This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/M3bGaMmzldtwIJFmKvbRE4l-_SE.roa File: M3bGaMmzldtwIJFmKvbRE4l-_SE.roa (raw, json) Hash identifier: 57TSjLTIljKW30xR2fMZ7JjWCTKCXVEEUqD5yH8z/Do= Subject key identifier: 33:76:C6:68:C9:B3:95:DB:70:20:91:66:2A:F6:D1:13:89:7E:FD:21 Certificate issuer: /CN=8cad303bc70b12f83dbf89fc1489cb4612cf5526 Certificate serial: 019B7E382A3F7E21F30F13B6857F02CC613A Authority key identifier: 8C:AD:30:3B:C7:0B:12:F8:3D:BF:89:FC:14:89:CB:46:12:CF:55:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jK0wO8cLEvg9v4n8FInLRhLPVSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/M3bGaMmzldtwIJFmKvbRE4l-_SE.roa Signing time: Fri 02 Jan 2026 10:19:28 +0000 ROA not before: Fri 02 Jan 2026 10:19:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29584 IP address blocks: 82.194.0.0/24 maxlen: 24 82.194.1.0/24 maxlen: 24 82.194.2.0/24 maxlen: 24 82.194.3.0/24 maxlen: 24 82.194.4.0/23 maxlen: 23 82.194.6.0/24 maxlen: 24 82.194.7.0/24 maxlen: 24 82.194.8.0/24 maxlen: 24 82.194.9.0/24 maxlen: 24 82.194.10.0/24 maxlen: 24 82.194.11.0/24 maxlen: 24 82.194.12.0/24 maxlen: 24 82.194.13.0/24 maxlen: 24 82.194.14.0/24 maxlen: 24 82.194.15.0/24 maxlen: 24 82.194.16.0/24 maxlen: 24 82.194.17.0/24 maxlen: 24 82.194.18.0/24 maxlen: 24 82.194.19.0/24 maxlen: 24 82.194.20.0/24 maxlen: 24 82.194.21.0/24 maxlen: 24 82.194.22.0/24 maxlen: 24 82.194.23.0/24 maxlen: 24 82.194.24.0/24 maxlen: 24 82.194.25.0/24 maxlen: 24 82.194.26.0/24 maxlen: 24 82.194.27.0/24 maxlen: 24 82.194.28.0/24 maxlen: 24 82.194.29.0/24 maxlen: 24 82.194.30.0/24 maxlen: 24 82.194.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft rsync://rpki.ripe.net/repository/DEFAULT/jK0wO8cLEvg9v4n8FInLRhLPVSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:2a:3f:7e:21:f3:0f:13:b6:85:7f:02:cc:61:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cad303bc70b12f83dbf89fc1489cb4612cf5526 Validity Not Before: Jan 2 10:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3376c668c9b395db702091662af6d113897efd21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:70:84:63:8f:80:60:3d:42:9d:10:cc:b1:d2: 70:21:86:cc:f4:91:b3:0b:9d:25:fd:17:3a:71:91: 24:de:7a:ce:3c:4b:00:28:be:bf:72:fd:15:30:df: 2f:f6:e2:85:9f:19:57:b4:f3:d9:7b:bc:92:81:ad: 08:07:d1:0e:fb:1b:ba:6f:16:9d:c8:82:30:ad:14: 5f:48:73:e2:cf:9b:6f:0c:8c:a2:85:52:f0:45:af: 95:78:7b:a5:4c:4a:6e:a5:64:c4:d1:46:fc:0c:87: 4d:15:11:6a:9f:80:44:3b:e3:c7:ce:b8:98:31:76: be:f9:89:4a:57:14:4d:42:e0:0e:6d:eb:09:81:54: ae:f9:4e:17:05:28:8a:69:23:b7:30:2e:6d:5e:12: 33:2b:b7:f5:12:dd:df:12:58:30:78:81:aa:43:e4: 23:71:00:4b:33:bb:01:23:cf:27:41:2b:d3:cd:5e: 92:b7:c9:da:fd:3a:48:2e:7d:5c:0d:96:da:de:6e: 33:7e:8c:d9:92:75:90:d2:f1:84:c1:ad:d9:e2:b2: b0:db:90:06:6b:fb:21:46:27:40:d1:48:05:23:55: ff:b0:9f:44:05:49:bc:b3:49:6e:c9:28:d1:b1:07: 11:eb:5a:86:e4:84:a2:2e:79:4c:0b:75:0a:4a:d3: