This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/i82KCsqyDCAHQRF0d7wUfK109Xc.roa File: i82KCsqyDCAHQRF0d7wUfK109Xc.roa (raw, json) Hash identifier: r5cQ2qOdDtEkNz8HpZzGejWSHAX1vibjLykuya0m05U= Subject key identifier: 8B:CD:8A:0A:CA:B2:0C:20:07:41:11:74:77:BC:14:7C:AD:74:F5:77 Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003 Certificate serial: 019B79EC626397D0F7696D81C80B6501C6EB Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/i82KCsqyDCAHQRF0d7wUfK109Xc.roa Signing time: Thu 01 Jan 2026 14:18:13 +0000 ROA not before: Thu 01 Jan 2026 14:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 36352 IP address blocks: 5.181.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:62:63:97:d0:f7:69:6d:81:c8:0b:65:01:c6:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003 Validity Not Before: Jan 1 14:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8bcd8a0acab20c200741117477bc147cad74f577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c6:cf:a0:03:66:1a:79:87:cf:9f:1e:c6:ba: a5:2c:c4:16:22:37:b6:97:ef:6b:c2:45:23:e7:15: 86:90:89:4d:a3:75:9c:1b:87:6b:aa:17:4b:92:63: 78:ff:3a:6b:83:f5:75:51:92:42:db:76:79:60:8d: 0d:cc:54:1d:d9:c2:11:eb:94:19:17:04:27:2c:06: 15:01:0f:07:cc:ae:eb:5f:9e:d4:73:e2:64:b1:99: 47:68:51:27:b3:fd:21:e0:d5:1a:8d:83:d2:16:e4: 04:50:f3:c1:76:9f:23:0a:e1:be:c9:6b:26:51:0c: 05:64:ee:da:f2:ca:87:65:c8:fd:3a:05:8e:3c:62: f0:ca:1c:23:0d:9b:96:40:f7:4e:f3:e9:07:32:88: 1c:3b:f6:11:1e:87:48:47:63:5d:fa:a1:07:68:1b: 46:16:e8:ac:5e:ac:60:29:a1:29:03:64:d4:b9:2c: 0b:27:01:a7:e7:4c:15:dd:d6:7e:68:5f:bf:d5:bd: 3d:9d:6b:99:4c:f8:d0:da:35:ba:0d:bd:cd:14:96: 81:be:46:ad:33:f7:57:19:34:c8:6a:e6:18:3a:25: bb:e7:77:b1:fd:07:0b:dc:24:4e:53:61:78:9a:19: 2e:03:a5:52:75:5e:aa:de:d2:29:a2:fd:71:84:2f: a1:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:CD:8A:0A:CA:B2:0C:20:07:41:11:74:77:BC:14:7C:AD:74:F5:77 X509v3 Authority Key Identifier: keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/i82KCsqyDCAHQRF0d7wUfK109Xc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.181.182.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:a3:03:97:03:f5:50:07:a6:60:c2:27:0c:71:b2:dd:e6:96: 97:b1:2f:7b:d3:25:81:21:15:9d:bd:f2:fd:05:99:5b:7b:f9: 00:8c:70:e5:e2:4e:9f:0f:f5:12:54:f4:c8:4b:a2:1a:99:e9: 19:31:30:06:19:1a:c9:b4:45:a3:21:31:ee:b1:20:d2:1a:80: cd:5a:59:af:75:1b:5d:85:f3:7a:3b:ba:af:7f:2f:4c:d3:50: 76:bf:6e:5a:b5:12:83:04:53:00:6f:78:3f:16:aa:da:26:c4: 4c:99:de:3d:f4:4c:28:ed:ba:5c:4a:94:18:3b:6e:e4:24:9c: e6:f2:ed:68:68:5e:30:f2:80:b9:35:57:4f:15:e8:d7:4c:c4: e8:37:f0:42:15:a0:48:63:51:d2:9a:d3:0c:11:7f:fd:b5:3e: 85:bd:bc:d4:f9:8b:43:53:e2:93:b1:52:6a:6b:b5:43:8a:30: 91:82:20:f7:a1:ff:a4:6b:7d:04:81:d9:80:9e:fd:5b:fb:2e: 68:ad:a2:b2:9c:fb:49:eb:ed:5e:a6:64:ee:6c:6e:49:e0:88: ab:75:58:46:ec:64:73:70:73:f3:98:00:5a:8f:fb:37:0e:d3: b7:d2:e8:a1:35:68:21:ef:9b:97:e2:cf:97:a7:ca:34:52:82: 9b:c6:b0:22 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57GJjl9D3aW2ByAtlAcbrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4 NDAwMDMwHhcNMjYwMTAxMTQxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YmNkOGEwYWNhYjIwYzIwMDc0MTExNzQ3N2JjMTQ3Y2FkNzRmNTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsbPoANmGnmHz58exrqlLMQWIje2 l+9rwkUj5xWGkIlNo3WcG4drqhdLkmN4/zprg/V1UZJC23Z5YI0NzFQd2cIR65QZ FwQnLAYVAQ8HzK7rX57Uc+JksZlHaFEns/0h4NUajYPSFuQEUPPBdp8jCuG+yWsm UQwFZO7a8sqHZcj9OgWOPGLwyhwjDZuWQPdO8+kHMogcO/YRHodIR2Nd+qEHaBtG FuisXqxgKaEpA2TUuSwLJwGn50wV3dZ+aF+/1b09nWuZTPjQ2jW6Db3NFJaBvkat M/dXGTTIauYYOiW753ex/QcL3CROU2F4mhkuA6VSdV6q3tIpov1xhC+hgQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIvNigrKsgwgB0ERdHe8FHytdPV3MB8GA1UdIwQY MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt MTQzOTY3YThmZTA4LzEvaTgyS0NzcXlEQ0FIUVJGMGQ3d1VmSzEwOVhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4 LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbW2MA0G CSqGSIb3DQEBCwUAA4IBAQAcowOXA/VQB6ZgwicMcbLd5paXsS970yWBIRWdvfL9 BZlbe/kAjHDl4k6fD/USVPTIS6IamekZMTAGGRrJtEWjITHusSDSGoDNWlmvdRtd hfN6O7qvfy9M01B2v25atRKDBFMAb3g/FqraJsRMmd499Ewo7bpcSpQYO27kJJzm 8u1oaF4w8oC5NVdPFejXTMToN/BCFaBIY1HSmtMMEX/9tT6FvbzU+YtDU+KTsVJq a7VDijCRgiD3of+ka30EgdmAnv1b+y5oraKynPtJ6+1epmTubG5J4IirdVhG7GRz cHPzmABaj/s3DtO30uihNWgh75uX4s+Xp8o0UoKbxrAi -----END CERTIFICATE-----Generated at Sun Jan 25 12:06:25 2026 by rpki-client