This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/vsAEpL5w14p4gOY7B1dWMsDjDJI.roa File: vsAEpL5w14p4gOY7B1dWMsDjDJI.roa (raw, json) Hash identifier: ULT4TLN8aqk2Vz6VZZi8pMSOHDlIrdLD0OUPI10LgY0= Subject key identifier: BE:C0:04:A4:BE:70:D7:8A:78:80:E6:3B:07:57:56:32:C0:E3:0C:92 Certificate issuer: /CN=12c889964b35b51ba8e5e679a15b19a31f133578 Certificate serial: 019B7BA3771088FE921B510066309612EFB3 Authority key identifier: 12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/vsAEpL5w14p4gOY7B1dWMsDjDJI.roa Signing time: Thu 01 Jan 2026 22:17:48 +0000 ROA not before: Thu 01 Jan 2026 22:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43905 IP address blocks: 82.146.180.0/24 maxlen: 24 82.146.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:77:10:88:fe:92:1b:51:00:66:30:96:12:ef:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12c889964b35b51ba8e5e679a15b19a31f133578 Validity Not Before: Jan 1 22:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bec004a4be70d78a7880e63b07575632c0e30c92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:9c:4d:93:e4:e2:e3:63:44:a8:4c:2e:23:c7: 9f:67:80:c4:59:c1:ab:a3:9f:a7:22:3d:05:b0:21: a6:37:83:71:e2:ab:c9:53:ae:a3:7a:78:4a:b7:7f: 05:22:14:ad:99:d0:be:4d:e0:21:94:34:41:e4:1d: 46:af:dc:5f:d3:72:8e:90:e5:c0:8d:1f:ae:2e:5f: 25:cf:27:1e:cc:16:6b:3a:5e:0d:a1:87:0c:e7:6a: fb:70:c3:99:4e:fb:ae:50:11:df:52:1d:7a:eb:b9: 5f:bb:ee:cd:4b:4f:17:06:f3:ec:fc:d5:b6:33:89: 8b:0b:c3:cb:ff:14:92:7d:88:0c:6b:5e:49:ed:9a: e1:d1:56:0c:8e:89:bd:11:d1:60:99:4a:96:df:3e: 39:ad:89:29:e1:49:94:0a:93:5e:76:cd:b1:22:d1: fb:7f:ce:b0:de:37:f4:8a:8b:67:cb:b7:30:aa:db: 53:42:f1:28:1a:3c:40:4f:ae:85:35:67:c9:cb:84: cb:dc:ce:f5:1f:97:41:0a:81:94:79:07:bf:14:7e: a2:0e:1c:42:e3:81:d4:83:05:f9:79:d0:92:41:04: 53:56:53:53:4f:83:d8:90:16:91:47:a9:03:e6:72: 08:76:43:7f:20:6b:5b:7d:ee:ff:31:d7:33:f4:e9: a4:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:C0:04:A4:BE:70:D7:8A:78:80:E6:3B:07:57:56:32:C0:E3:0C:92 X509v3 Authority Key Identifier: keyid:12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/vsAEpL5w14p4gOY7B1dWMsDjDJI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.146.180.0/24 82.146.182.0/24 Signature Algorithm: sha256WithRSAEncryption 28:33:74:af:20:cf:e5:cb:dd:12:83:15:6d:95:4b:6f:a1:34: 40:7b:6f:b3:96:b5:cb:62:fe:11:1b:dd:3d:7b:e2:b1:06:c2: 