This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/72dpL6wlx8qcdy6-EQiZLlQE5vg.roa File: 72dpL6wlx8qcdy6-EQiZLlQE5vg.roa (raw, json) Hash identifier: S9oNHx8he52nhE2Srg89oykutS9W2GNp3YFNPrH41iw= Subject key identifier: EF:67:69:2F:AC:25:C7:CA:9C:77:2E:BE:11:08:99:2E:54:04:E6:F8 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019AE92D47A59EDD1BEDB57D2FDF176DBCD9 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/72dpL6wlx8qcdy6-EQiZLlQE5vg.roa Signing time: Thu 04 Dec 2025 11:44:10 +0000 ROA not before: Thu 04 Dec 2025 11:44:10 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 25198 IP address blocks: 77.93.133.0/24 maxlen: 24 81.5.189.0/24 maxlen: 24 81.168.65.0/24 maxlen: 24 81.168.105.0/24 maxlen: 24 82.152.70.0/24 maxlen: 24 82.153.86.0/24 maxlen: 24 82.153.203.0/24 maxlen: 24 82.153.255.0/24 maxlen: 24 82.163.24.0/24 maxlen: 24 89.28.234.0/24 maxlen: 24 109.176.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e9:2d:47:a5:9e:dd:1b:ed:b5:7d:2f:df:17:6d:bc:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Dec 4 11:44:10 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ef67692fac25c7ca9c772ebe1108992e5404e6f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f3:b4:ab:d1:ef:01:7d:9b:aa:73:01:bc:6f: c6:60:31:3f:cd:35:53:00:5c:82:9f:7f:c5:2e:7e: b7:49:4a:d9:b7:f7:f6:dd:0f:cb:48:8e:0c:86:88: c3:0c:66:42:b0:e2:e8:b1:4e:09:82:7f:ca:58:49: aa:f6:ae:cf:96:41:59:59:e5:dc:c2:bd:c4:1a:a3: 32:8b:46:26:16:a8:33:1f:e8:73:13:70:0d:a3:cb: 00:45:6f:4c:9a:50:98:f5:56:e9:9c:aa:9f:65:3b: c0:c4:eb:76:e6:2d:d3:7e:4c:ab:a3:98:8f:a1:44: 82:24:2a:33:38:c1:5d:ee:89:ef:dd:32:18:66:0f: 19:83:6d:40:4e:95:8c:6b:45:a6:0d:94:e6:f8:53: 87:15:c0:1d:34:c8:95:04:b3:69:9d:5c:02:03:e8: a8:1c:05:07:8b:b6:65:1d:e1:3a:8c:79:67:11:c2: 06:68:80:2e:ca:0f:56:79:4c:df:72:86:cd:ab:3f: 95:5b:7f:53:e6:57:2b:1a:18:5c:0a:ad:65:83:ad: 05:3b:90:6d:61:4a:90:cc:0e:25:4e:c7:de:56:c7: db:81:3b:8e:50:90:da:8b:6d:77:b6:12:9f:d2:e0: 27:6d:75:59:66:c0:88:d0:f5:24:c3:66:88:63:37: 7e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:67:69:2F:AC:25:C7:CA:9C:77:2E:BE:11:08:99:2E:54:04:E6:F8 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/72dpL6wlx8qcdy6-EQiZLlQE5vg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.93.133.0/24 81.5.189.0/24 81.168.65.0/24 81.168.105.0/24 82.152.70.0/24 