This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/PdHk-muUv_r2sPfZZkX-Sw2R-nM.roa File: PdHk-muUv_r2sPfZZkX-Sw2R-nM.roa (raw, json) Hash identifier: X1irNxas1qH4oLExr0gd0xDNwybwZHi2dcOTBcFhxd0= Subject key identifier: 3D:D1:E4:FA:6B:94:BF:FA:F6:B0:F7:D9:66:45:FE:4B:0D:91:FA:73 Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722 Certificate serial: 019B2706B79D437995609037914567B9B7D1 Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/PdHk-muUv_r2sPfZZkX-Sw2R-nM.roa Signing time: Tue 16 Dec 2025 11:58:29 +0000 ROA not before: Tue 16 Dec 2025 11:58:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 8708 IP address blocks: 80.96.12.0/24 maxlen: 24 80.96.43.0/24 maxlen: 24 80.96.47.0/24 maxlen: 24 80.96.51.0/24 maxlen: 24 80.96.57.0/24 maxlen: 24 80.96.67.0/24 maxlen: 24 80.96.69.0/24 maxlen: 24 80.96.72.0/24 maxlen: 24 80.96.79.0/24 maxlen: 24 80.96.219.0/24 maxlen: 24 80.97.147.0/24 maxlen: 24 80.97.148.0/24 maxlen: 24 80.97.149.0/24 maxlen: 24 81.180.27.0/24 maxlen: 24 81.181.30.0/24 maxlen: 24 81.181.112.0/24 maxlen: 24 81.181.128.0/24 maxlen: 24 81.181.147.0/24 maxlen: 24 81.181.167.0/24 maxlen: 24 81.181.246.0/24 maxlen: 24 85.120.20.0/24 maxlen: 24 85.120.23.0/24 maxlen: 24 193.226.16.0/24 maxlen: 24 193.226.116.0/24 maxlen: 24 193.226.125.0/24 maxlen: 24 193.226.127.0/24 maxlen: 24 193.230.158.0/24 maxlen: 24 193.230.171.0/24 maxlen: 24 193.230.217.0/24 maxlen: 24 193.230.229.0/24 maxlen: 24 193.231.75.0/24 maxlen: 24 193.231.108.0/24 maxlen: 24 193.231.184.0/24 maxlen: 24 193.231.194.0/24 maxlen: 24 193.231.233.0/24 maxlen: 24 193.231.236.0/24 maxlen: 24 193.231.238.0/24 maxlen: 24 193.231.252.0/24 maxlen: 24 194.102.98.0/24 maxlen: 24 194.102.134.0/24 maxlen: 24 194.102.229.0/24 maxlen: 24 194.153.224.0/24 maxlen: 24 217.156.14.0/24 maxlen: 24 217.156.20.0/23 maxlen: 23 217.156.41.0/24 maxlen: 24 217.156.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:06:b7:9d:43:79:95:60:90:37:91:45:67:b9:b7:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722 Validity Not Before: Dec 16 11:58:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3dd1e4fa6b94bffaf6b0f7d96645fe4b0d91fa73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:78:e1:8b:f3:e3:aa:f7:43:03:2e:09:e6:9b: e3:7e:e2:6d:de:08:fd:d6:a7:28:38:90:13:f0:75: de:7d:cf:9a:89:4e:d2:7a:a5:9a:d8:be:ba:9d:61: 09:67:3b:8a:9a:40:44:b3:5d:66:a1:10:f3:ff:cf: 46:63:8c:4b:01:d9:6e:45:8d:c7:05:38:6c:60:b6: 24:c1:66:8e:de:34:5b:ca:ce:c5:99:af:c0:61:a8: f1:11:dc:7e:c1:4d:1c:b7:71:2e:69:fe:ac:25:d9: 51:71:3e:8d:0d:f9:e9:f7:02:eb:bc:ba:16:ed:a8: 7a:72:a0:70:10:34:0a:82:46:25:b0:c1:3c:22:13: 1d:2a:96:b4:aa:b1:46:4b:fd:41:3c:5c:b4:fa:84: 10:95:e0:0c:23:10:02:f5:95:39:d0:e8:92:a0:e5: 94:09:49:d4:73:25:8b:d6:a2:13:59:d5:ef:49:67: 72:59:e2:b9:90:f3:b6:cc:a8:98:b0:72:91:6a:c2: 7c:80:69:7d:ee:9c:f4:e2:ec:8b:56:71:3f:2c:3f: 4f:af:e3:cf:b8:72:37:1c:2f:44:5b:9a:d3:26:ca: ea:03:30:ce:4d:b9:f4:7e:0c:04:3e:87:47:89:66: 5d:72:14:24:f4:8f:e5:63:9b:2a:1d:6d:5b:64:46: 1b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:D1:E4:FA:6B:94:BF:FA:F6:B0:F7:D9:66:45:FE:4B:0D:91:FA:73 X509v3 Authority Key Identifier: keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/PdHk-muUv_r2sPfZZkX-Sw2R-nM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.96.12.0/24 80.96.43.0/24 