This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/33ZPsrz_QMGqAeefRnvKmUIXf1M.roa File: 33ZPsrz_QMGqAeefRnvKmUIXf1M.roa (raw, json) Hash identifier: X5uOY3veS5mnQrinVT63Q5YBv/rUFkv4WRKbT7kGAzk= Subject key identifier: DF:76:4F:B2:BC:FF:40:C1:AA:01:E7:9F:46:7B:CA:99:42:17:7F:53 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019ABAF7D94BA1C9724342EC5AE6FA710CA5 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/33ZPsrz_QMGqAeefRnvKmUIXf1M.roa Signing time: Tue 25 Nov 2025 12:23:16 +0000 ROA not before: Tue 25 Nov 2025 12:23:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 42689 IP address blocks: 82.152.7.0/24 maxlen: 24 82.153.227.0/24 maxlen: 24 82.153.228.0/23 maxlen: 24 82.153.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 05:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ba:f7:d9:4b:a1:c9:72:43:42:ec:5a:e6:fa:71:0c:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Nov 25 12:23:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=df764fb2bcff40c1aa01e79f467bca9942177f53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:3c:48:76:ab:ed:70:80:6a:c8:7e:4b:60:1f: a2:f8:0b:6c:41:a3:e8:59:33:99:05:0b:0b:3f:e2: d1:42:d6:86:16:9e:24:32:a7:98:15:59:45:56:0f: 0e:3f:4f:11:41:d1:c3:e1:11:3d:c2:59:f0:72:d4: c5:6a:df:3f:f7:bf:86:03:a2:81:b7:ab:8d:79:93: c7:30:85:d3:8e:22:7c:75:78:53:2f:5a:23:89:69: 6c:01:e5:87:38:d5:de:46:39:b7:7e:1b:d5:7e:a7: ca:92:75:70:a5:fc:2e:66:dd:3b:d9:ad:d4:fa:ac: 68:e7:5b:98:4e:16:fe:66:11:4a:04:d5:3b:9c:5a: d7:9e:67:fc:1c:8d:91:ec:3a:93:ac:28:24:1b:c8: 20:2f:f8:2d:42:b2:a0:06:62:c8:c6:cd:0b:39:65: 9e:c7:f1:2e:b4:71:48:f9:93:71:fa:1e:95:bd:5c: ce:db:0d:41:09:b2:34:1b:1e:b7:13:f9:14:68:d4: 7f:2f:e9:85:b9:6a:91:ea:69:0f:76:36:0d:72:32: 20:f4:2a:ae:6d:63:f7:46:f7:7b:85:37:f0:f4:93: 28:d3:d1:d2:dd:4d:dd:bc:81:eb:48:71:f2:98:87: 80:c3:aa:d3:49:d7:a5:41:66:12:36:96:94:06:72: 65:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:76:4F:B2:BC:FF:40:C1:AA:01:E7:9F:46:7B:CA:99:42:17:7F:53 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/33ZPsrz_QMGqAeefRnvKmUIXf1M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.152.7.0/24 82.153.227.0-82.153.229.255 82.153.231.0/24 Signature Algorithm: sha256WithRSAEncryption 10:c0:ae:db:fc:53:0e:e2:c5:5a:85:79:f3:15:fa:72:98:cd: 96:18:43:0a:63:ad:81:4e:41:6c:70:b6:83:db:e7:b5:9c:75: d5:2b:95:d7:f3:5e:f9:fd:1e:05:1c:4f:4d:30:a7:34:f7:53: d1:e8:ce:63:54:53:14:7b:8d:98:61:78:96:f0:44:11:9c:2b: 29:37:a4:7d:e0:78:b4:8c:88:73:08:8d:f1:77:7e:67:3a:3b: 57:8d:34:c9:b7:01:e1:45:6b:33:68:2e:1e:76:a0:ec:21:20: 6d:2e:2b:5f:36:fa:44:cb:04:94:0f:64:eb:3f:a4:b0:88:ce: 34:ac:50:b8:1b:4d:85:34:f5:71:f3:46:32:4b:97:9f:d2:22: b1:52:0e:cb:7b:89:ec:36:51:c0:63:74:fa:35:b7:92:2c:a0: aa:b6:de:89:37:c2:07:93:29:6d:6e:d8:fd:48:c1:31:00:e8: 4e:22:0c:e8:fb:0a:84:4f:40:d1:0e:88:63:92:dd:23:d2:f0: 43:8c:6f:65:ee:3f:44:dc:1c:7d:92:9e:75:8d:11:bb:bb:20: 9a:b7:09:53:ec:bd:01:8b:38:00:01:60:d4:86:39:55:21:bf: 81:e9:e2:d1:55:c9:57:c2:c9:3d:fb:65:6a:ab:8a:b1:86:07: 43:d5:fb:f5 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZq699lLoclyQ0LsWub6cQylMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjUxMTI1MTIyMzE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjc2NGZiMmJjZmY0MGMxYWEwMWU3OWY0NjdiY2E5OTQyMTc3ZjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTxIdqvtcIBqyH5LYB+i+AtsQaPo WTOZBQsLP+LRQtaGFp4kMqeYFVlFVg8OP08RQdHD4RE9wlnwctTFat8/97+GA6KB t6uNeZPHMIXTjiJ8dXhTL1ojiWlsAeWHONXeRjm3fhvVfqfKknVwpfwuZt072a3U +qxo51uYThb+ZhFKBNU7nFrXnmf8HI2R7DqTrCgkG8ggL/gtQrKgBmLIxs0LOWWe x/EutHFI+ZNx+h6VvVzO2w1BCbI0Gx63E/kUaNR/L+mFuWqR6mkPdjYNcjIg9Cqu bWP3Rvd7hTfw9JMo09HS3U3dvIHrSHHymIeAw6rTSdelQWYSNpaUBnJljQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFN92T7K8/0DBqgHnn0Z7yplCF39TMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvMzNaUHNyel9RTUdxQWVlZlJudkttVUlYZjFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAUpgHMAwD BABSmeMDBAFSmeQDBABSmecwDQYJKoZIhvcNAQELBQADggEBABDArtv8Uw7ixVqF efMV+nKYzZYYQwpjrYFOQWxwtoPb57WcddUrldfzXvn9HgUcT00wpzT3U9HozmNU UxR7jZhheJbwRBGcKyk3pH3geLSMiHMIjfF3fmc6O1eNNMm3AeFFazNoLh52oOwh IG0uK182+kTLBJQPZOs/pLCIzjSsULgbTYU09XHzRjJLl5/SIrFSDst7iew2UcBj dPo1t5IsoKq23ok3wgeTKW1u2P1IwTEA6E4iDOj7CoRPQNEOiGOS3SPS8EOMb2Xu P0TcHH2SnnWNEbu7IJq3CVPsvQGLOAABYNSGOVUhv4Hp4tFVyVfCyT37ZWqrirGG B0PV+/U= -----END CERTIFICATE-----Generated at Fri Dec 5 15:37:50 2025 by rpki-client