This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/01LxUtvVLERDQNjMojFvIfMYms8.roa File: 01LxUtvVLERDQNjMojFvIfMYms8.roa (raw, json) Hash identifier: dbTDA7xwOx8ed8KC9cU5zm53HzmO4YSWSNc/vsfYtKY= Subject key identifier: D3:52:F1:52:DB:D5:2C:44:43:40:D8:CC:A2:31:6F:21:F3:18:9A:CF Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019AA5ADB82520DD3F89E7172D1107432B16 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/01LxUtvVLERDQNjMojFvIfMYms8.roa Signing time: Fri 21 Nov 2025 09:10:16 +0000 ROA not before: Fri 21 Nov 2025 09:10:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215727 IP address blocks: 82.153.51.0/24 maxlen: 24 82.153.148.0/24 maxlen: 24 82.163.15.0/24 maxlen: 24 89.213.63.0/24 maxlen: 24 89.213.113.0/24 maxlen: 24 89.213.121.0/24 maxlen: 24 89.213.157.0/24 maxlen: 24 89.213.227.0/24 maxlen: 24 109.176.242.0/24 maxlen: 24 213.130.137.0/24 maxlen: 24 213.130.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 24 Nov 2025 06:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a5:ad:b8:25:20:dd:3f:89:e7:17:2d:11:07:43:2b:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Nov 21 09:10:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d352f152dbd52c444340d8cca2316f21f3189acf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:82:ef:79:e8:77:d3:fd:46:a2:ee:4a:fd:2b: 17:e1:7c:28:90:24:18:45:b0:d7:69:6b:82:b5:ce: 89:d4:07:15:c6:26:7d:d7:99:56:ac:52:1a:ec:dd: 0a:09:df:5a:b4:c4:a5:18:ba:60:5b:24:be:59:3a: cf:2f:83:e6:87:5e:75:05:8d:9c:ba:25:cc:bf:db: 18:82:f8:cd:1d:1e:0f:c2:38:bb:e0:fe:4b:8f:aa: 13:bc:d2:2e:9d:c9:3b:ed:8a:ba:6a:2d:a5:a6:ab: 75:d8:0f:db:c6:ff:e0:03:68:21:58:04:94:e8:4c: 2d:b8:91:20:23:c9:96:c4:e8:51:00:c8:d1:d0:ad: 96:25:4b:42:fd:c2:cd:67:49:86:d8:2f:5e:0b:af: 52:89:4f:39:fa:91:21:d2:3f:f1:7f:c4:71:7d:e6: 57:39:cf:f3:ab:51:21:13:b2:25:bc:b7:25:47:c6: 42:8a:a0:f0:d0:78:6a:2e:43:6e:ba:7d:9a:a8:d0: b7:bb:c7:c6:83:a5:f8:90:0a:64:6d:fd:6d:4f:13: 3c:1a:cd:3d:b6:57:ec:3d:a5:a9:0c:58:20:ee:f6: 48:68:33:71:2d:58:f7:e8:1b:9e:a0:a8:b7:25:84: ad:e2:ac:3d:45:cf:9e:3c:38:cc:30:36:ef:80:a0: 03:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:52:F1:52:DB:D5:2C:44:43:40:D8:CC:A2:31:6F:21:F3:18:9A:CF X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/01LxUtvVLERDQNjMojFvIfMYms8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.153.51.0/24 82.153.148.0/24 82.163.15.0/24 89.213.63.0/24 89.213.113.0/24 89.213.121.0/24 89.213.157.0/24 89.213.227.0/24 109.176.242.0/24 213.130.137.0/24 213.130.152.