This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/mX2v1E6XLguFnbjaAo9xkuZ_YbU.roa File: mX2v1E6XLguFnbjaAo9xkuZ_YbU.roa (raw, json) Hash identifier: EsNOl7YE7/jiv9Lddbv0Cg6u3OhdzH3IL5pGXlsPUKA= Subject key identifier: 99:7D:AF:D4:4E:97:2E:0B:85:9D:B8:DA:02:8F:71:92:E6:7F:61:B5 Certificate issuer: /CN=408025c7de0400e0f3c88d4a122a317e32c5e21c Certificate serial: 019B7D5C816607ECAF43E324A1FCD3A83569 Authority key identifier: 40:80:25:C7:DE:04:00:E0:F3:C8:8D:4A:12:2A:31:7E:32:C5:E2:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/mX2v1E6XLguFnbjaAo9xkuZ_YbU.roa Signing time: Fri 02 Jan 2026 06:19:32 +0000 ROA not before: Fri 02 Jan 2026 06:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44515 IP address blocks: 82.221.0.0/17 maxlen: 17 82.221.0.0/21 maxlen: 21 82.221.22.0/24 maxlen: 24 82.221.28.0/24 maxlen: 24 82.221.46.0/23 maxlen: 23 82.221.64.0/22 maxlen: 23 82.221.68.0/22 maxlen: 22 82.221.80.0/21 maxlen: 21 82.221.80.0/24 maxlen: 24 82.221.81.0/24 maxlen: 24 82.221.84.0/24 maxlen: 24 82.221.88.0/22 maxlen: 22 82.221.92.0/22 maxlen: 22 82.221.161.0/24 maxlen: 24 82.221.162.0/24 maxlen: 24 82.221.165.0/24 maxlen: 24 82.221.166.0/24 maxlen: 24 212.30.224.0/19 maxlen: 19 212.30.229.0/24 maxlen: 24 212.30.242.0/24 maxlen: 24 2a02:f48::/40 maxlen: 40 2a02:f48:2100::/40 maxlen: 40 2a02:f48:2104::/48 maxlen: 48 2a02:f48:2105::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:81:66:07:ec:af:43:e3:24:a1:fc:d3:a8:35:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=408025c7de0400e0f3c88d4a122a317e32c5e21c Validity Not Before: Jan 2 06:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=997dafd44e972e0b859db8da028f7192e67f61b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:2f:65:61:94:49:40:87:7f:32:b3:09:88:af: 0c:b0:ad:0d:84:4c:98:7f:96:16:c3:68:d3:a1:f2: ae:33:8b:89:ee:82:a5:0b:b4:2d:8d:ff:b1:32:63: 73:b2:22:0c:cf:91:21:71:2b:41:65:ce:2e:38:fe: ec:9d:b6:7c:94:ae:df:88:2d:d2:59:06:f9:b6:2a: cf:c6:5e:32:f4:a9:7f:f8:9e:0f:9f:68:77:5c:4f: 7e:14:5f:64:fb:d6:73:84:fa:0f:0a:d7:31:7a:8c: e4:15:4f:22:a7:c0:07:36:dc:1c:7c:95:40:c9:31: 64:e7:8b:68:57:83:15:19:a9:f3:c5:e2:1c:af:55: d4:62:a8:c8:25:fd:5e:a5:6b:bd:fc:b8:5e:00:d7: a7:08:75:7e:43:bd:04:82:52:08:ec:63:d7:82:b9: f8:13:73:42:ec:5e:f6:00:d1:c9:4b:9b:4c:df:e5: 90:34:30:50:c4:ef:77:ea:a9:c0:bb:0d:77:75:49: 2a:a8:cc:d2:f7:88:1f:a9:40:cd:ee:68:ec:ff:c2: 34:fd:2d:5d:bf:1d:22:9d:88:ad:0a:50:cf:23:82: e3:ca:15:75:25:9e:05:74:6a:12:43:58:86:67:c1: 1a:fb:66:e5:af:51:fa:5e:72:30:07:2f:cf:68:42: c3:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:7D:AF:D4:4E:97:2E:0B:85:9D:B8:DA:02:8F:71:92:E6:7F:61:B5 X509v3 Authority Key Identifier: keyid:40:80:25:C7:DE:04:00:E0:F3:C8:8D:4A:12:2A:31:7E:32:C5:E2:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/mX2v1E6XLguFnbjaAo9xkuZ_YbU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.221.0.0/17 