This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/4DyTRj9dhd8P_yu_QPamSmNdfqg.roa File: 4DyTRj9dhd8P_yu_QPamSmNdfqg.roa (raw, json) Hash identifier: qXwPWkCzy+Wl9IsKpUMMCj/FmDB0n3vgQ4fcSVgncb4= Subject key identifier: E0:3C:93:46:3F:5D:85:DF:0F:FF:2B:BF:40:F6:A6:4A:63:5D:7E:A8 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B216205C62CF29A2A476F1EDBC71392DC Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/4DyTRj9dhd8P_yu_QPamSmNdfqg.roa Signing time: Mon 15 Dec 2025 09:40:30 +0000 ROA not before: Mon 15 Dec 2025 09:40:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9009 IP address blocks: 81.5.156.0/24 maxlen: 24 81.168.41.0/24 maxlen: 24 82.152.111.0/24 maxlen: 24 82.153.67.0/24 maxlen: 24 82.153.73.0/24 maxlen: 24 82.153.78.0/24 maxlen: 24 82.153.137.0/24 maxlen: 24 82.153.139.0/24 maxlen: 24 82.153.140.0/24 maxlen: 24 82.153.221.0/24 maxlen: 24 82.153.223.0/24 maxlen: 24 82.153.240.0/24 maxlen: 24 82.153.250.0/24 maxlen: 24 89.213.153.0/24 maxlen: 24 109.176.209.0/24 maxlen: 24 109.176.211.0/24 maxlen: 24 109.176.216.0/24 maxlen: 24 109.176.217.0/24 maxlen: 24 109.176.218.0/24 maxlen: 24 109.176.219.0/24 maxlen: 24 109.176.220.0/24 maxlen: 24 109.176.221.0/24 maxlen: 24 109.176.222.0/24 maxlen: 24 109.176.223.0/24 maxlen: 24 109.176.249.0/24 maxlen: 24 213.152.61.0/24 maxlen: 24 213.152.62.0/24 maxlen: 24 213.218.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:62:05:c6:2c:f2:9a:2a:47:6f:1e:db:c7:13:92:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Dec 15 09:40:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e03c93463f5d85df0fff2bbf40f6a64a635d7ea8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:18:61:6d:7f:5c:56:f9:5a:50:6f:c9:e3:32: fb:6c:d2:f2:96:a1:26:8f:63:45:a0:36:c3:8a:6e: 3e:2b:78:20:73:c0:52:aa:87:22:67:60:74:a8:c0: 3c:df:68:b0:58:4b:24:5d:e2:e3:55:58:36:a8:d4: 2d:fb:1b:41:8a:64:b3:60:1d:2b:4b:a1:b4:8e:a0: 93:fe:46:49:a3:ee:b0:77:ba:63:f3:98:b9:17:a6: 1c:97:20:f4:cc:38:94:1a:65:79:7e:7a:fb:da:91: a3:bc:32:4b:5e:01:db:ad:36:63:d2:37:1a:e9:99: 78:d8:64:b0:69:1d:8d:34:8a:7e:2d:9f:e1:b5:90: 41:7c:00:e9:da:f1:29:9b:73:68:29:13:57:23:ed: 62:1a:13:e9:13:4a:75:07:f6:ee:68:48:dc:f8:82: c2:ed:34:7d:ff:a8:2e:ee:b6:6a:c1:ec:3b:7c:f4: 3f:ca:4e:07:94:12:18:6e:86:97:e9:b9:a4:20:bb: d6:36:a6:42:05:48:7f:c3:b8:0f:a7:87:c2:8f:04: 0c:67:6a:85:34:d1:24:08:56:8b:c0:dc:22:1f:29: b3:76:ee:c3:d6:78:c4:0c:5f:78:f8:ce:bb:be:66: 6e:c5:e1:fe:ff:f2:f7:9f:2e:b3:52:87:6e:ec:d5: 0d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:3C:93:46:3F:5D:85:DF:0F:FF:2B:BF:40:F6:A6:4A:63:5D:7E:A8 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/4DyTRj9dhd8P_yu_QPamSmNdfqg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.5.156.0/24 81.168.41.0/24 82.152.111.0/24 82.153.67.0/24 82.153.73.0/24 82.153.78.0/24 82.153.137.0/24 82.153.139.0-82.153.140.255 82.153.221.0/24 82.153.223.0/24 82.153.240.0/24 82.153.250.0/24 89.213.153.0/24 109.176.209.0/24 109.176.211.0/24 109.176.216.0/21 109.176.249.0/24 213.152.61.0-213.152.62.255 213.218.216.