This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Ep3FuqFhbcuFnlKPHdy9ghQ52vA.roa File: Ep3FuqFhbcuFnlKPHdy9ghQ52vA.roa (raw, json) Hash identifier: FaEgznPINIXh09+zd1Fks+pmB+5ckUoJgoMia1rgTco= Subject key identifier: 12:9D:C5:BA:A1:61:6D:CB:85:9E:52:8F:1D:DC:BD:82:14:39:DA:F0 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B11A11F853E97CD16620312FC1F9E9955 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Ep3FuqFhbcuFnlKPHdy9ghQ52vA.roa Signing time: Fri 12 Dec 2025 08:15:30 +0000 ROA not before: Fri 12 Dec 2025 08:15:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 5065 IP address blocks: 82.152.52.0/23 maxlen: 24 82.153.44.0/24 maxlen: 24 82.153.46.0/24 maxlen: 24 109.176.75.0/24 maxlen: 24 213.130.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:a1:1f:85:3e:97:cd:16:62:03:12:fc:1f:9e:99:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Dec 12 08:15:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=129dc5baa1616dcb859e528f1ddcbd821439daf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d5:74:40:49:35:76:8a:4d:63:9f:6f:5c:15: ad:17:e6:6c:5c:b9:e1:12:5c:9f:ec:d3:d7:dc:f0: 05:3a:1d:12:0a:93:98:be:c2:57:d6:66:f1:1e:60: f9:9f:9b:d5:c5:21:87:17:10:48:f1:1d:4a:05:e2: c6:fa:8c:54:27:9c:5b:f3:cc:eb:33:fd:df:55:8a: d6:b8:40:42:08:33:88:7a:d8:d8:12:b6:d3:78:85: 57:42:c5:3c:71:db:9c:48:f9:ab:b9:e0:6e:2a:4a: d3:69:67:fb:1d:45:34:a5:06:7b:81:93:b2:10:97: 0e:47:b1:21:58:b1:56:76:83:a7:81:fd:99:d5:99: ad:0a:58:72:cc:ab:f0:9a:0a:85:2d:37:7d:fc:4e: 7c:a6:2a:3f:9d:37:84:93:ab:50:65:09:e5:43:b4: c8:da:5e:65:79:b2:8a:b6:7a:b3:72:9f:50:4a:9b: 38:48:98:f7:d9:e9:1e:7c:41:73:01:39:84:8f:5f: 97:34:e7:09:93:ae:c0:3c:3c:13:ff:13:37:e4:bf: 6b:65:0a:8c:17:de:73:7f:d7:17:4c:21:d5:a9:b2: 52:78:d3:c5:9b:27:8a:e1:c6:35:06:c1:a9:53:bc: f1:81:b9:c7:64:88:ea:fa:a4:79:d6:c7:08:8a:49: 95:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:9D:C5:BA:A1:61:6D:CB:85:9E:52:8F:1D:DC:BD:82:14:39:DA:F0 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Ep3FuqFhbcuFnlKPHdy9ghQ52vA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.152.52.0/23 82.153.44.0/24 82.153.46.0/24 109.176.75.0/24 213.130.150.0/24 Signature Algorithm: sha256WithRSAEncryption 96:10:4a:be:94:a4:9e:c5:f9:0e:5b:2b:c9:cc:24:80:49:ab: ba:bd:22:d4:2b:9e:8e:c8:b8:ad:96:f2:09:41:90:4b:3c:3e: 20:72:64:c3:16:be:0a:54:e4:ed:e4:c3:4f:ae:44:fc:8d:f8: 95:0b:46:ab:f8:7f:e2:e5:2e:bc:8d:43:9a:d4:23:a9:69:cb: e9:cd:55:1f:ae:3b:75:bf:cf:85:73:af:0b:90:df:f8:91:2e: a7:a1:cc:80:88:14:6a:85:cb:96:01:ec:07:4b:1f:b6:79:8a: 3b:9f:f5:cd:44:ca:47:07:26:9a:40:bb:c7:f1:f3:3b:54:c1: fd:84:e9:b7:d0:34:1c:ff:55:b2:ef:4f:59:aa:8c:39:9b:7c: a6:e5:91:4d:f2:08:48:6c:bd:6f:3c:c9:52:0f:bb:eb:d6:10: fc:1e:fd:4d:4b:55:e5:93:cd:48:54:98:af:3b:54:c1:ff:f0: f9:ac:b5:07:a9:69:95:9c:bd:bf:58:41:42:74:fc:9a:59:a6: ed:78:29:de:dc:d0:ae:cb:37:f3:27:79:92:ae:9e:03:8d:a9: 1a:e5:4d:cd:f5:92:31:71:55:94:3a:71:fe:55:a8:d8:87:9e: dc:1a:fd:61:cb:69:bc:b5:32:58:96:0a:fa:46:f3:02:33:1e: ff:49:7b:5a -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZsRoR+FPpfNFmIDEvwfnplVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjUxMjEyMDgxNTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjlkYzViYWExNjE2ZGNiODU5ZTUyOGYxZGRjYmQ4MjE0MzlkYWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptV0QEk1dopNY59vXBWtF+ZsXLnh Elyf7NPX3PAFOh0SCpOYvsJX1mbxHmD5n5vVxSGHFxBI8R1KBeLG+oxUJ5xb88zr M/3fVYrWuEBCCDOIetjYErbTeIVXQsU8cducSPmrueBuKkrTaWf7HUU0pQZ7gZOy EJcOR7EhWLFWdoOngf2Z1ZmtClhyzKvwmgqFLTd9/E58pio/nTeEk6tQZQnlQ7TI 2l5lebKKtnqzcp9QSps4SJj32ekefEFzATmEj1+XNOcJk67APDwT/xM35L9rZQqM F95zf9cXTCHVqbJSeNPFmyeK4cY1BsGpU7zxgbnHZIjq+qR51scIikmViQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFBKdxbqhYW3LhZ5Sjx3cvYIUOdrwMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvRXAzRnVxRmhiY3VGbmxLUEhkeTlnaFE1MnZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQBUpg0AwQA UpksAwQAUpkuAwQAbbBLAwQA1YKWMA0GCSqGSIb3DQEBCwUAA4IBAQCWEEq+lKSe xfkOWyvJzCSASau6vSLUK56OyLitlvIJQZBLPD4gcmTDFr4KVOTt5MNPrkT8jfiV C0ar+H/i5S68jUOa1COpacvpzVUfrjt1v8+Fc68LkN/4kS6nocyAiBRqhcuWAewH Sx+2eYo7n/XNRMpHByaaQLvH8fM7VMH9hOm30DQc/1Wy709Zqow5m3ym5ZFN8ghI bL1vPMlSD7vr1hD8Hv1NS1Xlk81IVJivO1TB//D5rLUHqWmVnL2/WEFCdPyaWabt eCne3NCuyzfzJ3mSrp4Djaka5U3N9ZIxcVWUOnH+VajYh57cGv1hy2m8tTJYlgr6 RvMCMx7/SXta -----END CERTIFICATE-----Generated at Fri Dec 19 18:43:38 2025 by rpki-client