This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/S82EbIGBPvrwBTr33L6baESNSh8.roa
File: S82EbIGBPvrwBTr33L6baESNSh8.roa (raw, json)
Hash identifier: 08DqMUNy9twM3/MtGJYse80+j+yhAmD8ZoaDNcqSBuA=
Subject key identifier: 4B:CD:84:6C:81:81:3E:FA:F0:05:3A:F7:DC:BE:9B:68:44:8D:4A:1F
Certificate issuer: /CN=7af57dd52c75fce39ffe2915469d9e656dbcb873
Certificate serial: 019B78A2AF24E6EE1C8D4B373B8C84DADE27
Authority key identifier: 7A:F5:7D:D5:2C:75:FC:E3:9F:FE:29:15:46:9D:9E:65:6D:BC:B8:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evV91Sx1_OOf_ikVRp2eZW28uHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/S82EbIGBPvrwBTr33L6baESNSh8.roa
Signing time: Thu 01 Jan 2026 08:18:06 +0000
ROA not before: Thu 01 Jan 2026 08:18:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204004
IP address blocks: 92.246.80.0/24 maxlen: 24
92.246.81.0/24 maxlen: 24
185.117.44.0/22 maxlen: 22
185.117.44.0/24 maxlen: 24
185.117.45.0/24 maxlen: 24
185.117.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/evV91Sx1_OOf_ikVRp2eZW28uHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/evV91Sx1_OOf_ikVRp2eZW28uHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/evV91Sx1_OOf_ikVRp2eZW28uHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 08:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a2:af:24:e6:ee:1c:8d:4b:37:3b:8c:84:da:de:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7af57dd52c75fce39ffe2915469d9e656dbcb873
Validity
Not Before: Jan 1 08:18:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4bcd846c81813efaf0053af7dcbe9b68448d4a1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:95:4e:c4:63:47:41:fb:af:00:d1:dd:32:9b:
b4:50:8d:66:c4:c7:ec:de:02:58:6b:b6:1f:88:03:
ac:5d:b3:b9:02:93:49:8b:0f:a8:ac:94:03:a4:83:
0b:02:e0:a4:80:c6:ab:90:f5:c0:78:e9:2a:23:aa:
d1:a3:bc:8e:ab:e6:fb:4e:2c:c5:6d:1e:d7:ef:17:
9e:bd:fe:66:fb:6b:81:29:d1:12:80:d5:ff:71:df:
8d:8e:e1:57:12:e1:78:41:8b:48:e2:e9:68:0b:92:
c3:c0:9f:05:7b:e1:f6:52:84:c4:9c:bf:2b:8b:44:
1a:ac:5a:0b:86:f5:05:ec:42:38:25:9f:e8:42:4e:
cb:9e:78:05:9a:7e:77:1d:05:1c:e5:f2:1b:43:86:
3d:e7:f8:d9:cf:da:60:7d:dd:ab:70:f0:3f:ab:76:
2a:94:dd:65:9b:b9:76:c1:d2:b4:40:34:8c:4f:9f:
ed:ab:b0:18:44:5a:53:07:a6:63:b8:a6:dd:f7:e8:
12:7d:a1:76:e5:4a:be:dd:3a:da:90:1c:ed:b4:d9:
05:ba:81:9c:57:34:35:e4:f0:c0:a5:90:02:db:f1:
d0:06:a7:9c:ca:f0:4a:9a:d1:62:4b:b8:6c:a2:d7:
d6:c5:09:3d:63:54:0d:8f:06:88:85:b6:f0:a3:68:
85:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:CD:84:6C:81:81:3E:FA:F0:05:3A:F7:DC:BE:9B:68:44:8D:4A:1F
X509v3 Authority Key Identifier:
keyid:7A:F5:7D:D5:2C:75:FC:E3:9F:FE:29:15:46:9D:9E:65:6D:BC:B8:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evV91Sx1_OOf_ikVRp2eZW28uHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/S82EbIGBPvrwBTr33L6baESNSh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/evV91Sx1_OOf_ikVRp2eZW28uHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.246.80.0/23
