This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3n4Z8KC9ylRsJm0XGZ6peHfElqc.roa File: 3n4Z8KC9ylRsJm0XGZ6peHfElqc.roa (raw, json) Hash identifier: wDSIfArR80L8ertVNraA75n0oUjtEg8yBmWJU7F/c80= Subject key identifier: DE:7E:19:F0:A0:BD:CA:54:6C:26:6D:17:19:9E:A9:78:77:C4:96:A7 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019AD54B8C7DDAC9FB9AACD61F7CD2453E41 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3n4Z8KC9ylRsJm0XGZ6peHfElqc.roa Signing time: Sun 30 Nov 2025 15:04:49 +0000 ROA not before: Sun 30 Nov 2025 15:04:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 16276 IP address blocks: 37.139.130.0/24 maxlen: 24 45.149.243.0/24 maxlen: 24 79.110.61.0/24 maxlen: 24 85.217.144.0/23 maxlen: 24 185.225.74.0/23 maxlen: 24 193.149.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 01 Dec 2025 20:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d5:4b:8c:7d:da:c9:fb:9a:ac:d6:1f:7c:d2:45:3e:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Nov 30 15:04:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=de7e19f0a0bdca546c266d17199ea97877c496a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:04:1a:24:43:c4:fd:d2:1e:7f:2f:5a:0b:ea: 9e:0e:5e:0a:86:03:a8:1a:28:58:6f:d2:c3:6b:b8: 24:70:b8:1e:21:10:b8:5b:73:a9:f5:ad:e1:a6:8a: a8:4f:19:bc:c4:23:c8:2c:11:3e:ed:52:ec:5b:01: ff:a2:48:7e:a1:ba:cb:6d:fe:bf:28:2a:dc:57:0f: 7f:56:69:fc:45:ca:8d:23:5d:70:25:a7:73:ca:05: 19:fd:bd:10:9b:74:ea:c1:36:2f:54:ee:3f:de:4d: ca:84:90:5c:dd:58:8a:ca:6a:77:3f:d8:30:81:93: 32:d9:4d:64:29:21:00:00:2e:a9:48:12:15:1d:ff: eb:18:a3:54:93:9a:ec:f5:72:5e:02:1a:b0:f2:49: 86:15:51:16:5d:f1:9a:04:1e:d3:b8:a9:35:56:69: 46:27:4d:ac:a8:77:5f:11:2d:2b:fa:77:67:91:0f: 64:0e:ea:ee:ce:54:4f:52:d5:48:9c:28:f8:16:d1: 9f:cd:cf:56:10:f9:23:b7:9b:20:22:60:16:d9:fa: db:72:aa:e8:ae:0e:16:9e:83:d0:9c:76:65:33:92: 51:b6:3c:20:d5:b2:57:d5:5c:a7:46:10:78:3e:72: 26:a4:4e:ba:d8:7b:40:93:4b:06:db:a2:b5:d5:df: 46:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:7E:19:F0:A0:BD:CA:54:6C:26:6D:17:19:9E:A9:78:77:C4:96:A7 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3n4Z8KC9ylRsJm0XGZ6peHfElqc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.139.130.0/24 45.149.243.0/24 79.110.61.0/24 85.217.144.0/23 185.225.74.0/23 193.149.28.0/22 Signature Algorithm: sha256WithRSAEncryption 13:5a:9a:0a:bb:62:7e:59:be:5c:e2:f2:e8:08:c3:9e:a6:9a: d9:e9:94:c9:d8:0f:1a:f3:62:87:2c:e1:2e:fe:e9:e8:42:9d: d5:3c:49:d7:ff:f2:01:08:b0:79:fa:6c:5c:bf:0e:e7:c5:d4: 00:50:6f:f1:82:11:ed:ee:2c:03:6e:f0:6e:68:b0:2c:ff:5c: 15:9e:77:a5:ce:55:b3:92:a4:c9:c3:db:69:08:c0:7e:09:f9: 91:bd:47:3b:11:ca:51:be:39:b5:f7:2f:8f:16:49:af:8d:5e: 74:9b:5c:d8:12:7a:59:83:04:fa:0f:cd:43:b3:95:33:c3:c4: 13:1d:e7:1d:64:e6:10:76:9b:e4:10:38:99:5c:fc:81:a5:44: c4:fd:0e:6d:d1:2c:09:69:06:60:8f:ad:e7:a4:22:c2:90:6a: fe:5d:4c:8e:08:57:3e:a8:73:db:71:ea:c1:ba:20:f8:24:43: d2:58:8b:2c:a5:43:19:ee:89:8c:c1:81:09:41:bc:f9:d4:63: 7a:e5:78:4b:55:bf:94:25:b5:52:84:af:42:9f:e0:07:57:83: 36:1a:b8:0d:c0:0d:e1:ea:98:d1:17:48:00:1e:6d:2b:1e:a8: 88:6b:07:25:5b:cf:eb:56:c6:71:9d:eb:23:d9:ac:59:db:06: 06:3a:d5:60 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZrVS4x92sn7mqzWH3zSRT5BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjUxMTMwMTUwNDQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTdlMTlmMGEwYmRjYTU0NmMyNjZkMTcxOTllYTk3ODc3YzQ5NmE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAQaJEPE/dIefy9aC+qeDl4KhgOo GihYb9LDa7gkcLgeIRC4W3Op9a3hpoqoTxm8xCPILBE+7VLsWwH/okh+obrLbf6/ KCrcVw9/Vmn8RcqNI11wJadzygUZ/b0Qm3TqwTYvVO4/3k3KhJBc3ViKymp3P9gw gZMy2U1kKSEAAC6pSBIVHf/rGKNUk5rs9XJeAhqw8kmGFVEWXfGaBB7TuKk1VmlG J02sqHdfES0r+ndnkQ9kDuruzlRPUtVInCj4FtGfzc9WEPkjt5sgImAW2frbcqro rg4WnoPQnHZlM5JRtjwg1bJX1VynRhB4PnImpE662HtAk0sG26K11d9GjQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFN5+GfCgvcpUbCZtFxmeqXh3xJanMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvM240WjhLQzl5bFJzSm0wWEdaNnBlSGZFbHFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAJYuCAwQA LZXzAwQAT249AwQBVdmQAwQBueFKAwQCwZUcMA0GCSqGSIb3DQEBCwUAA4IBAQAT WpoKu2J+Wb5c4vLoCMOepprZ6ZTJ2A8a82KHLOEu/unoQp3VPEnX//IBCLB5+mxc vw7nxdQAUG/xghHt7iwDbvBuaLAs/1wVnnelzlWzkqTJw9tpCMB+CfmRvUc7EcpR vjm19y+PFkmvjV50m1zYEnpZgwT6D81Ds5Uzw8QTHecdZOYQdpvkEDiZXPyBpUTE /Q5t0SwJaQZgj63npCLCkGr+XUyOCFc+qHPbcerBuiD4JEPSWIsspUMZ7omMwYEJ Qbz51GN65XhLVb+UJbVShK9Cn+AHV4M2GrgNwA3h6pjRF0gAHm0rHqiIawclW8/r VsZxnesj2axZ2wYGOtVg -----END CERTIFICATE-----Generated at Mon Dec 1 02:21:55 2025 by rpki-client