This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/4N_OcVybUTFJdNu5l1vYh5-Fx9c.roa File: 4N_OcVybUTFJdNu5l1vYh5-Fx9c.roa (raw, json) Hash identifier: KM7brRodcAJm0Q/ySFPGvtUBPxlKigJRolmZSuAhkws= Subject key identifier: E0:DF:CE:71:5C:9B:51:31:49:74:DB:B9:97:5B:D8:87:9F:85:C7:D7 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B0851FFA2B22EB12B764BF509F46DD69A Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/4N_OcVybUTFJdNu5l1vYh5-Fx9c.roa Signing time: Wed 10 Dec 2025 12:52:30 +0000 ROA not before: Wed 10 Dec 2025 12:52:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 42689 IP address blocks: 82.152.7.0/24 maxlen: 24 82.153.227.0/24 maxlen: 24 82.153.228.0/23 maxlen: 24 82.153.231.0/24 maxlen: 24 109.176.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:51:ff:a2:b2:2e:b1:2b:76:4b:f5:09:f4:6d:d6:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Dec 10 12:52:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e0dfce715c9b51314974dbb9975bd8879f85c7d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ca:e3:b6:b6:1e:7b:84:2a:4c:b5:ed:6f:76: 3f:d9:09:dd:99:5e:d9:8b:74:a9:fc:b7:fd:ff:b3: c2:94:cc:96:0c:c8:f7:47:16:62:d4:e4:1e:4a:b3: 69:4f:89:69:e6:ed:7c:6c:9c:09:5f:9a:29:25:61: 17:2f:be:45:ae:5d:35:4c:fe:a9:8e:fb:ff:fc:9a: 6f:c1:ab:de:5d:89:92:be:0e:db:f1:51:0c:2f:de: 17:2d:a0:c6:da:4b:c0:5f:75:8a:99:64:d2:3f:dc: 3c:31:5e:5a:a9:9b:56:f2:f1:8d:16:4c:cb:90:08: 87:de:c5:67:3e:8f:c5:df:15:8a:f1:b8:f0:11:ad: 1b:fa:c5:2f:f0:83:51:43:38:f6:52:82:58:04:e8: 35:69:51:2e:5b:90:bd:43:50:f3:0a:68:f1:97:2c: 7c:85:cb:6d:87:9c:81:88:c1:58:4b:aa:e3:c9:71: b2:94:a1:59:3c:0c:d2:da:3a:9c:b7:72:a6:4b:88: 94:58:34:ad:e8:de:bb:47:7f:b9:34:a4:ce:8f:fc: 63:c0:5f:f5:ea:72:b9:f4:5e:86:88:7c:00:26:3e: f8:50:ed:d1:e8:a5:4c:01:c3:67:a8:48:63:96:ec: e1:dd:ed:60:9c:ce:73:47:19:0f:39:8f:ca:ad:64: 73:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:DF:CE:71:5C:9B:51:31:49:74:DB:B9:97:5B:D8:87:9F:85:C7:D7 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/4N_OcVybUTFJdNu5l1vYh5-Fx9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.152.7.0/24 82.153.227.0-82.153.229.255 82.153.231.0/24 109.176.212.0/24 Signature Algorithm: sha256WithRSAEncryption 60:ae:4f:ae:42:28:fd:56:14:a6:21:36:fd:ed:14:9a:a6:dc: cd:bc:73:a3:6e:11:45:65:6d:79:88:14:65:fe:f2:f4:88:6e: 85:64:ed:b6:08:63:ba:c4:03:b2:64:c3:37:05:65:27:ee:19: 18:5e:03:31:70:2a:d2:e2:20:a9:5d:ab:71:8e:e3:33:b4:98: 40:9b:62:eb:8d:2b:44:fd:9c:e8:c6:db:a1:af:74:96:97:b0: f4:f5:d3:88:42:a0:74:b0:03:d1:4e:71:17:b3:83:6f:60:9a: 9d:e8:10:5f:50:db:83:66:a9:5f:9c:d2:f2:14:27:11:14:04: 66:19:f5:13:65:4c:75:28:2e:86:0d:62:50:d7:b8:b4:8d:8c: ed:89:97:64:cc:10:15:b2:fc:fc:f4:7c:f7:90:74:77:6d:f6: f1:98:bf:ee:c3:a5:ae:ac:20:90:0c:76:b0:62:42:45:bf:f8: 0b:da:e6:c6:0a:7e:3f:b7:ed:a5:57:21:cd:21:aa:c0:06:d4: 31:e1:20:13:7a:ff:8d:97:db:42:c0:f6:4f:32:21:4f:08:9b: d5:e1:b7:e5:49:68:ef:36:7c:31:3a:19:7e:2e:92:2c:06:8f: b9:3d:e6:61:c2:48:d6:f6:9f:79:96:3e:ee:ca:c8:ae:29:f4: 5e:02:ab:1d -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZsIUf+isi6xK3ZL9Qn0bdaaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjUxMjEwMTI1MjMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMGRmY2U3MTVjOWI1MTMxNDk3NGRiYjk5NzViZDg4NzlmODVjN2Q3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcrjtrYee4QqTLXtb3Y/2QndmV7Z i3Sp/Lf9/7PClMyWDMj3RxZi1OQeSrNpT4lp5u18bJwJX5opJWEXL75Frl01TP6p jvv//JpvwaveXYmSvg7b8VEML94XLaDG2kvAX3WKmWTSP9w8MV5aqZtW8vGNFkzL kAiH3sVnPo/F3xWK8bjwEa0b+sUv8INRQzj2UoJYBOg1aVEuW5C9Q1DzCmjxlyx8 hctth5yBiMFYS6rjyXGylKFZPAzS2jqct3KmS4iUWDSt6N67R3+5NKTOj/xjwF/1 6nK59F6GiHwAJj74UO3R6KVMAcNnqEhjluzh3e1gnM5zRxkPOY/KrWRzLQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFODfznFcm1ExSXTbuZdb2IefhcfXMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvNE5fT2NWeWJVVEZKZE51NWwxdlloNS1GeDljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQAUpgHMAwD BABSmeMDBAFSmeQDBABSmecDBABtsNQwDQYJKoZIhvcNAQELBQADggEBAGCuT65C KP1WFKYhNv3tFJqm3M28c6NuEUVlbXmIFGX+8vSIboVk7bYIY7rEA7JkwzcFZSfu GRheAzFwKtLiIKldq3GO4zO0mECbYuuNK0T9nOjG26GvdJaXsPT104hCoHSwA9FO cRezg29gmp3oEF9Q24NmqV+c0vIUJxEUBGYZ9RNlTHUoLoYNYlDXuLSNjO2Jl2TM EBWy/Pz0fPeQdHdt9vGYv+7Dpa6sIJAMdrBiQkW/+Ava5sYKfj+37aVXIc0hqsAG 1DHhIBN6/42X20LA9k8yIU8Im9Xht+VJaO82fDE6GX4ukiwGj7k95mHCSNb2n3mW Pu7KyK4p9F4Cqx0= -----END CERTIFICATE-----Generated at Sat Dec 20 12:54:50 2025 by rpki-client