80.96.47.0/24 80.96.51.0/24 80.96.57.0/24 80.96.67.0/24 80.96.69.0/24 80.96.72.0/24 80.96.79.0/24 80.96.219.0/24 80.97.147.0-80.97.149.255 81.180.27.0/24 81.181.30.0/24 81.181.112.0/24 81.181.128.0/24 81.181.147.0/24 81.181.167.0/24 81.181.246.0/24 85.120.20.0/24 85.120.23.0/24 193.226.16.0/24 193.226.116.0/24 193.226.125.0/24 193.226.127.0/24 193.230.158.0/24 193.230.171.0/24 193.230.217.0/24 193.230.229.0/24 193.231.75.0/24 193.231.108.0/24 193.231.184.0/24 193.231.194.0/24 193.231.233.0/24 193.231.236.0/24 193.231.238.0/24 193.231.252.0/24 194.102.98.0/24 194.102.134.0/24 194.102.229.0/24 194.153.224.0/24 217.156.14.0/24 217.156.20.0/23 217.156.41.0/24 217.156.97.0/24 Signature Algorithm: sha256WithRSAEncryption c0:2a:c3:a5:e4:b5:7d:3c:21:ff:01:d1:0e:03:bb:a0:88:42: ac:c1:fa:65:4e:dc:3c:9f:34:17:04:18:93:30:ab:12:43:3a: 22:61:a4:f9:7f:27:88:1c:94:44:de:2c:c6:22:77:2e:00:90: 09:9c:4c:23:8f:e5:e1:fc:21:bd:48:36:ef:88:67:95:2f:2a: 38:a4:db:d7:8c:37:d5:3a:d8:51:7a:81:7e:4a:05:02:99:a5: 59:ce:97:fb:86:ca:bd:79:e3:16:c0:78:43:1c:1c:ec:d3:a3: a7:0a:06:e1:08:70:b5:ce:fe:b5:aa:80:8a:e4:34:ba:33:36: b7:9f:11:fe:bb:38:ef:d4:1b:f3:37:4c:5b:98:1a:17:7b:bb: 93:ca:f1:8a:fa:bc:5b:bf:76:43:97:b6:04:52:e6:a2:94:9e: 96:7b:38:be:3e:25:5d:e1:ca:fc:e0:4c:23:8e:17:5e:59:10: e4:74:66:b4:9e:84:05:81:47:93:01:dd:67:de:93:de:15:ef: 09:cf:68:bf:0c:12:61:33:15:5c:bf:c1:4a:93:e7:34:46:93: d2:f8:ef:ad:ef:f6:34:0c:95:df:fd:b9:ba:0e:00:65:a2:b3: 80:9f:1c:c0:69:3b:97:b1:9c:68:3a:bc:86:1f:9b:26:d8:6e: bb:14:3b:19 -----BEGIN CERTIFICATE----- MIIGETCCBPmgAwIBAgISAZsnBredQ3mVYJA3kUVnubfRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh MTU3MjIwHhcNMjUxMjE2MTE1ODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZGQxZTRmYTZiOTRiZmZhZjZiMGY3ZDk2NjQ1ZmU0YjBkOTFmYTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXjhi/PjqvdDAy4J5pvjfuJt3gj9 1qcoOJAT8HXefc+aiU7SeqWa2L66nWEJZzuKmkBEs11moRDz/89GY4xLAdluRY3H BThsYLYkwWaO3jRbys7Fma/AYajxEdx+wU0ct3Euaf6sJdlRcT6NDfnp9wLrvLoW 7ah6cqBwEDQKgkYlsME8IhMdKpa0qrFGS/1BPFy0+oQQleAMIxAC9ZU50OiSoOWU CUnUcyWL1qITWdXvSWdyWeK5kPO2zKiYsHKRasJ8gGl97pz04uyLVnE/LD9Pr+PP uHI3HC9EW5rTJsrqAzDOTbn0fgwEPodHiWZdchQk9I/lY5sqHW1bZEYbnwIDAQAB o4IDHTCCAxkwHQYDVR0OBBYEFD3R5PprlL/69rD32WZF/ksNkfpzMB8GA1UdIwQY MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt ZjUyYzQ3YzIyNWRiLzEvUGRIay1tdVV2X3Iyc1BmWlprWC1TdzJSLW5NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBMQYIKwYBBQUHAQcBAf8EggEgMIIBHDCCARgEAgABMIIB EAMEAFBgDAMEAFBgKwMEAFBgLwMEAFBgMwMEAFBgOQMEAFBgQwMEAFBgRQMEAFBg SAMEAFBgTwMEAFBg2zAMAwQAUGGTAwQBUGGUAwQAUbQbAwQAUbUeAwQAUbVwAwQA UbWAAwQAUbWTAwQAUbWnAwQAUbX2AwQAVXgUAwQAVXgXAwQAweIQAwQAweJ0AwQA weJ9AwQAweJ/AwQAweaeAwQAwearAwQAwebZAwQAweblAwQAwedLAwQAwedsAwQA wee4AwQAwefCAwQAwefpAwQAwefsAwQAwefuAwQAwef8AwQAwmZiAwQAwmaGAwQA wmblAwQAwpngAwQA2ZwOAwQB2ZwUAwQA2ZwpAwQA2ZxhMA0GCSqGSIb3DQEBCwUA A4IBAQDAKsOl5LV9PCH/AdEOA7ugiEKswfplTtw8nzQXBBiTMKsSQzoiYaT5fyeI HJRE3izGIncuAJAJnEwjj+Xh/CG9SDbviGeVLyo4pNvXjDfVOthReoF+SgUCmaVZ zpf7hsq9eeMWwHhDHBzs06OnCgbhCHC1zv61qoCK5DS6Mza3nxH+uzjv1BvzN0xb mBoXe7uTyvGK+rxbv3ZDl7YEUuailJ6Wezi+PiVd4cr84EwjjhdeWRDkdGa0noQF gUeTAd1n3pPeFe8Jz2i/DBJhMxVcv8FKk+c0RpPS+O+t7/Y0DJXf/bm6DgBlorOA nxzAaTuXsZxoOryGH5sm2G67FDsZ -----END CERTIFICATE-----Generated at Sun Dec 21 00:37:28 2025 by rpki-client