82.221.161.0-82.221.162.255 82.221.165.0-82.221.166.255 212.30.224.0/19 IPv6: 2a02:f48::/40 2a02:f48:2100::/40 Signature Algorithm: sha256WithRSAEncryption a5:bf:14:4e:60:10:20:30:83:64:f1:32:e2:02:03:0b:a5:6b: 4a:c9:55:97:4d:2e:7c:ca:f2:29:66:74:59:65:76:79:92:ce: ce:b7:7f:d3:1c:3d:43:cb:99:24:6c:ec:87:60:35:cd:71:a2: 4c:fe:90:11:ac:6b:c8:ea:04:54:cf:37:d5:52:ff:55:1c:94: 96:6e:f8:f0:62:ae:04:ad:d3:10:84:f3:cf:c0:fb:0d:80:c3: de:64:b3:a3:9a:d0:25:47:35:83:df:3a:ae:20:ab:1d:6e:ea: e1:1a:2a:cc:fa:44:4f:80:68:42:4a:9a:2a:8f:9a:19:1b:5f: fd:ae:b4:1b:33:bc:53:72:5c:f8:4b:25:a7:ee:1a:38:24:fb: 70:c0:5b:0b:bf:a4:74:c2:26:99:ad:c8:ce:f4:88:0f:b7:a7: 4a:00:79:e8:2b:1a:e1:0c:66:83:c4:97:92:0b:78:5a:fb:6e: 2a:64:9b:90:e4:17:94:d2:e8:50:44:a0:fa:fb:a0:e1:c7:62: cd:a5:94:23:c8:f0:a9:0c:e9:71:94:bb:7e:9f:b1:d0:f3:fd: d4:f9:ed:b3:2e:64:1e:d0:88:9e:45:14:1c:54:ca:71:a7:01: b1:80:d6:70:da:a2:34:bf:ef:4b:76:04:dd:6e:84:eb:f8:79: f4:9a:cc:ed -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgISAZt9XIFmB+yvQ+MkofzTqDVpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwODAyNWM3ZGUwNDAwZTBmM2M4OGQ0YTEyMmEzMTdlMzJj NWUyMWMwHhcNMjYwMTAyMDYxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OTdkYWZkNDRlOTcyZTBiODU5ZGI4ZGEwMjhmNzE5MmU2N2Y2MWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0C9lYZRJQId/MrMJiK8MsK0NhEyY f5YWw2jTofKuM4uJ7oKlC7Qtjf+xMmNzsiIMz5EhcStBZc4uOP7snbZ8lK7fiC3S WQb5tirPxl4y9Kl/+J4Pn2h3XE9+FF9k+9ZzhPoPCtcxeozkFU8ip8AHNtwcfJVA yTFk54toV4MVGanzxeIcr1XUYqjIJf1epWu9/LheANenCHV+Q70EglII7GPXgrn4 E3NC7F72ANHJS5tM3+WQNDBQxO936qnAuw13dUkqqMzS94gfqUDN7mjs/8I0/S1d vx0inYitClDPI4LjyhV1JZ4FdGoSQ1iGZ8Ea+2blr1H6XnIwBy/PaELDawIDAQAB o4ICQzCCAj8wHQYDVR0OBBYEFJl9r9ROly4LhZ242gKPcZLmf2G1MB8GA1UdIwQY MBaAFECAJcfeBADg88iNShIqMX4yxeIcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUlBbHg5NEVBT0R6eUkxS0Vpb3hmakxGNGh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy81OTMwM2QtNzQ4YS00Nzk3LTgxMWUt ZmVlMmU4ZDQwODRmLzEvbVgydjFFNlhMZ3VGbmJqYUFvOXhrdVpfWWJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy81OTMwM2QtNzQ4YS00Nzk3LTgxMWUtZmVlMmU4ZDQwODRm LzEvUUlBbHg5NEVBT0R6eUkxS0Vpb3hmakxGNGh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/BEowSDAuBAIAATAoAwQHUt0AMAwD BABS3aEDBABS3aIwDAMEAFLdpQMEAFLdpgMEBdQe4DAWBAIAAjAQAwYAKgIPSAAD BgAqAg9IITANBgkqhkiG9w0BAQsFAAOCAQEApb8UTmAQIDCDZPEy4gIDC6VrSslV l00ufMryKWZ0WWV2eZLOzrd/0xw9Q8uZJGzsh2A1zXGiTP6QEaxryOoEVM831VL/ VRyUlm748GKuBK3TEITzz8D7DYDD3mSzo5rQJUc1g986riCrHW7q4RoqzPpET4Bo QkqaKo+aGRtf/a60GzO8U3Jc+Eslp+4aOCT7cMBbC7+kdMImma3IzvSID7enSgB5 6Csa4Qxmg8SXkgt4WvtuKmSbkOQXlNLoUESg+vug4cdizaWUI8jwqQzpcZS7fp+x 0PP91Pntsy5kHtCInkUUHFTKcacBsYDWcNqiNL/vS3YE3W6E6/h59JrM7Q== -----END CERTIFICATE-----Generated at Sun Jan 25 19:43:06 2026 by rpki-client