This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/8vHi1i3DQatSw7JlB6U_ZWF1i4M.roa File: 8vHi1i3DQatSw7JlB6U_ZWF1i4M.roa (raw, json) Hash identifier: MdCZ5ALCL7y/Zlqn6INOvl2wGj1CNvAZ0hGL377SPHA= Subject key identifier: F2:F1:E2:D6:2D:C3:41:AB:52:C3:B2:65:07:A5:3F:65:61:75:8B:83 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019A5DC1DF12A90EA4350EA4286CF4A6B52E Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/8vHi1i3DQatSw7JlB6U_ZWF1i4M.roa Signing time: Fri 07 Nov 2025 09:59:37 +0000 ROA not before: Fri 07 Nov 2025 09:59:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 51847 IP address blocks: 109.176.254.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 24 Nov 2025 06:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:5d:c1:df:12:a9:0e:a4:35:0e:a4:28:6c:f4:a6:b5:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Nov 7 09:59:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f2f1e2d62dc341ab52c3b26507a53f6561758b83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:83:dc:08:54:c3:de:9c:77:ac:7a:ff:d8:ce: e5:55:c0:09:3d:96:ae:91:f1:be:2b:c2:f0:3e:fc: 70:5b:86:3a:ac:a6:31:25:91:0c:ff:2a:c4:c3:17: 03:af:c8:f4:74:32:9b:7e:58:fe:47:e2:c6:c1:67: 50:65:12:2e:99:ee:de:60:f4:99:6f:07:72:5b:60: e9:3b:b4:21:d2:3c:34:61:07:81:06:c1:95:b2:ce: 3e:80:f6:0c:47:e6:67:42:57:b0:d5:52:02:bb:82: 9a:aa:d7:86:e8:a0:1a:75:ad:8b:b1:e8:fe:db:63: ce:bd:79:89:51:46:ff:85:9a:14:86:96:28:cd:18: 3c:42:27:50:1e:60:32:4a:a6:23:33:dc:b4:1c:30: 9f:63:15:cc:09:7f:0f:3c:85:65:43:a2:1c:77:69: 22:aa:96:ba:b9:9f:55:f7:e4:eb:86:c8:f7:4d:17: 66:24:83:39:9c:15:1d:5d:5b:b4:7d:b8:6d:b3:c0: 9b:25:c2:d7:3b:30:c7:b9:1b:1a:bb:c2:d8:ec:88: d5:28:dc:f8:b0:e6:ad:27:05:51:73:55:e1:e5:53: 34:1a:94:c2:a0:98:ff:1f:c4:5c:24:74:0a:b5:8f: b6:34:d4:3a:db:3e:c8:32:72:da:5a:87:e4:8f:40: 7e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:F1:E2:D6:2D:C3:41:AB:52:C3:B2:65:07:A5:3F:65:61:75:8B:83 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/8vHi1i3DQatSw7JlB6U_ZWF1i4M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.176.254.0/23 Signature Algorithm: sha256WithRSAEncryption 75:f8:23:85:da:91:a8:8c:86:66:ef:84:84:01:3e:14:32:b6: eb:6c:c3:fa:74:7f:7b:6d:15:68:ce:0e:3c:fe:fd:cc:d5:c8: 09:6b:ce:30:36:a8:b4:0e:0e:09:74:5f:4d:67:09:20:79:51: 15:4c:59:29:d1:7c:3c:6b:85:d2:db:01:26:f2:87:f9:6d:2a: e2:7c:40:9c:6f:83:e9:cc:97:c4:0b:87:ed:34:ed:9d:bd:65: 9e:9b:b8:c8:3e:d0:45:61:a7:da:45:88:9d:59:3f:ad:95:fe: ad:46:fd:30:86:41:36:ea:6e:8d:84:7e:1b:59:d0:cb:d8:71: 5b:51:d6:0e:bb:43:34:32:0f:86:6f:7c:38:7e:69:ef:ba:95: b8:0d:89:15:5c:ae:b6:c8:9c:0f:3d:4f:21:68:6c:01:69:ea: e7:a4:de:2d:90:2d:bb:d2:3d:38:19:60:17:1d:77:ab:04:9b: 57:40:d3:66:44:3c:6a:84:88:e6:cc:4e:f7:8e:0b:be:e2:8b: 8d:e0:02:16:01:0f:02:f0:77:8d:c5:54:20:68:2f:f7:4e:92: eb:5e:9a:a9:b3:94:24:d8:3c:c0:e7:e8:7d:9f:57:bc:91:c7: 7d:f2:2f:93:ac:0d:0e:b4:9b:91:79:db:1e:e2:81:0f:2e:cb: 4d:4d:c9:8e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZpdwd8SqQ6kNQ6kKGz0prUuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjUxMTA3MDk1OTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMmYxZTJkNjJkYzM0MWFiNTJjM2IyNjUwN2E1M2Y2NTYxNzU4YjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzoPcCFTD3px3rHr/2M7lVcAJPZau kfG+K8LwPvxwW4Y6rKYxJZEM/yrEwxcDr8j0dDKbflj+R+LGwWdQZRIume7eYPSZ bwdyW2DpO7Qh0jw0YQeBBsGVss4+gPYMR+ZnQlew1VICu4KaqteG6KAada2Lsej+ 22POvXmJUUb/hZoUhpYozRg8QidQHmAySqYjM9y0HDCfYxXMCX8PPIVlQ6Icd2ki qpa6uZ9V9+Trhsj3TRdmJIM5nBUdXVu0fbhts8CbJcLXOzDHuRsau8LY7IjVKNz4 sOatJwVRc1Xh5VM0GpTCoJj/H8RcJHQKtY+2NNQ62z7IMnLaWofkj0B+mwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPLx4tYtw0GrUsOyZQelP2VhdYuDMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvOHZIaTFpM0RRYXRTdzdKbEI2VV9aV0YxaTRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbbD+MA0G CSqGSIb3DQEBCwUAA4IBAQB1+COF2pGojIZm74SEAT4UMrbrbMP6dH97bRVozg48 /v3M1cgJa84wNqi0Dg4JdF9NZwkgeVEVTFkp0Xw8a4XS2wEm8of5bSrifECcb4Pp zJfEC4ftNO2dvWWem7jIPtBFYafaRYidWT+tlf6tRv0whkE26m6NhH4bWdDL2HFb UdYOu0M0Mg+Gb3w4fmnvupW4DYkVXK62yJwPPU8haGwBaernpN4tkC270j04GWAX HXerBJtXQNNmRDxqhIjmzE73jgu+4ouN4AIWAQ8C8HeNxVQgaC/3TpLrXpqps5Qk 2DzA5+h9n1e8kcd98i+TrA0OtJuRedse4oEPLstNTcmO -----END CERTIFICATE-----Generated at Sun Nov 23 12:07:12 2025 by rpki-client