This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/j5pdOOcy26FgjLpl_Vriwab4Vfw.roa File: j5pdOOcy26FgjLpl_Vriwab4Vfw.roa (raw, json) Hash identifier: bLO2w/r6Je+m9F9gYzOOuSmWGJKMvPWRsn2tjjOjMjU= Subject key identifier: 8F:9A:5D:38:E7:32:DB:A1:60:8C:BA:65:FD:5A:E2:C1:A6:F8:55:FC Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019BDF9FB030BC034CBEACB801138ACD191F Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/j5pdOOcy26FgjLpl_Vriwab4Vfw.roa Signing time: Wed 21 Jan 2026 08:15:43 +0000 ROA not before: Wed 21 Jan 2026 08:15:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205886 IP address blocks: 81.168.96.0/24 maxlen: 24 82.152.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:df:9f:b0:30:bc:03:4c:be:ac:b8:01:13:8a:cd:19:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 21 08:15:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8f9a5d38e732dba1608cba65fd5ae2c1a6f855fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:61:b8:d9:eb:4f:40:7b:60:58:8c:8e:cc:bc: aa:de:80:30:33:9c:97:26:2e:bf:34:f1:ac:fb:69: 05:30:e5:69:9b:9b:f5:4a:ab:c8:2f:98:fc:15:72: 6a:ea:1c:c5:f2:ac:d2:a6:22:ef:65:64:24:99:96: 37:24:36:59:c3:a0:14:1a:7d:41:04:b6:e9:aa:44: 42:66:5d:fe:22:d0:91:ef:2e:38:39:d1:d6:df:2d: a6:b2:bd:7b:53:28:cd:36:38:1b:0a:cd:b6:3c:31: df:a8:3a:53:36:8b:ef:39:79:46:a1:0b:90:47:91: e1:44:62:4f:c4:a9:21:ca:0e:42:40:9d:54:88:e5: 40:8e:28:98:50:b7:f2:85:3e:2b:36:8b:56:8b:24: 29:1e:d8:84:25:cf:ee:63:37:74:78:3d:fe:38:47: 0e:1a:f0:35:1b:1d:d1:db:fa:27:77:20:83:c2:57: 21:c7:65:ec:da:84:06:aa:6a:82:f9:26:44:9a:1b: 9d:c2:57:95:d2:42:38:96:a2:9d:3a:bd:16:e8:58: 67:36:6d:9c:77:e8:72:74:25:ec:69:0d:19:d9:bf: 8c:e4:51:7e:0c:a0:6c:5a:c6:8e:7f:e6:cf:c5:1c: 70:f5:6a:8a:f1:f1:02:51:f4:25:f5:2b:e2:68:1c: a2:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:9A:5D:38:E7:32:DB:A1:60:8C:BA:65:FD:5A:E2:C1:A6:F8:55:FC X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/j5pdOOcy26FgjLpl_Vriwab4Vfw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.168.96.0/24 82.152.122.0/24 Signature Algorithm: sha256WithRSAEncryption 77:0f:91:2d:5e:c2:1e:10:b6:8d:21:2a:ec:15:b9:65:48:7d: f3:7f:39:1a:ad:b9:3f:d7:84:52:f4:fe:11:f6:eb:1e:de:8b: 38:dc:51:da:72:34:02:e6:bc:5a:47:1d:01:57:a8:a6:ac:cb: b1:de:3c:67:22:5b:00:61:23:6d:a8:af:d5:05:a3:f7:18:50: 5e:63:2b:42:ca:ad:37:15:83:6b:90:81:62:5d:da:ba:31:a5: d0:3b:7a:cf:54:a8:07:3d:da:ad:b7:fd:dc:96:29:95:6d:dc: bf:89:bb:3e:5d:66:8d:72:50:24:a4:00:50:ec:27:86:a4:2e: b6:c4:35:a5:56:94:41:35:e2:e0:ed:83:2d:5e:aa:77:b9:60: d6:4c:63:e8:8f:a5:65:d9:26:aa:67:ac:e0:70:6b:05:c3:11: 71:1b:c0:e8:54:e6:5d:33:d5:7a:e7:7c:99:5b:a3:17:14:b6: 6c:25:82:e4:7c:d2:bb:e2:df:8e:27:3f:30:23:ff:5c:c8:e7: c5:ec:38:f1:6a:ec:27:42:36:1f:19:61:aa:a2:1f:38:81:bb: b0:86:d7:35:96:df:a1:10:fe:32:ae:86:55:de:8b:bf:c9:ac: 15:d9:d2:13:76:35:2c:7d:4b:e7:d4:5f:d9:40:eb:6f:c7:0a: 21:6c:87:24 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZvfn7AwvANMvqy4AROKzRkfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTIxMDgxNTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZjlhNWQzOGU3MzJkYmExNjA4Y2JhNjVmZDVhZTJjMWE2Zjg1NWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWG42etPQHtgWIyOzLyq3oAwM5yX Ji6/NPGs+2kFMOVpm5v1SqvIL5j8FXJq6hzF8qzSpiLvZWQkmZY3JDZZw6AUGn1B BLbpqkRCZl3+ItCR7y44OdHW3y2msr17UyjNNjgbCs22PDHfqDpTNovvOXlGoQuQ R5HhRGJPxKkhyg5CQJ1UiOVAjiiYULfyhT4rNotWiyQpHtiEJc/uYzd0eD3+OEcO GvA1Gx3R2/ondyCDwlchx2Xs2oQGqmqC+SZEmhudwleV0kI4lqKdOr0W6FhnNm2c d+hydCXsaQ0Z2b+M5FF+DKBsWsaOf+bPxRxw9WqK8fECUfQl9SviaByiZwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFI+aXTjnMtuhYIy6Zf1a4sGm+FX8MB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvajVwZE9PY3kyNkZnakxwbF9Wcml3YWI0VmZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUahgAwQA Uph6MA0GCSqGSIb3DQEBCwUAA4IBAQB3D5EtXsIeELaNISrsFbllSH3zfzkarbk/ 14RS9P4R9use3os43FHacjQC5rxaRx0BV6imrMux3jxnIlsAYSNtqK/VBaP3GFBe YytCyq03FYNrkIFiXdq6MaXQO3rPVKgHPdqtt/3climVbdy/ibs+XWaNclAkpABQ 7CeGpC62xDWlVpRBNeLg7YMtXqp3uWDWTGPoj6Vl2SaqZ6zgcGsFwxFxG8DoVOZd M9V653yZW6MXFLZsJYLkfNK74t+OJz8wI/9cyOfF7DjxauwnQjYfGWGqoh84gbuw htc1lt+hEP4yroZV3ou/yawV2dITdjUsfUvn1F/ZQOtvxwohbIck -----END CERTIFICATE-----Generated at Sun Jan 25 07:16:25 2026 by rpki-client