This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/sYsevHBY4jp4gwXh39ChCLG7U_I.roa File: sYsevHBY4jp4gwXh39ChCLG7U_I.roa (raw, json) Hash identifier: F5YWPOC75ZNqZl7HsVKFTfxNHXrG/6opmEO4mvWLt9o= Subject key identifier: B1:8B:1E:BC:70:58:E2:3A:78:83:05:E1:DF:D0:A1:08:B1:BB:53:F2 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B35B5E00801CDF4081B038BC013D492C7 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/sYsevHBY4jp4gwXh39ChCLG7U_I.roa Signing time: Fri 19 Dec 2025 08:24:30 +0000 ROA not before: Fri 19 Dec 2025 08:24:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9304 IP address blocks: 81.168.109.0/24 maxlen: 24 82.152.61.0/24 maxlen: 24 82.153.41.0/24 maxlen: 24 109.176.91.0/24 maxlen: 24 185.49.124.0/24 maxlen: 24 185.49.127.0/24 maxlen: 24 212.38.81.0/24 maxlen: 24 213.130.151.0/24 maxlen: 24 213.218.208.0/23 maxlen: 24 217.144.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:b5:e0:08:01:cd:f4:08:1b:03:8b:c0:13:d4:92:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Dec 19 08:24:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b18b1ebc7058e23a788305e1dfd0a108b1bb53f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f5:6e:14:c7:a2:6b:5d:60:a5:64:39:69:75: d8:57:21:31:07:da:2b:74:55:2e:e6:de:28:52:86: d2:e2:8f:2d:2d:8b:1a:5f:41:5e:ed:1a:52:68:7a: 82:8d:0a:c9:ad:82:5b:2a:ce:38:e7:e0:9c:93:a5: 2e:b0:c9:31:1b:d0:f4:1c:b1:8a:1c:4d:e4:36:f0: ef:01:b1:fe:f0:e4:cd:53:66:58:e9:f3:94:81:12: 67:c5:6b:d1:59:46:74:11:56:fb:34:ab:e7:61:3e: 54:f1:f3:9c:4b:c2:cb:8b:c5:c2:21:05:03:f3:9a: dc:79:f4:ad:49:d4:5d:46:d6:1e:d6:b1:b9:2e:e6: 99:a1:47:d5:34:bd:71:b0:4f:41:4a:9b:20:b5:47: 9c:3d:e2:92:ef:9d:df:ea:27:b0:9f:89:d7:0c:17: ca:7d:b3:b5:90:9d:0a:5f:31:12:84:3f:27:65:a2: 33:1d:b5:a3:ca:ab:52:d1:a1:5d:36:67:f8:15:61: 7d:b0:55:f6:8f:12:8c:dc:38:18:97:8e:84:25:4d: ea:56:d3:28:f6:c4:ac:c2:51:74:fc:82:65:b2:86: a8:70:4d:58:23:a2:3a:f7:c0:77:f7:a5:47:15:34: 08:60:c8:d8:94:9d:48:03:2c:f0:95:23:a5:0b:38: e6:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:8B:1E:BC:70:58:E2:3A:78:83:05:E1:DF:D0:A1:08:B1:BB:53:F2 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/sYsevHBY4jp4gwXh39ChCLG7U_I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.168.109.0/24 82.152.61.0/24 82.153.41.0/24 109.176.91.0/24 185.49.124.0/24 185.49.127.0/24 212.38.81.0/24 213.130.151.0/24 213.218.208.0/23 217.144.153.0/24 Signature Algorithm: sha256WithRSAEncryption 59:33:8b:92:ba:78:2d:2c:9d:28:17:85:3f:bf:db:ed:79:9e: da:41:92:1b:f0:0a:94:d7:4d:d6:16:59:f4:f4:dd:8c:3f:c5: 08:4c:36:1e:52:8a:3c:db:2b:05:de:9f:ed:57:f9:4c:0c:12: c4:9d:22:8f:a6:72:da:e5:06:3e:ec:3a:95:b0:c5:28:bd:31: 71:62:78:f1:82:54:2b:38:b0:31:c8:4b:d7:56:51:4c:fa:e0: 00:f2:6e:7d:e8:ec:ac:4c:14:50:16:08:c9:bc:6a:8a:6f:dd: 73:c1:5d:9f:68:a6:cf:7a:af:a3:28:fe:9e:28:73:03:d0:f2: 3f:2e:d7:32:b0:4b:17:82:3f:53:7f:46:87:33:b8:a2:6a:12: 2e:39:ab:2c:17:c7:78:a3:31:a5:12:b1:80:00:47:0a:d3:2a: 0c:36:0c:dc:d0:e4:10:12:9f:4b:94:45:8d:e3:e9:0c:0f:4a: 74:0b:64:d9:b8:8a:27:b5:ac:87:a5:2a:98:9f:fa:81:22:0b: 0a:78:6a:52:f6:18:7b:c7:35:d9:b6:52:60:f9:1c:7e:2e:29: e4:f7:c9:35:80:e4:21:d2:1d:34:13:c8:1d:9f:a4:e8:a8:f4: 31:d4:92:d7:4e:e8:aa:3b:e1:1b:66:e5:db:03:7c:2a:25:e0: d0:bd:86:54 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgISAZs1teAIAc30CBsDi8AT1JLHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjUxMjE5MDgyNDMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMThiMWViYzcwNThlMjNhNzg4MzA1ZTFkZmQwYTEwOGIxYmI1M2YyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/VuFMeia11gpWQ5aXXYVyExB9or dFUu5t4oUobS4o8tLYsaX0Fe7RpSaHqCjQrJrYJbKs445+Cck6UusMkxG9D0HLGK HE3kNvDvAbH+8OTNU2ZY6fOUgRJnxWvRWUZ0EVb7NKvnYT5U8fOcS8LLi8XCIQUD 85rcefStSdRdRtYe1rG5LuaZoUfVNL1xsE9BSpsgtUecPeKS753f6iewn4nXDBfK fbO1kJ0KXzEShD8nZaIzHbWjyqtS0aFdNmf4FWF9sFX2jxKM3DgYl46EJU3qVtMo 9sSswlF0/IJlsoaocE1YI6I698B396VHFTQIYMjYlJ1IAyzwlSOlCzjmvQIDAQAB o4ICPzCCAjswHQYDVR0OBBYEFLGLHrxwWOI6eIMF4d/QoQixu1PyMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvc1lzZXZIQlk0anA0Z3dYaDM5Q2hDTEc3VV9JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQAUahtAwQA Upg9AwQAUpkpAwQAbbBbAwQAuTF8AwQAuTF/AwQA1CZRAwQA1YKXAwQB1drQAwQA 2ZCZMA0GCSqGSIb3DQEBCwUAA4IBAQBZM4uSungtLJ0oF4U/v9vteZ7aQZIb8AqU 103WFln09N2MP8UITDYeUoo82ysF3p/tV/lMDBLEnSKPpnLa5QY+7DqVsMUovTFx YnjxglQrOLAxyEvXVlFM+uAA8m596OysTBRQFgjJvGqKb91zwV2faKbPeq+jKP6e KHMD0PI/LtcysEsXgj9Tf0aHM7iiahIuOassF8d4ozGlErGAAEcK0yoMNgzc0OQQ Ep9LlEWN4+kMD0p0C2TZuIontayHpSqYn/qBIgsKeGpS9hh7xzXZtlJg+Rx+Link 98k1gOQh0h00E8gdn6ToqPQx1JLXTuiqO+EbZuXbA3wqJeDQvYZU -----END CERTIFICATE-----Generated at Sat Dec 20 22:10:25 2025 by rpki-client