This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/3nvUcFRVjzlC5QdtvOYCbRH66QU.roa File: 3nvUcFRVjzlC5QdtvOYCbRH66QU.roa (raw, json) Hash identifier: HgN+i38sLLtdiaInhtEu2MQsmkYCrPjDVs1tMIP0DHE= Subject key identifier: DE:7B:D4:70:54:55:8F:39:42:E5:07:6D:BC:E6:02:6D:11:FA:E9:05 Certificate issuer: /CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5 Certificate serial: 019B49FA280330EF771DF3AE42D1000002DE Authority key identifier: 8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/3nvUcFRVjzlC5QdtvOYCbRH66QU.roa Signing time: Tue 23 Dec 2025 06:51:29 +0000 ROA not before: Tue 23 Dec 2025 06:51:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 208690 IP address blocks: 212.66.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:fa:28:03:30:ef:77:1d:f3:ae:42:d1:00:00:02:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5 Validity Not Before: Dec 23 06:51:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=de7bd47054558f3942e5076dbce6026d11fae905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:d9:10:36:3e:f3:c5:6b:6a:84:c8:95:a4:aa: 1c:70:2f:22:8d:de:0f:5a:8b:e6:6e:18:4d:3d:f8: 8f:cc:ce:c5:89:e4:d4:37:29:58:e5:8e:dc:fd:93: 98:39:65:8e:44:6c:7d:43:eb:da:8a:e9:4e:75:5a: 84:f2:00:94:3e:31:f6:2a:94:6d:5c:f3:2a:ac:8d: d6:c1:69:27:46:1b:63:83:e0:a9:5b:54:7c:9f:4d: b8:9c:bc:72:f3:c8:39:2c:ed:7c:51:08:47:21:10: f3:bd:e0:bc:45:52:4b:0b:77:e1:33:7b:88:d9:72: 6a:78:a9:10:f5:3f:0c:65:97:07:c5:56:66:72:49: 90:0e:ec:35:46:57:b5:51:0b:60:4b:cb:7f:10:c1: ff:22:30:ed:7e:47:4d:14:71:47:78:0c:fe:17:2c: 76:9a:36:e8:52:fd:0f:68:18:1d:57:fa:eb:c1:a5: 64:18:61:f2:cb:19:21:b6:46:dd:10:07:17:4f:79: 2e:7e:76:2e:c9:57:99:68:78:3f:e4:98:5d:30:28: 47:25:ec:df:18:7a:64:dc:72:04:d6:a6:f2:05:f1: d5:82:c2:df:4c:d9:bc:d5:af:c8:cc:c4:b5:ac:79: 7f:4a:e3:89:0f:cc:de:53:03:f6:1e:29:30:64:89: 1c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:7B:D4:70:54:55:8F:39:42:E5:07:6D:BC:E6:02:6D:11:FA:E9:05 X509v3 Authority Key Identifier: keyid:8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/3nvUcFRVjzlC5QdtvOYCbRH66QU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.66.52.0/24 Signature Algorithm: sha256WithRSAEncryption 89:fa:c1:4f:e3:6a:9f:07:5c:0c:f4:21:32:a8:b9:90:51:e9: 21:3e:6c:04:45:20:9e:fa:03:ca:18:6f:43:c2:e4:3e:85:72: cb:66:7b:f6:f9:64:63:46:21:ee:67:54:33:0d:22:52:44:be: 77:42:cd:90:05:de:29:38:15:dc:b3:ed:38:a3:e9:97:6d:07: e6:16:95:af:84:4b:0c:14:67:52:3d:17:c3:d2:bd:a9:e3:0b: db:a2:36:f8:a2:73:31:43:37:2c:20:94:80:aa:77:fc:a0:89: 1b:76:4f:f6:00:49:bd:31:b6:ad:bf:ab:41:27:8b:d7:86:35: 0a:76:a5:51:fe:0d:ef:20:5b:68:39:b2:ef:7b:43:9b:50:51: 34:67:bc:1e:19:e1:0d:d7:fc:48:09:d1:2f:7d:b2:26:5e:d6: 0d:dc:8f:d4:c4:b5:1e:ed:c8:e4:76:d1:0b:6f:6b:c5:02:75: 9f:83:30:e8:63:df:e3:8c:2e:c1:85:ef:9c:b1:b1:df:69:d7: aa:90:09:d0:60:91:94:ec:2c:cb:73:44:68:53:e3:7c:c1:b4: 10:77:88:e7:31:e9:19:8f:b9:db:21:75:db:4b:e2:de:bc:c4: 4b:6c:b9:fc:61:49:5c:a9:23:bd:d1:bc:82:72:ab:f2:42:2c: 60:16:a4:42 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZtJ+igDMO93HfOuQtEAAALeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMDFhYjZjZDQ0YTdhM2VhNDAwMmMxMDZhOTZjNDI3YjUy YzgxZDUwHhcNMjUxMjIzMDY1MTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTdiZDQ3MDU0NTU4ZjM5NDJlNTA3NmRiY2U2MDI2ZDExZmFlOTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3tkQNj7zxWtqhMiVpKoccC8ijd4P WovmbhhNPfiPzM7FieTUNylY5Y7c/ZOYOWWORGx9Q+vaiulOdVqE8gCUPjH2KpRt XPMqrI3WwWknRhtjg+CpW1R8n024nLxy88g5LO18UQhHIRDzveC8RVJLC3fhM3uI 2XJqeKkQ9T8MZZcHxVZmckmQDuw1Rle1UQtgS8t/EMH/IjDtfkdNFHFHeAz+Fyx2 mjboUv0PaBgdV/rrwaVkGGHyyxkhtkbdEAcXT3kufnYuyVeZaHg/5JhdMChHJezf GHpk3HIE1qbyBfHVgsLfTNm81a/IzMS1rHl/SuOJD8zeUwP2HikwZIkcqwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN571HBUVY85QuUHbbzmAm0R+ukFMB8GA1UdIwQY MBaAFIoBq2zUSno+pAAsEGqWxCe1LIHVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEt OWZlYmY4YzNlMzNmLzEvM252VWNGUlZqemxDNVFkdHZPWUNiUkg2NlFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEtOWZlYmY4YzNlMzNm LzEvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1EI0MA0G CSqGSIb3DQEBCwUAA4IBAQCJ+sFP42qfB1wM9CEyqLmQUekhPmwERSCe+gPKGG9D wuQ+hXLLZnv2+WRjRiHuZ1QzDSJSRL53Qs2QBd4pOBXcs+04o+mXbQfmFpWvhEsM FGdSPRfD0r2p4wvbojb4onMxQzcsIJSAqnf8oIkbdk/2AEm9Mbatv6tBJ4vXhjUK dqVR/g3vIFtoObLve0ObUFE0Z7weGeEN1/xICdEvfbImXtYN3I/UxLUe7cjkdtEL b2vFAnWfgzDoY9/jjC7Bhe+csbHfadeqkAnQYJGU7CzLc0RoU+N8wbQQd4jnMekZ j7nbIXXbS+LevMRLbLn8YUlcqSO90byCcqvyQixgFqRC -----END CERTIFICATE-----Generated at Sat Dec 27 08:43:48 2025 by rpki-client