82.153.86.0/24 82.153.203.0/24 82.153.255.0/24 82.163.24.0/24 89.28.234.0/24 109.176.20.0/24 Signature Algorithm: sha256WithRSAEncryption 25:3a:7a:b7:0a:f8:fe:86:bb:40:c0:aa:20:91:e7:74:55:74: d7:0d:54:85:ec:3f:8d:95:ca:9a:a9:65:39:d3:fc:0e:fc:4d: 23:25:73:17:95:42:76:b4:ef:00:25:90:ed:06:57:e1:5d:ab: 5a:5d:25:0e:ef:3f:34:81:27:13:dd:6f:94:d1:15:0d:7a:23: 02:f0:f6:45:20:3f:db:10:58:65:4a:51:f7:00:37:e8:a4:0b: a4:ce:83:b6:15:9b:ef:bf:3a:5a:01:b9:46:42:8d:d4:66:f1: 29:68:46:03:74:f7:57:5b:1a:49:54:a2:83:35:0c:5f:2e:ae: 99:ce:24:36:3f:f0:a4:9c:30:6d:d9:20:e9:40:eb:09:7f:a9: b2:2c:60:74:6a:a2:23:0e:b8:a9:ee:aa:48:63:7f:91:e9:62: 61:82:67:02:c1:09:41:d6:dc:03:0d:da:a7:d9:d7:aa:4a:48: 7d:35:04:55:7a:45:67:af:7c:a3:22:52:e1:c2:a9:94:cc:a8: 0c:0d:ed:5e:1d:cc:4a:13:6e:05:88:63:27:23:e8:b9:3e:79: b4:49:d2:5b:a9:de:fd:ec:30:4e:e5:1d:70:98:28:d1:22:cb: 13:2f:45:6e:55:9e:51:76:71:aa:ee:2c:e0:fc:db:76:fc:b4: fd:d0:a4:34 -----BEGIN CERTIFICATE----- MIIFOTCCBCGgAwIBAgISAZrpLUelnt0b7bV9L98XbbzZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjUxMjA0MTE0NDEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZjY3NjkyZmFjMjVjN2NhOWM3NzJlYmUxMTA4OTkyZTU0MDRlNmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufO0q9HvAX2bqnMBvG/GYDE/zTVT AFyCn3/FLn63SUrZt/f23Q/LSI4MhojDDGZCsOLosU4Jgn/KWEmq9q7PlkFZWeXc wr3EGqMyi0YmFqgzH+hzE3ANo8sARW9MmlCY9VbpnKqfZTvAxOt25i3Tfkyro5iP oUSCJCozOMFd7onv3TIYZg8Zg21ATpWMa0WmDZTm+FOHFcAdNMiVBLNpnVwCA+io HAUHi7ZlHeE6jHlnEcIGaIAuyg9WeUzfcobNqz+VW39T5lcrGhhcCq1lg60FO5Bt YUqQzA4lTsfeVsfbgTuOUJDai213thKf0uAnbXVZZsCI0PUkw2aIYzd+LQIDAQAB o4ICRTCCAkEwHQYDVR0OBBYEFO9naS+sJcfKnHcuvhEImS5UBOb4MB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvNzJkcEw2d2x4OHFjZHk2LUVRaVpMbFFFNXZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQATV2FAwQA UQW9AwQAUahBAwQAUahpAwQAUphGAwQAUplWAwQAUpnLAwQAUpn/AwQAUqMYAwQA WRzqAwQAbbAUMA0GCSqGSIb3DQEBCwUAA4IBAQAlOnq3Cvj+hrtAwKogked0VXTX DVSF7D+NlcqaqWU50/wO/E0jJXMXlUJ2tO8AJZDtBlfhXataXSUO7z80gScT3W+U 0RUNeiMC8PZFID/bEFhlSlH3ADfopAukzoO2FZvvvzpaAblGQo3UZvEpaEYDdPdX WxpJVKKDNQxfLq6ZziQ2P/CknDBt2SDpQOsJf6myLGB0aqIjDrip7qpIY3+R6WJh gmcCwQlB1twDDdqn2deqSkh9NQRVekVnr3yjIlLhwqmUzKgMDe1eHcxKE24FiGMn I+i5Pnm0SdJbqd797DBO5R1wmCjRIssTL0VuVZ5RdnGq7izg/Nt2/LT90KQ0 -----END CERTIFICATE-----Generated at Fri Dec 5 09:27:18 2025 by rpki-client