This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/RTxZWI_RmYVjQqUctMM2Kk-xG3w.roa File: RTxZWI_RmYVjQqUctMM2Kk-xG3w.roa (raw, json) Hash identifier: qF9prK30ZxfBBb08Tn8Jn/Ec6qBewfpJCteDk0PqaqA= Subject key identifier: 45:3C:59:58:8F:D1:99:85:63:42:A5:1C:B4:C3:36:2A:4F:B1:1B:7C Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B0C83EC96794F206DCA83D674301824AF Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/RTxZWI_RmYVjQqUctMM2Kk-xG3w.roa Signing time: Thu 11 Dec 2025 08:25:30 +0000 ROA not before: Thu 11 Dec 2025 08:25:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215152 IP address blocks: 79.99.146.0/24 maxlen: 24 212.38.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0c:83:ec:96:79:4f:20:6d:ca:83:d6:74:30:18:24:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Dec 11 08:25:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=453c59588fd199856342a51cb4c3362a4fb11b7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b5:43:a1:5a:5a:7b:d7:10:17:16:5a:5c:99: d6:7a:7f:da:53:ef:d5:94:4a:d7:8e:d2:15:39:92: f0:3c:59:af:2b:57:aa:d0:3a:59:3e:2e:26:d3:1d: 84:6e:ad:49:80:d5:fa:d6:9f:e8:d5:72:84:91:2a: bc:06:16:0b:b8:c0:56:24:68:f0:f4:f9:cf:b3:6e: e6:d1:b9:4d:1a:cf:93:9b:b7:65:41:8c:a7:96:e6: e3:8e:73:08:37:81:30:65:3a:96:e2:9f:f5:8d:a5: 06:67:06:33:67:2e:cb:97:79:fa:fb:89:e8:75:06: cd:b5:c9:cb:e8:7c:54:0d:26:a3:6e:ca:f6:af:06: f9:1b:43:ac:88:6b:18:95:fe:ac:6a:b0:5e:49:30: 26:60:36:cc:04:f2:87:43:02:b2:6d:79:66:8a:4e: c1:b2:bd:4b:73:e0:f0:c1:6e:38:e0:7f:53:66:75: 7f:c0:27:60:e3:93:51:27:8f:18:b5:90:35:de:1e: 65:9c:16:30:d7:85:82:dd:9e:27:d8:fb:2d:e8:67: 4e:6d:a2:1a:33:19:83:30:42:9e:a1:05:16:28:18: 7d:2e:3f:ec:c2:8b:88:e0:80:7a:55:e5:0e:41:ee: b9:74:ff:b5:7c:d1:ff:c4:12:15:05:df:ff:1f:41: 79:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:3C:59:58:8F:D1:99:85:63:42:A5:1C:B4:C3:36:2A:4F:B1:1B:7C X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/RTxZWI_RmYVjQqUctMM2Kk-xG3w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.99.146.0/24 212.38.89.0/24 Signature Algorithm: sha256WithRSAEncryption 83:1e:28:42:dd:3b:cd:22:e4:e9:cd:94:0e:26:db:ce:b0:c3: 22:f7:f1:af:6e:e9:0d:6f:20:da:70:aa:e4:89:a0:22:3a:0c: 32:ab:74:e5:40:4b:33:8d:b9:2b:f7:43:4c:d7:36:e7:65:93: da:02:06:19:54:44:4a:7d:39:6c:88:bc:c0:a0:67:a6:cb:07: 60:01:11:df:10:f3:4a:65:1b:21:c0:b8:b1:59:97:c4:07:3f: 0e:44:c0:d1:44:bb:32:61:1e:3d:89:b8:67:86:bc:91:b4:ce: f5:26:01:a2:f5:74:11:d5:42:a4:81:ce:f5:13:f3:40:46:fb: a6:9e:3b:52:69:85:fd:04:b0:de:bb:92:28:3d:e1:83:c2:64: 31:4b:9a:de:3f:2c:77:40:f9:40:56:1b:a4:19:d6:e7:06:94: 0f:0e:25:48:38:7d:1c:0a:ca:e1:35:c8:2d:75:3b:32:22:38: a3:65:4d:aa:2f:5d:2a:a6:cc:ac:96:be:f3:8f:47:2b:e9:38: d5:50:85:e8:6a:00:56:40:76:3e:c3:25:be:81:ea:0d:9b:9c: 61:7d:03:7d:b3:13:5c:a0:f0:2b:37:a4:7d:80:7d:d0:21:9b: fb:29:9c:4f:dd:e9:ca:60:e0:4b:8f:89:4e:8f:cd:67:78:17: 5a:03:6f:dd -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZsMg+yWeU8gbcqD1nQwGCSvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjUxMjExMDgyNTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTNjNTk1ODhmZDE5OTg1NjM0MmE1MWNiNGMzMzYyYTRmYjExYjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1LVDoVpae9cQFxZaXJnWen/aU+/V lErXjtIVOZLwPFmvK1eq0DpZPi4m0x2Ebq1JgNX61p/o1XKEkSq8BhYLuMBWJGjw 9PnPs27m0blNGs+Tm7dlQYynlubjjnMIN4EwZTqW4p/1jaUGZwYzZy7Ll3n6+4no dQbNtcnL6HxUDSajbsr2rwb5G0OsiGsYlf6sarBeSTAmYDbMBPKHQwKybXlmik7B sr1Lc+DwwW444H9TZnV/wCdg45NRJ48YtZA13h5lnBYw14WC3Z4n2Pst6GdObaIa MxmDMEKeoQUWKBh9Lj/swouI4IB6VeUOQe65dP+1fNH/xBIVBd//H0F5hwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEU8WViP0ZmFY0KlHLTDNipPsRt8MB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvUlR4WldJX1JtWVZqUXFVY3RNTTJLay14RzN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAT2OSAwQA 1CZZMA0GCSqGSIb3DQEBCwUAA4IBAQCDHihC3TvNIuTpzZQOJtvOsMMi9/GvbukN byDacKrkiaAiOgwyq3TlQEszjbkr90NM1zbnZZPaAgYZVERKfTlsiLzAoGemywdg ARHfEPNKZRshwLixWZfEBz8ORMDRRLsyYR49ibhnhryRtM71JgGi9XQR1UKkgc71 E/NARvumnjtSaYX9BLDeu5IoPeGDwmQxS5rePyx3QPlAVhukGdbnBpQPDiVIOH0c CsrhNcgtdTsyIjijZU2qL10qpsyslr7zj0cr6TjVUIXoagBWQHY+wyW+geoNm5xh fQN9sxNcoPArN6R9gH3QIZv7KZxP3enKYOBLj4lOj81neBdaA2/d -----END CERTIFICATE-----Generated at Sat Dec 20 07:29:07 2025 by rpki-client