJZTrp5omRzdTOjKGnMj to/IS0m/YylTp784nlntEtXoCr3WTrbct3uh9AUN7BChjYWYgS3e13NRm+VFjTp0 3rHYgNUJWj6uKn79SMkCjqMlhCQddQl6p7LYxh2ode0u47Iy+yhNGZ+ctCAvN4SV FtFf7b1sQXUAzbDhRPhwTmO7csBxIGvlz+DqGKOR+WR06JZ5+5uq7VQousWcasRM N6ZVYL0ZfdSWScIvgB754Y49AdWLJWNB3LeMxxHbwy7F -----END CERTIFICATE-----Generated at Sun Jan 25 11:42:52 2026 by rpki-client