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:fe:4a:44:93:81:bd:67:98:78:d4:57:dc:cb:82:d1:48:3b: 33:d2:be:8e:84:2d:e1:5e:c4:3a:b6:3b:f2:93:33:7d:3e:95: 99:24:93:db:3d:8f:93:2f:7e:ad:9e:51:32:cd:5e:6c:ff:46: be:f3:dc:f4:fd:6b:61:dd:00:60:9a:14:64:6c:e5:e3:0f:ad: d9:63:c0:49:14:7e:11:43:a5:a5:91:47:58:60:a2:71:17:90: fa:e4:16:0b:e9:10:4a:de:95:80:18:2b:82:e6:5e:b3:52:65: fa:77:14:ad:e6:32:5e:72:af:ed:76:14:4d:f2:08:24:05:60: 62:00:4c:94:c9:c0:90:64:a6:50:91:ad:1b:69:67:31:50:80: 7f:be:57:3e:10:ec:04:2e:9b:a9:52:fd:2e:2c:e0:35:b7:31: c5:52:f8:da:04:89:b6:3c:7d:64:bd:ee:22:f0:2b:fc:7b:b8: aa:20:63:c8:38:55:10:aa:62:ba:82:c5:71:df:6a:ba:21:4b: da:53:dd:02:e1:ec:00:14:36:89:de:45:68:12:95:5e:53:61: 3d:23:95:fd:26:52:c0:77:96:a0:3a:cc:ff:2d:f6:88:7f:c2: dd:d4:35:fb:5e:17:80:28:c7:56:ff:a5:84:b2:23:31:e1:0e: 43:ad:5a:e0 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZshYgXGLPKaKkdvHtvHE5LcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjUxMjE1MDk0MDMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMDNjOTM0NjNmNWQ4NWRmMGZmZjJiYmY0MGY2YTY0YTYzNWQ3ZWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRhhbX9cVvlaUG/J4zL7bNLylqEm j2NFoDbDim4+K3ggc8BSqociZ2B0qMA832iwWEskXeLjVVg2qNQt+xtBimSzYB0r S6G0jqCT/kZJo+6wd7pj85i5F6YclyD0zDiUGmV5fnr72pGjvDJLXgHbrTZj0jca 6Zl42GSwaR2NNIp+LZ/htZBBfADp2vEpm3NoKRNXI+1iGhPpE0p1B/buaEjc+ILC 7TR9/6gu7rZqwew7fPQ/yk4HlBIYboaX6bmkILvWNqZCBUh/w7gPp4fCjwQMZ2qF NNEkCFaLwNwiHymzdu7D1njEDF94+M67vmZuxeH+//L3ny6zUodu7NUNhQIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFOA8k0Y/XYXfD/8rv0D2pkpjXX6oMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvNER5VFJqOWRoZDhQX3l1X1FQYW1TbU5kZnFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGfBggrBgEFBQcBBwEB/wSBjzCBjDCBiQQCAAEwgYIDBABR BZwDBABRqCkDBABSmG8DBABSmUMDBABSmUkDBABSmU4DBABSmYkwDAMEAFKZiwME AFKZjAMEAFKZ3QMEAFKZ3wMEAFKZ8AMEAFKZ+gMEAFnVmQMEAG2w0QMEAG2w0wME A22w2AMEAG2w+TAMAwQA1Zg9AwQA1Zg+AwQA1drYMA0GCSqGSIb3DQEBCwUAA4IB AQCf/kpEk4G9Z5h41Ffcy4LRSDsz0r6OhC3hXsQ6tjvykzN9PpWZJJPbPY+TL36t nlEyzV5s/0a+89z0/Wth3QBgmhRkbOXjD63ZY8BJFH4RQ6WlkUdYYKJxF5D65BYL 6RBK3pWAGCuC5l6zUmX6dxSt5jJecq/tdhRN8ggkBWBiAEyUycCQZKZQka0baWcx UIB/vlc+EOwELpupUv0uLOA1tzHFUvjaBIm2PH1kve4i8Cv8e7iqIGPIOFUQqmK6 gsVx32q6IUvaU90C4ewAFDaJ3kVoEpVeU2E9I5X9JlLAd5agOsz/LfaIf8Ld1DX7 XheAKMdW/6WEsiMx4Q5DrVrg -----END CERTIFICATE-----Generated at Sat Dec 20 07:44:22 2025 by rpki-client