This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/3AzDgx-IoD4eUcJwjR5ezmpLc3Q.roa File: 3AzDgx-IoD4eUcJwjR5ezmpLc3Q.roa (raw, json) Hash identifier: IAJXiFazp7eL2X6hAn+rRl0Jnv7RqRDxaayyfLgYmnA= Subject key identifier: DC:0C:C3:83:1F:88:A0:3E:1E:51:C2:70:8D:1E:5E:CE:6A:4B:73:74 Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019ACADDDADFF5ABC629697C77D3C6A8CD25 Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/3AzDgx-IoD4eUcJwjR5ezmpLc3Q.roa Signing time: Fri 28 Nov 2025 14:28:48 +0000 ROA not before: Fri 28 Nov 2025 14:28:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 399468 IP address blocks: 195.40.156.0/22 maxlen: 24 195.172.122.0/23 maxlen: 24 212.212.0.0/21 maxlen: 24 212.212.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 15:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ca:dd:da:df:f5:ab:c6:29:69:7c:77:d3:c6:a8:cd:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Nov 28 14:28:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=dc0cc3831f88a03e1e51c2708d1e5ece6a4b7374 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:45:ff:2e:d2:53:05:64:fb:8c:c8:68:65:2f: 9f:c8:ea:47:bb:b0:35:18:a3:ed:13:fe:2f:25:cd: b9:5f:b2:c8:25:6e:ea:2d:36:5d:83:df:4b:ba:e7: 2f:26:29:43:cf:d9:8e:c1:a9:89:b0:9f:ab:93:c3: d4:91:1b:50:32:65:67:26:01:5e:2a:7b:9a:eb:57: cb:8b:af:cc:d1:18:45:e8:a2:1b:97:60:39:61:e3: fa:41:53:0d:15:41:05:db:e1:47:e9:ec:57:02:68: e3:6c:2e:c5:67:20:5d:ad:e7:35:ed:e3:8e:29:8d: 7e:13:53:2e:d1:7a:12:15:3f:47:62:16:61:c1:13: dd:cd:41:b6:a3:a9:f2:1d:e3:d2:08:d5:58:c9:ff: 37:83:71:1c:c9:3f:0f:70:bb:55:3b:53:5a:3b:a6: 1e:21:26:1e:24:18:00:00:a9:ca:fd:5b:17:68:2d: 92:58:f2:5d:1f:f4:76:71:bb:10:3b:e3:bb:f7:30: e5:d6:94:cc:99:98:e7:c1:37:5a:41:fb:d3:20:71: 4c:11:df:23:39:f1:f3:a4:d6:c2:ac:18:f5:7c:b5: a4:9a:12:d0:cf:9a:f5:31:ac:27:e0:3c:09:bd:b0: 7e:77:ee:53:26:4e:65:01:32:83:71:46:12:ed:1e: b3:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:0C:C3:83:1F:88:A0:3E:1E:51:C2:70:8D:1E:5E:CE:6A:4B:73:74 X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/3AzDgx-IoD4eUcJwjR5ezmpLc3Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.40.156.0/22 195.172.122.0/23 212.212.0.0/20 Signature Algorithm: sha256WithRSAEncryption c0:3f:9f:06:be:55:9a:92:18:61:d4:ed:d0:70:f8:e0:9b:90: 91:6e:15:b4:a2:d0:6e:b5:6d:34:6b:6b:0a:53:a1:92:bf:17: e7:64:32:e9:78:70:07:96:d2:29:3d:b6:76:39:6f:b3:7e:7a: af:f7:fe:03:9b:f6:23:bc:40:d3:00:8e:c3:2e:11:fe:bf:7f: 21:e2:e3:f1:8a:cb:31:13:af:ec:a6:71:9c:aa:a3:4f:ab:16: f7:1a:a2:dd:ce:a5:6a:7e:40:16:ad:9c:9a:94:23:34:1e:63: 5d:19:7d:b8:ce:f0:2b:63:4e:e6:aa:bf:13:b7:d1:39:9c:5d: 44:d7:00:64:c9:55:c1:8c:db:ba:62:fb:e3:bd:f4:4f:62:46: d9:92:a8:62:78:29:b8:27:85:05:ad:fd:e7:93:c4:55:79:18: 99:98:06:e6:53:ef:02:b8:18:af:77:6b:ec:71:1f:fa:ab:2b: 35:a5:3a:1e:ee:5c:c7:55:ba:9c:d7:d9:e6:3c:60:de:ce:7e: 9c:46:3c:d7:d7:d1:9e:c9:81:d0:0b:b7:ca:f7:0f:8b:57:ab: e9:13:df:59:25:8e:3b:d8:e5:88:04:b5:21:8b:c6:82:87:93: 9d:96:97:42:53:f7:99:e0:fd:92:e6:c5:c5:ce:e0:5f:d7:a0: 4f:69:9d:70 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZrK3drf9avGKWl8d9PGqM0lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjUxMTI4MTQyODQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzBjYzM4MzFmODhhMDNlMWU1MWMyNzA4ZDFlNWVjZTZhNGI3Mzc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUX/LtJTBWT7jMhoZS+fyOpHu7A1 GKPtE/4vJc25X7LIJW7qLTZdg99LuucvJilDz9mOwamJsJ+rk8PUkRtQMmVnJgFe Knua61fLi6/M0RhF6KIbl2A5YeP6QVMNFUEF2+FH6exXAmjjbC7FZyBdrec17eOO KY1+E1Mu0XoSFT9HYhZhwRPdzUG2o6nyHePSCNVYyf83g3EcyT8PcLtVO1NaO6Ye ISYeJBgAAKnK/VsXaC2SWPJdH/R2cbsQO+O79zDl1pTMmZjnwTdaQfvTIHFMEd8j OfHzpNbCrBj1fLWkmhLQz5r1Mawn4DwJvbB+d+5TJk5lATKDcUYS7R6zeQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFNwMw4MfiKA+HlHCcI0eXs5qS3N0MB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvM0F6RGd4LUlvRDRlVWNKd2pSNWV6bXBMYzNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCwyicAwQB w6x6AwQE1NQAMA0GCSqGSIb3DQEBCwUAA4IBAQDAP58GvlWakhhh1O3QcPjgm5CR bhW0otButW00a2sKU6GSvxfnZDLpeHAHltIpPbZ2OW+zfnqv9/4Dm/YjvEDTAI7D LhH+v38h4uPxissxE6/spnGcqqNPqxb3GqLdzqVqfkAWrZyalCM0HmNdGX24zvAr Y07mqr8Tt9E5nF1E1wBkyVXBjNu6YvvjvfRPYkbZkqhieCm4J4UFrf3nk8RVeRiZ mAbmU+8CuBivd2vscR/6qys1pToe7lzHVbqc19nmPGDezn6cRjzX19GeyYHQC7fK 9w+LV6vpE99ZJY472OWIBLUhi8aCh5OdlpdCU/eZ4P2S5sXFzuBf16BPaZ1w -----END CERTIFICATE-----Generated at Thu Dec 4 19:54:07 2025 by rpki-client