This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/4hCHAX1unXFLvJ5Nu8G9Qpuww1I.roa File: 4hCHAX1unXFLvJ5Nu8G9Qpuww1I.roa (raw, json) Hash identifier: N/PuPc3pitAEOTka67YrZWP25ZJPaD3FA2xouwtu3Hc= Subject key identifier: E2:10:87:01:7D:6E:9D:71:4B:BC:9E:4D:BB:C1:BD:42:9B:B0:C3:52 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019ADE4CDAEF59099D28A69F3A7A86338D13 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/4hCHAX1unXFLvJ5Nu8G9Qpuww1I.roa Signing time: Tue 02 Dec 2025 09:02:49 +0000 ROA not before: Tue 02 Dec 2025 09:02:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214025 IP address blocks: 77.107.95.0/24 maxlen: 24 82.152.142.0/24 maxlen: 24 213.210.52.0/24 maxlen: 24 213.210.53.0/24 maxlen: 24 217.144.158.0/24 maxlen: 24 217.145.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 16:30:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:de:4c:da:ef:59:09:9d:28:a6:9f:3a:7a:86:33:8d:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Dec 2 09:02:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e21087017d6e9d714bbc9e4dbbc1bd429bb0c352 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:0e:b3:f8:6d:3e:69:64:71:1a:75:5e:4b:7f: f4:1b:b5:13:25:01:47:26:4d:ee:80:07:32:94:d8: d5:66:92:61:d4:ad:04:bc:dd:fa:09:02:3b:95:7b: 4c:af:29:91:5f:f2:9b:74:c0:bd:86:1b:71:15:e8: 76:ef:2c:19:42:16:3f:c7:be:d8:50:d7:ac:5a:74: 12:09:79:7c:b9:fb:63:f5:48:f8:12:3f:3f:f1:77: 10:4d:06:10:44:49:6b:10:22:33:a6:15:9d:54:96: 0d:00:b7:34:b0:79:16:5a:53:61:99:62:12:c1:1b: 4c:28:67:46:2a:47:b8:0e:87:2c:52:3f:e4:a8:b4: 04:c5:cc:ed:78:63:3c:04:fb:cd:0b:38:26:d5:6a: 95:de:ed:c1:7f:37:96:0d:35:ea:69:6e:5f:bd:d6: 20:c4:9c:13:37:a3:6d:70:94:b1:16:d0:1a:d6:91: 05:45:ad:6f:34:31:a0:d6:a6:41:13:70:a4:d0:c5: ac:fb:5c:e4:09:4f:3e:fb:3f:5c:8c:31:b4:94:e5: 8e:e3:ed:ca:29:08:e1:4d:08:c0:67:d2:78:5d:b1: e4:b8:d7:c5:fc:41:d8:4a:6d:c8:25:ad:2c:28:31: 99:ff:47:3d:23:22:9b:52:73:01:60:c0:ec:f7:bd: 3d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:10:87:01:7D:6E:9D:71:4B:BC:9E:4D:BB:C1:BD:42:9B:B0:C3:52 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/4hCHAX1unXFLvJ5Nu8G9Qpuww1I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.107.95.0/24 82.152.142.0/24 213.210.52.0/23 217.144.158.0/24 217.145.75.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:4b:0d:4c:62:ff:a3:3a:c2:cd:a7:61:ff:b7:5d:3a:75:9c: a3:41:1b:58:c4:77:cc:c6:ba:b6:f7:7c:1d:96:7c:ba:2d:a9: 88:26:a7:39:d4:32:c5:60:3c:92:9a:7f:12:de:6e:b6:b8:19: 4c:fd:92:72:fe:a3:55:24:78:3b:33:38:89:5b:41:37:60:bb: 42:22:2a:1e:ab:cb:09:f4:04:08:cc:96:18:a4:3e:97:5d:ba: 22:97:33:18:0a:ec:0f:e4:fa:58:63:42:7e:25:65:fd:a8:61: 68:37:e4:da:71:d1:c5:19:1a:ae:58:37:9a:3b:c9:1c:f4:cc: d9:a4:91:33:55:6a:4f:c0:89:25:64:35:73:57:4f:96:8f:21: c9:20:fa:33:a1:ce:1a:6b:93:5d:e0:47:44:53:ea:db:70:2c: f2:f3:bb:aa:3f:17:54:f0:f2:50:64:00:a4:14:06:fc:2a:d7: db:c5:ba:25:18:28:1c:f4:1d:99:c4:67:79:57:ca:fe:70:ba: f9:63:e5:d3:ad:13:4d:c9:a5:db:b9:af:e7:7a:c5:14:11:03: e0:88:5b:dd:66:35:69:4a:9f:57:30:d2:07:fd:63:19:ac:a0: 76:76:bf:5d:b9:66:a1:94:3d:d7:e8:c1:b0:c7:d3:d1:5c:7c: 3e:e8:53:0d -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZreTNrvWQmdKKafOnqGM40TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjUxMjAyMDkwMjQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjEwODcwMTdkNmU5ZDcxNGJiYzllNGRiYmMxYmQ0MjliYjBjMzUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0w6z+G0+aWRxGnVeS3/0G7UTJQFH Jk3ugAcylNjVZpJh1K0EvN36CQI7lXtMrymRX/KbdMC9hhtxFeh27ywZQhY/x77Y UNesWnQSCXl8uftj9Uj4Ej8/8XcQTQYQRElrECIzphWdVJYNALc0sHkWWlNhmWIS wRtMKGdGKke4DocsUj/kqLQExczteGM8BPvNCzgm1WqV3u3BfzeWDTXqaW5fvdYg xJwTN6NtcJSxFtAa1pEFRa1vNDGg1qZBE3Ck0MWs+1zkCU8++z9cjDG0lOWO4+3K KQjhTQjAZ9J4XbHkuNfF/EHYSm3IJa0sKDGZ/0c9IyKbUnMBYMDs9709zwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFOIQhwF9bp1xS7yeTbvBvUKbsMNSMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvNGhDSEFYMXVuWEZMdko1TnU4RzlRcHV3dzFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQATWtfAwQA UpiOAwQB1dI0AwQA2ZCeAwQA2ZFLMA0GCSqGSIb3DQEBCwUAA4IBAQAKSw1MYv+j OsLNp2H/t106dZyjQRtYxHfMxrq293wdlny6LamIJqc51DLFYDySmn8S3m62uBlM /ZJy/qNVJHg7MziJW0E3YLtCIioeq8sJ9AQIzJYYpD6XXboilzMYCuwP5PpYY0J+ JWX9qGFoN+TacdHFGRquWDeaO8kc9MzZpJEzVWpPwIklZDVzV0+WjyHJIPozoc4a a5Nd4EdEU+rbcCzy87uqPxdU8PJQZACkFAb8KtfbxbolGCgc9B2ZxGd5V8r+cLr5 Y+XTrRNNyaXbua/nesUUEQPgiFvdZjVpSp9XMNIH/WMZrKB2dr9duWahlD3X6MGw x9PRXHw+6FMN -----END CERTIFICATE-----Generated at Thu Dec 4 21:25:07 2025 by rpki-client