This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/9ET9MLr4vu2Q3mjp-xM5oPxZBLc.roa File: 9ET9MLr4vu2Q3mjp-xM5oPxZBLc.roa (raw, json) Hash identifier: zH1vvtOtKB1sFLupiesItdZQm2RCG45odJjM8Oa1xmE= Subject key identifier: F4:44:FD:30:BA:F8:BE:ED:90:DE:68:E9:FB:13:39:A0:FC:59:04:B7 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019A6D4DD608E0E841BF897BDAD380AD520B Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/9ET9MLr4vu2Q3mjp-xM5oPxZBLc.roa Signing time: Mon 10 Nov 2025 10:26:48 +0000 ROA not before: Mon 10 Nov 2025 10:26:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 984 IP address blocks: 80.240.86.0/24 maxlen: 24 82.152.122.0/24 maxlen: 24 82.153.203.0/24 maxlen: 24 213.210.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 24 Nov 2025 06:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:6d:4d:d6:08:e0:e8:41:bf:89:7b:da:d3:80:ad:52:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Nov 10 10:26:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f444fd30baf8beed90de68e9fb1339a0fc5904b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:00:fb:80:be:84:fb:e6:3c:67:d3:e7:fe:71: 05:d1:53:c2:b3:17:df:36:3c:68:9c:42:45:cc:2e: 62:33:09:a7:20:f5:f5:92:ca:7f:52:97:43:0a:3f: 77:7f:78:da:a0:6f:62:c7:56:bc:40:de:f3:31:79: e2:ec:99:bb:46:12:8e:d8:4e:8d:be:86:ec:09:d0: 0f:f3:3f:de:64:a8:68:c5:07:6d:be:41:95:f0:5a: b2:31:0c:4d:90:0c:0e:f0:40:d5:70:60:2d:b4:90: b4:58:68:cd:7a:d3:e9:40:ff:b5:a0:6e:7d:a3:ac: cd:0c:0d:af:c7:0f:6e:df:b7:57:fb:57:d2:24:8a: f4:07:12:6c:ac:36:d3:8d:5f:99:27:14:32:18:ac: 11:c7:c0:ca:9f:61:9c:3b:85:16:2c:aa:e1:70:ee: 72:93:50:00:9b:67:f7:e8:5a:c6:ec:80:78:7e:56: c2:af:bf:2d:f7:43:21:07:17:ba:4d:5d:8d:9e:61: 23:d9:a7:7e:1b:0a:98:16:26:2c:1a:a1:e6:ac:6f: da:10:14:8a:81:23:c0:7c:a0:88:cf:6c:46:1c:ac: 36:a9:a0:d1:21:fe:86:e7:15:da:d7:e1:3a:d8:fc: e2:75:45:59:66:f3:8e:22:e1:04:95:c5:bb:da:e8: 59:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:44:FD:30:BA:F8:BE:ED:90:DE:68:E9:FB:13:39:A0:FC:59:04:B7 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/9ET9MLr4vu2Q3mjp-xM5oPxZBLc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.240.86.0/24 82.152.122.0/24 82.153.203.0/24 213.210.41.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:57:75:92:f8:f1:d3:09:32:76:04:b8:1d:38:13:6c:9f:7a: e8:ff:b6:3d:07:42:44:44:4a:67:93:c4:59:15:f4:da:04:ec: 8c:f3:ed:99:f8:0d:35:a4:f7:18:b1:8f:e5:69:1d:92:05:a9: f2:31:ed:1b:bf:24:fd:c2:bc:06:59:68:d8:da:02:54:2b:68: ae:d7:94:e4:35:0b:91:25:36:1b:65:46:1e:7c:7b:ec:1c:52: 39:a1:2b:68:ca:b8:28:f2:54:e6:31:81:64:ef:45:24:5b:92: 7d:f3:94:83:da:11:59:fa:2b:a5:8e:fa:0b:19:1b:2a:4c:00: 60:1a:7d:86:50:ed:f9:2d:d5:7c:31:3d:75:d8:ae:15:a3:9c: 5e:6f:f6:06:b2:19:27:29:da:f2:1d:1c:97:c1:4f:c6:3e:29: 70:6e:89:38:a0:82:fe:76:7d:68:c0:49:99:32:23:4e:f6:7d: 6b:3e:19:2d:0c:18:df:b6:fe:05:c1:a5:2a:09:eb:29:bd:e5: 6b:c6:d1:c2:1a:db:0d:a0:0e:e0:82:f2:88:ee:bd:b8:45:88: de:e7:7f:fa:b6:80:81:bb:08:2e:07:0d:a2:f1:bb:32:4c:cc: 91:78:c4:4e:b6:0a:19:1e:51:97:e8:5c:0a:3f:3f:50:2b:5f: 19:07:54:9c -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZptTdYI4OhBv4l72tOArVILMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjUxMTEwMTAyNjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNDQ0ZmQzMGJhZjhiZWVkOTBkZTY4ZTlmYjEzMzlhMGZjNTkwNGI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwD7gL6E++Y8Z9Pn/nEF0VPCsxff NjxonEJFzC5iMwmnIPX1ksp/UpdDCj93f3jaoG9ix1a8QN7zMXni7Jm7RhKO2E6N vobsCdAP8z/eZKhoxQdtvkGV8FqyMQxNkAwO8EDVcGAttJC0WGjNetPpQP+1oG59 o6zNDA2vxw9u37dX+1fSJIr0BxJsrDbTjV+ZJxQyGKwRx8DKn2GcO4UWLKrhcO5y k1AAm2f36FrG7IB4flbCr78t90MhBxe6TV2NnmEj2ad+GwqYFiYsGqHmrG/aEBSK gSPAfKCIz2xGHKw2qaDRIf6G5xXa1+E62PzidUVZZvOOIuEElcW72uhZXQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFPRE/TC6+L7tkN5o6fsTOaD8WQS3MB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvOUVUOU1McjR2dTJRM21qcC14TTVvUHhaQkxjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAUPBWAwQA Uph6AwQAUpnLAwQA1dIpMA0GCSqGSIb3DQEBCwUAA4IBAQB/V3WS+PHTCTJ2BLgd OBNsn3ro/7Y9B0JEREpnk8RZFfTaBOyM8+2Z+A01pPcYsY/laR2SBanyMe0bvyT9 wrwGWWjY2gJUK2iu15TkNQuRJTYbZUYefHvsHFI5oStoyrgo8lTmMYFk70UkW5J9 85SD2hFZ+iuljvoLGRsqTABgGn2GUO35LdV8MT112K4Vo5xeb/YGshknKdryHRyX wU/GPilwbok4oIL+dn1owEmZMiNO9n1rPhktDBjftv4FwaUqCespveVrxtHCGtsN oA7ggvKI7r24RYje53/6toCBuwguBw2i8bsyTMyReMROtgoZHlGX6FwKPz9QK18Z B1Sc -----END CERTIFICATE-----Generated at Sun Nov 23 12:07:16 2025 by rpki-client