185.117.44.0/22
Signature Algorithm: sha256WithRSAEncryption
cf:bb:a7:7f:ff:df:91:f6:0e:33:2f:83:cd:3b:cf:96:43:4a:
7c:ae:f3:51:8a:66:14:f0:c3:b9:67:0f:94:d3:db:c9:ee:5f:
92:4f:b7:39:3a:99:37:38:5e:ac:6a:b3:91:47:6e:a0:34:eb:
32:c6:94:19:8c:de:e8:ff:46:1b:f1:bb:f0:6c:47:87:21:e0:
b6:1f:0f:6d:b7:b9:aa:06:2a:d2:a6:8b:02:af:60:dc:67:cf:
c8:8c:d2:40:2f:4f:60:c6:5d:66:0a:81:42:cb:e2:a5:f3:35:
2d:1c:8f:aa:6b:26:68:d3:fa:84:55:b6:ac:0e:bd:9a:e8:6a:
99:32:81:fc:4a:90:ce:28:05:cb:85:b8:6a:43:f9:0b:01:55:
01:62:c0:77:9d:6e:fe:41:d3:0b:52:3a:bf:88:54:ed:09:1d:
8f:65:f4:8d:41:b2:fd:a3:f0:dd:db:04:92:db:12:dc:e5:77:
52:35:0d:97:e4:ac:2c:18:cf:94:c3:44:e8:fb:18:56:6f:6f:
17:f4:20:29:eb:2e:e1:99:21:71:f5:dc:49:80:68:af:dd:d5:
18:56:51:57:bc:0b:30:19:43:34:6c:d3:fd:ee:36:30:54:07:
e5:4b:41:c1:c4:1f:af:55:1a:93:df:4e:d9:c1:f4:e8:80:af:
ad:13:a8:a4
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZt4oq8k5u4cjUs3O4yE2t4nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhZjU3ZGQ1MmM3NWZjZTM5ZmZlMjkxNTQ2OWQ5ZTY1NmRi
Y2I4NzMwHhcNMjYwMTAxMDgxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YmNkODQ2YzgxODEzZWZhZjAwNTNhZjdkY2JlOWI2ODQ0OGQ0YTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5VOxGNHQfuvANHdMpu0UI1mxMfs
3gJYa7YfiAOsXbO5ApNJiw+orJQDpIMLAuCkgMarkPXAeOkqI6rRo7yOq+b7TizF
bR7X7xeevf5m+2uBKdESgNX/cd+NjuFXEuF4QYtI4uloC5LDwJ8Fe+H2UoTEnL8r
i0QarFoLhvUF7EI4JZ/oQk7LnngFmn53HQUc5fIbQ4Y95/jZz9pgfd2rcPA/q3Yq
lN1lm7l2wdK0QDSMT5/tq7AYRFpTB6ZjuKbd9+gSfaF25Uq+3TrakBzttNkFuoGc
VzQ15PDApZAC2/HQBqecyvBKmtFiS7hsotfWxQk9Y1QNjwaIhbbwo2iFaQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEvNhGyBgT768AU699y+m2hEjUofMB8GA1UdIwQY
MBaAFHr1fdUsdfzjn/4pFUadnmVtvLhzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXZWOTFTeDFfT09mX2lrVlJwMmVaVzI4dUhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi84Nzk3ZGUtM2FlOS00ZTA1LTgwZmYt
YzI1MzQwOTZjNjBkLzEvUzgyRWJJR0JQdnJ3QlRyMzNMNmJhRVNOU2g4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi84Nzk3ZGUtM2FlOS00ZTA1LTgwZmYtYzI1MzQwOTZjNjBk
LzEvZXZWOTFTeDFfT09mX2lrVlJwMmVaVzI4dUhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBXPZQAwQC
uXUsMA0GCSqGSIb3DQEBCwUAA4IBAQDPu6d//9+R9g4zL4PNO8+WQ0p8rvNRimYU
8MO5Zw+U09vJ7l+ST7c5Opk3OF6sarORR26gNOsyxpQZjN7o/0Yb8bvwbEeHIeC2
Hw9tt7mqBirSposCr2DcZ8/IjNJAL09gxl1mCoFCy+Kl8zUtHI+qayZo0/qEVbas
Dr2a6GqZMoH8SpDOKAXLhbhqQ/kLAVUBYsB3nW7+QdMLUjq/iFTtCR2PZfSNQbL9
o/Dd2wSS2xLc5XdSNQ2X5KwsGM+Uw0To+xhWb28X9CAp6y7hmSFx9dxJgGiv3dUY
VlFXvAswGUM0bNP97jYwVAflS0HBxB+vVRqT307ZwfTogK+tE6ik
-----END CERTIFICATE-----
Generated at Sun Jan 25 19:18:22 2026 by rpki-client