This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/a0ljWjjOMmlqv-KUZ9yfJ5o3o08.roa File: a0ljWjjOMmlqv-KUZ9yfJ5o3o08.roa (raw, json) Hash identifier: HgXqjfFgX4E4spO/gFoOPoWjpP4kI1tcmHiNguLieIw= Subject key identifier: 6B:49:63:5A:38:CE:32:69:6A:BF:E2:94:67:DC:9F:27:9A:37:A3:4F Certificate issuer: /CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c Certificate serial: 019B797F07F71F39F4AEC8A9A5440630B092 Authority key identifier: 3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/a0ljWjjOMmlqv-KUZ9yfJ5o3o08.roa Signing time: Thu 01 Jan 2026 12:18:46 +0000 ROA not before: Thu 01 Jan 2026 12:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57358 IP address blocks: 82.98.73.0/24 maxlen: 32 2a02:2e0:3ec::/48 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:07:f7:1f:39:f4:ae:c8:a9:a5:44:06:30:b0:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c Validity Not Before: Jan 1 12:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b49635a38ce32696abfe29467dc9f279a37a34f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ec:04:8b:eb:9f:bf:85:5a:fb:12:c0:ea:6c: 99:91:dc:ea:0a:a3:76:ff:87:64:3c:3d:36:b5:ae: e2:1d:54:12:19:db:80:f9:7c:2c:b2:42:63:93:19: 05:3e:e8:20:27:bf:88:e0:a8:d1:a7:4f:43:a3:8b: af:5f:1c:48:15:f4:b5:47:e0:8b:2e:62:0a:ef:61: ad:a5:e1:6e:55:36:f7:3e:45:04:3f:11:19:71:ac: 26:3a:fe:32:79:40:4c:e6:a1:54:e9:b5:c4:ff:cd: d2:1d:b2:b0:46:81:f6:3f:a1:90:1d:8b:8b:ac:66: 3a:bb:0d:90:23:aa:37:9f:3d:07:3c:0e:5e:7d:7c: e8:0a:9f:bc:3a:20:61:67:18:76:11:63:ef:e0:89: 15:6c:81:78:ab:71:b7:55:5c:21:77:72:9e:e7:7f: cc:70:8a:42:81:8c:75:a3:d6:98:98:54:32:d7:ff: 75:cb:8e:20:29:e9:42:88:2c:03:31:fd:b9:ba:7b: 73:62:44:52:64:67:1c:4e:81:c4:ab:46:20:78:0c: d1:ad:23:78:6d:47:bf:e0:f1:d4:27:f0:3f:c0:e4: 17:f8:65:46:3b:ac:8d:c1:37:d4:a9:37:5b:b3:88: ec:9e:07:2c:e7:79:ae:79:6a:81:03:84:37:1c:1d: cc:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:49:63:5A:38:CE:32:69:6A:BF:E2:94:67:DC:9F:27:9A:37:A3:4F X509v3 Authority Key Identifier: keyid:3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/a0ljWjjOMmlqv-KUZ9yfJ5o3o08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.98.73.0/24 IPv6: 2a02:2e0:3ec::/48 Signature Algorithm: sha256WithRSAEncryption 4b:7b:87:16:52:ff:46:0c:f0:4e:9b:19:a7:08:b9:57:61:26: 8f:ec:70:fb:00:25:ce:20:f9:32:c4:3f:85:4d:36:01:ef:fc: 1c:80:0b:31:08:a4:6d:26:09:02:91:16:61:84:92:87:5b:de: 6a:9c:6f:77:04:6d:7f:d5:eb:e8:5f:d5:d2:a2:0a:74:6b:15: 83:55:67:78:2d:19:da:e2:01:a5:af:a6:9d:35:c3:b3:15:ff: 55:7c:47:aa:ad:fb:5e:c8:77:b3:ff:7e:c6:f4:94:46:b6:1a: 24:25:a0:fb:c1:68:e7:60:75:a7:37:dc:fa:ce:63:bb:88:06: 3d:49:a3:db:4c:eb:1d:bb:3d:de:2a:8f:4c:42:8f:b4:4d:08: 4b:5e:a3:5a:17:0f:b0:1c:2b:ca:0b:90:72:d8:b0:e7:3c:1f: 4a:f7:0e:59:bf:73:75:74:9a:67:90:9b:28:fd:0e:01:fc:a4: 82:f1:46:32:c6:49:82:22:6e:6c:26:b4:23:25:90:dd:ca:b4: 1c:9d:60:56:90:0d:ae:04:b6:f7:52:36:90:48:64:9f:7f:2e: b8:3f:ca:47:11:ee:af:b3:21:d1:59:1c:ae:93:9e:86:ed:d9: ce:19:ff:78:e9:3e:33:32:3e:29:30:fd:8f:dc:8a:67:6e:78: 4e:ac:9c:27 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt5fwf3Hzn0rsippUQGMLCSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkOGJhMGE1MmM0MjEyOWFmMWQ0Zjc0M2ZlYjMzYmIxNDRk NGJiNWMwHhcNMjYwMTAxMTIxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjQ5NjM1YTM4Y2UzMjY5NmFiZmUyOTQ2N2RjOWYyNzlhMzdhMzRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+wEi+ufv4Va+xLA6myZkdzqCqN2 /4dkPD02ta7iHVQSGduA+XwsskJjkxkFPuggJ7+I4KjRp09Do4uvXxxIFfS1R+CL LmIK72GtpeFuVTb3PkUEPxEZcawmOv4yeUBM5qFU6bXE/83SHbKwRoH2P6GQHYuL rGY6uw2QI6o3nz0HPA5efXzoCp+8OiBhZxh2EWPv4IkVbIF4q3G3VVwhd3Ke53/M cIpCgYx1o9aYmFQy1/91y44gKelCiCwDMf25untzYkRSZGccToHEq0YgeAzRrSN4 bUe/4PHUJ/A/wOQX+GVGO6yNwTfUqTdbs4jsngcs53mueWqBA4Q3HB3MhQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFGtJY1o4zjJpar/ilGfcnyeaN6NPMB8GA1UdIwQY MBaAFD2LoKUsQhKa8dT3Q/6zO7FE1LtcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9mZjZmNGEtOGQ1Zi00NWIyLTg3NWMt YTU2ODM4NDRlNzkyLzEvYTBsaldqak9NbWxxdi1LVVo5eWZKNW8zbzA4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9mZjZmNGEtOGQ1Zi00NWIyLTg3NWMtYTU2ODM4NDRlNzky LzEvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAUmJJMA8E AgACMAkDBwAqAgLgA+wwDQYJKoZIhvcNAQELBQADggEBAEt7hxZS/0YM8E6bGacI uVdhJo/scPsAJc4g+TLEP4VNNgHv/ByACzEIpG0mCQKRFmGEkodb3mqcb3cEbX/V 6+hf1dKiCnRrFYNVZ3gtGdriAaWvpp01w7MV/1V8R6qt+17Id7P/fsb0lEa2GiQl oPvBaOdgdac33PrOY7uIBj1Jo9tM6x27Pd4qj0xCj7RNCEteo1oXD7AcK8oLkHLY sOc8H0r3Dlm/c3V0mmeQmyj9DgH8pILxRjLGSYIibmwmtCMlkN3KtBydYFaQDa4E tvdSNpBIZJ9/Lrg/ykcR7q+zIdFZHK6Tnobt2c4Z/3jpPjMyPikw/Y/cimdueE6s nCc= -----END CERTIFICATE-----Generated at Mon Jan 26 08:38:39 2026 by rpki-client