This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1-k2DIkc8Cs1wEr5zhAOgulTk__8.roa File: 1-k2DIkc8Cs1wEr5zhAOgulTk__8.roa (raw, json) Hash identifier: CL8LQ+v1LK/kW23dLdAr844lekP+0cbEALTjfSIvRpo= Subject key identifier: FA:4D:83:22:47:3C:0A:CD:70:12:BE:73:84:03:A0:BA:54:E4:FF:FF Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019A914D62B06746ED1D2F889C20F398A956 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1-k2DIkc8Cs1wEr5zhAOgulTk__8.roa Signing time: Mon 17 Nov 2025 10:12:39 +0000 ROA not before: Mon 17 Nov 2025 10:12:39 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214366 IP address blocks: 82.153.55.0/24 maxlen: 24 82.153.58.0/24 maxlen: 24 82.153.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 24 Nov 2025 06:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:91:4d:62:b0:67:46:ed:1d:2f:88:9c:20:f3:98:a9:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Nov 17 10:12:39 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fa4d8322473c0acd7012be738403a0ba54e4ffff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c1:0d:14:fa:44:04:2b:e5:3e:0b:28:f5:26: 37:6c:3a:1d:9a:df:71:14:6a:9e:a0:d1:6b:1c:8f: cc:64:8b:a7:a3:16:c0:f2:8b:c8:cb:d4:0b:f2:59: ae:27:6f:80:cf:aa:01:cc:b7:66:c4:ef:a6:14:57: 0c:59:4c:54:80:1f:08:87:22:b4:4b:0d:ed:c7:58: 8c:06:42:7e:9e:41:57:36:80:da:8a:3c:3c:d0:c1: 23:b8:c4:0c:db:43:60:0b:ee:fb:25:f4:f7:c4:81: 7d:65:1e:0e:7e:de:59:1c:fc:00:c0:d2:e3:2a:ca: 67:68:f1:5c:f6:45:d5:55:0c:5a:56:94:a5:c6:5a: b1:65:1d:b6:b1:d3:f7:dc:cc:23:92:2f:81:9f:c6: 70:77:00:a7:4a:3d:24:60:a6:c5:4e:80:77:fc:ed: d8:08:15:bb:f7:9b:9e:e9:f4:ef:10:2c:b9:5b:50: 74:64:98:2c:7f:30:e1:43:53:87:c8:86:38:c5:dc: 5a:4a:5b:88:25:9f:c9:92:64:bb:c9:c9:fe:e2:ab: be:f7:e1:6a:70:fa:2c:af:22:f9:5e:19:b5:e5:c5: 3a:94:09:2f:f7:40:fe:fe:79:73:90:ef:2a:5c:36: 98:2b:32:0d:61:6b:41:20:40:d9:5e:93:db:84:d8: bd:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:4D:83:22:47:3C:0A:CD:70:12:BE:73:84:03:A0:BA:54:E4:FF:FF X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1-k2DIkc8Cs1wEr5zhAOgulTk__8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.153.55.0/24 82.153.58.0/24 82.153.222.0/24 Signature Algorithm: sha256WithRSAEncryption 40:cc:be:69:1a:3d:55:10:b1:6b:35:12:ca:7a:a5:45:86:90: 2b:3d:42:d6:f4:57:ca:0b:d1:31:a1:0b:18:a4:f5:29:cc:72: 9e:84:6e:4b:c1:80:bd:81:a1:dd:f3:62:4a:48:ee:0c:53:7e: 14:4e:67:b4:87:57:f1:0f:0a:8c:65:fc:3f:26:04:f0:5c:cc: 64:be:9b:e1:36:cb:cf:4f:e3:f8:48:49:74:29:d0:20:c5:08: 25:42:cc:85:c7:f4:23:88:5d:fb:07:88:1e:c1:cf:b4:41:8f: c1:17:2b:a6:5c:11:04:3d:18:7c:1e:ce:33:64:6a:d4:24:95: ac:99:f0:fa:b5:98:fb:9e:14:f9:eb:11:a1:3a:28:86:8e:fc: e1:74:a4:e4:49:56:01:74:21:cd:f4:0e:78:b8:9a:1e:5f:d7: a5:de:75:75:b2:50:db:17:28:8c:80:f8:be:83:1e:cc:65:74: f5:17:bd:97:d6:bd:c7:ec:df:a9:65:f8:e0:5b:8a:93:4c:61: 29:ef:2e:87:d6:44:d1:0d:1e:06:d3:e9:92:84:53:4a:bb:38: f9:8a:b0:94:4f:6e:d9:4c:31:f5:bb:05:84:e9:51:49:b5:21: f2:e9:2b:bf:23:55:f4:8c:c0:23:d5:bc:4a:3a:8b:d1:92:60: 4a:07:91:44 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZqRTWKwZ0btHS+InCDzmKlWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjUxMTE3MTAxMjM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTRkODMyMjQ3M2MwYWNkNzAxMmJlNzM4NDAzYTBiYTU0ZTRmZmZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsENFPpEBCvlPgso9SY3bDodmt9x FGqeoNFrHI/MZIunoxbA8ovIy9QL8lmuJ2+Az6oBzLdmxO+mFFcMWUxUgB8IhyK0 Sw3tx1iMBkJ+nkFXNoDaijw80MEjuMQM20NgC+77JfT3xIF9ZR4Oft5ZHPwAwNLj KspnaPFc9kXVVQxaVpSlxlqxZR22sdP33Mwjki+Bn8ZwdwCnSj0kYKbFToB3/O3Y CBW795ue6fTvECy5W1B0ZJgsfzDhQ1OHyIY4xdxaSluIJZ/JkmS7ycn+4qu+9+Fq cPosryL5Xhm15cU6lAkv90D+/nlzkO8qXDaYKzINYWtBIEDZXpPbhNi95wIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFPpNgyJHPArNcBK+c4QDoLpU5P//MB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvMS1rMkRJa2M4Q3Mxd0VyNXpoQU9ndWxUa19fOC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOGEvNDlkYzAwLTk3ZTItNDYyOC1hZTM5LTQxMjI4ZTM5ZmY3 Yy8xL1A5TU5pbjRTX0h2Mkxnd1NIbnpDSnQ2bE81cy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAFKZNwME AFKZOgMEAFKZ3jANBgkqhkiG9w0BAQsFAAOCAQEAQMy+aRo9VRCxazUSynqlRYaQ Kz1C1vRXygvRMaELGKT1KcxynoRuS8GAvYGh3fNiSkjuDFN+FE5ntIdX8Q8KjGX8 PyYE8FzMZL6b4TbLz0/j+EhJdCnQIMUIJULMhcf0I4hd+weIHsHPtEGPwRcrplwR BD0YfB7OM2Rq1CSVrJnw+rWY+54U+esRoTooho784XSk5ElWAXQhzfQOeLiaHl/X pd51dbJQ2xcojID4voMezGV09Re9l9a9x+zfqWX44FuKk0xhKe8uh9ZE0Q0eBtPp koRTSrs4+YqwlE9u2Uwx9bsFhOlRSbUh8ukrvyNV9IzAI9W8SjqL0ZJgSgeRRA== -----END CERTIFICATE-----Generated at Sun Nov 23 12:07:16 2025 by rpki-client