This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/D6exrg9atdqHY2Sea9zOwol5c5o.roa File: D6exrg9atdqHY2Sea9zOwol5c5o.roa (raw, json) Hash identifier: HMu/VcREiNs9bSW91e6HbQUdZSL2kmt29splOR70uPU= Subject key identifier: 0F:A7:B1:AE:0F:5A:B5:DA:87:63:64:9E:6B:DC:CE:C2:89:79:73:9A Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019AD95531A3BF0C39CD2DE930CF6A512914 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/D6exrg9atdqHY2Sea9zOwol5c5o.roa Signing time: Mon 01 Dec 2025 09:53:50 +0000 ROA not before: Mon 01 Dec 2025 09:53:50 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 206300 IP address blocks: 82.152.18.0/24 maxlen: 24 82.152.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 20:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d9:55:31:a3:bf:0c:39:cd:2d:e9:30:cf:6a:51:29:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Dec 1 09:53:50 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0fa7b1ae0f5ab5da8763649e6bdccec28979739a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:3a:be:a3:1d:6c:fd:f3:de:b7:8e:f4:17:b2: 8c:d8:54:70:6b:a0:08:af:b3:59:cc:c5:e1:eb:1d: a1:52:e6:2b:33:13:a4:69:f6:60:96:da:a3:2c:78: fb:50:52:56:67:5b:90:de:59:ab:d4:bc:2b:5d:4c: 77:96:ec:f0:06:57:b1:5f:d4:1e:81:31:ba:2d:e8: b4:b0:16:98:95:92:c3:d7:42:be:d2:6c:cb:e7:1d: 9a:e3:0d:58:ea:41:62:ec:3a:75:41:ae:33:90:4e: 35:db:08:29:0c:32:76:53:e1:58:95:d4:62:fa:c4: 28:ff:d7:43:31:5e:33:08:02:9e:9e:85:47:23:bf: 6c:dd:e8:2d:8c:14:39:ea:ec:4c:05:85:21:58:43: fa:2a:ce:8e:1a:23:fe:7b:ec:a6:6b:f0:40:f3:b5: 6c:e4:79:8f:6a:6e:c9:1c:5b:82:ec:74:3a:05:93: 87:06:8f:ee:99:d6:8e:06:a8:ab:43:86:21:3c:df: 43:11:87:5e:49:8d:46:88:eb:68:d6:e0:13:6e:a8: 53:9a:cf:c2:0a:c4:73:f4:87:f5:94:e5:f3:84:b7: e0:f4:05:9b:fe:28:d1:78:e8:4e:e2:cb:58:a5:63: 04:70:3c:6f:a5:5e:19:6c:53:07:f8:01:37:97:7f: 5d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:A7:B1:AE:0F:5A:B5:DA:87:63:64:9E:6B:DC:CE:C2:89:79:73:9A X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/D6exrg9atdqHY2Sea9zOwol5c5o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.152.18.0/24 82.152.64.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:b0:aa:07:50:03:a7:aa:b1:4a:bb:df:06:09:19:9e:ab:50: 7f:2e:bb:e3:7c:5f:e5:bc:a5:a9:25:11:a6:38:ea:1d:05:d8: 97:23:2a:fa:38:28:2f:e4:3a:e1:eb:89:2b:df:05:31:ae:36: 13:cb:bc:8f:85:d7:1f:1c:af:97:63:0c:4d:f8:0b:0b:bc:3f: 24:9f:12:cf:00:61:18:be:00:9a:6f:f6:9b:48:4e:67:0d:42: 7f:9e:e6:f0:c2:18:34:0c:29:b5:51:ea:f8:de:a1:01:48:28: db:e9:9a:41:bb:0c:9a:7e:70:ea:e9:0a:d6:5a:8e:51:ec:90: 87:86:4a:69:ef:5b:58:bf:23:b4:63:72:a6:9c:4a:fb:88:32: ca:a7:29:53:d6:63:1c:4d:02:e2:26:6b:f6:0c:99:ec:36:c5: ce:ad:5f:1b:2a:03:6c:61:d6:37:80:0f:1e:26:81:da:dd:bb: a4:5d:8b:1b:20:51:9e:a5:36:f8:43:b2:8a:8c:64:a4:3d:b1: 9b:98:d9:ac:60:92:b7:89:c0:99:ae:48:1a:54:3b:d6:cd:2d: 9f:d6:df:a5:13:97:4c:be:af:fa:2b:66:e1:7c:eb:3c:db:d7: 25:3b:c5:b3:cb:31:e8:97:8f:c6:cc:0c:6c:f7:f3:52:56:e7: 63:47:0c:9c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZrZVTGjvww5zS3pMM9qUSkUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjUxMjAxMDk1MzUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZmE3YjFhZTBmNWFiNWRhODc2MzY0OWU2YmRjY2VjMjg5Nzk3MzlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Dq+ox1s/fPet470F7KM2FRwa6AI r7NZzMXh6x2hUuYrMxOkafZgltqjLHj7UFJWZ1uQ3lmr1LwrXUx3luzwBlexX9Qe gTG6Lei0sBaYlZLD10K+0mzL5x2a4w1Y6kFi7Dp1Qa4zkE412wgpDDJ2U+FYldRi +sQo/9dDMV4zCAKenoVHI79s3egtjBQ56uxMBYUhWEP6Ks6OGiP+e+yma/BA87Vs 5HmPam7JHFuC7HQ6BZOHBo/umdaOBqirQ4YhPN9DEYdeSY1GiOto1uATbqhTms/C CsRz9If1lOXzhLfg9AWb/ijReOhO4stYpWMEcDxvpV4ZbFMH+AE3l39djwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFA+nsa4PWrXah2NknmvczsKJeXOaMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvRDZleHJnOWF0ZHFIWTJTZWE5ek93b2w1YzVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUpgSAwQA UphAMA0GCSqGSIb3DQEBCwUAA4IBAQA/sKoHUAOnqrFKu98GCRmeq1B/LrvjfF/l vKWpJRGmOOodBdiXIyr6OCgv5Drh64kr3wUxrjYTy7yPhdcfHK+XYwxN+AsLvD8k nxLPAGEYvgCab/abSE5nDUJ/nubwwhg0DCm1Uer43qEBSCjb6ZpBuwyafnDq6QrW Wo5R7JCHhkpp71tYvyO0Y3KmnEr7iDLKpylT1mMcTQLiJmv2DJnsNsXOrV8bKgNs YdY3gA8eJoHa3bukXYsbIFGepTb4Q7KKjGSkPbGbmNmsYJK3icCZrkgaVDvWzS2f 1t+lE5dMvq/6K2bhfOs829clO8WzyzHol4/GzAxs9/NSVudjRwyc -----END CERTIFICATE-----Generated at Sun Dec 21 06:14:20 2025 by rpki-client