This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/83YQUlILQ7GDfrTJPK3LZaXUsK8.roa File: 83YQUlILQ7GDfrTJPK3LZaXUsK8.roa (raw, json) Hash identifier: vNXxGjQTXNQA/zSyVijjMQoJOd0f9h52cpzw4JKC8XQ= Subject key identifier: F3:76:10:52:52:0B:43:B1:83:7E:B4:C9:3C:AD:CB:65:A5:D4:B0:AF Certificate issuer: /CN=f394a464728b82856dc2b955ccae9ab5ba6539c8 Certificate serial: 019B7F155CC10122D58191A8AD89A2BF71D5 Authority key identifier: F3:94:A4:64:72:8B:82:85:6D:C2:B9:55:CC:AE:9A:B5:BA:65:39:C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/85SkZHKLgoVtwrlVzK6atbplOcg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/83YQUlILQ7GDfrTJPK3LZaXUsK8.roa Signing time: Fri 02 Jan 2026 14:21:05 +0000 ROA not before: Fri 02 Jan 2026 14:21:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58011 IP address blocks: 164.138.240.0/21 maxlen: 24 164.138.244.208/32 maxlen: 32 164.138.245.157/32 maxlen: 32 188.244.108.0/22 maxlen: 24 2a0d:55c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.mft rsync://rpki.ripe.net/repository/DEFAULT/85SkZHKLgoVtwrlVzK6atbplOcg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:5c:c1:01:22:d5:81:91:a8:ad:89:a2:bf:71:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f394a464728b82856dc2b955ccae9ab5ba6539c8 Validity Not Before: Jan 2 14:21:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f3761052520b43b1837eb4c93cadcb65a5d4b0af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:e2:08:2a:f7:76:5e:10:f3:70:c6:8f:d7:4c: 44:8f:96:f1:5f:e2:75:ec:f8:17:47:6b:1c:83:ce: 69:3b:13:0b:d3:60:2c:a7:db:eb:fb:07:32:8c:95: 3d:fd:a0:d0:94:48:a4:b8:bf:21:46:4d:13:ed:48: 30:3a:e0:84:fc:6e:d2:9d:40:9e:59:8c:3a:b1:5c: c3:43:b8:7d:e1:d3:49:71:f3:11:41:7d:eb:15:5d: e3:f4:23:b8:06:84:0f:ee:f9:4b:75:83:7c:75:86: f2:ca:63:da:ed:f0:80:65:5f:79:30:c9:ae:2f:10: ac:7b:5a:8a:18:c9:7b:af:8c:c6:32:c0:42:97:ee: 81:09:7f:ff:6b:46:02:0f:93:9e:a8:47:a5:1e:1b: fa:72:f3:f4:43:40:4f:68:67:4a:20:78:cd:1a:5b: e9:d4:47:3f:ee:34:c1:a3:a6:5b:ce:5a:09:5a:e3: a4:43:e3:41:fb:71:d2:6d:68:48:40:ac:38:60:29: 81:e9:4c:23:92:06:c5:51:96:a2:bc:d4:d8:3f:72: 21:9e:e2:0f:1e:a4:7b:20:69:c4:56:29:e1:08:fb: 6d:e0:ef:5c:05:95:1c:43:a5:1b:4a:51:2c:34:9f: 91:8a:e4:2e:86:10:4e:b4:9b:3b:63:de:66:9b:e7: c3:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:76:10:52:52:0B:43:B1:83:7E:B4:C9:3C:AD:CB:65:A5:D4:B0:AF X509v3 Authority Key Identifier: keyid:F3:94:A4:64:72:8B:82:85:6D:C2:B9:55:CC:AE:9A:B5:BA:65:39:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/85SkZHKLgoVtwrlVzK6atbplOcg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/83YQUlILQ7GDfrTJPK3LZaXUsK8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.138.240.0/21 