This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/xVAuOfSORk-FCoegXkBnqLuWJcA.roa File: xVAuOfSORk-FCoegXkBnqLuWJcA.roa (raw, json) Hash identifier: a17cebxoRJsJ/XTnH6Tp0Dq++1DMr+P+B2S2UbHiwtc= Subject key identifier: C5:50:2E:39:F4:8E:46:4F:85:0A:87:A0:5E:40:67:A8:BB:96:25:C0 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5AA4BBF7DBD0A2BC62C5752934AEF1 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/xVAuOfSORk-FCoegXkBnqLuWJcA.roa Signing time: Thu 01 Jan 2026 16:18:39 +0000 ROA not before: Thu 01 Jan 2026 16:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47263 IP address blocks: 82.153.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:a4:bb:f7:db:d0:a2:bc:62:c5:75:29:34:ae:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c5502e39f48e464f850a87a05e4067a8bb9625c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b8:66:7a:c2:53:44:07:1c:03:50:69:48:bd: 10:2b:20:8e:d1:8f:8c:42:1a:59:3a:f8:2f:c2:6b: 0d:6e:f1:97:d6:b9:bc:4f:07:fc:ab:be:1f:d8:f4: 6f:6a:88:ea:b2:5a:7d:ee:0a:1d:2a:6e:21:eb:24: f2:41:0d:a1:7a:0b:ef:5c:56:3d:b0:66:5a:e7:c8: b7:81:b8:5e:2b:90:50:0e:b4:ee:ee:fe:af:4b:24: 92:a3:39:f8:3a:41:16:2e:45:7b:49:da:3f:39:ab: 67:0c:51:ab:ce:05:68:f9:db:69:7c:55:7e:ef:e4: 22:13:d7:f3:8d:0f:56:80:6d:12:d3:76:7d:2f:e6: 54:2d:b3:41:e5:1a:d9:27:89:e4:4d:14:28:49:45: 85:33:02:b8:e6:56:16:9d:d1:de:6d:fc:d0:d4:10: 3e:5d:89:66:d5:8a:36:88:ea:5a:1d:04:d5:15:96: eb:50:ef:d6:be:9d:8c:a0:bf:25:f1:4d:c6:d6:64: 89:46:f7:87:f7:68:95:c5:0e:94:6c:0e:e3:d2:70: bd:36:88:c3:f9:33:f4:06:91:8b:2a:17:b6:58:1e: 9f:73:29:f2:1b:11:6f:71:6b:14:80:bb:30:eb:88: 67:23:48:99:30:ca:02:2b:5e:29:c5:b6:7e:e5:ba: 29:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:50:2E:39:F4:8E:46:4F:85:0A:87:A0:5E:40:67:A8:BB:96:25:C0 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/xVAuOfSORk-FCoegXkBnqLuWJcA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.153.225.0/24 Signature Algorithm: sha256WithRSAEncryption 19:90:8a:13:8e:94:ca:a5:3b:55:0c:2d:5e:4f:66:26:64:b4: d7:41:e2:58:d2:b5:ad:df:80:79:16:6f:ea:16:e6:5e:71:c2: 3d:9a:fc:25:2c:7b:9a:2e:f5:51:eb:4a:46:24:c4:4c:22:fa: 60:c3:68:29:69:3e:1f:85:fc:5f:34:3f:84:af:d6:aa:a9:26: e5:69:66:bd:e3:de:67:ad:9d:d4:0d:37:9f:8a:5b:7e:89:d4: 29:2f:49:37:24:d2:a8:47:7b:83:08:e3:82:23:87:6b:63:90: f0:8c:96:3d:c0:ab:bf:81:3c:16:70:b7:90:76:f4:df:44:01: b8:ff:78:40:89:e5:29:fc:2a:58:d0:57:15:c2:0b:f3:59:6e: 7f:e5:a0:43:c8:75:2d:f8:15:9b:9c:2e:2b:ca:b7:90:b3:20: 63:db:d2:3f:12:34:b3:c0:bc:72:76:3d:47:7e:06:f7:84:4d: 56:ee:c9:d0:6a:ad:4c:1c:aa:b6:65:70:da:3f:68:b3:ef:63: 4c:21:b8:1a:b8:fb:1a:71:82:b6:16:3a:2a:c2:20:1f:b1:89: de:ac:de:b5:f4:45:0a:d1:eb:39:c0:88:e0:50:d9:25:29:1e: a6:43:d9:01:64:63:6c:04:45:e2:33:a8:bc:ad:82:7f:87:12: 5a:77:95:b1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WqS799vQorxixXUpNK7xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTUwMmUzOWY0OGU0NjRmODUwYTg3YTA1ZTQwNjdhOGJiOTYyNWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rhmesJTRAccA1BpSL0QKyCO0Y+M QhpZOvgvwmsNbvGX1rm8Twf8q74f2PRvaojqslp97godKm4h6yTyQQ2hegvvXFY9 sGZa58i3gbheK5BQDrTu7v6vSySSozn4OkEWLkV7Sdo/OatnDFGrzgVo+dtpfFV+ 7+QiE9fzjQ9WgG0S03Z9L+ZULbNB5RrZJ4nkTRQoSUWFMwK45lYWndHebfzQ1BA+ XYlm1Yo2iOpaHQTVFZbrUO/Wvp2MoL8l8U3G1mSJRveH92iVxQ6UbA7j0nC9NojD +TP0BpGLKhe2WB6fcynyGxFvcWsUgLsw64hnI0iZMMoCK14pxbZ+5bopbQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMVQLjn0jkZPhQqHoF5AZ6i7liXAMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEveFZBdU9mU09Say1GQ29lZ1hrQm5xTHVXSmNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUpnhMA0G CSqGSIb3DQEBCwUAA4IBAQAZkIoTjpTKpTtVDC1eT2YmZLTXQeJY0rWt34B5Fm/q FuZeccI9mvwlLHuaLvVR60pGJMRMIvpgw2gpaT4fhfxfND+Er9aqqSblaWa9495n rZ3UDTefilt+idQpL0k3JNKoR3uDCOOCI4drY5DwjJY9wKu/gTwWcLeQdvTfRAG4 /3hAieUp/CpY0FcVwgvzWW5/5aBDyHUt+BWbnC4ryreQsyBj29I/EjSzwLxydj1H fgb3hE1W7snQaq1MHKq2ZXDaP2iz72NMIbgauPsacYK2FjoqwiAfsYnerN619EUK 0es5wIjgUNklKR6mQ9kBZGNsBEXiM6i8rYJ/hxJad5Wx -----END CERTIFICATE-----Generated at Sun Jan 25 07:15:56 2026 by rpki-client