0f:78:9c:0a:28:44:7b:bd:67:f8:cd:4d:b7:00:4e:c4:05:18: fd:bc:9c:12:9a:f3:fe:cf:49:3c:90:06:7a:fc:09:fa:10:e8: 26:6b:34:2e:02:71:26:69:6b:b6:32:f2:0b:46:85:95:e5:b6: 53:0f:fb:db:59:99:d0:0d:87:61:1e:89:4a:9a:0a:cf:ba:76: ab:46:e7:79:aa:0c:97:ff:0d:f6:41:5c:98:70:72:23:63:10: d2:4c:ce:96:1d:9a:d6:2a:10:7a:1c:51:e4:91:e0:d9:d7:76: 76:6d:f4:34:7a:e7:1b:6c:ff:5f:1b:f0:bf:3e:1b:dd:b2:27: b8:d2:75:38:c2:2c:84:f2:f2:de:b0:37:d9:be:e3:df:7b:f1: 55:26:52:d4:61:1b:89:b8:a6:26:82:c4:07:d2:1e:bb:5a:5a: 27:55:e1:06:72:65:34:8b:1c:48:e2:6e:ac:e5:36:f7:c1:13: a1:fc:ea:53:9a:fe:90:e0:70:ff:bd:d6:fe:f7:d7:df:00:f2: 11:7f:43:60:7a:10:00:25:0d:83:ac:2b:da:c4:01:4e:ee:3d: c1:68:62:ad -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7o3cQiP6SG1EAZjCWEu+zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyYzg4OTk2NGIzNWI1MWJhOGU1ZTY3OWExNWIxOWEzMWYx MzM1NzgwHhcNMjYwMTAxMjIxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZWMwMDRhNGJlNzBkNzhhNzg4MGU2M2IwNzU3NTYzMmMwZTMwYzkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JxNk+Ti42NEqEwuI8efZ4DEWcGr o5+nIj0FsCGmN4Nx4qvJU66jenhKt38FIhStmdC+TeAhlDRB5B1Gr9xf03KOkOXA jR+uLl8lzycezBZrOl4NoYcM52r7cMOZTvuuUBHfUh1667lfu+7NS08XBvPs/NW2 M4mLC8PL/xSSfYgMa15J7Zrh0VYMjom9EdFgmUqW3z45rYkp4UmUCpNeds2xItH7 f86w3jf0iotny7cwqttTQvEoGjxAT66FNWfJy4TL3M71H5dBCoGUeQe/FH6iDhxC 44HUgwX5edCSQQRTVlNTT4PYkBaRR6kD5nIIdkN/IGtbfe7/Mdcz9Omk+wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFL7ABKS+cNeKeIDmOwdXVjLA4wySMB8GA1UdIwQY MBaAFBLIiZZLNbUbqOXmeaFbGaMfEzV4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXNpSmxrczF0UnVvNWVaNW9Wc1pveDhUTlhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8xNmIwMmMtODMzYS00OGYwLWJhNTYt YWQ2ZjBiZjg4NDM4LzEvdnNBRXBMNXcxNHA0Z09ZN0IxZFdNc0RqREpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8xNmIwMmMtODMzYS00OGYwLWJhNTYtYWQ2ZjBiZjg4NDM4 LzEvRXNpSmxrczF0UnVvNWVaNW9Wc1pveDhUTlhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUpK0AwQA UpK2MA0GCSqGSIb3DQEBCwUAA4IBAQAoM3SvIM/ly90SgxVtlUtvoTRAe2+zlrXL Yv4RG909e+KxBsIPeJwKKER7vWf4zU23AE7EBRj9vJwSmvP+z0k8kAZ6/An6EOgm azQuAnEmaWu2MvILRoWV5bZTD/vbWZnQDYdhHolKmgrPunarRud5qgyX/w32QVyY cHIjYxDSTM6WHZrWKhB6HFHkkeDZ13Z2bfQ0eucbbP9fG/C/Phvdsie40nU4wiyE 8vLesDfZvuPfe/FVJlLUYRuJuKYmgsQH0h67WlonVeEGcmU0ixxI4m6s5Tb3wROh /OpTmv6Q4HD/vdb+99ffAPIRf0NgehAAJQ2DrCvaxAFO7j3BaGKt -----END CERTIFICATE-----Generated at Mon Jan 26 06:19:23 2026 by rpki-client