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:2e:a3:b7:74:6f:aa:3a:32:6c:99:31:66:d1:97:d8:e6:dd: 26:56:2f:e2:3f:2e:a6:84:52:c0:cf:e1:3b:bb:51:30:30:8f: 39:68:cc:91:ac:c7:18:7c:d1:3a:47:35:8c:2c:29:e6:51:a5: 1e:a3:61:7d:80:71:12:f5:db:73:c4:53:b5:7d:44:36:69:ed: 78:f5:d9:87:43:02:37:12:05:8f:6d:3a:7e:aa:79:7b:bf:58: 58:2e:f2:23:2a:2f:04:95:61:39:93:26:35:8d:32:65:ba:53: 2a:d7:e4:8e:1c:28:4e:d4:ec:6d:c5:ae:d0:76:02:05:c5:6d: 16:e0:79:df:a3:4f:89:df:2f:89:20:49:ec:5e:4e:ce:57:cb: 0c:70:40:e8:53:45:49:92:2b:48:23:56:ba:f7:73:1b:97:33: 97:81:09:a4:e5:99:5e:78:60:5d:6e:28:2c:b5:96:07:53:54: 9c:44:5d:21:3a:04:98:fb:56:5b:80:55:be:69:60:84:f0:93: 21:d9:92:a9:bb:d3:42:03:d0:2a:bb:f5:ae:b2:a3:12:ee:b0: 80:3b:9f:d9:76:71:52:2e:54:9d:89:96:3f:37:9a:b8:1b:30: b5:83:40:f5:eb:c0:a0:5c:e7:cf:81:87:79:e3:00:52:06:11: 1f:83:35:e9 -----BEGIN CERTIFICATE----- MIIFOTCCBCGgAwIBAgISAZqlrbglIN0/iecXLREHQysWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjUxMTIxMDkxMDE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzUyZjE1MmRiZDUyYzQ0NDM0MGQ4Y2NhMjMxNmYyMWYzMTg5YWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvILveeh30/1Gou5K/SsX4XwokCQY RbDXaWuCtc6J1AcVxiZ915lWrFIa7N0KCd9atMSlGLpgWyS+WTrPL4Pmh151BY2c uiXMv9sYgvjNHR4Pwji74P5Lj6oTvNIunck77Yq6ai2lpqt12A/bxv/gA2ghWASU 6EwtuJEgI8mWxOhRAMjR0K2WJUtC/cLNZ0mG2C9eC69SiU85+pEh0j/xf8RxfeZX Oc/zq1EhE7IlvLclR8ZCiqDw0HhqLkNuun2aqNC3u8fGg6X4kApkbf1tTxM8Gs09 tlfsPaWpDFgg7vZIaDNxLVj36BueoKi3JYSt4qw9Rc+ePDjMMDbvgKAD8QIDAQAB o4ICRTCCAkEwHQYDVR0OBBYEFNNS8VLb1SxEQ0DYzKIxbyHzGJrPMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvMDFMeFV0dlZMRVJEUU5qTW9qRnZJZk1ZbXM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQAUpkzAwQA UpmUAwQAUqMPAwQAWdU/AwQAWdVxAwQAWdV5AwQAWdWdAwQAWdXjAwQAbbDyAwQA 1YKJAwQA1YKYMA0GCSqGSIb3DQEBCwUAA4IBAQCcLqO3dG+qOjJsmTFm0ZfY5t0m Vi/iPy6mhFLAz+E7u1EwMI85aMyRrMcYfNE6RzWMLCnmUaUeo2F9gHES9dtzxFO1 fUQ2ae149dmHQwI3EgWPbTp+qnl7v1hYLvIjKi8ElWE5kyY1jTJlulMq1+SOHChO 1Oxtxa7QdgIFxW0W4Hnfo0+J3y+JIEnsXk7OV8sMcEDoU0VJkitII1a693MblzOX gQmk5ZleeGBdbigstZYHU1ScRF0hOgSY+1ZbgFW+aWCE8JMh2ZKpu9NCA9Aqu/Wu sqMS7rCAO5/ZdnFSLlSdiZY/N5q4GzC1g0D168CgXOfPgYd54wBSBhEfgzXp -----END CERTIFICATE-----Generated at Sun Nov 23 12:06:53 2025 by rpki-client