188.244.108.0/22 IPv6: 2a0d:55c0::/29 Signature Algorithm: sha256WithRSAEncryption 97:b4:8a:49:01:d1:bd:bf:93:34:7f:87:fe:ac:4f:28:20:0a: 07:f2:09:7a:68:ce:3e:02:21:11:46:7a:6c:2c:72:fd:a1:db: dc:dc:1d:1f:a7:90:e5:75:ff:9f:43:8a:14:e5:ba:f8:86:0a: 7e:ec:a0:00:65:6e:8d:d0:ca:ca:95:4d:dc:f5:9c:97:95:d6: d2:8d:d5:c8:2f:39:f7:ea:84:55:80:e4:f5:31:93:51:d3:6f: 6a:66:70:5d:bc:93:0f:20:ac:33:97:9d:62:6a:a1:8e:23:90: fa:69:74:ba:c5:19:78:6b:09:5a:a8:da:78:a5:c1:24:f7:8b: 7d:b5:44:8d:66:9d:ac:72:20:20:d5:29:3f:69:5e:0a:8a:99: 1f:cb:d5:15:49:0c:8c:13:e0:f6:63:53:f9:08:a0:95:89:f5: b9:43:fe:3c:c6:72:8a:fd:11:17:51:72:41:b4:9b:a2:7f:14: 5e:aa:87:06:f7:d7:9a:8c:61:17:33:20:ff:47:ed:20:e5:0c: e7:4b:0d:c6:5f:93:cd:c7:b3:d4:a7:5a:4e:3c:99:4e:a0:6f: 6b:f5:2f:5c:11:7f:0b:12:8b:cc:64:cd:19:9a:b9:fd:74:bb: a1:65:b1:7d:88:3a:b9:f0:a7:7f:0e:6c:4d:03:04:36:15:9c: db:f6:3d:13 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt/FVzBASLVgZGorYmiv3HVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzOTRhNDY0NzI4YjgyODU2ZGMyYjk1NWNjYWU5YWI1YmE2 NTM5YzgwHhcNMjYwMTAyMTQyMTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzc2MTA1MjUyMGI0M2IxODM3ZWI0YzkzY2FkY2I2NWE1ZDRiMGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+OIIKvd2XhDzcMaP10xEj5bxX+J1 7PgXR2scg85pOxML02Asp9vr+wcyjJU9/aDQlEikuL8hRk0T7UgwOuCE/G7SnUCe WYw6sVzDQ7h94dNJcfMRQX3rFV3j9CO4BoQP7vlLdYN8dYbyymPa7fCAZV95MMmu LxCse1qKGMl7r4zGMsBCl+6BCX//a0YCD5OeqEelHhv6cvP0Q0BPaGdKIHjNGlvp 1Ec/7jTBo6ZbzloJWuOkQ+NB+3HSbWhIQKw4YCmB6UwjkgbFUZaivNTYP3IhnuIP HqR7IGnEVinhCPtt4O9cBZUcQ6UbSlEsNJ+RiuQuhhBOtJs7Y95mm+fD+wIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFPN2EFJSC0Oxg360yTyty2Wl1LCvMB8GA1UdIwQY MBaAFPOUpGRyi4KFbcK5VcyumrW6ZTnIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODVTa1pIS0xnb1Z0d3JsVnpLNmF0YnBsT2NnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi83ZGI4MGMtNTExMy00ZTgzLWIyYzgt ZjI2NjRkMTkyMWQzLzEvODNZUVVsSUxRN0dEZnJUSlBLM0xaYVhVc0s4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi83ZGI4MGMtNTExMy00ZTgzLWIyYzgtZjI2NjRkMTkyMWQz LzEvODVTa1pIS0xnb1Z0d3JsVnpLNmF0YnBsT2NnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDpIrwAwQC vPRsMA0EAgACMAcDBQMqDVXAMA0GCSqGSIb3DQEBCwUAA4IBAQCXtIpJAdG9v5M0 f4f+rE8oIAoH8gl6aM4+AiERRnpsLHL9odvc3B0fp5Dldf+fQ4oU5br4hgp+7KAA ZW6N0MrKlU3c9ZyXldbSjdXILzn36oRVgOT1MZNR029qZnBdvJMPIKwzl51iaqGO I5D6aXS6xRl4awlaqNp4pcEk94t9tUSNZp2sciAg1Sk/aV4Kipkfy9UVSQyME+D2 Y1P5CKCVifW5Q/48xnKK/REXUXJBtJuifxReqocG99eajGEXMyD/R+0g5QznSw3G X5PNx7PUp1pOPJlOoG9r9S9cEX8LEovMZM0Zmrn9dLuhZbF9iDq58Kd/DmxNAwQ2 FZzb9j0T -----END CERTIFICATE-----Generated at Sun Jan 25 20:46:15 2026 by rpki-client