This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/82ufesd9jM_-UcwHl9xDd28w7bc.roa File: 82ufesd9jM_-UcwHl9xDd28w7bc.roa (raw, json) Hash identifier: gm9W00xGdkpnPbgGYol+dd436lsvUg6lbjX2PP6ojh8= Subject key identifier: F3:6B:9F:7A:C7:7D:8C:CF:FE:51:CC:07:97:DC:43:77:6F:30:ED:B7 Certificate issuer: /CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf Certificate serial: 019B7E37DAB56C9E66B1F9333F7587D09C34 Authority key identifier: F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/82ufesd9jM_-UcwHl9xDd28w7bc.roa Signing time: Fri 02 Jan 2026 10:19:08 +0000 ROA not before: Fri 02 Jan 2026 10:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214526 IP address blocks: 95.38.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:da:b5:6c:9e:66:b1:f9:33:3f:75:87:d0:9c:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf Validity Not Before: Jan 2 10:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f36b9f7ac77d8ccffe51cc0797dc43776f30edb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f8:42:15:6c:17:ad:f3:b7:c2:ff:8d:64:e4: 03:23:e3:9b:35:96:23:49:e9:be:c3:9d:cf:fb:b4: d6:da:c6:01:cc:b9:0e:8b:de:4e:16:7c:ef:a6:e0: 5a:70:f3:9b:94:07:06:db:24:d9:c1:02:d6:6f:e6: 41:af:d3:ff:9f:96:36:3d:1b:17:c2:73:26:2e:3e: 82:89:d7:02:01:99:fd:e0:55:53:31:0b:f6:03:37: 28:66:ee:93:c4:4b:51:df:74:39:71:1f:30:30:cd: c0:2e:5b:cd:30:81:e8:d5:ab:49:30:d8:d4:3e:2c: e2:92:f6:33:9a:94:32:53:0a:22:89:e8:5a:4d:f6: 9d:4a:78:d9:3b:97:68:b0:32:f0:2a:1f:db:d1:53: 76:b8:76:32:50:3e:e0:3d:98:29:02:97:b3:8d:4c: 75:74:59:38:08:b7:b9:39:f2:c8:33:a4:38:45:f3: 22:a2:42:c7:27:7b:5c:bb:16:c6:04:b1:2b:22:72: b9:8f:65:8e:00:5c:04:15:9b:fd:7d:47:26:c5:c3: da:e2:21:5d:b9:23:6a:93:8c:76:dd:0b:44:6c:37: b7:ad:a7:ef:84:bf:e8:61:64:23:72:fb:49:4f:fa: 44:9f:fb:11:c8:db:83:0e:55:0c:4e:9e:f0:6e:16: 25:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:6B:9F:7A:C7:7D:8C:CF:FE:51:CC:07:97:DC:43:77:6F:30:ED:B7 X509v3 Authority Key Identifier: keyid:F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/82ufesd9jM_-UcwHl9xDd28w7bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.38.38.0/24 Signature Algorithm: sha256WithRSAEncryption 19:9d:77:32:cc:b3:69:a1:07:2a:ba:f1:88:b1:a1:3c:98:04: 11:4a:fa:cf:16:4e:da:70:d6:86:74:e9:bd:87:40:e7:22:54: d1:74:6d:fa:c2:9b:29:7d:e0:2f:f5:9f:4c:c2:bb:06:01:41: a3:86:82:24:58:44:88:23:20:37:e0:cd:97:24:97:de:40:a2: a8:c3:62:38:47:38:27:49:29:63:1d:63:c4:7a:aa:45:89:ab: ff:d3:e8:b7:85:a5:9f:92:fc:01:1e:7c:66:d7:8b:8b:cb:81: 60:be:80:bf:cc:83:80:55:29:b9:ff:8f:03:81:c6:46:1c:25: de:43:47:09:ba:8e:98:96:8c:85:62:1a:af:3f:97:cb:0f:e8: 7f:87:fa:28:cd:8a:d6:c4:e5:47:0c:aa:e7:f7:29:99:3b:a4: c4:e0:9f:7c:4f:a5:04:a2:47:05:ec:53:90:4b:e0:d4:80:19: d0:91:f3:63:5b:0c:35:68:60:40:f5:15:36:f7:f6:d7:22:24: 64:2b:ed:6d:92:7c:83:75:b9:1e:af:fe:d5:e3:fd:b5:99:66: 32:4e:7f:f5:71:6f:b0:f8:18:ee:48:7c:cb:d0:a7:1b:69:6c: 04:51:e5:28:75:f6:97:c4:1e:16:c8:0a:c2:55:a8:ba:47:30: a5:a1:16:c2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N9q1bJ5msfkzP3WH0Jw0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwYzEwNDA0MTY5MWRjMzg0ZjNiMWE4Y2RmOTVjOTY2Mjhl YTZkYWYwHhcNMjYwMTAyMTAxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzZiOWY3YWM3N2Q4Y2NmZmU1MWNjMDc5N2RjNDM3NzZmMzBlZGI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovhCFWwXrfO3wv+NZOQDI+ObNZYj Sem+w53P+7TW2sYBzLkOi95OFnzvpuBacPOblAcG2yTZwQLWb+ZBr9P/n5Y2PRsX wnMmLj6CidcCAZn94FVTMQv2AzcoZu6TxEtR33Q5cR8wMM3ALlvNMIHo1atJMNjU PizikvYzmpQyUwoiiehaTfadSnjZO5dosDLwKh/b0VN2uHYyUD7gPZgpApezjUx1 dFk4CLe5OfLIM6Q4RfMiokLHJ3tcuxbGBLErInK5j2WOAFwEFZv9fUcmxcPa4iFd uSNqk4x23QtEbDe3rafvhL/oYWQjcvtJT/pEn/sRyNuDDlUMTp7wbhYlzQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPNrn3rHfYzP/lHMB5fcQ3dvMO23MB8GA1UdIwQY MBaAFPDBBAQWkdw4TzsajN+VyWYo6m2vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS83ODljYWYtYzhkMi00MTllLWFlMDQt NjkxNDIyMzExNzI5LzEvODJ1ZmVzZDlqTV8tVWN3SGw5eERkMjh3N2JjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS83ODljYWYtYzhkMi00MTllLWFlMDQtNjkxNDIyMzExNzI5 LzEvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXyYmMA0G CSqGSIb3DQEBCwUAA4IBAQAZnXcyzLNpoQcquvGIsaE8mAQRSvrPFk7acNaGdOm9 h0DnIlTRdG36wpspfeAv9Z9MwrsGAUGjhoIkWESIIyA34M2XJJfeQKKow2I4Rzgn SSljHWPEeqpFiav/0+i3haWfkvwBHnxm14uLy4FgvoC/zIOAVSm5/48DgcZGHCXe Q0cJuo6YloyFYhqvP5fLD+h/h/oozYrWxOVHDKrn9ymZO6TE4J98T6UEokcF7FOQ S+DUgBnQkfNjWww1aGBA9RU29/bXIiRkK+1tknyDdbker/7V4/21mWYyTn/1cW+w +BjuSHzL0KcbaWwEUeUodfaXxB4WyArCVai6RzCloRbC -----END CERTIFICATE-----Generated at Sun Jan 25 23:32:51 2026 by rpki-client