d8:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:76:C6:68:C9:B3:95:DB:70:20:91:66:2A:F6:D1:13:89:7E:FD:21 X509v3 Authority Key Identifier: keyid:8C:AD:30:3B:C7:0B:12:F8:3D:BF:89:FC:14:89:CB:46:12:CF:55:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jK0wO8cLEvg9v4n8FInLRhLPVSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/M3bGaMmzldtwIJFmKvbRE4l-_SE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.194.0.0/19 Signature Algorithm: sha256WithRSAEncryption 09:1b:08:86:2f:61:10:ac:bc:c5:cd:a0:4e:64:65:ae:d5:37: d9:e1:01:32:a8:39:57:70:16:db:9e:44:17:ea:cb:a0:44:96: cf:46:a8:26:d6:82:1c:9d:94:9a:ab:d8:52:0c:52:b6:1f:a2: d6:6b:8e:63:ce:19:fc:ef:4e:fb:4a:b0:65:32:d9:be:02:d6: 88:2f:26:2b:15:be:30:6c:7d:d4:24:d8:31:1b:e7:f8:60:b1: b5:46:2f:d4:da:a4:bd:70:e0:29:8b:eb:c2:80:87:0e:6c:10: 43:a1:f9:df:20:d5:e9:b7:40:e9:29:14:26:e4:73:1d:ef:62: 5c:b8:e1:64:49:9a:c8:b3:fc:5e:34:3c:c3:98:47:d8:4b:38: 3f:b8:e4:4f:2f:62:65:b6:47:c1:bd:33:bb:19:ed:2a:45:06: 1b:a1:74:7a:92:c3:88:6f:82:2e:bd:2c:7c:da:99:51:76:16: bd:0b:b0:7f:10:62:df:a4:8f:59:8a:05:66:4e:29:44:67:90: a1:2c:8e:90:1f:33:08:2f:4f:c9:d0:21:68:72:da:a8:48:6e: d4:be:4f:6c:c0:33:57:6b:41:0c:6b:4a:c7:08:f2:cb:a9:8a: 35:14:ad:61:c7:27:67:c6:1d:97:98:c6:d9:4c:f0:64:31:b8: 32:f8:a8:49 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OCo/fiHzDxO2hX8CzGE6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjYWQzMDNiYzcwYjEyZjgzZGJmODlmYzE0ODljYjQ2MTJj ZjU1MjYwHhcNMjYwMTAyMTAxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMzc2YzY2OGM5YjM5NWRiNzAyMDkxNjYyYWY2ZDExMzg5N2VmZDIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXCEY4+AYD1CnRDMsdJwIYbM9JGz C50l/Rc6cZEk3nrOPEsAKL6/cv0VMN8v9uKFnxlXtPPZe7ySga0IB9EO+xu6bxad yIIwrRRfSHPiz5tvDIyihVLwRa+VeHulTEpupWTE0Ub8DIdNFRFqn4BEO+PHzriY MXa++YlKVxRNQuAObesJgVSu+U4XBSiKaSO3MC5tXhIzK7f1Et3fElgweIGqQ+Qj cQBLM7sBI88nQSvTzV6St8na/TpILn1cDZba3m4zfozZknWQ0vGEwa3Z4rKw25AG a/shRidA0UgFI1X/sJ9EBUm8s0luySjRsQcR61qG5ISiLnlMC3UKStPYPwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDN2xmjJs5XbcCCRZir20ROJfv0hMB8GA1UdIwQY MBaAFIytMDvHCxL4Pb+J/BSJy0YSz1UmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakswd084Y0xFdmc5djRuOEZJbkxSaExQVlNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8xZDNmOWUtOWE2Yy00Yzg2LWEwMzYt NDgyNTU1NDUyODMxLzEvTTNiR2FNbXpsZHR3SUpGbUt2YlJFNGwtX1NFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS8xZDNmOWUtOWE2Yy00Yzg2LWEwMzYtNDgyNTU1NDUyODMx LzEvakswd084Y0xFdmc5djRuOEZJbkxSaExQVlNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFUsIAMA0G CSqGSIb3DQEBCwUAA4IBAQAJGwiGL2EQrLzFzaBOZGWu1TfZ4QEyqDlXcBbbnkQX 6sugRJbPRqgm1oIcnZSaq9hSDFK2H6LWa45jzhn87077SrBlMtm+AtaILyYrFb4w bH3UJNgxG+f4YLG1Ri/U2qS9cOApi+vCgIcObBBDofnfINXpt0DpKRQm5HMd72Jc uOFkSZrIs/xeNDzDmEfYSzg/uORPL2JltkfBvTO7Ge0qRQYboXR6ksOIb4IuvSx8 2plRdha9C7B/EGLfpI9ZigVmTilEZ5ChLI6QHzMIL0/J0CFoctqoSG7Uvk9swDNX a0EMa0rHCPLLqYo1FK1hxydnxh2XmMbZTPBkMbgy+KhJ -----END CERTIFICATE-----Generated at Tue Jan 27 08:34:45 2026 by rpki-client